This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft File: QCD01MdSjYqCfsckkY_i31NL2QU.mft (raw, json) Hash identifier: q8x50VNgJttQChRzObDDmgHXh3UohxZxNMNMcgNpRpQ= Subject key identifier: B2:50:54:CD:A0:AC:BE:2B:A3:12:4D:FD:1F:CD:2C:23:8A:31:2D:53 Authority key identifier: 40:20:F4:D4:C7:52:8D:8A:82:7E:C7:24:91:8F:E2:DF:53:4B:D9:05 Certificate issuer: /CN=4020f4d4c7528d8a827ec724918fe2df534bd905 Certificate serial: 019AF31B46EA14899102253376B26BE81AB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft Manifest number: 0667 Signing time: Sat 06 Dec 2025 10:00:42 +0000 Manifest this update: Sat 06 Dec 2025 10:00:42 +0000 Manifest next update: Sun 07 Dec 2025 10:00:42 +0000 Files and hashes: 1: QCD01MdSjYqCfsckkY_i31NL2QU.crl (hash: 4NgLvP216DWkdl+C2nxDbqdC6XEbslWhX1Hl5v9reMk=) 2: Zx4sEHNKCl_Lh5FzOtQjZYd3ZCE.roa (hash: 2Xu5Qu43xBBRy4X2ZZ8tBlY4rjWAu0V1llrLDaiQerk=) 3: oaLZxtKD66NwRygInPYpaycKqOc.roa (hash: Ja3SjwoX4eh5IRVh7jPL7K8MqCmfJQ9Q/LWhTt+xawU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.crl rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:46:ea:14:89:91:02:25:33:76:b2:6b:e8:1a:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4020f4d4c7528d8a827ec724918fe2df534bd905 Validity Not Before: Dec 6 10:00:42 2025 GMT Not After : Dec 7 10:00:42 2025 GMT Subject: CN=b25054cda0acbe2ba3124dfd1fcd2c238a312d53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b9:8a:ba:50:89:2e:22:62:78:7e:79:5f:2c: 49:f9:6f:22:10:f6:45:79:9b:1b:79:35:79:d7:2e: cf:6b:04:41:29:f9:d2:9a:da:38:a6:e3:85:be:aa: e7:95:86:28:44:07:97:c5:ff:cb:39:d6:a8:75:3c: 11:1a:d0:9c:ad:b9:b6:18:e0:18:a0:67:55:e6:e6: d8:01:d9:4b:bd:ae:e4:5d:81:b5:a6:ba:3c:a1:bd: 9d:4e:71:46:65:ca:42:c1:ae:22:7d:50:c4:e7:9b: fe:2a:2f:a0:ab:93:70:d8:20:9b:35:46:18:57:cb: 78:f7:06:6e:21:8d:bd:ad:87:19:7c:be:65:68:25: fa:00:5e:7e:7b:d2:b1:5c:b2:22:3e:3f:67:71:16: ff:55:72:b5:22:43:67:84:3a:08:62:a3:9a:c0:a9: e7:7f:e4:4a:e2:bf:80:c6:86:10:68:65:fc:21:f6: a3:56:bc:2a:b8:93:11:48:0d:21:57:7d:3c:2e:a7: e4:d6:7d:5a:f8:8a:07:6c:91:32:bc:95:ba:4f:f3: 44:33:b2:7f:8c:29:50:25:77:15:0e:c6:b0:70:11: ac:d5:50:f9:eb:61:09:22:a4:f6:3f:9a:fa:eb:88: eb:b0:aa:00:3d:a9:55:e1:8d:80:c1:bc:85:d5:c9: 75:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:50:54:CD:A0:AC:BE:2B:A3:12:4D:FD:1F:CD:2C:23:8A:31:2D:53 X509v3 Authority Key Identifier: keyid:40:20:F4:D4:C7:52:8D:8A:82:7E:C7:24:91:8F:E2:DF:53:4B:D9:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:4b:2c:56:1e:61:df:fb:2e:1a:94:ed:c7:5a:fd:0e:d7:61: