This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft File: QhLmk-jn-4sxqoVTsw2VvvBINyk.mft (raw, json) Hash identifier: qgaASGnV+VoHejDFB9alLv4dwn+RreV7hpZ2yxGQ9Jk= Subject key identifier: 00:97:38:4C:00:FD:1E:8F:E3:E0:09:4A:4C:56:75:02:59:E9:16:21 Authority key identifier: 42:12:E6:93:E8:E7:FB:8B:31:AA:85:53:B3:0D:95:BE:F0:48:37:29 Certificate issuer: /CN=4212e693e8e7fb8b31aa8553b30d95bef0483729 Certificate serial: 019AF3F7E500BF95BD4E0867DB4C7D1C16E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 14:01:40 +0000 Manifest this update: Sat 06 Dec 2025 14:01:40 +0000 Manifest next update: Sun 07 Dec 2025 14:01:40 +0000 Files and hashes: 1: QhLmk-jn-4sxqoVTsw2VvvBINyk.crl (hash: W9c/hKAb2UWRSs3M5YOSVh+PVpZSh1O/Itd0eenr0+s=) 2: cjjqef6iWCl_1yFiNx4mwIqngEo.roa (hash: d/pj6gBhpaRW2JX3FWdfa1N0hGZit4d6dbXlFGA0bW4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.crl rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:e5:00:bf:95:bd:4e:08:67:db:4c:7d:1c:16:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4212e693e8e7fb8b31aa8553b30d95bef0483729 Validity Not Before: Dec 6 14:01:40 2025 GMT Not After : Dec 7 14:01:40 2025 GMT Subject: CN=0097384c00fd1e8fe3e0094a4c56750259e91621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d0:f1:1b:66:ae:6e:5d:82:3c:a6:55:61:44: e4:3f:b7:f0:1b:98:e6:53:2c:18:51:ed:80:db:88: 2e:a7:54:1d:d9:f0:7a:4f:c5:6c:4c:e2:4c:55:96: e5:b2:75:30:fd:21:cd:b8:b5:9d:97:03:16:34:20: 51:47:16:a6:5e:61:f3:37:b5:7e:f2:6d:7c:5b:b1: ca:ed:f3:de:32:7f:d9:c2:e2:a8:54:98:94:00:81: 89:3a:f6:cc:7e:99:6b:56:bd:ea:36:05:53:c6:d7: 59:83:c3:89:93:33:63:a2:70:0f:87:20:bd:99:f5: 8d:13:92:89:85:28:1a:58:7c:5a:ba:bf:37:3a:9d: 67:53:f5:a2:a7:4d:d5:10:89:06:12:26:82:70:52: c0:4b:51:46:b4:b2:4a:1b:07:18:bd:ac:d9:e9:c2: 35:da:43:c8:f0:87:8a:9f:d6:b8:3a:46:b9:cc:47: 05:52:98:c3:3e:64:75:04:d7:64:7d:fc:d2:5e:25: d0:db:c9:af:83:0c:c2:89:b7:11:75:e0:1b:81:13: ca:26:b3:5f:6f:a3:0f:b2:3c:80:4d:0d:dc:da:c6: 7d:9f:d4:c4:de:2b:90:bc:59:67:6c:ed:3c:86:e4: 71:05:2d:b4:6f:b1:88:01:06:66:83:a8:82:96:34: a6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:97:38:4C:00:FD:1E:8F:E3:E0:09:4A:4C:56:75:02:59:E9:16:21 X509v3 Authority Key Identifier: keyid:42:12:E6:93:E8:E7:FB:8B:31:AA:85:53:B3:0D:95:BE:F0:48:37:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:59:76:fc:74:8b:77:5f:40:41:ec:f8:21:c2:5d:0d:64:7f: