This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.mft File: QLt2qpbfjrfWd3s1clLhEVUjh4U.mft (raw, json) Hash identifier: 0poq/mCEjRkceQYvBGcCURgzO6MpKHDv/4RZ6Wb/wSs= Subject key identifier: 39:88:BF:84:2D:45:89:E1:E9:9D:5A:C3:2E:89:C8:C2:58:A0:AA:DC Authority key identifier: 40:BB:76:AA:96:DF:8E:B7:D6:77:7B:35:72:52:E1:11:55:23:87:85 Certificate issuer: /CN=40bb76aa96df8eb7d6777b357252e11155238785 Certificate serial: 019AF31B3088C1785EC8269E8E7174CF9BF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLt2qpbfjrfWd3s1clLhEVUjh4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.mft Manifest number: 14BA Signing time: Sat 06 Dec 2025 10:00:36 +0000 Manifest this update: Sat 06 Dec 2025 10:00:36 +0000 Manifest next update: Sun 07 Dec 2025 10:00:36 +0000 Files and hashes: 1: 78S4WmbXMNI8p1WLj4U6NB6Bpk8.roa (hash: bBamnPgie/uUwEiZyXlGtHo6lmaBP0c5URwdBpztxDc=) 2: QLt2qpbfjrfWd3s1clLhEVUjh4U.crl (hash: EQI6Y3R7w6zYrgREV/h4rpH15VQ5ITRkV6TLu5v81NY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.crl rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.mft rsync://rpki.ripe.net/repository/DEFAULT/QLt2qpbfjrfWd3s1clLhEVUjh4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:30:88:c1:78:5e:c8:26:9e:8e:71:74:cf:9b:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40bb76aa96df8eb7d6777b357252e11155238785 Validity Not Before: Dec 6 10:00:36 2025 GMT Not After : Dec 7 10:00:36 2025 GMT Subject: CN=3988bf842d4589e1e99d5ac32e89c8c258a0aadc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c5:27:f3:0d:6a:0b:2e:f1:40:87:ec:f0:4e: 42:78:e2:56:67:77:44:4d:5e:d0:01:b3:1a:03:f2: 53:19:d7:6a:51:1f:03:fc:77:3e:bb:98:47:82:31: 84:3a:0d:d8:15:08:27:d4:86:72:f9:d0:96:f4:29: 2e:62:4b:f4:47:be:91:bf:8d:f9:ad:dd:1f:98:6b: ec:a4:7c:b9:7f:f3:cd:0a:12:30:d2:62:d4:ab:49: 1e:ff:9e:ff:bc:f6:5d:42:4b:f7:9c:cc:b4:b0:45: dd:d4:29:32:09:3a:a2:a2:5b:26:7c:aa:fe:f7:ae: 12:1e:3f:18:77:1e:91:cc:95:6a:06:bb:ac:c0:ae: fd:01:0c:34:68:02:c8:2b:75:ea:99:03:52:2e:95: e0:ce:c4:39:b7:62:da:49:39:8a:76:ad:69:6c:ce: 98:4b:9c:12:c3:36:9c:ad:42:6b:cd:e4:3f:0a:a7: d7:b4:dd:cc:9d:6a:89:99:6e:f9:7f:cc:7b:36:2d: 1a:86:c7:e6:88:e8:be:11:71:c5:0f:ec:09:50:e1: 52:ac:6c:12:d8:88:e5:4b:08:68:34:c2:0b:e2:f9: 89:14:9e:ff:75:e2:d2:a3:a8:7f:8b:26:1e:56:26: 75:35:a4:67:b0:13:fa:05:bd:08:5a:31:40:2c:31: 0b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:88:BF:84:2D:45:89:E1:E9:9D:5A:C3:2E:89:C8:C2:58:A0:AA:DC X509v3 Authority Key Identifier: