This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft File: qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft (raw, json) Hash identifier: 4AYu4E3lsoN4fANBlJcdt3+65/WrLPTwmZyOz2Y5JI8= Subject key identifier: FE:A7:49:52:74:BF:4E:3E:08:05:7D:C3:F9:E2:21:27:B9:FC:16:BD Authority key identifier: A9:C1:87:BC:7A:9E:88:53:35:A7:EB:9B:0A:43:8F:E8:11:C0:38:47 Certificate issuer: /CN=a9c187bc7a9e885335a7eb9b0a438fe811c03847 Certificate serial: 019B2D795E0C8B8695699B697C7D743FFDD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft Manifest number: 1781 Signing time: Wed 17 Dec 2025 18:01:27 +0000 Manifest this update: Wed 17 Dec 2025 18:01:27 +0000 Manifest next update: Thu 18 Dec 2025 18:01:27 +0000 Files and hashes: 1: GxaI4hXBc2RYVYOf0z16mvSsnyE.roa (hash: g97pf2epkDk5ZUzae5HXyC8jqAaA5Zg8rR+Lupka6qA=) 2: qcGHvHqeiFM1p-ubCkOP6BHAOEc.crl (hash: pIEdFUGRa733XORMdZR3Qw5CSREjse4a1jYgmLy30QY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft rsync://rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 18:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:79:5e:0c:8b:86:95:69:9b:69:7c:7d:74:3f:fd:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9c187bc7a9e885335a7eb9b0a438fe811c03847 Validity Not Before: Dec 17 18:01:27 2025 GMT Not After : Dec 18 18:01:27 2025 GMT Subject: CN=fea7495274bf4e3e08057dc3f9e22127b9fc16bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0e:63:33:cd:62:72:4d:f1:ea:06:7f:93:6c: 5f:95:94:a7:ff:b3:15:91:d1:4d:0c:43:14:1f:45: a6:2e:ca:de:2e:41:14:dc:54:4d:ce:77:0e:86:12: 93:bd:55:3d:54:7a:e0:e6:ab:22:96:9d:09:69:c5: 0f:aa:32:5d:f9:a5:38:fe:3f:c2:f9:74:f1:82:a9: 9a:fd:43:0d:0b:cf:49:46:04:e9:a9:38:51:5e:f1: ed:60:85:9c:ac:c2:1e:67:69:f7:d8:70:cf:8c:4e: 9e:76:a1:5e:55:b2:93:47:37:25:76:93:96:29:cd: 3b:64:22:6d:75:f5:3e:4a:a0:45:13:7b:ca:bb:40: 07:bc:53:89:e1:ac:40:34:a2:81:e6:51:5a:cb:d4: 9a:f2:3f:bf:df:96:96:0d:cf:ae:a9:df:18:8f:c6: 7c:a0:10:ad:f7:e9:57:2e:4e:f0:2f:ca:bb:8f:d5: 3d:01:5d:59:83:4c:2a:0b:1a:37:99:35:01:90:f5: fa:b9:ed:bf:94:cb:dc:04:d7:24:2c:e6:38:6c:58: f7:33:50:bb:8f:30:cb:4a:1f:69:54:04:bb:19:13: 52:5e:73:3e:1a:48:c7:67:3a:aa:3d:04:1c:d5:4f: 87:6d:4d:a8:11:e4:2d:91:da:08:59:0f:2d:c5:ca: b2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:A7:49:52:74:BF:4E:3E:08:05:7D:C3:F9:E2:21:27:B9:FC:16:BD X509v3 Authority Key Identifier: keyid:A9:C1:87:BC:7A:9E:88:53:35:A7:EB:9B:0A:43:8F:E8:11:C0:38:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:8f:c3:f7:7f:a4:8a:d0:52:2f:bc:c3:ad:30:00:1f:35:17: 