This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/5c9b74-753b-42e2-b41a-2b649d5ebaf3/1/QBMclDl36gqT787s000dXRyxgq8.mft File: QBMclDl36gqT787s000dXRyxgq8.mft (raw, json) Hash identifier: C+PinkhUUeEycYL93rnK5d1tole7RHIlAgl+2KY+wng= Subject key identifier: B4:62:96:A2:13:54:52:1F:9E:9C:B7:31:0F:7E:4F:01:79:0C:29:7A Authority key identifier: 40:13:1C:94:39:77:EA:0A:93:EF:CE:EC:D3:4D:1D:5D:1C:B1:82:AF Certificate issuer: /CN=40131c943977ea0a93efceecd34d1d5d1cb182af Certificate serial: 019AF3F7FEC7DF33BB317DC372CB4337F24F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QBMclDl36gqT787s000dXRyxgq8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/5c9b74-753b-42e2-b41a-2b649d5ebaf3/1/QBMclDl36gqT787s000dXRyxgq8.mft Manifest number: 1011 Signing time: Sat 06 Dec 2025 14:01:47 +0000 Manifest this update: Sat 06 Dec 2025 14:01:47 +0000 Manifest next update: Sun 07 Dec 2025 14:01:47 +0000 Files and hashes: 1: QBMclDl36gqT787s000dXRyxgq8.crl (hash: 4y15RU2zEpvZuYBMFhox1BIpbv/pWlcs9PvfMYJEHAI=) 2: ULUALQSKNZEpPcNq68X1y69o-9w.roa (hash: u+zVU0SkY5ZMKNVKnpjmcvlKMcttm6HzHNnhk032Vso=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/5c9b74-753b-42e2-b41a-2b649d5ebaf3/1/QBMclDl36gqT787s000dXRyxgq8.crl rsync://rpki.ripe.net/repository/DEFAULT/38/5c9b74-753b-42e2-b41a-2b649d5ebaf3/1/QBMclDl36gqT787s000dXRyxgq8.mft rsync://rpki.ripe.net/repository/DEFAULT/QBMclDl36gqT787s000dXRyxgq8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:fe:c7:df:33:bb:31:7d:c3:72:cb:43:37:f2:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40131c943977ea0a93efceecd34d1d5d1cb182af Validity Not Before: Dec 6 14:01:47 2025 GMT Not After : Dec 7 14:01:47 2025 GMT Subject: CN=b46296a21354521f9e9cb7310f7e4f01790c297a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0d:1a:0b:d7:92:01:47:24:e1:70:41:46:e7: bc:23:20:e0:7d:ad:38:b3:9b:1e:80:da:bb:b9:27: 15:5c:a1:2c:ae:79:e5:4f:ea:af:af:f5:03:a7:35: 84:13:71:83:f5:5a:ba:09:69:25:30:cd:97:77:47: 56:15:73:50:b8:02:6b:55:13:8a:11:76:d9:6e:c8: 06:b4:72:91:17:18:31:4e:8c:1c:6d:07:ad:81:f2: 56:b1:a9:5c:fb:87:57:67:92:9a:d1:45:44:b8:63: 1e:01:bd:b6:83:cd:fd:b4:6d:29:b0:52:a7:53:ff: 93:72:83:7c:20:1c:09:b7:1e:35:bf:e4:32:fb:e7: 6a:79:5f:54:85:f1:35:01:a6:32:de:87:69:8b:6d: 9e:08:69:b0:65:1b:41:fa:2c:92:ab:3e:3d:3a:1c: 68:be:54:3c:f4:70:74:f3:30:2f:f1:65:48:76:66: fc:bb:22:6c:35:fd:c6:38:6a:06:bf:2c:ef:96:f8: 93:75:88:2d:12:1b:c3:d9:a4:50:e8:4a:12:04:e3: 6a:49:8f:ea:c7:e1:d5:91:38:77:6c:c3:a9:78:22: 3a:ef:33:ae:2a:84:d0:40:51:c2:58:4b:85:6c:17: 47:5e:b4:88:8e:5c:18:28:b3:17:db:5e:18:37:7d: a5:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:62:96:A2:13:54:52:1F:9E:9C:B7:31:0F:7E:4F:01:79:0C:29:7A X509v3 Authority Key Identifier: keyid:40:13:1C:94:39:77:EA:0A:93:EF:CE:EC:D3:4D:1D:5D:1C:B1:82:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QBMclDl36gqT787s000dXRyxgq8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5c9b74-753b-42e2-b41a-2b649d5ebaf3/1/QBMclDl36gqT787s000dXRyxgq8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5c9b74-753b-42e2-b41a-2b649d5ebaf3/1/QBMclDl36gqT787s000dXRyxgq8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:d4:35:e0:55:61:b9:d9:a1:37:b8:68:92:9d:ed:ac:32:77: 2a:92:6b:47:c9:11:98:72:00:74:c8:bb:4e:96:20:56:a5:54: 9a:08:64:fd:06:bc:46:80:61:d9:f3:14:a5:13:82:13:75:d4: 12:35:7f:b8:34:bb:64:b9:65:91:fa:85:c1:3b:b3:1d:dd:bf: 04:0e:e0:60:be:af:99:d0:46:22:98:4d:f3:8e:42:1c:41:7e: 93:8f:f8:83:a2:07:41:e1:02:bd:d2:37:82:ca:c7:43:8f:a1: d8:11:cf:78:0e:35:3f:28:4c:af:ff:6b:43:ac:81:26:d7:f6: f4:a3:c0:37:c4:cd:51:3e:f5:ce:dd:48:35:fe:07:b2:f9:e4: a8:49:d2:62:ef:1a:25:c1:d9:10:ff:aa:66:45:86:5f:6e:cc: 82:25:0f:01:cd:a2:0f:57:92:a3:05:d4:60:3b:2d:3f:be:a4: dd:1b:bf:8c:27:cc:42:a8:17:6f:af:8d:8d:cb:5e:eb:f0:9d: 65:dd:b5:70:21:25:f7:fd:e7:d8:9d:6d:11:75:f6:de:3a:f6: a0:66:1a:08:67:15:99:d3:aa:71:d8:af:ff:1e:0a:db:bf:22: e9:82:ef:e1:5c:e2:c0:ca:c3:be:92:d6:ab:00:04:56:79:a7: a1:63:0b:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9/7H3zO7MX3DcstDN/JPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMTMxYzk0Mzk3N2VhMGE5M2VmY2VlY2QzNGQxZDVkMWNi MTgyYWYwHhcNMjUxMjA2MTQwMTQ3WhcNMjUxMjA3MTQwMTQ3WjAzMTEwLwYDVQQD EyhiNDYyOTZhMjEzNTQ1MjFmOWU5Y2I3MzEwZjdlNGYwMTc5MGMyOTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQ0aC9eSAUck4XBBRue8IyDgfa04 s5segNq7uScVXKEsrnnlT+qvr/UDpzWEE3GD9Vq6CWklMM2Xd0dWFXNQuAJrVROK EXbZbsgGtHKRFxgxTowcbQetgfJWsalc+4dXZ5Ka0UVEuGMeAb22g839tG0psFKn U/+TcoN8IBwJtx41v+Qy++dqeV9UhfE1AaYy3odpi22eCGmwZRtB+iySqz49Ohxo vlQ89HB08zAv8WVIdmb8uyJsNf3GOGoGvyzvlviTdYgtEhvD2aRQ6EoSBONqSY/q x+HVkTh3bMOpeCI67zOuKoTQQFHCWEuFbBdHXrSIjlwYKLMX214YN32lMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLRilqITVFIfnpy3MQ9+TwF5DCl6MB8GA1UdIwQY MBaAFEATHJQ5d+oKk+/O7NNNHV0csYKvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUJNY2xEbDM2Z3FUNzg3czAwMGRYUnl4Z3E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC81YzliNzQtNzUzYi00MmUyLWI0MWEt MmI2NDlkNWViYWYzLzEvUUJNY2xEbDM2Z3FUNzg3czAwMGRYUnl4Z3E4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC81YzliNzQtNzUzYi00MmUyLWI0MWEtMmI2NDlkNWViYWYz LzEvUUJNY2xEbDM2Z3FUNzg3czAwMGRYUnl4Z3E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACNQ14FVh udmhN7hokp3trDJ3KpJrR8kRmHIAdMi7TpYgVqVUmghk/Qa8RoBh2fMUpROCE3XU EjV/uDS7ZLllkfqFwTuzHd2/BA7gYL6vmdBGIphN845CHEF+k4/4g6IHQeECvdI3 gsrHQ4+h2BHPeA41PyhMr/9rQ6yBJtf29KPAN8TNUT71zt1INf4HsvnkqEnSYu8a JcHZEP+qZkWGX27MgiUPAc2iD1eSowXUYDstP76k3Ru/jCfMQqgXb6+Njcte6/Cd Zd21cCEl9/3n2J1tEXX23jr2oGYaCGcVmdOqcdiv/x4K278i6YLv4VziwMrDvpLW qwAEVnmnoWMLQQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:17:21 2025 by rpki-client