This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft File: QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft (raw, json) Hash identifier: cMT6o/SYJClwSrKW7K5L6adHrSdtdFBejoCYKtAZtms= Subject key identifier: 14:6F:F1:2A:91:50:03:03:6F:F2:E3:17:BF:0E:06:97:F8:EB:EB:64 Authority key identifier: 41:60:03:00:EE:ED:5A:F5:D7:FC:09:D8:FC:15:8B:65:93:5E:D0:57 Certificate issuer: /CN=41600300eeed5af5d7fc09d8fc158b65935ed057 Certificate serial: 019B2B1DB8BE0C860EF4BCD505768EB48AE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft Manifest number: 0E55 Signing time: Wed 17 Dec 2025 07:02:06 +0000 Manifest this update: Wed 17 Dec 2025 07:02:06 +0000 Manifest next update: Thu 18 Dec 2025 07:02:06 +0000 Files and hashes: 1: QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl (hash: srCmzggj1g0w5pkdnCqQe0NLRhyZ//EIkgUoIgAiE4E=) 2: W0mc7WeTNbvVyKRZnKoY5IklP-A.roa (hash: BnijXL5FMZmk2zWfbqgaQXF8ehYBDzpPQFPkyywiPoU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1d:b8:be:0c:86:0e:f4:bc:d5:05:76:8e:b4:8a:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41600300eeed5af5d7fc09d8fc158b65935ed057 Validity Not Before: Dec 17 07:02:06 2025 GMT Not After : Dec 18 07:02:06 2025 GMT Subject: CN=146ff12a915003036ff2e317bf0e0697f8ebeb64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:af:c3:33:aa:c6:e9:47:3b:d0:94:34:a4:48: 59:83:c4:b8:7c:99:96:c4:aa:77:72:c1:5c:99:59: 71:2a:f9:29:3a:4f:38:9c:ba:a2:da:07:31:07:6e: 1b:fb:0d:18:fb:09:7b:ac:c4:e7:f9:ea:38:e7:36: 07:7a:1e:2c:b5:7c:0e:2b:4f:1f:32:04:5b:95:e7: fd:8b:dd:d3:92:d6:5c:54:33:0f:d0:64:31:f2:9a: b8:37:6f:6b:1f:48:69:88:48:63:37:a2:b1:e6:2e: 2e:d9:24:7e:fb:3d:02:df:07:e3:db:c1:15:89:21: d1:4f:85:0f:52:4a:07:d2:30:61:ba:0b:85:3f:72: fc:3c:b7:fb:dc:29:d8:1f:35:73:c9:97:1f:e5:e3: 08:d1:6d:6d:4c:aa:53:ce:ff:52:e7:6c:f5:60:a5: 0a:06:da:92:11:8e:c5:c7:02:ca:86:e2:58:d1:64: 11:5a:0a:94:bb:63:33:84:54:5f:1b:52:7a:59:7a: 3c:06:86:f6:02:b7:7c:55:f6:c3:8e:e3:65:5d:f0: 2b:1a:8f:bd:44:e3:0d:18:34:4f:8e:df:83:47:6f: ea:c3:8e:40:4d:b1:94:bb:98:58:c2:04:c8:c0:dd: d5:6e:d6:4d:5e:d1:78:73:a2:de:04:46:97:8c:37: bd:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:6F:F1:2A:91:50:03:03:6F:F2:E3:17:BF:0E:06:97:F8:EB:EB:64 X509v3 Authority Key Identifier: keyid:41:60:03:00:EE:ED:5A:F5:D7:FC:09:D8:FC:15:8B:65:93:5E:D0:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:bf:38:43:81:db:ee:39:95:1e:c9:60:85:ba:19:a6:d0:09: 