a2:26:8e:3e:29:25:e2:85:e7:b7:35:bb:89:9b:83:f5:cf:89: 93:0c:a2:8d:1c:c1:10:14:0c:3d:eb:3a:2d:8a:2c:e0:7a:cc: 42:b7:55:aa:1f:2a:3b:13:25:25:e4:ee:b4:c4:27:a4:f9:aa: 38:d9:56:21:6b:e0:6a:4b:14:27:5a:6a:23:10:e9:cc:e1:f2: b4:83:15:bf:f3:e9:83:e4:b1:2d:7c:96:cc:93:94:0a:3b:48: 4f:f6:ae:57:ef:2a:ff:8f:76:90:74:63:96:bf:34:34:73:6d: bf:61:18:ad:76:7b:b6:74:80:d9:23:71:2f:4c:0c:3d:c6:54: 89:bb:72:1c:4e:d2:3c:69:fb:17:a1:d4:ee:78:44:8a:11:5c: 2c:35:47:9d:61:25:34:ae:3c:5d:4f:c1:15:5d:ef:3e:73:5d: 65:00:f7:81:cb:72:40:e1:66:9e:7d:6b:94:60:1d:03:3f:f8: 3e:0f:89:b1:32:5c:af:37:37:20:b9:59:ed:12:cd:53:8a:fd: 95:b5:62:fd:20:40:5a:c4:bf:12:67:af:52:13:7c:cf:60:29: b5:5e:8e:8f:f2:fb:5a:8c:62:a0:11:37:02:b8:e5:e1:b9:b4: 65:8f:ab:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG0bqFImRAiUzdrJr6BqwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMjBmNGQ0Yzc1MjhkOGE4MjdlYzcyNDkxOGZlMmRmNTM0 YmQ5MDUwHhcNMjUxMjA2MTAwMDQyWhcNMjUxMjA3MTAwMDQyWjAzMTEwLwYDVQQD EyhiMjUwNTRjZGEwYWNiZTJiYTMxMjRkZmQxZmNkMmMyMzhhMzEyZDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LmKulCJLiJieH55XyxJ+W8iEPZF eZsbeTV51y7PawRBKfnSmto4puOFvqrnlYYoRAeXxf/LOdaodTwRGtCcrbm2GOAY oGdV5ubYAdlLva7kXYG1pro8ob2dTnFGZcpCwa4ifVDE55v+Ki+gq5Nw2CCbNUYY V8t49wZuIY29rYcZfL5laCX6AF5+e9KxXLIiPj9ncRb/VXK1IkNnhDoIYqOawKnn f+RK4r+AxoYQaGX8IfajVrwquJMRSA0hV308Lqfk1n1a+IoHbJEyvJW6T/NEM7J/ jClQJXcVDsawcBGs1VD562EJIqT2P5r664jrsKoAPalV4Y2AwbyF1cl1XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLJQVM2grL4roxJN/R/NLCOKMS1TMB8GA1UdIwQY MBaAFEAg9NTHUo2Kgn7HJJGP4t9TS9kFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUNEMDFNZFNqWXFDZnNja2tZX2kzMU5MMlFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8yZjdhNmUtZThjMS00ZjYyLTk1Zjkt NjRiZmI3OTkwMGQ2LzEvUUNEMDFNZFNqWXFDZnNja2tZX2kzMU5MMlFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy8yZjdhNmUtZThjMS00ZjYyLTk1ZjktNjRiZmI3OTkwMGQ2 LzEvUUNEMDFNZFNqWXFDZnNja2tZX2kzMU5MMlFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPEssVh5h 3/suGpTtx1r9DtdhoiaOPikl4oXntzW7iZuD9c+JkwyijRzBEBQMPes6LYos4HrM QrdVqh8qOxMlJeTutMQnpPmqONlWIWvgaksUJ1pqIxDpzOHytIMVv/Ppg+SxLXyW zJOUCjtIT/auV+8q/492kHRjlr80NHNtv2EYrXZ7tnSA2SNxL0wMPcZUibtyHE7S PGn7F6HU7nhEihFcLDVHnWElNK48XU/BFV3vPnNdZQD3gctyQOFmnn1rlGAdAz/4 Pg+JsTJcrzc3ILlZ7RLNU4r9lbVi/SBAWsS/EmevUhN8z2AptV6Oj/L7WoxioBE3 Arjl4bm0ZY+rLA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:53:51 2025 by rpki-client