This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft File: Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft (raw, json) Hash identifier: l8B5zcVWPOM0IhfKTQuZ6sP5qWnfPLXHhsKQyi0BjRw= Subject key identifier: 8F:28:AB:93:DE:77:0F:68:F3:36:20:D8:6C:B3:8D:78:E2:F5:60:70 Authority key identifier: 42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC Certificate issuer: /CN=421f108882a9e2d72782db6527da4d9adeeb19cc Certificate serial: 019B416DDB1ED26156C1769F5B20E72A1867 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft Manifest number: 172E Signing time: Sun 21 Dec 2025 15:01:17 +0000 Manifest this update: Sun 21 Dec 2025 15:01:17 +0000 Manifest next update: Mon 22 Dec 2025 15:01:17 +0000 Files and hashes: 1: 3q6-YPpyRU0SXTuI1scDeTuMZEI.roa (hash: zcjue8I7/Ud383gBlguymoi9BmtOE5qsj15wQFoYezc=) 2: Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl (hash: 317mOBkUjhD272VX8SaBbtt0Li1TnUgXhgRVgLXrA/U=) 3: iI3eBvPcK_oU8TVqkbYOtwG8vsg.roa (hash: ikZUasg08WdXub3shWtyhp22ZcEuhRbJ+MQpgo0gb1Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:db:1e:d2:61:56:c1:76:9f:5b:20:e7:2a:18:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=421f108882a9e2d72782db6527da4d9adeeb19cc Validity Not Before: Dec 21 15:01:17 2025 GMT Not After : Dec 22 15:01:17 2025 GMT Subject: CN=8f28ab93de770f68f33620d86cb38d78e2f56070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c4:e1:39:04:d1:ee:ff:9f:f2:82:52:d4:40: 99:ac:c7:e2:d3:1a:60:d4:37:07:0c:82:7b:34:f6: 01:2f:fd:9d:93:dd:5b:7c:fb:29:81:0d:03:f5:96: df:3e:d7:08:3d:ae:df:74:5b:88:70:cb:fa:ad:7a: 4c:f3:4f:c3:ab:9e:30:f8:60:e9:68:d6:cc:d1:5b: 8a:06:f1:59:30:34:a9:79:1d:56:2c:5c:98:8b:4c: 29:61:8a:a4:8b:0f:c1:a5:76:80:3a:59:6d:b0:35: d6:29:ef:b6:f7:60:8e:a3:8f:b3:a6:dd:d7:7f:13: a9:50:4c:5c:a6:e2:bf:a0:91:e0:5d:66:0d:17:3b: 6c:c2:ab:66:93:2d:55:67:46:38:70:dd:38:b1:30: 1d:75:53:cd:07:3c:e1:32:97:5e:15:6a:76:95:a8: bd:b2:06:ed:75:95:39:e7:82:31:19:ba:b8:8e:d1: 1c:42:6d:a4:e2:d9:5d:ba:f0:53:6d:55:09:76:56: 87:0c:98:c9:c1:e8:e1:69:92:07:6f:fe:6e:02:d7: 0e:b8:48:7a:a8:9b:53:00:2f:e1:32:29:d7:db:66: 22:48:42:c9:be:cb:75:20:1c:a5:80:50:fc:57:4c: ba:ce:ea:ba:c0:20:1b:03:b9:42:bc:e2:df:8a:9d: 72:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:28:AB:93:DE:77:0F:68:F3:36:20:D8:6C:B3:8D:78:E2:F5:60:70 X509v3 Authority Key Identifier: keyid:42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:06:35:f4:16:dd:72:1a:08:36:bc:a0:37:17:cd:33:ef:50: 