This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft File: QNVbeINqk_tvnsn6enntm4vqK6E.mft (raw, json) Hash identifier: jzZUXncLVAk9NmGDpCZZv9nD16sshbEoyQKa8QvXIVI= Subject key identifier: B6:68:78:3F:83:A9:AC:51:C8:16:24:2D:0A:5F:E6:D8:7E:22:2F:4E Authority key identifier: 40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1 Certificate issuer: /CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1 Certificate serial: 019AF465A5E50E7E03BB07B87082B3B28557 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft Manifest number: 176C Signing time: Sat 06 Dec 2025 16:01:33 +0000 Manifest this update: Sat 06 Dec 2025 16:01:33 +0000 Manifest next update: Sun 07 Dec 2025 16:01:33 +0000 Files and hashes: 1: FM1ZToDPfltq70sgYZxUZRvW9lw.roa (hash: gobn7d36Th+HhvhLfnOuWn7jGYlz7+noOsxaYpWSY6w=) 2: QNVbeINqk_tvnsn6enntm4vqK6E.crl (hash: GHnndI2zM6VP40b+Yx17gFmoUhxNXBKRip3AMSnq8mQ=) 3: QOyV471MiAdrv1gx1_mQKqZThmQ.roa (hash: AoS7cULghj9S2ceuce/DAbxzcNkBLN2/6i/FkUDAidw=) 4: Ufx_uGX33YMRJk96-Ns3OVYoYkY.roa (hash: R6OFTPlC+5+pTqseUyT+JKWuhsqJ8TflqBO+jG6Oft8=) 5: aouWF1EL5PqaDekCOWFKRFFElco.roa (hash: meYwuUzRknXw4amv6l3WdhCHcJ6/5boQjSOQLig1VyA=) 6: t0LizRcpCedVGV7G-fII8jBvx0A.roa (hash: ZN5BTBda6bGmBj8NTopRMZUMlk+FQ8YAMSGu4VazGr8=) 7: tRjkLyLC--HaV6NcWuFGLxVHLUQ.roa (hash: W6/eiMbwnnO5tx0lNIccNziZp4esvsx84586cppqO84=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:a5:e5:0e:7e:03:bb:07:b8:70:82:b3:b2:85:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1 Validity Not Before: Dec 6 16:01:33 2025 GMT Not After : Dec 7 16:01:33 2025 GMT Subject: CN=b668783f83a9ac51c816242d0a5fe6d87e222f4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:72:7d:3c:65:83:b2:f5:b6:23:23:c7:6b:fd: e5:5d:4a:13:05:4a:67:04:ea:4b:69:71:7f:75:ff: 7f:df:96:8a:50:fe:80:c6:df:f4:7c:64:32:9a:c3: 3d:e5:ce:0e:9d:20:a6:12:64:5b:08:c2:7f:a2:ad: 6e:f5:f3:b2:46:bf:73:85:84:ac:a4:81:3e:1b:ac: 74:0e:6c:0c:4b:62:d6:6e:34:48:93:e6:4f:a4:13: 4a:ba:1a:d1:b2:2d:c6:1e:9f:ea:4d:4b:9e:82:25: 82:aa:00:3e:09:87:b4:96:29:f9:26:06:bd:f8:d8: 71:27:4f:b6:40:0d:45:b2:b2:8d:c5:cd:35:5d:f7: 89:2b:be:aa:5b:16:ea:27:d0:86:00:64:51:8f:7b: 0a:54:33:3a:6c:77:1d:61:61:62:49:c5:80:11:e5: e7:14:f1:c3:17:df:f2:50:01:43:4f:e1:ca:63:43: ed:ee:b9:48:67:86:07:fe:38:d6:0e:77:69:3c:4c: 88:b7:1b:06:9b:67:a4:d8:f6:5f:30:2d:5b:97:e1: f5:53:ca:87:1c:e2:9a:e0:9a:7f:59:3a:aa:03:92: 2c:15:db:55:ba:32:99:f1:d5:61:63:b9:7e:03:ff: 98:94:a7:e9:a9:58:ba:13:c8:ee:8f:90:aa:f3:c1: b3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:68:78:3F:83:A9:AC:51:C8:16:24:2D:0A:5F:E6:D8:7E:22:2F:4E