keyid:40:BB:76:AA:96:DF:8E:B7:D6:77:7B:35:72:52:E1:11:55:23:87:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLt2qpbfjrfWd3s1clLhEVUjh4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:9d:1e:e8:9b:a5:ed:9d:be:0e:f4:ad:57:64:9b:39:c5:e1: aa:e4:1c:67:24:91:7a:1e:10:29:3b:a7:1f:78:bd:f3:07:76: a4:c9:a7:4c:85:53:85:16:92:ef:9f:37:75:9d:4e:16:87:ae: 46:82:db:71:b2:3b:f3:34:95:5f:09:f4:22:47:4e:ef:e4:f3: dc:bc:8d:fd:84:16:5d:61:29:ac:16:d7:93:51:51:68:71:5a: 25:e9:5f:13:54:17:ef:7f:70:f7:80:98:ab:50:f4:87:bb:ec: 31:6d:42:f7:0f:30:57:a1:68:a8:d5:7f:d1:cd:14:f6:33:81: 2a:a1:9f:ec:c9:6a:0f:94:33:18:88:7c:b0:2e:f3:ca:3d:27: 59:db:ca:30:b7:16:99:ac:48:c9:67:02:d2:65:de:00:b1:f7: f3:4b:8b:51:69:d4:b4:98:3a:2a:33:50:c1:34:d8:b5:43:f6: ab:55:bd:fd:ca:e2:d0:4b:f1:42:55:ae:c0:63:bb:2f:dd:e6: 45:7e:35:77:7b:11:7b:fb:a9:b0:f7:7f:b8:2f:cc:ff:e4:a2: 12:95:42:60:78:8c:22:f2:bc:48:9b:f4:e2:10:c5:2d:0f:6e: ba:be:55:9e:f4:0c:02:04:e2:25:0f:07:37:84:b7:a0:66:35: 7c:60:f9:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGzCIwXheyCaejnF0z5vyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwYmI3NmFhOTZkZjhlYjdkNjc3N2IzNTcyNTJlMTExNTUy Mzg3ODUwHhcNMjUxMjA2MTAwMDM2WhcNMjUxMjA3MTAwMDM2WjAzMTEwLwYDVQQD EygzOTg4YmY4NDJkNDU4OWUxZTk5ZDVhYzMyZTg5YzhjMjU4YTBhYWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsUn8w1qCy7xQIfs8E5CeOJWZ3dE TV7QAbMaA/JTGddqUR8D/Hc+u5hHgjGEOg3YFQgn1IZy+dCW9CkuYkv0R76Rv435 rd0fmGvspHy5f/PNChIw0mLUq0ke/57/vPZdQkv3nMy0sEXd1CkyCTqiolsmfKr+ 964SHj8Ydx6RzJVqBruswK79AQw0aALIK3XqmQNSLpXgzsQ5t2LaSTmKdq1pbM6Y S5wSwzacrUJrzeQ/CqfXtN3MnWqJmW75f8x7Ni0ahsfmiOi+EXHFD+wJUOFSrGwS 2IjlSwhoNMIL4vmJFJ7/deLSo6h/iyYeViZ1NaRnsBP6Bb0IWjFALDELvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDmIv4QtRYnh6Z1awy6JyMJYoKrcMB8GA1UdIwQY MBaAFEC7dqqW34631nd7NXJS4RFVI4eFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUx0MnFwYmZqcmZXZDNzMWNsTGhFVlVqaDRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9lMzFkNjgtY2I2My00YmQxLTk5Yjkt MzVlZTdhNzM5ZmQ5LzEvUUx0MnFwYmZqcmZXZDNzMWNsTGhFVlVqaDRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9lMzFkNjgtY2I2My00YmQxLTk5YjktMzVlZTdhNzM5ZmQ5 LzEvUUx0MnFwYmZqcmZXZDNzMWNsTGhFVlVqaDRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEZ0e6Jul 7Z2+DvStV2SbOcXhquQcZySReh4QKTunH3i98wd2pMmnTIVThRaS7583dZ1OFoeu RoLbcbI78zSVXwn0IkdO7+Tz3LyN/YQWXWEprBbXk1FRaHFaJelfE1QX739w94CY q1D0h7vsMW1C9w8wV6FoqNV/0c0U9jOBKqGf7MlqD5QzGIh8sC7zyj0nWdvKMLcW maxIyWcC0mXeALH380uLUWnUtJg6KjNQwTTYtUP2q1W9/cri0EvxQlWuwGO7L93m RX41d3sRe/upsPd/uC/M/+SiEpVCYHiMIvK8SJv04hDFLQ9uur5VnvQMAgTiJQ8H N4S3oGY1fGD5mA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:11:09 2025 by rpki-client