This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft File: QNiN23rtct6j_41pztZTGlJ5Sqc.mft (raw, json) Hash identifier: KtO68YCC8YitXnTPBQ7R87R2taheeFya9buYMRpAwU8= Subject key identifier: 59:10:64:9E:EF:D1:3C:68:D5:F0:E6:38:46:AD:FF:06:C3:62:E4:A4 Authority key identifier: 40:D8:8D:DB:7A:ED:72:DE:A3:FF:8D:69:CE:D6:53:1A:52:79:4A:A7 Certificate issuer: /CN=40d88ddb7aed72dea3ff8d69ced6531a52794aa7 Certificate serial: 019AF276AC1D1B2E50ECE06C652A6B76A141 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNiN23rtct6j_41pztZTGlJ5Sqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft Manifest number: 1318 Signing time: Sat 06 Dec 2025 07:00:54 +0000 Manifest this update: Sat 06 Dec 2025 07:00:54 +0000 Manifest next update: Sun 07 Dec 2025 07:00:54 +0000 Files and hashes: 1: NNmIvWC2aG45EdXCFQyfOgMs8UM.roa (hash: dgfGD7cFEmQYML/LCfaIOvrAjQWUEzucY+z8ExOp2jM=) 2: QNiN23rtct6j_41pztZTGlJ5Sqc.crl (hash: f0j/pGLhcTZW0+ukbHK/uUOOgYdlt4VXBXfh+H4zRY0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft rsync://rpki.ripe.net/repository/DEFAULT/QNiN23rtct6j_41pztZTGlJ5Sqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:ac:1d:1b:2e:50:ec:e0:6c:65:2a:6b:76:a1:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40d88ddb7aed72dea3ff8d69ced6531a52794aa7 Validity Not Before: Dec 6 07:00:54 2025 GMT Not After : Dec 7 07:00:54 2025 GMT Subject: CN=5910649eefd13c68d5f0e63846adff06c362e4a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2c:ea:f0:ce:2c:08:ba:5b:f2:1f:c7:8c:62: da:8b:00:4a:95:9d:16:bc:80:48:13:e1:c9:66:b3: 2d:25:ec:e4:b8:f7:fd:00:d1:4f:d0:b5:74:1f:b3: b9:32:9a:3b:e2:dc:df:2e:0f:ce:81:9d:a2:d0:b2: 82:ae:01:1b:c9:8f:8b:18:7e:10:c6:14:ac:b7:c3: 98:84:a3:b9:aa:8f:77:b7:57:e1:0a:cd:3c:eb:96: 58:85:57:e5:32:a0:1f:3d:84:f0:ed:14:c0:fa:0e: 61:70:10:2b:20:11:0c:f4:27:1d:29:dd:f3:f2:69: c6:cd:e4:f5:36:98:81:f3:32:3c:15:85:ce:9a:dd: bf:4a:70:d9:c0:b3:dd:7a:00:e6:a8:4b:a6:63:8f: b3:75:4d:62:af:c6:2d:98:e6:f7:44:71:70:19:40: 0d:08:84:47:6b:57:14:77:c5:a6:16:13:c0:73:e6: af:be:f5:bb:e7:9f:75:5d:e2:31:11:33:8d:bc:08: 1a:29:51:cf:47:a1:bf:ad:7e:4f:50:8f:ce:9f:77: 98:87:bb:b3:77:86:77:c2:99:4f:2d:c4:ef:7b:13: 56:7d:b9:9b:61:50:b4:96:e7:9a:1c:bd:42:2a:e2: 59:eb:fe:f2:b0:9d:71:ef:24:fb:01:b1:04:79:04: 7c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:10:64:9E:EF:D1:3C:68:D5:F0:E6:38:46:AD:FF:06:C3:62:E4:A4 X509v3 Authority Key Identifier: keyid:40:D8:8D:DB:7A:ED:72:DE:A3:FF:8D:69:CE:D6:53:1A:52:79:4A:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNiN23rtct6j_41pztZTGlJ5Sqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:53:64:bb:98:25:e2:cd:e5:3c:1f:78:9a:e8:dc:0f:2b:8f: