This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft File: QL_SbwstE2mcNW7Di5bGqCXSG2o.mft (raw, json) Hash identifier: Ht0uYQP2PChrI9G7GQGHUKydAcVVXI0OO8J/m56IqjU= Subject key identifier: 78:9E:54:17:EE:08:1C:38:E0:78:93:3B:2D:C5:EB:6B:98:AC:BC:C8 Authority key identifier: 40:BF:D2:6F:0B:2D:13:69:9C:35:6E:C3:8B:96:C6:A8:25:D2:1B:6A Certificate issuer: /CN=40bfd26f0b2d13699c356ec38b96c6a825d21b6a Certificate serial: 019AF12D451B2E148F617163920F571E139A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft Manifest number: 08C6 Signing time: Sat 06 Dec 2025 01:01:06 +0000 Manifest this update: Sat 06 Dec 2025 01:01:06 +0000 Manifest next update: Sun 07 Dec 2025 01:01:06 +0000 Files and hashes: 1: QL_SbwstE2mcNW7Di5bGqCXSG2o.crl (hash: oyiANHZSe/uvWVD9D0aeI69QrTJUvG5cIeo1vpX0KCU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft rsync://rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:45:1b:2e:14:8f:61:71:63:92:0f:57:1e:13:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40bfd26f0b2d13699c356ec38b96c6a825d21b6a Validity Not Before: Dec 6 01:01:06 2025 GMT Not After : Dec 7 01:01:06 2025 GMT Subject: CN=789e5417ee081c38e078933b2dc5eb6b98acbcc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d9:62:04:cc:5f:68:a3:1a:45:5b:f0:c0:b6: c3:cf:53:52:ee:2a:ae:2f:17:ae:c6:bd:57:29:55: df:9c:f4:79:5c:9a:33:d5:06:7d:cd:5d:e4:53:a3: d2:3c:c6:da:ab:86:68:06:86:b8:e8:5b:69:9d:03: 05:ea:ec:96:86:7f:39:a2:0e:1e:1d:3e:59:78:bf: 92:2a:b1:95:0b:3d:04:08:04:bb:11:7b:bd:62:fc: 59:c4:54:de:ca:7f:81:5b:db:b9:cf:45:96:4b:ea: 57:cc:40:91:20:41:b7:21:27:1a:5e:1a:f0:cd:1d: a8:e8:9a:22:b2:f2:e5:58:78:74:d7:87:3d:e2:9b: a3:d2:c6:74:00:89:d5:c3:e2:80:20:0b:51:13:a1: 99:10:1c:e7:05:3b:55:2d:03:7a:22:6e:e8:4a:db: d6:05:f5:1f:04:52:ba:10:f2:56:bd:fc:ad:b5:25: 92:b8:ee:71:30:84:29:24:b2:78:a6:2a:da:fb:80: 2e:0b:cc:d4:33:b4:60:18:80:11:be:48:35:6d:b9: fc:08:e3:68:c1:76:86:ba:ad:86:74:57:3b:45:37: 53:ab:30:da:61:74:ee:57:17:19:82:f9:5f:2d:e4: 44:4b:84:c3:8b:06:c2:86:39:22:0b:a8:ba:39:97: 09:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:9E:54:17:EE:08:1C:38:E0:78:93:3B:2D:C5:EB:6B:98:AC:BC:C8 X509v3 Authority Key Identifier: keyid:40:BF:D2:6F:0B:2D:13:69:9C:35:6E:C3:8B:96:C6:A8:25:D2:1B:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:cd:67:a8:53:bd:2e:94:f8:49:c9:2b:ca:79:a2:b0:c1:46: 26:70:5b:c5:21:d2:90:1e:9f:8e:98:fe:40:3b:87:6a:1b:fe: cf:d4:91:d2:36:b4:aa:bb:39:70:b5:97:23:7e:19:6d:5f:b5: 97:a7:46:7c:c1:cb:42:c5:68:26:7f:65:df:9a:9c:14:c2:6c: cd:00:99:3e:52:c8:6d:22:9d:3c:92:c8:1f:da:cc:56:8e:b7: 2e:c1:b2:18:77:87:8d:17:ed:e6:f8:7c:79:99:66:e8:a8:51: ca:13:fa:71:57:8d:3e:b1:d5:5b:9f:98:54:a5:e2:00:ee:a8: 4f:72:46:c3:89:57:44:e2:fb:0a:23:af:5b:3e:75:46:5c:27: b5:ed:b9:38:fa:42:7d:af:a7:31:f5:3e:40:42:7f:24:54:ce: 9b:d1:9a:e9:88:57:d2:80:cb:39:6e:71:3b:d7:c1:f3:3f:8d: 91:ff:d6:45:e6:e5:34:de:73:a8:91:8a:c3:df:00:6c:6e:50: 32:cd:9c:34:12:55:31:9e:07:57:1d:ef:e4:a0:87:96:80:58: 2c:a0:9a:e1:80:36:6c:a6:41:26:5e:13:fb:d1:d5:fe:6e:14: 2b:16:b8:f8:e2:bf:3b:b7:62:ea:00:41:65:6f:9e:45:7e:de: 60:97:52:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLUUbLhSPYXFjkg9XHhOaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwYmZkMjZmMGIyZDEzNjk5YzM1NmVjMzhiOTZjNmE4MjVk MjFiNmEwHhcNMjUxMjA2MDEwMTA2WhcNMjUxMjA3MDEwMTA2WjAzMTEwLwYDVQQD Eyg3ODllNTQxN2VlMDgxYzM4ZTA3ODkzM2IyZGM1ZWI2Yjk4YWNiY2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNliBMxfaKMaRVvwwLbDz1NS7iqu Lxeuxr1XKVXfnPR5XJoz1QZ9zV3kU6PSPMbaq4ZoBoa46FtpnQMF6uyWhn85og4e HT5ZeL+SKrGVCz0ECAS7EXu9YvxZxFTeyn+BW9u5z0WWS+pXzECRIEG3IScaXhrw zR2o6JoisvLlWHh014c94puj0sZ0AInVw+KAIAtRE6GZEBznBTtVLQN6Im7oStvW BfUfBFK6EPJWvfyttSWSuO5xMIQpJLJ4pira+4AuC8zUM7RgGIARvkg1bbn8CONo wXaGuq2GdFc7RTdTqzDaYXTuVxcZgvlfLeRES4TDiwbChjkiC6i6OZcJ7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHieVBfuCBw44HiTOy3F62uYrLzIMB8GA1UdIwQY MBaAFEC/0m8LLRNpnDVuw4uWxqgl0htqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUxfU2J3c3RFMm1jTlc3RGk1YkdxQ1hTRzJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zMTViNGQtNmNlYi00MDk4LWJmZDIt NTA5M2M1MmUwMmNlLzEvUUxfU2J3c3RFMm1jTlc3RGk1YkdxQ1hTRzJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8zMTViNGQtNmNlYi00MDk4LWJmZDItNTA5M2M1MmUwMmNl LzEvUUxfU2J3c3RFMm1jTlc3RGk1YkdxQ1hTRzJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhM1nqFO9 LpT4SckrynmisMFGJnBbxSHSkB6fjpj+QDuHahv+z9SR0ja0qrs5cLWXI34ZbV+1 l6dGfMHLQsVoJn9l35qcFMJszQCZPlLIbSKdPJLIH9rMVo63LsGyGHeHjRft5vh8 eZlm6KhRyhP6cVeNPrHVW5+YVKXiAO6oT3JGw4lXROL7CiOvWz51Rlwnte25OPpC fa+nMfU+QEJ/JFTOm9Ga6YhX0oDLOW5xO9fB8z+Nkf/WReblNN5zqJGKw98AbG5Q Ms2cNBJVMZ4HVx3v5KCHloBYLKCa4YA2bKZBJl4T+9HV/m4UKxa4+OK/O7di6gBB ZW+eRX7eYJdS2g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:44:42 2025 by rpki-client