This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.mft File: QMyB_4LO1hrvhHas56DoGLuuj8Q.mft (raw, json) Hash identifier: 4LajjTr6x54CEnUrNm0+ISOrw7CNoN6TQrAwh7KuXoM= Subject key identifier: 75:3A:CD:FB:93:4A:E9:06:35:17:F9:13:67:52:36:34:4E:2D:54:99 Authority key identifier: 40:CC:81:FF:82:CE:D6:1A:EF:84:76:AC:E7:A0:E8:18:BB:AE:8F:C4 Certificate issuer: /CN=40cc81ff82ced61aef8476ace7a0e818bbae8fc4 Certificate serial: 019AF31BF8390029D1476FA71CC58FD50BF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QMyB_4LO1hrvhHas56DoGLuuj8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.mft Manifest number: 0DDC Signing time: Sat 06 Dec 2025 10:01:27 +0000 Manifest this update: Sat 06 Dec 2025 10:01:27 +0000 Manifest next update: Sun 07 Dec 2025 10:01:27 +0000 Files and hashes: 1: QMyB_4LO1hrvhHas56DoGLuuj8Q.crl (hash: IetfvSZukjzdWtrRl2KK4sxGVFwygaoBXuJoCWiuL88=) 2: f9PiBsdXGMaiketrG3G5PjbB6oI.roa (hash: OKMBW/Wn+8xzvLZOORxBkZ/Gr6+Ikl3rSLUfT+IRWSA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/QMyB_4LO1hrvhHas56DoGLuuj8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:f8:39:00:29:d1:47:6f:a7:1c:c5:8f:d5:0b:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40cc81ff82ced61aef8476ace7a0e818bbae8fc4 Validity Not Before: Dec 6 10:01:27 2025 GMT Not After : Dec 7 10:01:27 2025 GMT Subject: CN=753acdfb934ae9063517f913675236344e2d5499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:97:0e:93:1e:70:91:35:f0:05:ab:b9:03:94: 22:43:4e:e4:01:f5:b6:c1:4c:4d:23:6b:0f:92:30: 8e:7f:ef:5d:d3:54:00:cd:51:0b:c0:ee:b8:3a:8f: 66:a1:8a:4b:a7:95:e3:60:1f:8a:08:34:6c:a8:e6: 1e:94:5a:62:86:00:bc:eb:21:93:1a:73:78:7a:29: dc:e8:61:34:5f:44:18:ec:13:eb:6e:0c:91:bf:96: 95:ab:d2:59:6c:31:b6:62:9a:18:0f:de:a7:33:29: 62:24:03:b1:cb:20:e8:39:d5:da:4b:8f:ea:34:09: 33:1b:09:f7:5b:0e:a7:aa:98:51:9d:1a:03:95:45: 5e:3b:2a:a5:82:d6:47:e7:ba:32:63:ed:4f:7b:07: a8:6b:e8:d2:b7:02:2f:f3:8a:6d:5f:ff:1d:7c:06: e9:8d:c4:ac:e7:3c:4f:b7:1f:86:99:91:ef:96:4c: 86:e4:7b:6a:bd:8b:8c:df:df:38:3a:f2:c2:5d:f1: af:2f:14:6c:97:55:05:1c:a1:aa:61:83:a4:ee:4e: 63:26:f6:2c:85:ee:c1:25:0c:aa:66:36:ff:2a:d5: ca:21:d6:86:04:71:9f:f3:85:7e:e8:db:c7:6a:68: 18:bc:f8:0f:1d:e9:93:bb:25:9f:1c:34:d9:e9:51: 3c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:3A:CD:FB:93:4A:E9:06:35:17:F9:13:67:52:36:34:4E:2D:54:99 X509v3 Authority Key Identifier: keyid:40:CC:81:FF:82:CE:D6:1A:EF:84:76:AC:E7:A0:E8:18:BB:AE:8F:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMyB_4LO1hrvhHas56DoGLuuj8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:35:f7:1e:a3:13:8e:78:12:52:f6:5e:c5:de:df:64:c6:69: 