This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft File: QO5hC9zSO60rEZK9RcqKl204Vdo.mft (raw, json) Hash identifier: gHaGGxVY8gAD4FXKx4GZG6vAwrUROyj3bGBxohbN2dQ= Subject key identifier: AB:63:1D:EB:0E:38:5A:90:75:37:22:21:06:DF:EE:E9:2B:A4:4D:7C Authority key identifier: 40:EE:61:0B:DC:D2:3B:AD:2B:11:92:BD:45:CA:8A:97:6D:38:55:DA Certificate issuer: /CN=40ee610bdcd23bad2b1192bd45ca8a976d3855da Certificate serial: 019B2D0B76C7F53CFB98B263F355C1C6A318 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO5hC9zSO60rEZK9RcqKl204Vdo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft Manifest number: 161A Signing time: Wed 17 Dec 2025 16:01:24 +0000 Manifest this update: Wed 17 Dec 2025 16:01:24 +0000 Manifest next update: Thu 18 Dec 2025 16:01:24 +0000 Files and hashes: 1: QO5hC9zSO60rEZK9RcqKl204Vdo.crl (hash: 8vKQYJBmHrR8WPpTykK5Eat3qVq/BqEpQtGPOI+GhqM=) 2: WXzwl6dDgLLRTGjEWsJa-Mt4DFY.roa (hash: AsvwbpP9IRPmxXb+scTtlP8HJBrFwXPs3woICGrCIxY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft rsync://rpki.ripe.net/repository/DEFAULT/QO5hC9zSO60rEZK9RcqKl204Vdo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 16:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:76:c7:f5:3c:fb:98:b2:63:f3:55:c1:c6:a3:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40ee610bdcd23bad2b1192bd45ca8a976d3855da Validity Not Before: Dec 17 16:01:24 2025 GMT Not After : Dec 18 16:01:24 2025 GMT Subject: CN=ab631deb0e385a907537222106dfeee92ba44d7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5d:1b:e3:69:b1:77:6a:63:b1:7f:fd:ea:be: ba:61:46:42:9a:84:42:a0:08:ff:fb:c2:6c:7c:29: 36:02:70:26:7c:f0:c7:2e:ee:cc:a7:58:8c:a9:cb: 40:91:6e:96:a8:a0:28:6e:8c:ba:03:d5:38:94:a9: bd:d0:cc:9f:e5:b5:4c:e2:00:2f:d1:81:c2:7a:2a: 9f:72:60:57:4d:75:6b:4f:6e:1c:67:cd:a8:0a:1e: 58:f2:04:53:0b:1f:99:70:20:c5:3d:3d:95:c0:ab: 1b:30:8e:7f:71:59:49:40:5c:bd:5f:69:68:b7:bb: d5:12:3f:4a:71:a1:56:d0:c9:64:ac:6b:17:47:e9: fd:df:2c:b5:4d:44:e4:53:b8:64:a9:31:60:90:09: ae:5c:1b:5f:9b:c7:f8:e5:44:94:1c:6e:0c:43:b2: 3f:b5:84:af:85:8d:65:c6:24:1c:1c:0a:70:9c:97: ce:fa:9c:ad:7c:15:9b:e6:99:d7:34:be:a4:88:f7: c3:a3:85:12:6c:fe:5c:2e:c7:c9:b2:c3:f3:13:f4: 82:43:35:dd:34:bd:29:e2:26:f7:8b:3e:ff:b6:91: 2f:30:88:28:0f:29:a7:89:df:9c:6d:6d:e8:a5:86: ae:2a:1c:f9:dc:40:df:21:4f:69:95:65:c6:8d:f6: e8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:63:1D:EB:0E:38:5A:90:75:37:22:21:06:DF:EE:E9:2B:A4:4D:7C X509v3 Authority Key Identifier: