This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft File: QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft (raw, json) Hash identifier: a2Yle8EZYYhVmGxB3Lb3T2/bhDLmSeGfJIeb/BVBVKM= Subject key identifier: D5:67:71:EA:AB:AB:B6:6C:0A:8B:D6:4C:5A:F0:DC:10:18:4C:42:2C Authority key identifier: 40:25:4D:4A:76:7A:D0:99:60:6E:44:2E:09:2F:91:24:1A:36:36:70 Certificate issuer: /CN=40254d4a767ad099606e442e092f91241a363670 Certificate serial: 019B360E361EE0F654AC2F6D6B8BEC12B5A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft Manifest number: 1557 Signing time: Fri 19 Dec 2025 10:00:59 +0000 Manifest this update: Fri 19 Dec 2025 10:00:59 +0000 Manifest next update: Sat 20 Dec 2025 10:00:59 +0000 Files and hashes: 1: FdgrAlXHTUPAeTheMsde8YkawNs.roa (hash: rje6Lwajr0YyCxZcxBMKIrTaIp18lo7SaPvG3dwiyVA=) 2: QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl (hash: RX7rrbnWOVAM1OhVsYQEgcJPmQX36xBT5iYYpRGowbk=) 3: s_2L4K_sJnZRupOisUUmx-pSGhc.roa (hash: WrT7tu8a18enFrkb7Ns9dzR3YzLJ2dPG++PSa/YdVYg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:36:1e:e0:f6:54:ac:2f:6d:6b:8b:ec:12:b5:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40254d4a767ad099606e442e092f91241a363670 Validity Not Before: Dec 19 10:00:59 2025 GMT Not After : Dec 20 10:00:59 2025 GMT Subject: CN=d56771eaababb66c0a8bd64c5af0dc10184c422c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:31:23:68:6a:b0:59:53:48:fa:b4:f1:55:30: 31:9a:ad:4b:9e:47:3c:e5:4d:bb:d5:eb:36:b1:27: cb:3d:57:10:f8:e7:55:f5:27:6c:a2:05:7d:9e:37: f9:d3:98:fe:cc:d0:48:29:c0:89:7b:4d:a1:c1:bf: d8:f1:bb:bf:81:09:f7:de:15:e8:c6:c0:41:78:d7: 77:d5:9c:3e:96:be:7a:5d:91:a8:13:a9:02:68:42: c7:a4:bd:2c:13:73:0e:0f:fa:7b:1b:19:29:60:73: c6:0a:a2:74:95:5f:2c:7a:ba:fe:3d:a6:bd:f9:32: 4a:ee:2c:9a:02:ec:e8:cb:e7:fd:d3:36:37:43:b0: b6:6b:79:2c:db:eb:74:94:16:a3:3a:15:35:ff:1f: 7a:fa:88:8f:db:42:1a:46:68:5e:b6:d9:b9:ac:41: 72:5f:76:e9:4c:3e:34:84:40:1c:c3:5d:8f:20:1f: b2:0f:41:f9:7d:75:64:7e:63:48:05:da:86:81:df: 22:da:c9:b6:d6:67:cc:a4:19:bc:89:18:3d:fe:7f: 3b:c4:c5:c8:f4:1d:ef:33:1a:8b:65:bd:5a:dc:05: 25:27:b0:e3:f0:71:0d:a4:80:0c:d4:5c:7c:d7:18: 9e:de:72:9f:dd:4e:3a:6e:ec:56:0a:fb:b8:9d:8e: 4c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:67:71:EA:AB:AB:B6:6C:0A:8B:D6:4C:5A:F0:DC:10:18:4C:42:2C X509v3 Authority Key Identifier: keyid:40:25:4D:4A:76:7A:D0:99:60:6E:44:2E:09:2F:91:24:1A:36:36:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:62:fe:27:93:5d:c9:99:36:a3:8d:12:c2:be:b1:e7:8a:a4: b5:17:77:c8:6b:3d:3b:63:19:16:40:86:91:a9:87:bc:00:eb: 36:9d:12:fd:a9:01:2c:67:67:e2:d0:e5:a0:f9:be:7f:bd:b9: 80:b3:ef:0d:3a:f8:d5:b7:fa:03:37:7c:84:1e:d7:fe:74:39: 4a:e8:c9:49:c6:cb:f8:85:5b:5a:ee:3e:a3:50:b1:bd:ee:77: 55:1e:85:8b:bb:b3:c3:63:85:f4:24:68:64:9a:d6:63:3d:97: 0c:f4:9a:0a:ea:c6:87:55:60:62:1d:ff:0e:6d:42:91:3d:e1: e7:b7:f4:13:9e:cf:e9:62:e7:4e:b4:cc:2c:20:b5:24:cf:0d: fa:90:12:a0:1a:58:ce:79:07:d6:f0:d9:09:75:75:f8:25:a8: 41:00:08:a7:d9:a1:27:ca:0c:09:b2:80:27:15:26:7e:3c:5c: 41:8a:e3:76:2b:1f:bc:e1:67:ee:db:8d:27:e5:15:34:ba:ec: 09:5e:3f:fa:4e:81:68:3f:95:c3:6b:42:6a:71:df:a5:75:9b: 79:09:72:2b:ea:49:3b:1e:ab:0c:fa:9d:ea:c7:8d:0b:43:49: de:8e:b8:65:94:9c:a9:a9:a1:5d:41:e9:ce:34:57:cf:6a:27: df:ea:64:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DjYe4PZUrC9ta4vsErWlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMjU0ZDRhNzY3YWQwOTk2MDZlNDQyZTA5MmY5MTI0MWEz NjM2NzAwHhcNMjUxMjE5MTAwMDU5WhcNMjUxMjIwMTAwMDU5WjAzMTEwLwYDVQQD EyhkNTY3NzFlYWFiYWJiNjZjMGE4YmQ2NGM1YWYwZGMxMDE4NGM0MjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TEjaGqwWVNI+rTxVTAxmq1Lnkc8 5U271es2sSfLPVcQ+OdV9SdsogV9njf505j+zNBIKcCJe02hwb/Y8bu/gQn33hXo xsBBeNd31Zw+lr56XZGoE6kCaELHpL0sE3MOD/p7GxkpYHPGCqJ0lV8serr+Paa9 +TJK7iyaAuzoy+f90zY3Q7C2a3ks2+t0lBajOhU1/x96+oiP20IaRmhettm5rEFy X3bpTD40hEAcw12PIB+yD0H5fXVkfmNIBdqGgd8i2sm21mfMpBm8iRg9/n87xMXI 9B3vMxqLZb1a3AUlJ7Dj8HENpIAM1Fx81xie3nKf3U46buxWCvu4nY5M5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNVnceqrq7ZsCovWTFrw3BAYTEIsMB8GA1UdIwQY MBaAFEAlTUp2etCZYG5ELgkvkSQaNjZwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUNWTlNuWjYwSmxnYmtRdUNTLVJKQm8yTm5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9lZjZjOGUtM2YwNy00YjNmLWE4N2Ut YmJlOTEyZWVjNzNlLzEvUUNWTlNuWjYwSmxnYmtRdUNTLVJKQm8yTm5BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9lZjZjOGUtM2YwNy00YjNmLWE4N2UtYmJlOTEyZWVjNzNl LzEvUUNWTlNuWjYwSmxnYmtRdUNTLVJKQm8yTm5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACmL+J5Nd yZk2o40Swr6x54qktRd3yGs9O2MZFkCGkamHvADrNp0S/akBLGdn4tDloPm+f725 gLPvDTr41bf6Azd8hB7X/nQ5SujJScbL+IVbWu4+o1Cxve53VR6Fi7uzw2OF9CRo ZJrWYz2XDPSaCurGh1VgYh3/Dm1CkT3h57f0E57P6WLnTrTMLCC1JM8N+pASoBpY znkH1vDZCXV1+CWoQQAIp9mhJ8oMCbKAJxUmfjxcQYrjdisfvOFn7tuNJ+UVNLrs CV4/+k6BaD+Vw2tCanHfpXWbeQlyK+pJOx6rDPqd6seNC0NJ3o64ZZScqamhXUHp zjRXz2on3+pk+w== -----END CERTIFICATE-----Generated at Fri Dec 19 13:25:51 2025 by rpki-client