This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft File: QhLmk-jn-4sxqoVTsw2VvvBINyk.mft (raw, json) Hash identifier: gBNPAxiEaGCI51VLLmkm4pSZ9INf2a8TbkFQZBK/9lY= Subject key identifier: 2A:77:8F:D8:4F:B1:9F:FA:F9:44:F4:AE:5D:24:44:68:88:6B:EC:84 Authority key identifier: 42:12:E6:93:E8:E7:FB:8B:31:AA:85:53:B3:0D:95:BE:F0:48:37:29 Certificate issuer: /CN=4212e693e8e7fb8b31aa8553b30d95bef0483729 Certificate serial: 019B4136E9B8749A4DD3BED937E74D394D6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 14:01:16 +0000 Manifest this update: Sun 21 Dec 2025 14:01:16 +0000 Manifest next update: Mon 22 Dec 2025 14:01:16 +0000 Files and hashes: 1: QhLmk-jn-4sxqoVTsw2VvvBINyk.crl (hash: LFsBkyLmlsE3O/rM/aFBDaJmt29cDI1CVxJSJJDopwE=) 2: cjjqef6iWCl_1yFiNx4mwIqngEo.roa (hash: d/pj6gBhpaRW2JX3FWdfa1N0hGZit4d6dbXlFGA0bW4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.crl rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:e9:b8:74:9a:4d:d3:be:d9:37:e7:4d:39:4d:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4212e693e8e7fb8b31aa8553b30d95bef0483729 Validity Not Before: Dec 21 14:01:16 2025 GMT Not After : Dec 22 14:01:16 2025 GMT Subject: CN=2a778fd84fb19ffaf944f4ae5d244468886bec84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ab:e5:e7:8e:e0:da:d8:39:61:61:50:43:61: e0:b2:cf:c4:8e:2f:0e:f1:c5:96:24:21:a1:c1:c0: af:af:c3:4e:07:ab:20:03:af:c4:7e:3c:ac:ba:13: 9b:6c:83:ec:2d:fd:0e:26:93:90:ec:5d:13:b8:17: c4:e5:69:43:0e:93:11:98:22:d4:dc:cc:ad:b5:35: 2d:5d:b2:75:be:82:9b:2a:a2:ad:7d:ab:0a:ce:9d: 7a:59:7a:26:76:90:e4:53:c8:29:43:e0:08:6f:78: 05:af:77:e4:d2:09:a7:c5:6a:d3:c6:aa:ed:f0:c3: d7:03:08:ca:0f:41:43:df:66:fe:6e:b8:82:ab:ef: e1:40:32:31:ae:0c:de:07:fe:76:e8:43:5d:0a:6f: bf:a2:c1:ac:5f:d4:07:6b:14:1c:0a:c1:a3:1f:40: 5c:14:96:4d:be:79:a2:5e:c0:33:64:8b:4d:e2:aa: 43:da:13:a1:2e:71:50:65:bb:5c:89:0b:b3:1a:02: c9:ba:d5:b5:7d:28:6f:95:cb:07:b9:2f:73:77:8a: 96:8d:43:71:2a:65:d1:18:60:25:d9:1c:eb:ea:e3: 36:7e:b6:11:69:1b:86:26:df:2e:aa:cd:1e:f6:6b: 5d:7e:a1:dd:18:1b:5f:5e:44:3f:9c:c8:03:55:9c: 53:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:77:8F:D8:4F:B1:9F:FA:F9:44:F4:AE:5D:24:44:68:88:6B:EC:84 X509v3 Authority Key Identifier: keyid:42:12:E6:93:E8:E7:FB:8B:31:AA:85:53:B3:0D:95:BE:F0:48:37:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:e4:7a:89:3b:cf:bf:92:37:16:1c:59:ef:56:a1:71:c6:fe: 