keyid:40:EE:61:0B:DC:D2:3B:AD:2B:11:92:BD:45:CA:8A:97:6D:38:55:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO5hC9zSO60rEZK9RcqKl204Vdo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:b4:13:01:5f:f2:92:8c:46:24:f0:e1:fe:7c:f0:db:ac:35: d3:47:72:79:e4:cf:2b:97:8a:ab:7f:1b:c5:56:0c:7e:24:b4: 9b:fd:e9:c0:36:68:22:e3:7a:e6:00:36:1d:24:8f:09:63:79: 3c:e2:34:06:5b:61:bb:ed:f7:41:f1:d4:90:51:eb:9b:be:36: df:eb:1b:7a:d5:31:38:10:9d:e6:e5:e0:21:e5:83:e3:95:04: fb:8b:d3:50:35:89:23:6a:32:f8:26:84:9e:76:a4:b5:fd:c4: e9:ae:e3:64:9a:ac:7a:2b:c2:3a:80:05:8c:d7:13:e7:8c:90: 20:7f:61:92:45:be:81:2d:d7:3c:52:98:0e:06:09:87:31:8d: 42:00:5e:99:a1:92:e4:05:e0:cd:18:c2:f0:6e:c5:bd:1c:bc: da:03:9c:34:26:6c:cb:3e:c6:ac:dd:8a:ae:6f:b0:65:ff:a6: 8c:66:3c:37:2d:40:41:a8:b5:03:2e:ad:8d:5c:e3:e7:b1:ea: a1:14:a7:e6:f3:50:17:72:35:b2:31:22:2b:b6:7b:ad:55:ae: b4:8d:88:43:9e:49:10:c0:20:2e:d6:58:dc:22:e9:59:00:58: 5c:bb:58:27:82:a7:eb:6b:9e:0b:50:13:93:1b:be:2e:a0:b4: f0:47:72:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstC3bH9Tz7mLJj81XBxqMYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZWU2MTBiZGNkMjNiYWQyYjExOTJiZDQ1Y2E4YTk3NmQz ODU1ZGEwHhcNMjUxMjE3MTYwMTI0WhcNMjUxMjE4MTYwMTI0WjAzMTEwLwYDVQQD EyhhYjYzMWRlYjBlMzg1YTkwNzUzNzIyMjEwNmRmZWVlOTJiYTQ0ZDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtF0b42mxd2pjsX/96r66YUZCmoRC oAj/+8JsfCk2AnAmfPDHLu7Mp1iMqctAkW6WqKAoboy6A9U4lKm90Myf5bVM4gAv 0YHCeiqfcmBXTXVrT24cZ82oCh5Y8gRTCx+ZcCDFPT2VwKsbMI5/cVlJQFy9X2lo t7vVEj9KcaFW0MlkrGsXR+n93yy1TUTkU7hkqTFgkAmuXBtfm8f45USUHG4MQ7I/ tYSvhY1lxiQcHApwnJfO+pytfBWb5pnXNL6kiPfDo4USbP5cLsfJssPzE/SCQzXd NL0p4ib3iz7/tpEvMIgoDymnid+cbW3opYauKhz53EDfIU9plWXGjfboswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKtjHesOOFqQdTciIQbf7ukrpE18MB8GA1UdIwQY MBaAFEDuYQvc0jutKxGSvUXKipdtOFXaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU81aEM5elNPNjByRVpLOVJjcUtsMjA0VmRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81ZWZhZTUtMmM5Mi00MGQwLWEzYjYt YTZjMTdjZTgyZDc3LzEvUU81aEM5elNPNjByRVpLOVJjcUtsMjA0VmRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi81ZWZhZTUtMmM5Mi00MGQwLWEzYjYtYTZjMTdjZTgyZDc3 LzEvUU81aEM5elNPNjByRVpLOVJjcUtsMjA0VmRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa7QTAV/y koxGJPDh/nzw26w100dyeeTPK5eKq38bxVYMfiS0m/3pwDZoIuN65gA2HSSPCWN5 POI0Blthu+33QfHUkFHrm7423+sbetUxOBCd5uXgIeWD45UE+4vTUDWJI2oy+CaE nnaktf3E6a7jZJqseivCOoAFjNcT54yQIH9hkkW+gS3XPFKYDgYJhzGNQgBemaGS 5AXgzRjC8G7FvRy82gOcNCZsyz7GrN2Krm+wZf+mjGY8Ny1AQai1Ay6tjVzj57Hq oRSn5vNQF3I1sjEiK7Z7rVWutI2IQ55JEMAgLtZY3CLpWQBYXLtYJ4Kn62ueC1AT kxu+LqC08Edy2g== -----END CERTIFICATE-----Generated at Wed Dec 17 21:23:44 2025 by rpki-client