51:3f:57:cd:6f:1b:8b:36:2b:a7:11:31:56:08:72:6f:a4:24: 62:0a:43:8e:f0:ce:c2:5b:c3:b1:e9:6d:cd:73:3c:da:02:1e: 51:a4:ad:18:58:d3:67:5c:51:b2:2e:ab:d6:e7:97:1b:cc:94: 49:7e:a1:97:23:0a:5e:ec:fc:bb:41:b0:da:63:7e:d9:f3:38: 1c:de:db:9a:01:8c:76:54:2a:8b:77:e4:2c:14:5b:00:95:1d: 5e:ec:f2:7c:7b:94:23:d1:4e:da:42:4a:4c:5f:24:3c:e0:72: 01:83:cb:50:0f:3f:b9:4a:57:c9:26:08:8a:1c:55:95:51:b1: ee:58:a7:58:17:47:c4:8c:f9:2c:34:f6:f0:78:17:4f:c2:b3: ca:09:a6:c1:bf:e1:74:3f:7c:85:e8:e2:e6:dd:0f:cd:26:71: 26:44:1f:94:61:c9:64:c2:1b:c1:d6:fe:39:5c:5b:6e:0e:21: 9f:51:ce:ab:19:ff:23:5f:fd:7a:19:d2:32:02:bd:20:7f:94: 5b:cd:72:2f:f4:4b:34:ef:ab:cd:02:ea:da:b8:0f:14:a5:11: 5a:9c:45:41:11:71:31:d7:ec:9f:04:34:8f:36:a8:47:01:2a: d3:a6:99:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG/g5ACnRR2+nHMWP1QvzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwY2M4MWZmODJjZWQ2MWFlZjg0NzZhY2U3YTBlODE4YmJh ZThmYzQwHhcNMjUxMjA2MTAwMTI3WhcNMjUxMjA3MTAwMTI3WjAzMTEwLwYDVQQD Eyg3NTNhY2RmYjkzNGFlOTA2MzUxN2Y5MTM2NzUyMzYzNDRlMmQ1NDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpcOkx5wkTXwBau5A5QiQ07kAfW2 wUxNI2sPkjCOf+9d01QAzVELwO64Oo9moYpLp5XjYB+KCDRsqOYelFpihgC86yGT GnN4einc6GE0X0QY7BPrbgyRv5aVq9JZbDG2YpoYD96nMyliJAOxyyDoOdXaS4/q NAkzGwn3Ww6nqphRnRoDlUVeOyqlgtZH57oyY+1Peweoa+jStwIv84ptX/8dfAbp jcSs5zxPtx+GmZHvlkyG5HtqvYuM3984OvLCXfGvLxRsl1UFHKGqYYOk7k5jJvYs he7BJQyqZjb/KtXKIdaGBHGf84V+6NvHamgYvPgPHemTuyWfHDTZ6VE8gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHU6zfuTSukGNRf5E2dSNjROLVSZMB8GA1UdIwQY MBaAFEDMgf+CztYa74R2rOeg6Bi7ro/EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU15Ql80TE8xaHJ2aEhhczU2RG9HTHV1ajhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84ZTFmNTMtYjY3NC00MGU4LThiYjgt ZGI1ZDg5ZThhMTdjLzEvUU15Ql80TE8xaHJ2aEhhczU2RG9HTHV1ajhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS84ZTFmNTMtYjY3NC00MGU4LThiYjgtZGI1ZDg5ZThhMTdj LzEvUU15Ql80TE8xaHJ2aEhhczU2RG9HTHV1ajhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmzX3HqMT jngSUvZexd7fZMZpUT9XzW8bizYrpxExVghyb6QkYgpDjvDOwlvDseltzXM82gIe UaStGFjTZ1xRsi6r1ueXG8yUSX6hlyMKXuz8u0Gw2mN+2fM4HN7bmgGMdlQqi3fk LBRbAJUdXuzyfHuUI9FO2kJKTF8kPOByAYPLUA8/uUpXySYIihxVlVGx7linWBdH xIz5LDT28HgXT8Kzygmmwb/hdD98heji5t0PzSZxJkQflGHJZMIbwdb+OVxbbg4h n1HOqxn/I1/9ehnSMgK9IH+UW81yL/RLNO+rzQLq2rgPFKURWpxFQRFxMdfsnwQ0 jzaoRwEq06aZPg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:41:10 2025 by rpki-client