16:5c:37:fe:be:3d:2f:04:c0:0d:41:8e:70:e0:51:c2:a4:f4: fa:49:24:42:0c:3b:c5:8b:10:a4:de:ef:c4:96:54:fa:0a:f1: 5d:b5:83:c0:94:dc:0b:c1:54:3e:a5:aa:d4:24:fe:3b:98:98: be:d6:21:29:0c:b9:5c:30:ef:f2:c0:3b:be:1f:60:93:31:12: 7f:01:a6:7c:b8:7f:41:ee:60:a8:da:d7:f2:aa:20:a4:c0:43: 76:f8:11:d0:2d:54:b2:8f:6a:33:b2:00:6f:b2:7f:9c:0f:fd: e4:65:c0:95:2c:30:3a:b4:70:00:de:31:c6:28:19:0f:55:3f: 0b:0e:15:ca:92:f6:53:a9:63:4c:f8:a5:9f:4c:1b:ea:e5:5e: 15:cf:cf:b0:dc:d0:02:7d:17:f5:51:dc:1e:26:3e:8b:3c:83: c2:cc:f4:4b:bf:61:ba:6a:eb:0d:30:fd:74:40:ef:fc:76:47: 52:4c:03:ea:b3:12:c3:c3:2f:c9:a5:42:b3:8f:76:68:b2:a2: 49:03:ae:68:b1:9f:62:d4:58:27:f3:37:9b:65:99:0e:9f:65: 8f:8a:52:09:35:86:41:2a:ad:71:90:99:16:ea:3b:8b:44:8f: f4:0b:9f:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNum4dJpN077ZN+dNOU1vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMTJlNjkzZThlN2ZiOGIzMWFhODU1M2IzMGQ5NWJlZjA0 ODM3MjkwHhcNMjUxMjIxMTQwMTE2WhcNMjUxMjIyMTQwMTE2WjAzMTEwLwYDVQQD EygyYTc3OGZkODRmYjE5ZmZhZjk0NGY0YWU1ZDI0NDQ2ODg4NmJlYzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6vl547g2tg5YWFQQ2Hgss/Eji8O 8cWWJCGhwcCvr8NOB6sgA6/EfjysuhObbIPsLf0OJpOQ7F0TuBfE5WlDDpMRmCLU 3MyttTUtXbJ1voKbKqKtfasKzp16WXomdpDkU8gpQ+AIb3gFr3fk0gmnxWrTxqrt 8MPXAwjKD0FD32b+briCq+/hQDIxrgzeB/526ENdCm+/osGsX9QHaxQcCsGjH0Bc FJZNvnmiXsAzZItN4qpD2hOhLnFQZbtciQuzGgLJutW1fShvlcsHuS9zd4qWjUNx KmXRGGAl2Rzr6uM2frYRaRuGJt8uqs0e9mtdfqHdGBtfXkQ/nMgDVZxTTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCp3j9hPsZ/6+UT0rl0kRGiIa+yEMB8GA1UdIwQY MBaAFEIS5pPo5/uLMaqFU7MNlb7wSDcpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWhMbWstam4tNHN4cW9WVHN3MlZ2dkJJTnlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9lMjEzMjUtOTkxMC00N2U4LTk5Y2Mt NzVhNTU1YzhmYjQxLzEvUWhMbWstam4tNHN4cW9WVHN3MlZ2dkJJTnlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9lMjEzMjUtOTkxMC00N2U4LTk5Y2MtNzVhNTU1YzhmYjQx LzEvUWhMbWstam4tNHN4cW9WVHN3MlZ2dkJJTnlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIuR6iTvP v5I3FhxZ71ahccb+Flw3/r49LwTADUGOcOBRwqT0+kkkQgw7xYsQpN7vxJZU+grx XbWDwJTcC8FUPqWq1CT+O5iYvtYhKQy5XDDv8sA7vh9gkzESfwGmfLh/Qe5gqNrX 8qogpMBDdvgR0C1Uso9qM7IAb7J/nA/95GXAlSwwOrRwAN4xxigZD1U/Cw4VypL2 U6ljTPiln0wb6uVeFc/PsNzQAn0X9VHcHiY+izyDwsz0S79humrrDTD9dEDv/HZH UkwD6rMSw8MvyaVCs492aLKiSQOuaLGfYtRYJ/M3m2WZDp9lj4pSCTWGQSqtcZCZ Fuo7i0SP9Auf1g== -----END CERTIFICATE-----Generated at Sun Dec 21 21:51:56 2025 by rpki-client