This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft File: qd_ImBI0BQeiouHnTRGCTe-BPzk.mft (raw, json) Hash identifier: wR0xAW6gnKlIH9BW+QjSQdDvw+ED+PcuWSJYBke4ztQ= Subject key identifier: 57:CF:F3:B8:9C:84:7E:52:14:BF:8F:1E:C8:A4:A1:7C:E7:30:8C:3B Authority key identifier: A9:DF:C8:98:12:34:05:07:A2:A2:E1:E7:4D:11:82:4D:EF:81:3F:39 Certificate issuer: /CN=a9dfc89812340507a2a2e1e74d11824def813f39 Certificate serial: 019AF19BBCAA108011C2B24AFEF1A5C11920 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 03:01:46 +0000 Manifest this update: Sat 06 Dec 2025 03:01:46 +0000 Manifest next update: Sun 07 Dec 2025 03:01:46 +0000 Files and hashes: 1: qd_ImBI0BQeiouHnTRGCTe-BPzk.crl (hash: EQNBODBNw+2lZWlR6EKq+g9PeZMm8ApIeg98fxWzmmk=) 2: wn31uqf50k5LZthlgOfugKfLtQQ.roa (hash: uQ9o6KlMfbYE1Nkt8fbDl10YjNVh7yxdgG7JtO4ci4A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft rsync://rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:bc:aa:10:80:11:c2:b2:4a:fe:f1:a5:c1:19:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9dfc89812340507a2a2e1e74d11824def813f39 Validity Not Before: Dec 6 03:01:46 2025 GMT Not After : Dec 7 03:01:46 2025 GMT Subject: CN=57cff3b89c847e5214bf8f1ec8a4a17ce7308c3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:78:52:3e:4a:ff:1e:3d:d4:bb:13:4b:6c:1b: c6:96:ad:05:62:0e:a6:4f:3a:4e:99:7b:9d:5d:f1: 4a:87:8d:02:44:8c:8d:4c:08:49:52:f8:dc:6e:98: 58:26:d3:1c:20:1c:a7:b1:61:7c:bd:c2:ce:42:85: 5a:7b:06:85:9e:30:15:6e:c7:8c:a7:55:2a:74:a8: 8b:c5:0a:6f:51:35:0b:27:84:21:a5:83:b6:e5:f1: 4c:cc:b8:b2:7a:bc:cc:86:2e:e6:1c:5c:b9:1d:ed: ea:35:e8:a7:f1:a5:a4:e0:1a:f6:8a:09:4b:74:13: 73:9a:7f:19:76:37:4a:0e:89:57:42:90:76:bd:31: 5f:14:e1:23:b5:d3:46:65:48:a4:cc:02:81:a9:36: f4:43:bc:c2:c4:c4:0e:0f:25:6f:64:3b:5a:27:e1: e9:1b:4d:1f:45:75:b7:a0:4a:88:04:f0:bb:93:c6: b1:cc:6d:be:7a:02:81:7c:c0:0f:34:5c:24:63:aa: 78:39:b8:ea:e0:72:24:4c:d6:a7:47:cc:4c:b0:60: f1:88:85:1a:69:51:06:d8:f4:f0:ec:c1:18:d5:67: 1c:25:ff:15:b7:68:f1:86:b2:67:3e:f1:c1:00:95: 7e:b4:1f:b0:d7:41:f8:d2:72:23:b6:d7:34:d3:75: ed:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:CF:F3:B8:9C:84:7E:52:14:BF:8F:1E:C8:A4:A1:7C:E7:30:8C:3B X509v3 Authority Key Identifier: keyid:A9:DF:C8:98:12:34:05:07:A2:A2:E1:E7:4D:11:82:4D:EF:81:3F:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:c4:74:95:92:33:17:3f:75:2d:a6:fa:79:b9:98:24:bb:c8: 