This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft File: qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft (raw, json) Hash identifier: 3o9WRV9HQYbZly2jXjHTDkt/0oaUfpW67JJrBR6SMqI= Subject key identifier: C1:EC:7F:42:3A:AD:15:0D:8F:DC:FD:AA:B8:66:FC:75:96:00:AF:FF Authority key identifier: A9:C1:87:BC:7A:9E:88:53:35:A7:EB:9B:0A:43:8F:E8:11:C0:38:47 Certificate issuer: /CN=a9c187bc7a9e885335a7eb9b0a438fe811c03847 Certificate serial: 019B2F67B8D8A74B9055D0AF02696F32D06E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 03:01:25 +0000 Manifest this update: Thu 18 Dec 2025 03:01:25 +0000 Manifest next update: Fri 19 Dec 2025 03:01:25 +0000 Files and hashes: 1: GxaI4hXBc2RYVYOf0z16mvSsnyE.roa (hash: g97pf2epkDk5ZUzae5HXyC8jqAaA5Zg8rR+Lupka6qA=) 2: qcGHvHqeiFM1p-ubCkOP6BHAOEc.crl (hash: qkSOYqoGiwRWvl4/sbgV8qPz5bLjzfPwNz+z1w9vKTc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft rsync://rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:b8:d8:a7:4b:90:55:d0:af:02:69:6f:32:d0:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9c187bc7a9e885335a7eb9b0a438fe811c03847 Validity Not Before: Dec 18 03:01:25 2025 GMT Not After : Dec 19 03:01:25 2025 GMT Subject: CN=c1ec7f423aad150d8fdcfdaab866fc759600afff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bc:f9:34:6c:f3:0f:6f:dc:aa:58:f1:7b:b7: c2:b1:ae:25:82:06:2c:97:4c:3f:32:be:55:ac:02: a9:30:92:a6:80:53:c2:49:93:e6:72:ad:56:d1:3c: 1e:f6:6a:de:87:e7:8d:45:aa:6c:d1:3a:5f:80:44: 87:49:4f:c7:5d:85:d4:70:68:c1:bd:5e:37:fb:ba: e0:10:ed:56:40:ca:3e:43:10:e2:dd:3e:ce:c7:2c: 92:85:83:ab:16:a8:b5:bb:85:bb:6f:75:6f:51:cf: 55:0d:44:c5:df:09:17:ad:a5:6e:d1:02:48:b4:52: dc:3c:31:3d:b9:7b:f0:c4:e3:c2:c2:e7:f3:fe:7b: 79:49:21:db:c4:e5:60:ef:5a:25:98:2d:00:aa:31: af:c9:d3:65:cb:dc:b1:50:6e:57:a2:54:fb:0b:1a: b8:81:9a:d9:24:b4:6d:09:fd:f2:b3:83:5c:e7:be: 07:f0:34:67:43:62:72:1c:c9:f1:da:b6:3a:f5:4a: 5b:d0:f3:25:a7:9c:67:1f:42:bb:c2:ef:f5:7d:41: ec:79:0a:97:12:20:bb:bb:73:d5:59:24:45:2d:82: 19:c0:6c:e7:63:30:d7:de:cc:0b:fe:1c:f9:30:c7: a5:9f:6c:ca:72:e7:ca:28:79:5d:ba:8a:12:b0:10: 6d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:EC:7F:42:3A:AD:15:0D:8F:DC:FD:AA:B8:66:FC:75:96:00:AF:FF X509v3 Authority Key Identifier: keyid:A9:C1:87:BC:7A:9E:88:53:35:A7:EB:9B:0A:43:8F:E8:11:C0:38:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:c4:68:30:fc:29:d4:3a:e2:65:e8:f1:81:0a:9d:7b:04:af: f1:1f:39:c0:b7:c0:e6:a7:52:a4:61:90:48:ff:21:e9:17:39: b8:bf:df:f9:63:a4:84:da:45:cc:2b:58:5d:8d:a7:ad:84:b1: 39:cc:00:bd:dc:e2:44:6d:f3:53:b1:9f:54:b9:a4:aa:45:1a: 78:90:6e:19:71:a4:24:1a:ed:77:34:bf:4d:2f:aa:97:93:ed: 70:17:da:d5:54:2f:48:d9:d4:88:c4:e6:5f:58:28:53:bc:6d: 75:0e:6b:3c:97:40:72:be:84:19:fc:21:d1:bb:e4:81:7c:2a: 4d:2e:b2:09:f8:da:56:5c:06:b4:32:dc:bd:3e:52:9c:39:4d: 52:09:8c:b0:fe:2e:c9:e5:de:2a:71:cb:25:7f:71:3d:22:b1: 36:c2:79:36:83:02:ec:51:58:60:ba:40:40:8f:8b:b8:de:12: d9:5c:89:13:79:c5:f5:cb:04:88:34:3c:c3:2f:aa:7f:f3:51: d2:50:ba:a1:78:83:cd:44:2c:67:a5:a2:de:b5:a4:21:ac:df: 14:b5:88:09:32:5a:3a:83:b5:e2:12:e6:5f:12:1c:18:02:f4: 89:07:9d:65:b6:2f:b3:ae:a2:53:47:0c:39:e4:17:3c:02:65: 8f:5d:0f:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ7jYp0uQVdCvAmlvMtBuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5YzE4N2JjN2E5ZTg4NTMzNWE3ZWI5YjBhNDM4ZmU4MTFj MDM4NDcwHhcNMjUxMjE4MDMwMTI1WhcNMjUxMjE5MDMwMTI1WjAzMTEwLwYDVQQD EyhjMWVjN2Y0MjNhYWQxNTBkOGZkY2ZkYWFiODY2ZmM3NTk2MDBhZmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorz5NGzzD2/cqljxe7fCsa4lggYs l0w/Mr5VrAKpMJKmgFPCSZPmcq1W0Twe9mreh+eNRaps0TpfgESHSU/HXYXUcGjB vV43+7rgEO1WQMo+QxDi3T7OxyyShYOrFqi1u4W7b3VvUc9VDUTF3wkXraVu0QJI tFLcPDE9uXvwxOPCwufz/nt5SSHbxOVg71olmC0AqjGvydNly9yxUG5XolT7Cxq4 gZrZJLRtCf3ys4Nc574H8DRnQ2JyHMnx2rY69Upb0PMlp5xnH0K7wu/1fUHseQqX EiC7u3PVWSRFLYIZwGznYzDX3swL/hz5MMeln2zKcufKKHlduooSsBBtCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMHsf0I6rRUNj9z9qrhm/HWWAK//MB8GA1UdIwQY MBaAFKnBh7x6nohTNafrmwpDj+gRwDhHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWNHSHZIcWVpRk0xcC11YkNrT1A2QkhBT0VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8xYjgxNGEtZDM4OC00YzY0LTgzMDIt MzcwZDFmZDQyNTRiLzEvcWNHSHZIcWVpRk0xcC11YkNrT1A2QkhBT0VjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi8xYjgxNGEtZDM4OC00YzY0LTgzMDItMzcwZDFmZDQyNTRi LzEvcWNHSHZIcWVpRk0xcC11YkNrT1A2QkhBT0VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx8RoMPwp 1DriZejxgQqdewSv8R85wLfA5qdSpGGQSP8h6Rc5uL/f+WOkhNpFzCtYXY2nrYSx OcwAvdziRG3zU7GfVLmkqkUaeJBuGXGkJBrtdzS/TS+ql5PtcBfa1VQvSNnUiMTm X1goU7xtdQ5rPJdAcr6EGfwh0bvkgXwqTS6yCfjaVlwGtDLcvT5SnDlNUgmMsP4u yeXeKnHLJX9xPSKxNsJ5NoMC7FFYYLpAQI+LuN4S2VyJE3nF9csEiDQ8wy+qf/NR 0lC6oXiDzUQsZ6Wi3rWkIazfFLWICTJaOoO14hLmXxIcGAL0iQedZbYvs66iU0cM OeQXPAJlj10PLQ== -----END CERTIFICATE-----Generated at Thu Dec 18 11:15:44 2025 by rpki-client