This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft File: QNVbeINqk_tvnsn6enntm4vqK6E.mft (raw, json) Hash identifier: wtSG5jNVX4lOfHl8ki4Hi0vRJU9ZrnOe22S+t9PaeFU= Subject key identifier: CF:2D:8E:3E:7B:2F:90:F0:D6:DE:95:36:35:80:31:64:E1:23:91:11 Authority key identifier: 40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1 Certificate issuer: /CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1 Certificate serial: 019B41A4E5527C3EE0C7CA4B989898DC6094 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft Manifest number: 1794 Signing time: Sun 21 Dec 2025 16:01:24 +0000 Manifest this update: Sun 21 Dec 2025 16:01:24 +0000 Manifest next update: Mon 22 Dec 2025 16:01:24 +0000 Files and hashes: 1: FM1ZToDPfltq70sgYZxUZRvW9lw.roa (hash: gobn7d36Th+HhvhLfnOuWn7jGYlz7+noOsxaYpWSY6w=) 2: QNVbeINqk_tvnsn6enntm4vqK6E.crl (hash: o9IUrIvEmrtjIJf2vBPrhQL8NhuTkc+HtgMDg9pjjoA=) 3: QOyV471MiAdrv1gx1_mQKqZThmQ.roa (hash: AoS7cULghj9S2ceuce/DAbxzcNkBLN2/6i/FkUDAidw=) 4: Ufx_uGX33YMRJk96-Ns3OVYoYkY.roa (hash: R6OFTPlC+5+pTqseUyT+JKWuhsqJ8TflqBO+jG6Oft8=) 5: aouWF1EL5PqaDekCOWFKRFFElco.roa (hash: meYwuUzRknXw4amv6l3WdhCHcJ6/5boQjSOQLig1VyA=) 6: t0LizRcpCedVGV7G-fII8jBvx0A.roa (hash: ZN5BTBda6bGmBj8NTopRMZUMlk+FQ8YAMSGu4VazGr8=) 7: tRjkLyLC--HaV6NcWuFGLxVHLUQ.roa (hash: W6/eiMbwnnO5tx0lNIccNziZp4esvsx84586cppqO84=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:e5:52:7c:3e:e0:c7:ca:4b:98:98:98:dc:60:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1 Validity Not Before: Dec 21 16:01:24 2025 GMT Not After : Dec 22 16:01:24 2025 GMT Subject: CN=cf2d8e3e7b2f90f0d6de953635803164e1239111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f7:f8:24:cf:9f:85:67:8a:07:78:2b:7d:b8: 05:4a:15:95:a6:51:58:6c:2d:62:fe:15:54:6e:1c: bb:b5:b1:9f:d4:2c:f8:7c:e9:84:08:24:a3:81:26: 3c:e2:8e:c1:8b:84:32:2a:91:71:c9:73:e4:97:ea: 83:70:de:34:27:3e:c4:e8:24:c9:66:77:d7:f3:14: f4:50:c3:0f:69:44:2f:74:eb:41:40:6e:ee:19:0d: 52:8e:96:34:51:67:b2:11:d4:d4:99:24:30:b6:1d: 03:78:c8:ce:3b:fe:2a:7c:98:36:c6:e9:17:05:cf: c0:a3:1f:fb:94:e1:dc:85:96:09:d6:9a:df:80:56: 68:63:43:3e:f1:ac:2d:dc:68:62:18:07:db:58:21: 4f:0b:fe:97:a4:0a:b1:1a:72:74:34:ac:57:1c:84: cc:72:56:a4:2e:6d:6d:3d:39:64:d7:13:5f:03:5d: c3:c4:1b:c1:8a:3d:9c:b3:04:8e:29:70:4d:8c:fc: 90:08:80:0f:ae:a4:22:75:ca:cb:fb:ac:47:dc:24: 72:71:00:1f:e3:dd:45:c0:01:ed:58:6d:6b:d8:7c: 3a:fa:46:f3:69:dc:40:21:2e:3f:b6:e3:ea:d9:ca: 9d:92:62:b6:0c:90:26:f8:c4:fb:4b:d1:f9:80:86: ea:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:2D:8E:3E:7B:2F:90:F0:D6:DE:95:36:35:80:31:64:E1:23:91:11 