6f:d6:72:21:44:5c:f2:41:f8:41:f4:b3:89:24:e2:df:79:f7: 1f:ee:d7:c3:d4:6a:b7:a5:bc:55:43:a0:f0:79:76:69:89:b1: d6:96:bd:fe:64:80:3f:e6:38:74:22:6a:7a:3c:75:73:fc:df: b8:9c:b9:54:a4:06:1f:93:d4:97:ee:26:fd:1d:9d:a5:d0:a5: 8f:0a:9c:97:dc:98:63:ff:c9:58:a2:db:07:7e:2b:e2:68:22: 9b:db:3f:7c:2f:12:34:fc:f3:f1:fe:9d:0d:e0:43:0d:1f:c0: ba:e5:d0:5a:de:e5:f3:1e:56:34:33:74:b3:4b:03:f0:20:8e: 54:1a:4b:b8:37:56:1b:1c:74:fd:7a:b8:ee:a7:82:0f:01:af: 5c:2f:30:62:d7:f2:16:21:26:8b:1d:4d:08:cd:25:af:36:9d: 77:6a:5d:29:80:47:46:46:8b:1e:48:ba:87:53:ed:7c:1c:0a: 92:f8:75:ea:74:1f:18:7a:cf:d7:39:3b:a5:b3:6f:2e:06:d9: 98:dd:ba:95:17:9b:49:9c:e9:9b:6b:d6:5a:ca:de:6a:25:4e: 19:fb:6e:0b:93:71:eb:37:cb:cd:35:12:84:15:ee:6a:44:54: 99:1a:bd:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsteV4Mi4aVaZtpfH10P/3QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5YzE4N2JjN2E5ZTg4NTMzNWE3ZWI5YjBhNDM4ZmU4MTFj MDM4NDcwHhcNMjUxMjE3MTgwMTI3WhcNMjUxMjE4MTgwMTI3WjAzMTEwLwYDVQQD EyhmZWE3NDk1Mjc0YmY0ZTNlMDgwNTdkYzNmOWUyMjEyN2I5ZmMxNmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwA5jM81ick3x6gZ/k2xflZSn/7MV kdFNDEMUH0WmLsreLkEU3FRNzncOhhKTvVU9VHrg5qsilp0JacUPqjJd+aU4/j/C +XTxgqma/UMNC89JRgTpqThRXvHtYIWcrMIeZ2n32HDPjE6edqFeVbKTRzcldpOW Kc07ZCJtdfU+SqBFE3vKu0AHvFOJ4axANKKB5lFay9Sa8j+/35aWDc+uqd8Yj8Z8 oBCt9+lXLk7wL8q7j9U9AV1Zg0wqCxo3mTUBkPX6ue2/lMvcBNckLOY4bFj3M1C7 jzDLSh9pVAS7GRNSXnM+GkjHZzqqPQQc1U+HbU2oEeQtkdoIWQ8txcqyAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP6nSVJ0v04+CAV9w/niISe5/Ba9MB8GA1UdIwQY MBaAFKnBh7x6nohTNafrmwpDj+gRwDhHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWNHSHZIcWVpRk0xcC11YkNrT1A2QkhBT0VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8xYjgxNGEtZDM4OC00YzY0LTgzMDIt MzcwZDFmZDQyNTRiLzEvcWNHSHZIcWVpRk0xcC11YkNrT1A2QkhBT0VjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi8xYjgxNGEtZDM4OC00YzY0LTgzMDItMzcwZDFmZDQyNTRi LzEvcWNHSHZIcWVpRk0xcC11YkNrT1A2QkhBT0VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASI/D93+k itBSL7zDrTAAHzUXb9ZyIURc8kH4QfSziSTi33n3H+7Xw9Rqt6W8VUOg8Hl2aYmx 1pa9/mSAP+Y4dCJqejx1c/zfuJy5VKQGH5PUl+4m/R2dpdCljwqcl9yYY//JWKLb B34r4mgim9s/fC8SNPzz8f6dDeBDDR/AuuXQWt7l8x5WNDN0s0sD8CCOVBpLuDdW Gxx0/Xq47qeCDwGvXC8wYtfyFiEmix1NCM0lrzadd2pdKYBHRkaLHki6h1PtfBwK kvh16nQfGHrP1zk7pbNvLgbZmN26lRebSZzpm2vWWsreaiVOGftuC5Nx6zfLzTUS hBXuakRUmRq9kQ== -----END CERTIFICATE-----Generated at Thu Dec 18 00:09:23 2025 by rpki-client