This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft File: QIAlx94EAODzyI1KEioxfjLF4hw.mft (raw, json) Hash identifier: 8lCDl+M7Pd3AG4UvFk2vwyK/VJs1+QKc3HWyYtc2ZLk= Subject key identifier: B3:76:A0:83:1E:64:68:2C:A5:CC:FE:D4:06:AF:04:F5:8C:0A:BA:6E Authority key identifier: 40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C Certificate issuer: /CN=408025c7de0400e0f3c88d4a122a317e32c5e21c Certificate serial: 019AF42DD9C867AFF1AEE53F6E3F6AB79C43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft Manifest number: 176C Signing time: Sat 06 Dec 2025 15:00:36 +0000 Manifest this update: Sat 06 Dec 2025 15:00:36 +0000 Manifest next update: Sun 07 Dec 2025 15:00:36 +0000 Files and hashes: 1: QIAlx94EAODzyI1KEioxfjLF4hw.crl (hash: lw7g0yXcHfDWb65CHRWT74bQtTjGoHCd918q6pHzc0Q=) 2: UauqkNEmM03HfyR0DfZ-u4VKpi4.roa (hash: awMAcPwR6G+MfeZBXCCLJ68VGxx4mPcomrMOc4HQztA=) 3: XuDenjm8kUtBAuV4QGpzOH7mGc4.roa (hash: JNV/wOADSaN3R96qV0GAYEvW10iJH7xuBlcwSDA4/FE=) 4: c1UFEngK3GGY1urY5KGBx69byP4.roa (hash: +n2tU72CIBGho6rrhlHMLTcRKx6Op/7dsiuNf5HzdOM=) 5: oi0U9f8KU3xL5hcxj-l_j_oxaQE.roa (hash: VaBV5SBKPM+Ny0Aym3FdNVG9ABI2dtE3XxpwOFbyKqQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:d9:c8:67:af:f1:ae:e5:3f:6e:3f:6a:b7:9c:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408025c7de0400e0f3c88d4a122a317e32c5e21c Validity Not Before: Dec 6 15:00:36 2025 GMT Not After : Dec 7 15:00:36 2025 GMT Subject: CN=b376a0831e64682ca5ccfed406af04f58c0aba6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:59:03:3b:8e:54:60:c1:2a:f6:b9:b8:43:a1: 41:e1:b2:21:6a:b9:ee:d4:77:0f:04:6c:91:db:01: ae:63:7d:cd:14:24:5d:d7:59:ed:a1:76:51:54:38: 1c:52:c7:e3:8e:2f:bd:fb:a7:66:e7:50:1c:a5:2e: 2b:2a:50:ca:2b:e5:b9:a6:18:c4:66:4d:30:2c:f4: d1:6c:a2:90:b3:ec:c0:2b:de:57:5f:cf:54:13:a1: bf:00:8f:b0:66:9c:56:18:fb:e1:56:ec:5d:eb:39: 33:ad:a6:31:e1:20:f6:9e:62:5e:44:95:16:2b:ab: f9:4e:13:a5:c1:1d:e1:5b:44:29:1a:02:63:46:2b: 31:06:2e:9c:0c:a6:7b:8b:4b:1b:8b:57:05:5e:e1: 6a:07:0b:e8:ae:ba:c0:d2:29:d0:bc:39:cf:a2:89: 09:b7:ef:4b:e1:8f:eb:00:59:24:e4:ce:09:dc:fd: 5a:c8:7c:be:4b:e3:63:2b:a8:a6:5f:22:02:bd:2d: c5:5d:d4:10:a8:78:10:8a:f5:7d:1c:19:e9:4a:2c: 17:25:1c:47:c3:7f:c6:91:cd:9b:c9:ff:84:f5:7a: a9:c4:80:1f:68:c7:e4:a2:b1:cf:4e:0a:c4:c0:87: 6d:c5:05:c5:ba:64:a9:01:0f:ea:50:a6:82:d6:20: 6e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:76:A0:83:1E:64:68:2C:A5:CC:FE:D4:06:AF:04:F5:8C:0A:BA:6E X509v3 Authority Key Identifier: keyid:40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:f9:be:7d:fd:e5:02:d3:32:4b:29:16:48:57:31:c9:09:97: 02:d1:ef:03:d0:5e:ee:2f:93:78:7c:3a:c9:ec:0c:8a:f8:bb: 8d:f0:2d:55:4e:6e:24:e1:d6:07:4c:23:05:52:53:34:d5:9b: 20:1b:02:3d:0f:24:7b:28:4f:95:1e:17:63:e1:94:2f:1a:90: 65:b9:6a:7f:dd:56:d6:4d:c2:1e:71:c9:ae:36:af:cd:b7:ab: a3:6b:3c:93:8a:32:96:df:a6:dd:07:81:06:ae:07:4b:1e:f7: 6c:1c:f1:ef:97:76:ce:55:6e:83:25:4a:9e:0c:0a:cd:ff:1e: 11:37:8c:20:33:54:55:57:57:ab:cd:b7:94:1a:d5:81:9e:12: 4e:16:bb:a5:63:f8:a9:89:c2:1b:ab:23:f8:5a:f6:2f:1e:27: 82:c4:c5:01:d5:af:bb:ab:fb:db:43:57:aa:6d:7b:61:1d:02: 76:d5:a7:05:74:35:53:0a:42:2d:0f:58:ce:6a:22:fd:14:a3: 81:e0:52:f1:9b:f5:25:63:c6:95:7c:0e:91:64:58:4f:8c:e6: e0:28:06:69:a0:46:60:9a:23:a0:e3:42:bb:f2:29:e5:cb:7a: 79:54:d5:5a:24:27:96:4f:bb:58:07:93:81:fb:dd:a4:e9:45: 5c:9d:7d:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LdnIZ6/xruU/bj9qt5xDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwODAyNWM3ZGUwNDAwZTBmM2M4OGQ0YTEyMmEzMTdlMzJj NWUyMWMwHhcNMjUxMjA2MTUwMDM2WhcNMjUxMjA3MTUwMDM2WjAzMTEwLwYDVQQD EyhiMzc2YTA4MzFlNjQ2ODJjYTVjY2ZlZDQwNmFmMDRmNThjMGFiYTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulkDO45UYMEq9rm4Q6FB4bIharnu 1HcPBGyR2wGuY33NFCRd11ntoXZRVDgcUsfjji+9+6dm51AcpS4rKlDKK+W5phjE Zk0wLPTRbKKQs+zAK95XX89UE6G/AI+wZpxWGPvhVuxd6zkzraYx4SD2nmJeRJUW K6v5ThOlwR3hW0QpGgJjRisxBi6cDKZ7i0sbi1cFXuFqBwvorrrA0inQvDnPookJ t+9L4Y/rAFkk5M4J3P1ayHy+S+NjK6imXyICvS3FXdQQqHgQivV9HBnpSiwXJRxH w3/Gkc2byf+E9XqpxIAfaMfkorHPTgrEwIdtxQXFumSpAQ/qUKaC1iBuoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLN2oIMeZGgspcz+1AavBPWMCrpuMB8GA1UdIwQY MBaAFECAJcfeBADg88iNShIqMX4yxeIcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUlBbHg5NEVBT0R6eUkxS0Vpb3hmakxGNGh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy81OTMwM2QtNzQ4YS00Nzk3LTgxMWUt ZmVlMmU4ZDQwODRmLzEvUUlBbHg5NEVBT0R6eUkxS0Vpb3hmakxGNGh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy81OTMwM2QtNzQ4YS00Nzk3LTgxMWUtZmVlMmU4ZDQwODRm LzEvUUlBbHg5NEVBT0R6eUkxS0Vpb3hmakxGNGh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUfm+ff3l AtMySykWSFcxyQmXAtHvA9Be7i+TeHw6yewMivi7jfAtVU5uJOHWB0wjBVJTNNWb IBsCPQ8keyhPlR4XY+GULxqQZblqf91W1k3CHnHJrjavzbero2s8k4oylt+m3QeB Bq4HSx73bBzx75d2zlVugyVKngwKzf8eETeMIDNUVVdXq823lBrVgZ4STha7pWP4 qYnCG6sj+Fr2Lx4ngsTFAdWvu6v720NXqm17YR0CdtWnBXQ1UwpCLQ9Yzmoi/RSj geBS8Zv1JWPGlXwOkWRYT4zm4CgGaaBGYJojoONCu/Ip5ct6eVTVWiQnlk+7WAeT gfvdpOlFXJ19vA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:29:47 2025 by rpki-client