e6:98:e9:1b:db:19:89:3b:a5:e0:d8:62:b7:96:4c:a1:2e:9f: 1d:a2:f3:ca:c2:f6:80:d4:33:95:5f:55:33:f2:bd:c3:0e:8f: f7:4f:74:33:b3:0b:50:a5:8c:c5:9e:5e:b1:91:43:38:23:df: cf:79:26:16:e6:cf:7b:13:31:19:3f:20:90:13:0b:3e:ad:0b: b8:ff:bf:68:bb:c6:a0:b3:d7:04:2d:f2:55:93:05:b5:76:76: 6a:73:c7:a1:18:c5:49:87:74:fe:9a:09:2a:bd:7a:6a:7b:4d: 12:4b:b9:d9:1f:70:2f:db:35:a5:8a:eb:f8:61:f8:00:f0:d5: c4:69:15:f6:88:29:6f:ae:aa:c6:cb:57:57:41:d0:fe:90:2a: 88:c7:5a:3c:b2:37:54:8c:74:55:80:4d:66:e1:c7:8d:1d:90: 96:05:99:b4:1f:19:af:17:f3:a3:2a:ec:9e:19:05:11:0d:57: 48:3b:71:48:61:2a:61:5c:b1:a5:cf:53:53:fa:4a:36:7f:27: d5:4e:b3:ce:ba:5e:15:c3:60:f8:a4:b9:12:45:b8:c5:eb:e3: 01:95:57:98:ed:b7:d4:02:51:d3:8a:a2:52:3c:87:e2:df:b3: 88:e1:17:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9+UAv5W9Tghn20x9HBblMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMTJlNjkzZThlN2ZiOGIzMWFhODU1M2IzMGQ5NWJlZjA0 ODM3MjkwHhcNMjUxMjA2MTQwMTQwWhcNMjUxMjA3MTQwMTQwWjAzMTEwLwYDVQQD EygwMDk3Mzg0YzAwZmQxZThmZTNlMDA5NGE0YzU2NzUwMjU5ZTkxNjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndDxG2aubl2CPKZVYUTkP7fwG5jm UywYUe2A24gup1Qd2fB6T8VsTOJMVZblsnUw/SHNuLWdlwMWNCBRRxamXmHzN7V+ 8m18W7HK7fPeMn/ZwuKoVJiUAIGJOvbMfplrVr3qNgVTxtdZg8OJkzNjonAPhyC9 mfWNE5KJhSgaWHxaur83Op1nU/Wip03VEIkGEiaCcFLAS1FGtLJKGwcYvazZ6cI1 2kPI8IeKn9a4Oka5zEcFUpjDPmR1BNdkffzSXiXQ28mvgwzCibcRdeAbgRPKJrNf b6MPsjyATQ3c2sZ9n9TE3iuQvFlnbO08huRxBS20b7GIAQZmg6iCljSmwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFACXOEwA/R6P4+AJSkxWdQJZ6RYhMB8GA1UdIwQY MBaAFEIS5pPo5/uLMaqFU7MNlb7wSDcpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWhMbWstam4tNHN4cW9WVHN3MlZ2dkJJTnlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9lMjEzMjUtOTkxMC00N2U4LTk5Y2Mt NzVhNTU1YzhmYjQxLzEvUWhMbWstam4tNHN4cW9WVHN3MlZ2dkJJTnlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9lMjEzMjUtOTkxMC00N2U4LTk5Y2MtNzVhNTU1YzhmYjQx LzEvUWhMbWstam4tNHN4cW9WVHN3MlZ2dkJJTnlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeVl2/HSL d19AQez4IcJdDWR/5pjpG9sZiTul4Nhit5ZMoS6fHaLzysL2gNQzlV9VM/K9ww6P 9090M7MLUKWMxZ5esZFDOCPfz3kmFubPexMxGT8gkBMLPq0LuP+/aLvGoLPXBC3y VZMFtXZ2anPHoRjFSYd0/poJKr16antNEku52R9wL9s1pYrr+GH4APDVxGkV9ogp b66qxstXV0HQ/pAqiMdaPLI3VIx0VYBNZuHHjR2QlgWZtB8ZrxfzoyrsnhkFEQ1X SDtxSGEqYVyxpc9TU/pKNn8n1U6zzrpeFcNg+KS5EkW4xevjAZVXmO231AJR04qi UjyH4t+ziOEX4g== -----END CERTIFICATE-----Generated at Sat Dec 6 22:05:16 2025 by rpki-client