9f:3e:0e:d4:0b:fc:0a:2b:f1:a3:b5:d8:57:1d:4b:26:df:0c: bc:b4:dd:8a:08:ed:01:38:fc:60:92:f4:51:e2:75:4a:4a:03: 80:1c:8a:18:aa:29:94:07:aa:7e:b0:86:9e:cb:21:aa:07:1a: e5:06:45:13:21:77:95:77:51:a5:af:29:c5:c7:11:ab:18:ec: ce:9e:97:70:7e:79:72:db:df:de:64:05:4c:f1:df:b4:0b:38: 56:e8:55:a5:07:78:7e:fa:f0:09:5c:27:5c:bd:79:cb:6f:fb: 54:e0:a1:f2:d8:b6:db:fc:22:3b:7c:77:f1:d9:83:91:99:65: 93:b3:9a:37:82:df:84:00:e6:4a:af:6a:01:5b:b9:ce:96:fa: 6b:fe:e1:f4:cd:12:09:a6:52:a1:8d:09:a8:cc:43:05:b2:57: 05:ef:0b:95:44:aa:aa:72:c9:54:d3:27:b2:b9:92:74:20:97: 80:56:23:b4:a9:84:7f:51:8c:45:af:f3:f9:07:1f:d7:bc:8c: 54:02:5f:07:cd:91:7f:19:dc:3d:6f:a1:b1:07:fd:57:ac:e4: 80:75:84:3a:c0:69:36:fa:b4:0d:d9:c8:85:cd:31:8b:73:1a: dc:63:9b:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHbi+DIYO9LzVBXaOtIrlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNjAwMzAwZWVlZDVhZjVkN2ZjMDlkOGZjMTU4YjY1OTM1 ZWQwNTcwHhcNMjUxMjE3MDcwMjA2WhcNMjUxMjE4MDcwMjA2WjAzMTEwLwYDVQQD EygxNDZmZjEyYTkxNTAwMzAzNmZmMmUzMTdiZjBlMDY5N2Y4ZWJlYjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAia/DM6rG6Uc70JQ0pEhZg8S4fJmW xKp3csFcmVlxKvkpOk84nLqi2gcxB24b+w0Y+wl7rMTn+eo45zYHeh4stXwOK08f MgRblef9i93TktZcVDMP0GQx8pq4N29rH0hpiEhjN6Kx5i4u2SR++z0C3wfj28EV iSHRT4UPUkoH0jBhuguFP3L8PLf73CnYHzVzyZcf5eMI0W1tTKpTzv9S52z1YKUK BtqSEY7FxwLKhuJY0WQRWgqUu2MzhFRfG1J6WXo8Bob2Ard8VfbDjuNlXfArGo+9 ROMNGDRPjt+DR2/qw45ATbGUu5hYwgTIwN3VbtZNXtF4c6LeBEaXjDe9kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBRv8SqRUAMDb/LjF78OBpf46+tkMB8GA1UdIwQY MBaAFEFgAwDu7Vr11/wJ2PwVi2WTXtBXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVdBREFPN3RXdlhYX0FuWV9CV0xaWk5lMEZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny85NGZkZDgtMDRkZC00YTIyLTg0MTAt N2Q3OWMwNzE3M2Y0LzEvUVdBREFPN3RXdlhYX0FuWV9CV0xaWk5lMEZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny85NGZkZDgtMDRkZC00YTIyLTg0MTAtN2Q3OWMwNzE3M2Y0 LzEvUVdBREFPN3RXdlhYX0FuWV9CV0xaWk5lMEZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABb84Q4Hb 7jmVHslghboZptAJnz4O1Av8Civxo7XYVx1LJt8MvLTdigjtATj8YJL0UeJ1SkoD gByKGKoplAeqfrCGnsshqgca5QZFEyF3lXdRpa8pxccRqxjszp6XcH55ctvf3mQF TPHftAs4VuhVpQd4fvrwCVwnXL15y2/7VOCh8ti22/wiO3x38dmDkZllk7OaN4Lf hADmSq9qAVu5zpb6a/7h9M0SCaZSoY0JqMxDBbJXBe8LlUSqqnLJVNMnsrmSdCCX gFYjtKmEf1GMRa/z+Qcf17yMVAJfB82RfxncPW+hsQf9V6zkgHWEOsBpNvq0DdnI hc0xi3Ma3GObMQ== -----END CERTIFICATE-----Generated at Wed Dec 17 13:41:54 2025 by rpki-client