b4:a5:45:a4:4d:5a:cf:b4:2a:bd:22:76:7e:21:5c:41:61:1b: 7a:f7:0a:41:3a:23:7f:6b:93:ed:44:56:a8:ae:73:d7:5a:79: 9b:f5:01:de:d6:c8:74:a4:f5:d1:c7:7b:50:d5:9c:23:24:52: 51:a5:a6:8f:62:5f:d4:f0:38:2e:77:72:75:11:c3:40:40:e1: 9a:a5:cc:ba:63:21:0c:97:64:28:65:44:a2:00:10:7d:f6:2b: ae:22:22:df:9a:60:73:6f:e7:68:61:00:7d:14:6b:bc:40:ff: cf:a1:a5:85:19:14:5c:b9:8c:4c:f2:9f:eb:1f:61:5d:4e:bd: 3c:31:49:58:db:69:cc:0f:ee:60:51:19:b9:18:f8:3f:27:48: 74:a3:84:5a:ea:58:a8:c2:fd:1b:70:30:b0:0c:98:75:f3:2e: c6:87:de:ed:e2:96:0f:a5:41:10:5e:a9:0b:92:ac:cb:ff:86: 16:ad:c5:98:56:63:91:f5:0d:17:82:d1:62:37:72:e0:97:95: b9:f3:8f:c4:cd:e6:cb:5b:00:ff:d4:d0:b4:8f:b9:90:31:15: 24:3a:2f:68:3f:69:8d:68:0a:79:31:31:a2:8c:27:e6:ad:3b: ce:49:1c:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydqwdGy5Q7OBsZSprdqFBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZDg4ZGRiN2FlZDcyZGVhM2ZmOGQ2OWNlZDY1MzFhNTI3 OTRhYTcwHhcNMjUxMjA2MDcwMDU0WhcNMjUxMjA3MDcwMDU0WjAzMTEwLwYDVQQD Eyg1OTEwNjQ5ZWVmZDEzYzY4ZDVmMGU2Mzg0NmFkZmYwNmMzNjJlNGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsizq8M4sCLpb8h/HjGLaiwBKlZ0W vIBIE+HJZrMtJezkuPf9ANFP0LV0H7O5Mpo74tzfLg/OgZ2i0LKCrgEbyY+LGH4Q xhSst8OYhKO5qo93t1fhCs0865ZYhVflMqAfPYTw7RTA+g5hcBArIBEM9CcdKd3z 8mnGzeT1NpiB8zI8FYXOmt2/SnDZwLPdegDmqEumY4+zdU1ir8YtmOb3RHFwGUAN CIRHa1cUd8WmFhPAc+avvvW75591XeIxETONvAgaKVHPR6G/rX5PUI/On3eYh7uz d4Z3wplPLcTvexNWfbmbYVC0lueaHL1CKuJZ6/7ysJ1x7yT7AbEEeQR8NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFkQZJ7v0Txo1fDmOEat/wbDYuSkMB8GA1UdIwQY MBaAFEDYjdt67XLeo/+Nac7WUxpSeUqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU5pTjIzcnRjdDZqXzQxcHp0WlRHbEo1U3FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9mZTQ1ZGUtYjQ2My00NDNkLWI3ZGUt MzdhMjRlMDgxZjY4LzEvUU5pTjIzcnRjdDZqXzQxcHp0WlRHbEo1U3FjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9mZTQ1ZGUtYjQ2My00NDNkLWI3ZGUtMzdhMjRlMDgxZjY4 LzEvUU5pTjIzcnRjdDZqXzQxcHp0WlRHbEo1U3FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMVNku5gl 4s3lPB94mujcDyuPtKVFpE1az7QqvSJ2fiFcQWEbevcKQTojf2uT7URWqK5z11p5 m/UB3tbIdKT10cd7UNWcIyRSUaWmj2Jf1PA4LndydRHDQEDhmqXMumMhDJdkKGVE ogAQffYrriIi35pgc2/naGEAfRRrvED/z6GlhRkUXLmMTPKf6x9hXU69PDFJWNtp zA/uYFEZuRj4PydIdKOEWupYqML9G3AwsAyYdfMuxofe7eKWD6VBEF6pC5Ksy/+G Fq3FmFZjkfUNF4LRYjdy4JeVufOPxM3my1sA/9TQtI+5kDEVJDovaD9pjWgKeTEx oown5q07zkkcXQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:30:18 2025 by rpki-client