26:2e:85:71:44:a4:08:5e:eb:cb:ee:3e:87:fd:a4:15:06:6e: 75:d2:6a:72:74:2d:9e:26:ae:98:e0:a1:94:88:0e:74:34:81: 5c:5b:80:37:cd:eb:73:95:01:a3:f5:58:4a:cc:4a:ef:3e:1d: d6:8a:c8:2f:c9:6e:1d:1f:73:fd:31:14:a3:02:67:a6:70:68: ce:58:be:d1:06:4f:a2:4c:cd:5a:7c:0e:37:d9:49:23:5f:e0: 22:89:fc:d5:2f:aa:70:db:88:55:14:e6:79:ad:87:ec:18:32: f6:37:e1:d1:82:e4:45:10:2d:27:a7:13:71:33:65:cf:f6:f0: 2a:42:ef:30:24:e0:2a:ce:07:86:b3:e6:da:4c:9a:18:4c:20: 33:ff:b1:38:f9:7f:b8:f5:2d:dd:55:dc:e2:23:21:37:9e:75: f7:21:90:fc:18:82:f3:3f:a3:43:74:cd:ef:bb:98:92:80:66: e0:54:b9:3a:98:48:07:b8:70:54:c3:3f:c0:6e:ad:57:bb:50: de:21:73:96:5c:f5:f7:f9:4e:d2:2e:47:ff:78:ec:a0:af:f7: 8b:39:6c:4a:31:a9:a3:1c:7e:99:53:59:be:61:45:60:7a:a2: 2d:9a:e2:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm7yqEIARwrJK/vGlwRkgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ZGZjODk4MTIzNDA1MDdhMmEyZTFlNzRkMTE4MjRkZWY4 MTNmMzkwHhcNMjUxMjA2MDMwMTQ2WhcNMjUxMjA3MDMwMTQ2WjAzMTEwLwYDVQQD Eyg1N2NmZjNiODljODQ3ZTUyMTRiZjhmMWVjOGE0YTE3Y2U3MzA4YzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHhSPkr/Hj3UuxNLbBvGlq0FYg6m TzpOmXudXfFKh40CRIyNTAhJUvjcbphYJtMcIBynsWF8vcLOQoVaewaFnjAVbseM p1UqdKiLxQpvUTULJ4QhpYO25fFMzLiyerzMhi7mHFy5He3qNein8aWk4Br2iglL dBNzmn8ZdjdKDolXQpB2vTFfFOEjtdNGZUikzAKBqTb0Q7zCxMQODyVvZDtaJ+Hp G00fRXW3oEqIBPC7k8axzG2+egKBfMAPNFwkY6p4Objq4HIkTNanR8xMsGDxiIUa aVEG2PTw7MEY1WccJf8Vt2jxhrJnPvHBAJV+tB+w10H40nIjttc003XttQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFfP87ichH5SFL+PHsikoXznMIw7MB8GA1UdIwQY MBaAFKnfyJgSNAUHoqLh500Rgk3vgT85MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWRfSW1CSTBCUWVpb3VIblRSR0NUZS1CUHprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mN2Q1OGUtMzNkYS00MzE5LWI1NGIt NzA0NDAzZmZmODJlLzEvcWRfSW1CSTBCUWVpb3VIblRSR0NUZS1CUHprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9mN2Q1OGUtMzNkYS00MzE5LWI1NGItNzA0NDAzZmZmODJl LzEvcWRfSW1CSTBCUWVpb3VIblRSR0NUZS1CUHprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmcR0lZIz Fz91Lab6ebmYJLvIJi6FcUSkCF7ry+4+h/2kFQZuddJqcnQtniaumOChlIgOdDSB XFuAN83rc5UBo/VYSsxK7z4d1orIL8luHR9z/TEUowJnpnBozli+0QZPokzNWnwO N9lJI1/gIon81S+qcNuIVRTmea2H7Bgy9jfh0YLkRRAtJ6cTcTNlz/bwKkLvMCTg Ks4HhrPm2kyaGEwgM/+xOPl/uPUt3VXc4iMhN5519yGQ/BiC8z+jQ3TN77uYkoBm 4FS5OphIB7hwVMM/wG6tV7tQ3iFzllz19/lO0i5H/3jsoK/3izlsSjGpoxx+mVNZ vmFFYHqiLZriJA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:27 2025 by rpki-client