This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft File: QNTjO-cdM587wMxtrmXoeS_01dw.mft (raw, json) Hash identifier: H4HfokUJR6KtIY4g1G1dNyrIiSrZVP7+2DYSqaHgueo= Subject key identifier: 2D:36:BD:C2:FF:85:54:FE:7C:5E:FB:94:2B:09:92:74:82:C5:85:AC Authority key identifier: 40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC Certificate issuer: /CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc Certificate serial: 019AF19AAEAD489BC3D3787731AD33752678 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 03:00:37 +0000 Manifest this update: Sat 06 Dec 2025 03:00:37 +0000 Manifest next update: Sun 07 Dec 2025 03:00:37 +0000 Files and hashes: 1: QNTjO-cdM587wMxtrmXoeS_01dw.crl (hash: bIekE8qEYRr8JGdYnR8hmZNZuNuvbXuiwYjn5B1bt7s=) 2: a3rqfPfqZxHF_NahNNUvEq5fk5g.roa (hash: I+M1Q116pruNGKV2ARftKr/KQ/3izABmgVobB9drMwo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.crl rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:ae:ad:48:9b:c3:d3:78:77:31:ad:33:75:26:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc Validity Not Before: Dec 6 03:00:37 2025 GMT Not After : Dec 7 03:00:37 2025 GMT Subject: CN=2d36bdc2ff8554fe7c5efb942b09927482c585ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5b:aa:6b:84:54:0a:06:ee:23:f6:8f:d9:c4: f3:76:31:6f:d4:30:85:da:d0:35:9b:46:c3:ea:40: 4a:78:24:72:c6:b3:e0:4e:71:36:d0:32:24:22:cc: 7f:ba:79:24:fb:76:0c:48:04:73:1c:8c:29:a9:b5: 9d:7e:b7:7b:f3:06:f8:ac:d4:0d:13:ae:9c:9f:17: cc:fa:dd:12:9f:99:43:22:7b:22:f9:7e:c1:a1:ad: 67:d8:d7:68:24:36:b9:36:ad:37:a2:66:c8:1b:48: 25:c2:26:7c:56:f6:29:2b:46:3d:92:68:41:9b:e3: f9:75:c7:7a:ae:c1:c8:98:93:9b:60:bf:f7:22:44: 87:cd:16:eb:59:e8:1d:88:97:f0:02:f8:50:d6:0e: 14:74:7b:1e:fa:e6:7d:8a:df:2c:7e:69:ac:0d:95: 08:fc:a6:0d:ca:46:7f:38:92:41:8e:a0:31:47:f9: b3:fb:0c:8f:4c:b8:9f:32:ef:6f:ae:e7:e5:28:ba: f5:0d:44:45:bf:0b:ef:62:b3:db:2a:51:2e:5f:4d: 31:ba:e7:95:d0:4f:37:ef:fd:25:7d:05:82:74:7a: 88:1e:8f:9e:d6:0b:74:f7:1d:8a:00:8f:37:94:70: 5f:c3:b9:e0:3e:be:d3:7a:ed:dd:51:b2:75:c7:4f: 2c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:36:BD:C2:FF:85:54:FE:7C:5E:FB:94:2B:09:92:74:82:C5:85:AC X509v3 Authority Key Identifier: keyid:40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:41:51:10:d4:46:6a:94:00:89:3d:d3:7d:5b:dd:b9:37:4e: 16:21:2c:b2:99:fb:f8:fb:60:20:28:39:99:44:2b:df:12:78: a4:76:1b:e4:95:9d:f4:24:ac:06:f2:08:8e:8c:b5:15:15:b3: 29:da:11:56:81:89:49:c6:85:16:71:76:82:66:b4:ac:d7:39: d2:e9:5c:86:c2:2f:82:58:e0:9b:10:06:e1:30:f4:2a:67:2d: a9:40:6f:51:84:bd:bb:fe:c4:63:02:af:37:ce:77:f4:c4:40: ec:f2:a9:10:73:52:01:27:32:11:cc:58:ff:11:0a:b4:21:3a: 21:84:5f:d5:5f:eb:1b:25:07:07:95:16:65:ee:7a:79:57:b8: 1d:28:06:59:ff:13:d5:b2:8f:37:ca:3f:48:9a:c2:14:a3:d9: 02:e4:b2:a2:40:44:31:d9:1b:2d:af:90:ee:49:55:d6:00:6f: 20:f3:ca:27:71:23:7a:7d:f4:59:0f:b0:d6:d7:50:e9:a2:51: 1c:4d:de:4a:1e:80:52:5f:a4:31:90:0f:8f:11:d5:6b:77:c9: c6:87:87:ec:0e:21:a5:3c:57:6d:0b:2d:4f:72:08:99:d0:f0: 4f:59:c1:76:d8:44:99:9d:1b:f5:17:3c:b9:ff:a4:3a:12:25: 85:25:d5:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmq6tSJvD03h3Ma0zdSZ4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZDRlMzNiZTcxZDMzOWYzYmMwY2M2ZGFlNjVlODc5MmZm NGQ1ZGMwHhcNMjUxMjA2MDMwMDM3WhcNMjUxMjA3MDMwMDM3WjAzMTEwLwYDVQQD EygyZDM2YmRjMmZmODU1NGZlN2M1ZWZiOTQyYjA5OTI3NDgyYzU4NWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Fuqa4RUCgbuI/aP2cTzdjFv1DCF 2tA1m0bD6kBKeCRyxrPgTnE20DIkIsx/unkk+3YMSARzHIwpqbWdfrd78wb4rNQN E66cnxfM+t0Sn5lDInsi+X7Boa1n2NdoJDa5Nq03ombIG0glwiZ8VvYpK0Y9kmhB m+P5dcd6rsHImJObYL/3IkSHzRbrWegdiJfwAvhQ1g4UdHse+uZ9it8sfmmsDZUI /KYNykZ/OJJBjqAxR/mz+wyPTLifMu9vruflKLr1DURFvwvvYrPbKlEuX00xuueV 0E837/0lfQWCdHqIHo+e1gt09x2KAI83lHBfw7ngPr7Teu3dUbJ1x08sBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC02vcL/hVT+fF77lCsJknSCxYWsMB8GA1UdIwQY MBaAFEDU4zvnHTOfO8DMba5l6Hkv9NXcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU5Uak8tY2RNNTg3d014dHJtWG9lU18wMWR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hYzY5ZDItOTI5OS00OWIwLTkxYzgt MDIzM2I3YjI2ZDVkLzEvUU5Uak8tY2RNNTg3d014dHJtWG9lU18wMWR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9hYzY5ZDItOTI5OS00OWIwLTkxYzgtMDIzM2I3YjI2ZDVk LzEvUU5Uak8tY2RNNTg3d014dHJtWG9lU18wMWR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAekFRENRG apQAiT3TfVvduTdOFiEsspn7+PtgICg5mUQr3xJ4pHYb5JWd9CSsBvIIjoy1FRWz KdoRVoGJScaFFnF2gma0rNc50ulchsIvgljgmxAG4TD0KmctqUBvUYS9u/7EYwKv N8539MRA7PKpEHNSAScyEcxY/xEKtCE6IYRf1V/rGyUHB5UWZe56eVe4HSgGWf8T 1bKPN8o/SJrCFKPZAuSyokBEMdkbLa+Q7klV1gBvIPPKJ3Ejen30WQ+w1tdQ6aJR HE3eSh6AUl+kMZAPjxHVa3fJxoeH7A4hpTxXbQstT3IImdDwT1nBdthEmZ0b9Rc8 uf+kOhIlhSXVrg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:00 2025 by rpki-client