This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft File: QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft (raw, json) Hash identifier: OTigmg1iSXoG9caN60hUw78Fa03uGAo6zZdcbPjRF6A= Subject key identifier: 5D:A6:91:A1:CA:07:CA:8E:68:B8:44:E8:23:ED:A5:33:42:C6:96:17 Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A Certificate issuer: /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a Certificate serial: 019AF42E8B37534874B4C3DEC778D759165E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft Manifest number: 17A1 Signing time: Sat 06 Dec 2025 15:01:22 +0000 Manifest this update: Sat 06 Dec 2025 15:01:22 +0000 Manifest next update: Sun 07 Dec 2025 15:01:22 +0000 Files and hashes: 1: 587A_sxhnB_Cg2VH6zBxs_1aZV4.roa (hash: qUldoYoFLJ85vGl93bSFHpePwO1mUtBhilmXXO0xSlk=) 2: Ma9Ikd6hdTtGzEOY7RC-SeQ9wUw.roa (hash: mYux390OsCPiajLg/1tt+lZqU5GQYKEz7ajHTrFy5ig=) 3: QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl (hash: rxGgSz3jSBBRCyyHlJMDJO+P2UcoLaf2Y2tZG/bPFIs=) 4: kbldHkYN22HFUXNAof79Ipvp0FI.roa (hash: dlVB9s4P0rDIyUD+IpBdwwKW0GRfBoI6furMGa7ahso=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:8b:37:53:48:74:b4:c3:de:c7:78:d7:59:16:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a Validity Not Before: Dec 6 15:01:22 2025 GMT Not After : Dec 7 15:01:22 2025 GMT Subject: CN=5da691a1ca07ca8e68b844e823eda53342c69617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:02:bd:37:1d:c4:11:22:d6:7e:de:66:21:9f: e4:b7:21:c1:37:f4:ba:1b:e1:67:8e:23:af:89:05: 2c:ce:f2:9e:b4:3b:ad:fc:d9:0a:9a:7c:f5:3c:70: 9f:ca:2c:c6:e3:0a:44:47:2e:39:02:96:02:17:08: 68:15:9f:b0:da:6b:cc:65:e4:a6:12:ba:b8:2b:cd: e4:b4:65:d1:fb:37:e0:9f:a6:53:a6:1d:e4:04:f6: 6d:06:a2:2f:89:40:4b:51:56:86:da:6e:fe:fb:8a: e0:aa:dc:ce:e0:72:53:8a:d1:b9:52:28:7e:2c:fd: b9:b2:ab:f8:46:6a:a8:19:1d:71:a0:19:ed:c8:79: 4c:29:66:5f:66:5d:6a:3e:b6:b4:83:54:ef:cb:39: ba:90:d1:34:ae:80:29:ac:62:db:bd:8f:9a:bd:3b: 04:fb:44:ed:ae:52:0f:50:34:9b:4d:d0:6b:04:88: 0c:d2:13:6a:aa:f2:88:e7:d6:8c:04:30:cc:7c:de: fa:bc:03:1b:df:41:71:af:12:86:32:c5:84:e0:e7: 90:a0:ff:3a:6b:ed:cd:bf:ef:e8:f6:28:11:60:ff: dd:fb:6a:40:5d:24:7d:7d:34:1e:2e:ae:18:d6:9c: ca:92:cd:92:72:8b:9d:d3:68:6a:d3:34:68:3d:a6: 9b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A6:91:A1:CA:07:CA:8E:68:B8:44:E8:23:ED:A5:33:42:C6:96:17 X509v3 Authority Key Identifier: keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:32:fa:04:9a:2d:87:35:4a:20:75:a7:ea:52:31:e1:49:65: