This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft File: QL_e36qTma09VTH6RxoSs7_jfhI.mft (raw, json) Hash identifier: rXgYgLmuo2x6iHhfZ6IBgm0hKMaMY1W2Eh+7NKbjBJg= Subject key identifier: 70:BA:34:35:A6:C1:FA:47:F9:A5:1B:9C:92:2F:91:1D:49:46:95:23 Authority key identifier: 40:BF:DE:DF:AA:93:99:AD:3D:55:31:FA:47:1A:12:B3:BF:E3:7E:12 Certificate issuer: /CN=40bfdedfaa9399ad3d5531fa471a12b3bfe37e12 Certificate serial: 019AF31B77F1094CE230228B4A9C0EEE7C5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QL_e36qTma09VTH6RxoSs7_jfhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft Manifest number: 0A83 Signing time: Sat 06 Dec 2025 10:00:54 +0000 Manifest this update: Sat 06 Dec 2025 10:00:54 +0000 Manifest next update: Sun 07 Dec 2025 10:00:54 +0000 Files and hashes: 1: QL_e36qTma09VTH6RxoSs7_jfhI.crl (hash: KRiXuROMCpGVK/Il8LwCHPZ7jY/i/io5l1pAu2I3T80=) 2: jSlm79fFu0VgJBsIaC81oVf4nGI.roa (hash: 8IYkRLo3mCrHlEs7aBNerIrNbkB27E7Mc7prSDZuZVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.crl rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft rsync://rpki.ripe.net/repository/DEFAULT/QL_e36qTma09VTH6RxoSs7_jfhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:77:f1:09:4c:e2:30:22:8b:4a:9c:0e:ee:7c:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40bfdedfaa9399ad3d5531fa471a12b3bfe37e12 Validity Not Before: Dec 6 10:00:54 2025 GMT Not After : Dec 7 10:00:54 2025 GMT Subject: CN=70ba3435a6c1fa47f9a51b9c922f911d49469523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d5:aa:a0:f0:b7:8c:dc:73:51:b5:f4:e6:9b: 93:d2:4c:c3:1e:53:ea:cc:80:78:22:d3:b7:d3:c7: e5:b4:40:ed:c0:a2:37:90:74:80:79:42:2c:87:23: 9c:74:00:a3:04:0a:ac:8d:53:ce:c8:d5:f1:a1:64: 95:76:2e:c0:f0:84:8d:38:ac:70:21:35:75:31:ab: 35:48:bb:31:24:f4:92:b3:06:66:4a:d1:73:dd:1d: 6b:c9:31:b0:86:b4:5c:31:57:0b:87:69:dd:b0:d8: 9a:c2:14:53:82:d9:09:d0:bb:fe:86:d2:59:7c:03: c6:b1:42:51:84:fb:3a:b5:3e:7e:cf:39:99:51:61: e4:8f:28:20:27:0a:46:73:d2:36:56:1f:9a:84:c8: 0d:73:ce:bd:ec:41:64:59:ea:45:c3:bf:3e:2d:eb: 95:bc:33:d7:6a:6f:7b:45:70:2a:7d:21:3b:fd:97: 0e:7f:23:e1:4b:a7:e6:57:cf:39:e9:d1:4a:3d:f4: 97:27:35:b9:30:2d:62:18:d1:0c:aa:7a:a5:7d:6c: e9:e4:02:50:7e:db:b3:08:ee:f4:c2:ba:89:c6:9d: b7:51:a6:1f:44:fc:a5:d1:a6:c2:49:4b:ed:d1:dc: 08:e6:54:76:72:4e:9d:80:42:ff:41:57:e2:3d:b6: b6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:BA:34:35:A6:C1:FA:47:F9:A5:1B:9C:92:2F:91:1D:49:46:95:23 X509v3 Authority Key Identifier: keyid:40:BF:DE:DF:AA:93:99:AD:3D:55:31:FA:47:1A:12:B3:BF:E3:7E:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QL_e36qTma09VTH6RxoSs7_jfhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:2b:81:af:be:39:20:2d:d2:2e:f1:fe:ec:a2:66:2c:4e:56: 54:ad:09:e6:09:84:15:d1:de:d5:dc:46:a7:1a:2b:49:ea:27: 5b:c7:e5:41:38:c7:05:7b:22:32:40:d8:fb:53:46:c7:08:87: 71:b2:aa:46:c8:39:34:10:ac:06:46:8d:51:bc:c2:af:59:80: b0:dc:26:cc:02:8b:01:7b:49:db:67:2f:47:10:26:df:23:7a: 27:0b:5b:e0:6b:40:b2:3e:e9:40:c2:81:c3:79:63:81:7d:fe: 2c:8a:a4:4d:38:31:97:5c:bc:75:4a:73:c5:54:b4:60:b6:8b: d9:d0:e7:29:ae:b4:d3:9a:e8:b7:1b:18:45:97:f4:68:db:e9: f3:9d:98:76:77:f6:48:4a:e0:8b:4e:fd:bd:16:dd:d0:1d:43: b7:c3:47:57:54:59:ce:9f:f5:9b:d4:d0:12:fa:de:70:58:e9: d2:ab:c6:55:a0:ff:30:74:e2:9f:2a:17:b0:1d:e7:3c:92:ab: 56:db:55:bb:22:b4:7f:ea:92:6e:f4:07:cd:6a:25:c3:f7:e3: b0:18:ce:38:b6:08:78:17:d1:1a:73:2f:39:2d:fb:7a:8b:48: 26:0a:91:01:78:b0:75:e2:39:54:f3:a2:92:89:4e:0d:54:36: 00:26:10:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG3fxCUziMCKLSpwO7nxcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwYmZkZWRmYWE5Mzk5YWQzZDU1MzFmYTQ3MWExMmIzYmZl MzdlMTIwHhcNMjUxMjA2MTAwMDU0WhcNMjUxMjA3MTAwMDU0WjAzMTEwLwYDVQQD Eyg3MGJhMzQzNWE2YzFmYTQ3ZjlhNTFiOWM5MjJmOTExZDQ5NDY5NTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydWqoPC3jNxzUbX05puT0kzDHlPq zIB4ItO308fltEDtwKI3kHSAeUIshyOcdACjBAqsjVPOyNXxoWSVdi7A8ISNOKxw ITV1Mas1SLsxJPSSswZmStFz3R1ryTGwhrRcMVcLh2ndsNiawhRTgtkJ0Lv+htJZ fAPGsUJRhPs6tT5+zzmZUWHkjyggJwpGc9I2Vh+ahMgNc8697EFkWepFw78+LeuV vDPXam97RXAqfSE7/ZcOfyPhS6fmV8856dFKPfSXJzW5MC1iGNEMqnqlfWzp5AJQ ftuzCO70wrqJxp23UaYfRPyl0abCSUvt0dwI5lR2ck6dgEL/QVfiPba2+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHC6NDWmwfpH+aUbnJIvkR1JRpUjMB8GA1UdIwQY MBaAFEC/3t+qk5mtPVUx+kcaErO/434SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUxfZTM2cVRtYTA5VlRINlJ4b1NzN19qZmhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9kYjU1ZWMtMzU3Ny00MjFmLTg5MTYt OGU5ODUxYjdmODExLzEvUUxfZTM2cVRtYTA5VlRINlJ4b1NzN19qZmhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9kYjU1ZWMtMzU3Ny00MjFmLTg5MTYtOGU5ODUxYjdmODEx LzEvUUxfZTM2cVRtYTA5VlRINlJ4b1NzN19qZmhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATiuBr745 IC3SLvH+7KJmLE5WVK0J5gmEFdHe1dxGpxorSeonW8flQTjHBXsiMkDY+1NGxwiH cbKqRsg5NBCsBkaNUbzCr1mAsNwmzAKLAXtJ22cvRxAm3yN6Jwtb4GtAsj7pQMKB w3ljgX3+LIqkTTgxl1y8dUpzxVS0YLaL2dDnKa6005rotxsYRZf0aNvp852Ydnf2 SErgi079vRbd0B1Dt8NHV1RZzp/1m9TQEvrecFjp0qvGVaD/MHTinyoXsB3nPJKr VttVuyK0f+qSbvQHzWolw/fjsBjOOLYIeBfRGnMvOS37eotIJgqRAXiwdeI5VPOi kolODVQ2ACYQQQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:33:10 2025 by rpki-client