This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.mft File: QMV_fAvv5jtgBOlE32hMnVHkaPM.mft (raw, json) Hash identifier: rdlTXTkKcYnvvxevlIIccBqgSOteHQcz3dsl7Xhbtj4= Subject key identifier: 04:1D:72:71:CA:EE:25:67:17:42:31:2D:80:72:DA:00:EF:4F:3B:EA Authority key identifier: 40:C5:7F:7C:0B:EF:E6:3B:60:04:E9:44:DF:68:4C:9D:51:E4:68:F3 Certificate issuer: /CN=40c57f7c0befe63b6004e944df684c9d51e468f3 Certificate serial: 019AF2091D0A84AEBFB680D480BCFD316B66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QMV_fAvv5jtgBOlE32hMnVHkaPM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.mft Manifest number: 0B05 Signing time: Sat 06 Dec 2025 05:01:14 +0000 Manifest this update: Sat 06 Dec 2025 05:01:14 +0000 Manifest next update: Sun 07 Dec 2025 05:01:14 +0000 Files and hashes: 1: AfrLz1T-1kNW_DSUEVwyvRKA2S8.roa (hash: SjlLDWt9y+9Lt8K1w4tXzYUlW8JgzTec4XWnQFLGvBU=) 2: QMV_fAvv5jtgBOlE32hMnVHkaPM.crl (hash: 0MJXxNjiKfc9HjRFTeGifMN4GLtNR8vXqpimedTShcU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.crl rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.mft rsync://rpki.ripe.net/repository/DEFAULT/QMV_fAvv5jtgBOlE32hMnVHkaPM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:1d:0a:84:ae:bf:b6:80:d4:80:bc:fd:31:6b:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40c57f7c0befe63b6004e944df684c9d51e468f3 Validity Not Before: Dec 6 05:01:14 2025 GMT Not After : Dec 7 05:01:14 2025 GMT Subject: CN=041d7271caee25671742312d8072da00ef4f3bea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ca:3a:e9:f0:31:3d:c8:4c:af:94:60:29:bd: ac:bb:22:78:e7:5e:eb:42:d2:c5:33:28:eb:e1:22: 8f:ad:35:dd:ae:b9:5d:3b:fd:ab:eb:af:a5:23:fc: 76:45:fe:29:58:3f:39:f2:fc:b2:b6:e2:e1:be:e8: 11:96:00:a0:7b:8b:0e:4b:a1:aa:9e:64:76:d6:ac: 1a:24:53:ef:e0:70:12:d7:6f:0a:f2:b2:38:94:7d: 0f:ac:14:f6:d2:45:b6:a8:aa:8b:02:87:ab:1a:e2: 3a:c4:ee:be:de:56:a8:98:2d:6e:f3:de:58:43:fb: 92:0d:e7:11:99:31:7b:ed:f6:20:79:8d:18:f9:a5: ab:e3:1f:91:ad:b1:42:40:c9:8a:18:2f:67:79:7a: 1a:66:54:58:ca:41:4d:3b:e9:5c:c5:c8:a3:41:d4: b8:fd:4c:a3:5d:87:4c:10:2c:8f:bf:0c:51:6f:7e: c0:db:0e:e5:ec:d4:77:15:b5:e0:a6:92:5d:63:ef: 42:6a:15:97:dd:30:1c:8d:16:44:04:ee:af:3d:8c: f2:0c:74:2a:fa:9f:66:aa:14:ae:76:21:78:dc:31: 9b:5d:3d:8d:c1:fe:ff:a3:71:f3:97:23:3d:67:42: a3:9f:65:11:05:1b:35:30:fc:cb:5e:a7:0f:46:6d: 51:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:1D:72:71:CA:EE:25:67:17:42:31:2D:80:72:DA:00:EF:4F:3B:EA X509v3 Authority Key Identifier: keyid:40:C5:7F:7C:0B:EF:E6:3B:60:04:E9:44:DF:68:4C:9D:51:E4:68:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMV_fAvv5jtgBOlE32hMnVHkaPM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:c3:9d:0a:fe:9c:c2:b2:1c:ea:66:a9:67:da:a1:c6:44:40: 24:c9:d4:12:35:8c:3a:94:3c:ca:b7:17:3e:73:dd:a4:40:34: b3:26:7b:e9:61:c1:11:e8:26:d6:2e:c5:ec:52:9a:62:d4:52: 85:5e:02:df:98:8c:df:a3:67:38:65:ea:f5:b2:8e:bb:f9:c4: 4b:6e:be:cd:11:0d:dd:06:20:75:82:35:6a:38:b5:8a:cd:e5: b3:cc:68:e9:75:5c:90:4f:48:ae:02:d2:b3:ba:d7:83:db:65: 07:ab:71:d4:f9:1e:48:01:75:29:e2:db:f9:21:3c:d4:44:13: 7a:2f:10:55:64:c8:eb:11:37:41:33:88:02:49:ad:d6:29:17: c7:6e:0d:64:9d:26:d8:09:05:0c:99:f9:00:e8:c6:b8:66:36: 90:6d:02:5f:d2:46:62:38:25:b9:60:34:5c:61:c8:25:ec:94: ea:7d:c9:45:b7:9b:5b:b4:fa:98:8d:ef:15:42:15:54:b1:37: a1:a4:1b:0f:d4:f6:59:8f:a9:19:94:49:d5:7d:18:41:0f:6d: cb:82:cb:02:17:48:f0:12:89:00:06:0b:5e:c2:81:0e:42:02: 5e:68:d7:e4:c2:3f:f3:02:d5:32:69:ae:35:a8:8b:d7:95:f7: 75:fb:14:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCR0KhK6/toDUgLz9MWtmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwYzU3ZjdjMGJlZmU2M2I2MDA0ZTk0NGRmNjg0YzlkNTFl NDY4ZjMwHhcNMjUxMjA2MDUwMTE0WhcNMjUxMjA3MDUwMTE0WjAzMTEwLwYDVQQD EygwNDFkNzI3MWNhZWUyNTY3MTc0MjMxMmQ4MDcyZGEwMGVmNGYzYmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8o66fAxPchMr5RgKb2suyJ4517r QtLFMyjr4SKPrTXdrrldO/2r66+lI/x2Rf4pWD858vyytuLhvugRlgCge4sOS6Gq nmR21qwaJFPv4HAS128K8rI4lH0PrBT20kW2qKqLAoerGuI6xO6+3laomC1u895Y Q/uSDecRmTF77fYgeY0Y+aWr4x+RrbFCQMmKGC9neXoaZlRYykFNO+lcxcijQdS4 /UyjXYdMECyPvwxRb37A2w7l7NR3FbXgppJdY+9CahWX3TAcjRZEBO6vPYzyDHQq +p9mqhSudiF43DGbXT2Nwf7/o3HzlyM9Z0Kjn2URBRs1MPzLXqcPRm1RpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQdcnHK7iVnF0IxLYBy2gDvTzvqMB8GA1UdIwQY MBaAFEDFf3wL7+Y7YATpRN9oTJ1R5GjzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU1WX2ZBdnY1anRnQk9sRTMyaE1uVkhrYVBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9mZTJlMDEtZDg1NC00ZmJjLWJhMTkt MmIwMTJmZThlYTUyLzEvUU1WX2ZBdnY1anRnQk9sRTMyaE1uVkhrYVBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9mZTJlMDEtZDg1NC00ZmJjLWJhMTktMmIwMTJmZThlYTUy LzEvUU1WX2ZBdnY1anRnQk9sRTMyaE1uVkhrYVBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmcOdCv6c wrIc6mapZ9qhxkRAJMnUEjWMOpQ8yrcXPnPdpEA0syZ76WHBEegm1i7F7FKaYtRS hV4C35iM36NnOGXq9bKOu/nES26+zREN3QYgdYI1aji1is3ls8xo6XVckE9IrgLS s7rXg9tlB6tx1PkeSAF1KeLb+SE81EQTei8QVWTI6xE3QTOIAkmt1ikXx24NZJ0m 2AkFDJn5AOjGuGY2kG0CX9JGYjgluWA0XGHIJeyU6n3JRbebW7T6mI3vFUIVVLE3 oaQbD9T2WY+pGZRJ1X0YQQ9ty4LLAhdI8BKJAAYLXsKBDkICXmjX5MI/8wLVMmmu NaiL15X3dfsUfQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:49:01 2025 by rpki-client