This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft File: QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft (raw, json) Hash identifier: GCgoXMdcojzRf8y3MlkcEwKGEelerF1vJNuEBZra0CE= Subject key identifier: DA:C9:25:BC:6F:65:45:78:F2:7E:67:A9:AA:E7:DF:40:E8:8A:EC:E6 Authority key identifier: 40:CB:59:A4:18:EA:DF:A5:DC:86:9F:56:F1:84:7F:B2:5D:98:7F:C6 Certificate issuer: /CN=40cb59a418eadfa5dc869f56f1847fb25d987fc6 Certificate serial: 019AF31D1EDFF1BBCD6DCC92611D43E70881 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft Manifest number: 16B5 Signing time: Sat 06 Dec 2025 10:02:43 +0000 Manifest this update: Sat 06 Dec 2025 10:02:43 +0000 Manifest next update: Sun 07 Dec 2025 10:02:43 +0000 Files and hashes: 1: QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl (hash: ujvsAlSQPl6JhE2mVDZmQLOLh7jzL5MuDkQGFzBgtZQ=) 2: fSiDlWwoGniklT0F1na2YoYly6g.roa (hash: jQShuABqrNJ6xVnXKO1phumkAcZdn3LFktiTS8/eFss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:1e:df:f1:bb:cd:6d:cc:92:61:1d:43:e7:08:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40cb59a418eadfa5dc869f56f1847fb25d987fc6 Validity Not Before: Dec 6 10:02:43 2025 GMT Not After : Dec 7 10:02:43 2025 GMT Subject: CN=dac925bc6f654578f27e67a9aae7df40e88aece6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:78:9e:9d:52:d3:ef:e3:c8:a8:38:5e:e3:56: 86:f5:ee:dd:71:b6:95:57:d5:9a:b0:12:21:99:aa: 90:e1:bf:96:54:94:e7:4a:c2:d5:ca:d3:ab:af:b9: 9d:96:f1:f2:47:4c:7d:80:b8:37:17:ed:70:88:fc: 56:85:79:d8:8f:a9:68:b7:22:6c:c6:70:8d:6f:e8: c5:12:9c:1b:e4:07:02:fd:a1:28:4a:d5:26:61:f2: 4b:4b:69:50:14:89:e5:14:38:ac:78:5d:f0:ff:93: e8:c3:34:9d:14:55:aa:03:73:a4:23:e4:07:bd:99: 35:32:05:eb:f4:4c:d5:a6:eb:de:c2:74:37:58:95: ea:9f:d3:ef:66:4c:e3:ca:27:bc:28:4c:12:aa:ea: 26:fa:fa:d2:57:5d:96:88:0b:ae:bb:ee:96:fd:45: c6:b4:17:f4:97:ed:5b:ee:93:c8:9e:47:6d:f5:c1: 7d:75:0c:ba:94:1b:76:99:28:42:8d:3c:b2:48:5d: 06:c7:c3:e2:16:02:3a:17:a2:f8:05:74:52:c9:c8: 21:e7:94:9b:ce:62:29:50:93:18:f0:2c:90:3a:45: bb:ec:de:1e:05:ee:b4:4b:ef:b2:02:ae:94:cb:39: 52:a9:98:bf:da:ad:be:7a:72:44:ab:9a:a0:89:46: 91:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C9:25:BC:6F:65:45:78:F2:7E:67:A9:AA:E7:DF:40:E8:8A:EC:E6 X509v3 Authority Key Identifier: keyid:40:CB:59:A4:18:EA:DF:A5:DC:86:9F:56:F1:84:7F:B2:5D:98:7F:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:38:35:8c:50:41:53:f3:fe:3b:1d:e8:8f:2e:a1:17:56:76: d2:46:79:b2:65:9a:68:88:47:29:7e:61:89:21:88:5e:2a:d8: 03:64:bd:b7:2a:b9:80:af:ff:8d:1a:11:c1:ea:fc:b4:45:a8: 14:84:94:74:46:31:c9:b0:88:cd:e9:73:80:c2:5a:46:20:e2: 07:d6:01:6f:6d:fb:10:e8:82:2b:38:40:f3:6e:3f:9b:c9:94: 7d:09:c0:3a:05:eb:bb:27:ed:b5:e9:a2:79:ab:cd:c8:7b:16: 07:6f:1d:81:67:b9:22:c4:25:47:cc:ea:22:c1:31:34:45:55: 46:24:e1:00:62:67:2f:2e:32:bf:4e:d0:ef:4c:df:b9:ae:4b: d5:73:a4:a5:f4:7f:2a:99:e0:11:48:74:df:57:cd:80:8e:9d: cc:e5:e9:a1:ea:05:84:da:cd:2b:4a:22:f4:ae:ad:d4:1b:36: ca:52:35:68:39:1d:51:2f:04:7b:b7:e3:28:93:b5:03:27:94: 00:e4:81:a4:5e:d9:36:da:71:a8:f3:60:33:ca:7f:22:eb:6c: 13:fd:ec:a2:c7:c9:4f:1f:17:d1:1a:3a:07:40:e8:c1:33:fe: 08:4d:f4:6c:82:fc:97:d7:ac:ca:97:44:fc:d3:1e:dd:4e:60: ac:7e:a2:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHR7f8bvNbcySYR1D5wiBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwY2I1OWE0MThlYWRmYTVkYzg2OWY1NmYxODQ3ZmIyNWQ5 ODdmYzYwHhcNMjUxMjA2MTAwMjQzWhcNMjUxMjA3MTAwMjQzWjAzMTEwLwYDVQQD EyhkYWM5MjViYzZmNjU0NTc4ZjI3ZTY3YTlhYWU3ZGY0MGU4OGFlY2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnienVLT7+PIqDhe41aG9e7dcbaV V9WasBIhmaqQ4b+WVJTnSsLVytOrr7mdlvHyR0x9gLg3F+1wiPxWhXnYj6lotyJs xnCNb+jFEpwb5AcC/aEoStUmYfJLS2lQFInlFDiseF3w/5PowzSdFFWqA3OkI+QH vZk1MgXr9EzVpuvewnQ3WJXqn9PvZkzjyie8KEwSquom+vrSV12WiAuuu+6W/UXG tBf0l+1b7pPInkdt9cF9dQy6lBt2mShCjTyySF0Gx8PiFgI6F6L4BXRSycgh55Sb zmIpUJMY8CyQOkW77N4eBe60S++yAq6UyzlSqZi/2q2+enJEq5qgiUaRDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNrJJbxvZUV48n5nqarn30DoiuzmMB8GA1UdIwQY MBaAFEDLWaQY6t+l3IafVvGEf7JdmH/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU10WnBCanEzNlhjaHA5VzhZUl9zbDJZZjhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My85MjRjNzctYjI4My00YTUyLTkwOTQt MTFmMWI1YTRiMGRjLzEvUU10WnBCanEzNlhjaHA5VzhZUl9zbDJZZjhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My85MjRjNzctYjI4My00YTUyLTkwOTQtMTFmMWI1YTRiMGRj LzEvUU10WnBCanEzNlhjaHA5VzhZUl9zbDJZZjhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPzg1jFBB U/P+Ox3ojy6hF1Z20kZ5smWaaIhHKX5hiSGIXirYA2S9tyq5gK//jRoRwer8tEWo FISUdEYxybCIzelzgMJaRiDiB9YBb237EOiCKzhA824/m8mUfQnAOgXruyfttemi eavNyHsWB28dgWe5IsQlR8zqIsExNEVVRiThAGJnLy4yv07Q70zfua5L1XOkpfR/ KpngEUh031fNgI6dzOXpoeoFhNrNK0oi9K6t1Bs2ylI1aDkdUS8Ee7fjKJO1AyeU AOSBpF7ZNtpxqPNgM8p/IutsE/3sosfJTx8X0Ro6B0DowTP+CE30bIL8l9esypdE /NMe3U5grH6ixA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:36:00 2025 by rpki-client