X509v3 Authority Key Identifier: keyid:40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:03:e9:07:11:30:57:cb:50:2d:80:f2:a4:61:53:67:fe:1f: 1e:b7:b1:fb:c8:d9:ec:6f:be:95:54:11:3f:3d:eb:74:19:a2: e8:4e:cf:0a:5f:93:f5:72:81:dd:31:86:f8:82:d8:8d:c9:45: a9:cb:cb:42:ef:4b:92:6b:7a:45:cc:e9:6c:c5:3a:60:ff:18: ae:07:07:f4:ae:43:e3:60:cd:e7:1e:d8:7e:9d:05:9e:3e:03: e9:80:36:f1:81:f6:94:fc:c7:86:ce:19:80:e9:ea:2d:4a:b0: 8c:ef:3b:18:e7:98:b8:2c:fb:8f:b6:fa:c5:a5:8a:b7:21:98: 97:e9:a9:b8:d4:e6:1f:13:9e:8e:d8:f2:31:cd:87:46:e0:6f: 65:b0:40:db:3c:8b:97:a0:13:38:9b:84:f9:bb:50:06:59:f4: 81:a2:fb:e1:3f:66:e1:e3:38:8e:ea:2c:49:01:c5:7d:a3:4b: bb:5f:56:5f:2b:92:18:3a:30:e9:f8:97:63:56:7c:0e:fe:c2: b7:4a:60:ef:40:67:a0:08:73:bc:40:cc:4a:9d:db:bf:e0:a5: c0:4d:11:7b:95:9a:b2:a6:1c:69:55:3a:a6:55:8f:5e:cd:6a: 01:97:f7:1c:1a:e1:75:4e:e2:64:a8:3e:27:94:5a:5a:2d:1a: 64:63:45:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZaXlDn4Duwe4cIKzsoVXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZDU1Yjc4ODM2YTkzZmI2ZjllYzlmYTdhNzllZDliOGJl YTJiYTEwHhcNMjUxMjA2MTYwMTMzWhcNMjUxMjA3MTYwMTMzWjAzMTEwLwYDVQQD EyhiNjY4NzgzZjgzYTlhYzUxYzgxNjI0MmQwYTVmZTZkODdlMjIyZjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3J9PGWDsvW2IyPHa/3lXUoTBUpn BOpLaXF/df9/35aKUP6Axt/0fGQymsM95c4OnSCmEmRbCMJ/oq1u9fOyRr9zhYSs pIE+G6x0DmwMS2LWbjRIk+ZPpBNKuhrRsi3GHp/qTUuegiWCqgA+CYe0lin5Jga9 +NhxJ0+2QA1FsrKNxc01XfeJK76qWxbqJ9CGAGRRj3sKVDM6bHcdYWFiScWAEeXn FPHDF9/yUAFDT+HKY0Pt7rlIZ4YH/jjWDndpPEyItxsGm2ek2PZfMC1bl+H1U8qH HOKa4Jp/WTqqA5IsFdtVujKZ8dVhY7l+A/+YlKfpqVi6E8juj5Cq88GzhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLZoeD+DqaxRyBYkLQpf5th+Ii9OMB8GA1UdIwQY MBaAFEDVW3iDapP7b57J+np57ZuL6iuhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU5WYmVJTnFrX3R2bnNuNmVubnRtNHZxSzZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNzZkODUtNjg2NC00YjM3LWJkYjMt OTJlOGJlNjI3OWJiLzEvUU5WYmVJTnFrX3R2bnNuNmVubnRtNHZxSzZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jNzZkODUtNjg2NC00YjM3LWJkYjMtOTJlOGJlNjI3OWJi LzEvUU5WYmVJTnFrX3R2bnNuNmVubnRtNHZxSzZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWAPpBxEw V8tQLYDypGFTZ/4fHrex+8jZ7G++lVQRPz3rdBmi6E7PCl+T9XKB3TGG+ILYjclF qcvLQu9Lkmt6RczpbMU6YP8YrgcH9K5D42DN5x7Yfp0Fnj4D6YA28YH2lPzHhs4Z gOnqLUqwjO87GOeYuCz7j7b6xaWKtyGYl+mpuNTmHxOejtjyMc2HRuBvZbBA2zyL l6ATOJuE+btQBln0gaL74T9m4eM4juosSQHFfaNLu19WXyuSGDow6fiXY1Z8Dv7C t0pg70BnoAhzvEDMSp3bv+ClwE0Re5WasqYcaVU6plWPXs1qAZf3HBrhdU7iZKg+ J5RaWi0aZGNFMA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:42:30 2025 by rpki-client