ea:16:f9:3f:75:58:c4:fd:49:46:aa:0a:3c:47:89:87:1f:c8: 95:5c:24:df:c2:58:ec:9e:fe:26:ab:da:2b:ba:7e:4e:18:b8: 34:0c:9c:1b:6d:5a:00:58:fa:3d:7c:8f:b4:cd:5f:9b:8c:fa: 00:93:08:40:32:2c:17:79:f3:ca:4a:07:48:50:8f:7a:6b:83: 15:91:65:b8:70:fa:53:6c:cf:fe:2c:d9:1c:bf:22:06:f4:3e: 8e:4a:4d:fb:8e:68:92:80:d3:8b:40:2d:19:c4:52:df:fb:c5: 36:64:9b:5c:63:df:90:f1:fe:fd:0a:09:a0:68:67:11:0b:10: 35:40:b6:06:88:1a:25:01:92:2e:fa:22:c5:3d:d3:77:ab:55: 22:5f:77:f7:e5:81:70:b6:05:45:c9:00:c8:5d:d8:a8:59:25: 82:f6:a0:ef:0c:9c:85:90:66:c5:6a:52:66:e1:34:3a:9e:17: 90:e1:b7:6a:43:8c:89:b9:27:63:b1:49:9d:bc:8c:1d:6e:c9: 1d:e0:4b:58:fa:35:6a:a1:f5:91:b6:02:7c:c0:be:ed:07:d1: 28:90:4e:e9:36:9a:4f:45:16:1c:7d:9d:aa:21:42:ca:2c:72: 72:f5:7c:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Los3U0h0tMPex3jXWRZeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNzNlZWI4ZDAyZjVmNjQ3ODhiM2ZkYzc4ZDZiYWI4YTU1 ZmQxNmEwHhcNMjUxMjA2MTUwMTIyWhcNMjUxMjA3MTUwMTIyWjAzMTEwLwYDVQQD Eyg1ZGE2OTFhMWNhMDdjYThlNjhiODQ0ZTgyM2VkYTUzMzQyYzY5NjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QK9Nx3EESLWft5mIZ/ktyHBN/S6 G+FnjiOviQUszvKetDut/NkKmnz1PHCfyizG4wpERy45ApYCFwhoFZ+w2mvMZeSm Erq4K83ktGXR+zfgn6ZTph3kBPZtBqIviUBLUVaG2m7++4rgqtzO4HJTitG5Uih+ LP25sqv4RmqoGR1xoBntyHlMKWZfZl1qPra0g1Tvyzm6kNE0roAprGLbvY+avTsE +0TtrlIPUDSbTdBrBIgM0hNqqvKI59aMBDDMfN76vAMb30FxrxKGMsWE4OeQoP86 a+3Nv+/o9igRYP/d+2pAXSR9fTQeLq4Y1pzKks2Scoud02hq0zRoPaabmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF2mkaHKB8qOaLhE6CPtpTNCxpYXMB8GA1UdIwQY MBaAFEFz7rjQL19keIs/3HjWurilX9FqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVhQdXVOQXZYMlI0aXpfY2VOYTZ1S1ZmMFdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80ODkyYTktM2IzNy00ZDM5LTljMmIt ZDgzZWQxNDBkMjhkLzEvUVhQdXVOQXZYMlI0aXpfY2VOYTZ1S1ZmMFdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC80ODkyYTktM2IzNy00ZDM5LTljMmItZDgzZWQxNDBkMjhk LzEvUVhQdXVOQXZYMlI0aXpfY2VOYTZ1S1ZmMFdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARzL6BJot hzVKIHWn6lIx4Ull6hb5P3VYxP1JRqoKPEeJhx/IlVwk38JY7J7+JqvaK7p+Thi4 NAycG21aAFj6PXyPtM1fm4z6AJMIQDIsF3nzykoHSFCPemuDFZFluHD6U2zP/izZ HL8iBvQ+jkpN+45okoDTi0AtGcRS3/vFNmSbXGPfkPH+/QoJoGhnEQsQNUC2Boga JQGSLvoixT3Td6tVIl939+WBcLYFRckAyF3YqFklgvag7wychZBmxWpSZuE0Op4X kOG3akOMibknY7FJnbyMHW7JHeBLWPo1aqH1kbYCfMC+7QfRKJBO6TaaT0UWHH2d qiFCyixycvV8kQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:52:28 2025 by rpki-client