This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.mft File: QFC8opwYE647EfOB8EQqoqipMb8.mft (raw, json) Hash identifier: YMAXb28hToTIFHjw5/qUNY+ZFAUTqDE0S7iAh5/Vscw= Subject key identifier: D9:4A:68:18:E4:E3:78:2B:04:1C:DE:D3:F5:53:F1:C6:3E:81:16:7C Authority key identifier: 40:50:BC:A2:9C:18:13:AE:3B:11:F3:81:F0:44:2A:A2:A8:A9:31:BF Certificate issuer: /CN=4050bca29c1813ae3b11f381f0442aa2a8a931bf Certificate serial: 019B3155CFA5EFB21D40DFB91D7C2874FE27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QFC8opwYE647EfOB8EQqoqipMb8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.mft Manifest number: 1697 Signing time: Thu 18 Dec 2025 12:01:05 +0000 Manifest this update: Thu 18 Dec 2025 12:01:05 +0000 Manifest next update: Fri 19 Dec 2025 12:01:05 +0000 Files and hashes: 1: QFC8opwYE647EfOB8EQqoqipMb8.crl (hash: EOvS4nsH3/IlXRw7CYtcrKu8gEpuEUQ0cr8J8oYUE6c=) 2: xqT_w2QIz7QngYO0UjYqCZFOQm8.roa (hash: voqA9hVWd7OTxS2rJiecPACQATaq8yqLIFOOJeCGw4c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.mft rsync://rpki.ripe.net/repository/DEFAULT/QFC8opwYE647EfOB8EQqoqipMb8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:55:cf:a5:ef:b2:1d:40:df:b9:1d:7c:28:74:fe:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4050bca29c1813ae3b11f381f0442aa2a8a931bf Validity Not Before: Dec 18 12:01:05 2025 GMT Not After : Dec 19 12:01:05 2025 GMT Subject: CN=d94a6818e4e3782b041cded3f553f1c63e81167c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e5:f2:de:9c:75:b6:7e:7a:ff:17:a6:38:cb: 8b:9f:be:30:55:da:7d:14:f0:0c:46:b7:51:aa:da: 09:f0:fa:85:f9:eb:03:85:5b:c1:1a:a0:c1:70:24: d1:0b:44:50:48:a5:0f:09:a9:a7:c2:8b:d2:98:f7: 33:23:7c:c3:1a:05:14:8a:08:7c:0f:2c:d8:71:db: ba:65:da:d9:93:da:05:d2:29:0e:45:55:2c:3a:bb: 7f:5a:e2:55:03:0d:80:ed:1f:73:cf:6e:c2:b1:47: c3:20:52:c9:8e:d2:6b:1f:ad:1d:66:bd:a1:67:c7: 80:31:0f:cf:60:03:c0:2b:3d:3c:46:b9:6e:f8:d6: df:51:1f:7f:7e:28:f5:18:a7:14:54:df:52:61:05: 0d:9d:14:ae:7d:83:1e:9e:51:3a:5e:3b:f9:83:ad: eb:00:02:1c:8c:13:e2:b1:ce:ff:00:f9:b2:b0:00: 80:f2:25:fc:ac:26:5e:c0:72:28:18:08:cb:4e:57: 44:89:44:82:79:a6:c8:01:ae:b3:2e:eb:e2:fe:cb: 77:cc:d9:50:ce:16:73:91:30:e6:81:2f:c1:08:3a: 9e:84:36:ef:72:73:18:71:aa:56:3a:7e:dc:1b:64: 98:29:bb:11:86:32:18:32:db:ba:35:1a:39:2f:c9: 48:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:4A:68:18:E4:E3:78:2B:04:1C:DE:D3:F5:53:F1:C6:3E:81:16:7C X509v3 Authority Key Identifier: keyid:40:50:BC:A2:9C:18:13:AE:3B:11:F3:81:F0:44:2A:A2:A8:A9:31:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QFC8opwYE647EfOB8EQqoqipMb8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:d4:57:ea:35:31:3a:e3:5c:f1:25:c3:2e:91:e3:3d:13:c8: bb:de:0d:ec:95:e5:50:f7:f0:06:d1:1c:b4:d6:b1:8d:33:c8: 93:d9:f9:fe:9a:e4:da:a7:23:14:0e:29:fe:61:0e:f6:08:b5: 8f:43:4f:14:5e:d6:ec:5a:8b:c1:f0:b0:24:6d:78:8a:1b:a6: c7:c8:84:61:c6:c7:6e:83:81:7b:c4:08:a7:71:e7:7e:b8:f9: 43:c1:1d:5a:73:7a:a5:44:8a:a0:90:bb:de:dc:5d:19:8d:e6: 43:e8:cb:25:1e:2a:9a:6d:59:88:50:ae:14:58:57:f5:f2:c6: c6:36:52:17:fd:4b:42:d4:3f:46:a7:e4:97:4b:e9:0c:5f:13: 48:f3:02:c6:8d:62:db:2d:cf:1c:e2:b2:49:5c:6d:52:58:06: 3e:99:2c:26:80:76:67:0b:43:57:ea:a1:55:51:52:a6:8d:eb: cc:84:29:aa:8a:28:be:b8:b3:0c:c5:10:86:ae:50:87:14:19: 34:0e:e7:ca:0d:cb:5e:de:50:e7:c3:9d:94:1e:34:45:59:77: 92:fa:c0:9e:bb:2c:2a:7b:fc:64:e5:2d:e9:7a:80:2c:f1:20: e0:b7:b3:14:19:e5:e5:fe:58:a1:f3:42:c0:f4:32:68:32:43: 89:f3:25:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVc+l77IdQN+5HXwodP4nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwNTBiY2EyOWMxODEzYWUzYjExZjM4MWYwNDQyYWEyYThh OTMxYmYwHhcNMjUxMjE4MTIwMTA1WhcNMjUxMjE5MTIwMTA1WjAzMTEwLwYDVQQD EyhkOTRhNjgxOGU0ZTM3ODJiMDQxY2RlZDNmNTUzZjFjNjNlODExNjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+Xy3px1tn56/xemOMuLn74wVdp9 FPAMRrdRqtoJ8PqF+esDhVvBGqDBcCTRC0RQSKUPCamnwovSmPczI3zDGgUUigh8 DyzYcdu6ZdrZk9oF0ikORVUsOrt/WuJVAw2A7R9zz27CsUfDIFLJjtJrH60dZr2h Z8eAMQ/PYAPAKz08Rrlu+NbfUR9/fij1GKcUVN9SYQUNnRSufYMenlE6Xjv5g63r AAIcjBPisc7/APmysACA8iX8rCZewHIoGAjLTldEiUSCeabIAa6zLuvi/st3zNlQ zhZzkTDmgS/BCDqehDbvcnMYcapWOn7cG2SYKbsRhjIYMtu6NRo5L8lIgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNlKaBjk43grBBze0/VT8cY+gRZ8MB8GA1UdIwQY MBaAFEBQvKKcGBOuOxHzgfBEKqKoqTG/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUZDOG9wd1lFNjQ3RWZPQjhFUXFvcWlwTWI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy80NmQ4OTEtMjQ5Yi00YTRjLWEzNWQt N2ZlOWVkN2Q2NDdkLzEvUUZDOG9wd1lFNjQ3RWZPQjhFUXFvcWlwTWI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy80NmQ4OTEtMjQ5Yi00YTRjLWEzNWQtN2ZlOWVkN2Q2NDdk LzEvUUZDOG9wd1lFNjQ3RWZPQjhFUXFvcWlwTWI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIdRX6jUx OuNc8SXDLpHjPRPIu94N7JXlUPfwBtEctNaxjTPIk9n5/prk2qcjFA4p/mEO9gi1 j0NPFF7W7FqLwfCwJG14ihumx8iEYcbHboOBe8QIp3Hnfrj5Q8EdWnN6pUSKoJC7 3txdGY3mQ+jLJR4qmm1ZiFCuFFhX9fLGxjZSF/1LQtQ/Rqfkl0vpDF8TSPMCxo1i 2y3PHOKySVxtUlgGPpksJoB2ZwtDV+qhVVFSpo3rzIQpqooovrizDMUQhq5QhxQZ NA7nyg3LXt5Q58OdlB40RVl3kvrAnrssKnv8ZOUt6XqALPEg4LezFBnl5f5YofNC wPQyaDJDifMlAw== -----END CERTIFICATE-----Generated at Thu Dec 18 21:51:35 2025 by rpki-client