0b:4b:fa:48:74:3a:e5:ab:3b:f1:fc:48:38:99:e4:17:06:20: 03:b7:6a:88:6c:e8:56:4b:fa:69:0c:9e:31:30:2d:3a:05:db: 5c:ea:b7:94:ac:39:8d:93:d4:fa:f3:69:86:64:80:e9:5f:0b: 2a:22:c2:eb:6b:c1:b7:97:f2:48:66:4c:0e:d7:99:5b:76:dc: 30:cf:7b:2e:8c:78:27:05:09:9a:81:5f:0a:39:78:cd:b0:31: 6a:a6:f0:dd:e8:fc:25:9e:32:f4:21:4e:f3:c6:8a:45:ca:47: f9:d0:df:9a:c9:f9:03:10:18:a3:84:78:a7:3f:9e:3b:38:ef: b1:51:b9:12:26:48:ae:57:27:a4:cf:55:14:b4:f6:03:6a:e7: 98:9c:bc:74:6c:ab:92:fa:8b:8f:67:82:16:ae:2b:91:e1:46: ec:a4:a9:3d:a9:70:2b:f5:a0:18:b4:2e:ea:77:c8:db:bd:0c: ea:62:cb:25:de:2b:68:27:84:8d:f8:3c:ed:35:10:41:d9:a8: 67:59:6d:05:9b:38:af:ad:1d:9b:5b:30:7f:c5:65:42:08:22: ad:27:52:ee:49:f9:33:9b:3b:ba:6b:8d:4c:b4:b6:07:fc:26: 45:c3:0d:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbdse0mFWwXafWyDnKhhnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMWYxMDg4ODJhOWUyZDcyNzgyZGI2NTI3ZGE0ZDlhZGVl YjE5Y2MwHhcNMjUxMjIxMTUwMTE3WhcNMjUxMjIyMTUwMTE3WjAzMTEwLwYDVQQD Eyg4ZjI4YWI5M2RlNzcwZjY4ZjMzNjIwZDg2Y2IzOGQ3OGUyZjU2MDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cThOQTR7v+f8oJS1ECZrMfi0xpg 1DcHDIJ7NPYBL/2dk91bfPspgQ0D9ZbfPtcIPa7fdFuIcMv6rXpM80/Dq54w+GDp aNbM0VuKBvFZMDSpeR1WLFyYi0wpYYqkiw/BpXaAOlltsDXWKe+292COo4+zpt3X fxOpUExcpuK/oJHgXWYNFztswqtmky1VZ0Y4cN04sTAddVPNBzzhMpdeFWp2lai9 sgbtdZU554IxGbq4jtEcQm2k4tlduvBTbVUJdlaHDJjJwejhaZIHb/5uAtcOuEh6 qJtTAC/hMinX22YiSELJvst1IBylgFD8V0y6zuq6wCAbA7lCvOLfip1yJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI8oq5Pedw9o8zYg2GyzjXji9WBwMB8GA1UdIwQY MBaAFEIfEIiCqeLXJ4LbZSfaTZre6xnMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWg4UWlJS3A0dGNuZ3R0bEo5cE5tdDdyR2N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8yMTkyMmEtZGQ3OS00ZjU2LTgzYmUt MGEwNjlkZWMxMDBhLzEvUWg4UWlJS3A0dGNuZ3R0bEo5cE5tdDdyR2N3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8yMTkyMmEtZGQ3OS00ZjU2LTgzYmUtMGEwNjlkZWMxMDBh LzEvUWg4UWlJS3A0dGNuZ3R0bEo5cE5tdDdyR2N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsAY19Bbd choINrygNxfNM+9QC0v6SHQ65as78fxIOJnkFwYgA7dqiGzoVkv6aQyeMTAtOgXb XOq3lKw5jZPU+vNphmSA6V8LKiLC62vBt5fySGZMDteZW3bcMM97Lox4JwUJmoFf Cjl4zbAxaqbw3ej8JZ4y9CFO88aKRcpH+dDfmsn5AxAYo4R4pz+eOzjvsVG5EiZI rlcnpM9VFLT2A2rnmJy8dGyrkvqLj2eCFq4rkeFG7KSpPalwK/WgGLQu6nfI270M 6mLLJd4raCeEjfg87TUQQdmoZ1ltBZs4r60dm1swf8VlQggirSdS7kn5M5s7umuN TLS2B/wmRcMNkQ== -----END CERTIFICATE-----Generated at Sun Dec 21 19:20:16 2025 by rpki-client