X509v3 Authority Key Identifier: keyid:40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:51:fa:74:d1:be:79:dc:69:32:dd:3a:3b:e4:11:a9:9e:a6: 83:89:c7:fa:0a:89:44:f5:ec:b4:73:45:85:a4:db:f1:62:15: 12:7e:30:18:9f:44:16:77:b5:fa:d5:e1:45:b0:cc:1c:60:b6: 38:15:92:75:dd:87:65:87:1d:27:36:ac:3b:bf:6e:b1:93:d9: b4:4e:86:8e:20:92:01:8d:3b:c5:16:b9:9d:c5:25:4d:32:ff: 95:31:c1:a0:3d:6a:0d:63:ed:61:92:1b:e9:75:f6:0e:ba:57: 4f:31:ec:a2:3f:e6:57:d1:1c:c0:67:b5:ee:2e:1b:9f:3a:ab: e8:c8:04:ea:5c:99:a6:aa:53:04:fc:d9:ee:37:ca:3c:56:52: 63:18:3e:dc:f0:88:04:2b:65:36:7a:3b:44:cc:72:56:8e:1d: c4:d9:0a:fd:a5:7d:fd:18:bc:bf:d5:5a:3b:d1:51:ff:e0:59: 66:95:31:3a:be:7a:40:bf:87:4c:b4:8e:2b:de:96:7a:71:44: 47:32:ca:09:66:c8:c1:2c:31:7b:39:5d:e4:55:fb:72:68:31: 2e:77:c2:2f:b5:4b:08:af:14:b7:55:2d:d3:3d:91:fc:1b:b8: f2:9f:ae:f3:c4:65:8a:b0:5e:b2:64:4e:08:f3:1f:e9:0b:2e: de:df:b9:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpOVSfD7gx8pLmJiY3GCUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZDU1Yjc4ODM2YTkzZmI2ZjllYzlmYTdhNzllZDliOGJl YTJiYTEwHhcNMjUxMjIxMTYwMTI0WhcNMjUxMjIyMTYwMTI0WjAzMTEwLwYDVQQD EyhjZjJkOGUzZTdiMmY5MGYwZDZkZTk1MzYzNTgwMzE2NGUxMjM5MTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPf4JM+fhWeKB3grfbgFShWVplFY bC1i/hVUbhy7tbGf1Cz4fOmECCSjgSY84o7Bi4QyKpFxyXPkl+qDcN40Jz7E6CTJ ZnfX8xT0UMMPaUQvdOtBQG7uGQ1SjpY0UWeyEdTUmSQwth0DeMjOO/4qfJg2xukX Bc/Aox/7lOHchZYJ1prfgFZoY0M+8awt3GhiGAfbWCFPC/6XpAqxGnJ0NKxXHITM clakLm1tPTlk1xNfA13DxBvBij2cswSOKXBNjPyQCIAPrqQidcrL+6xH3CRycQAf 491FwAHtWG1r2Hw6+kbzadxAIS4/tuPq2cqdkmK2DJAm+MT7S9H5gIbqRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM8tjj57L5Dw1t6VNjWAMWThI5ERMB8GA1UdIwQY MBaAFEDVW3iDapP7b57J+np57ZuL6iuhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU5WYmVJTnFrX3R2bnNuNmVubnRtNHZxSzZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNzZkODUtNjg2NC00YjM3LWJkYjMt OTJlOGJlNjI3OWJiLzEvUU5WYmVJTnFrX3R2bnNuNmVubnRtNHZxSzZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jNzZkODUtNjg2NC00YjM3LWJkYjMtOTJlOGJlNjI3OWJi LzEvUU5WYmVJTnFrX3R2bnNuNmVubnRtNHZxSzZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW1H6dNG+ edxpMt06O+QRqZ6mg4nH+gqJRPXstHNFhaTb8WIVEn4wGJ9EFne1+tXhRbDMHGC2 OBWSdd2HZYcdJzasO79usZPZtE6GjiCSAY07xRa5ncUlTTL/lTHBoD1qDWPtYZIb 6XX2DrpXTzHsoj/mV9EcwGe17i4bnzqr6MgE6lyZpqpTBPzZ7jfKPFZSYxg+3PCI BCtlNno7RMxyVo4dxNkK/aV9/Ri8v9VaO9FR/+BZZpUxOr56QL+HTLSOK96WenFE RzLKCWbIwSwxezld5FX7cmgxLnfCL7VLCK8Ut1Ut0z2R/Bu48p+u88RlirBesmRO CPMf6Qsu3t+5pw== -----END CERTIFICATE-----Generated at Sun Dec 21 19:23:02 2025 by rpki-client