This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft File: QM_TpJvHHnSg0L9-NGyomylZehI.mft (raw, json) Hash identifier: LZimKmr+pSQV1QCYHwvvBUFUrqNvp4W6+KYr9cWts3w= Subject key identifier: DE:32:8C:8D:D7:EC:B3:4A:4B:91:D4:74:2A:07:95:81:D6:25:5B:1F Authority key identifier: 40:CF:D3:A4:9B:C7:1E:74:A0:D0:BF:7E:34:6C:A8:9B:29:59:7A:12 Certificate issuer: /CN=40cfd3a49bc71e74a0d0bf7e346ca89b29597a12 Certificate serial: 019AF12DD76EB8D81D73EAD7546418D199A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QM_TpJvHHnSg0L9-NGyomylZehI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:01:44 +0000 Manifest this update: Sat 06 Dec 2025 01:01:44 +0000 Manifest next update: Sun 07 Dec 2025 01:01:44 +0000 Files and hashes: 1: QM_TpJvHHnSg0L9-NGyomylZehI.crl (hash: 5azVy0+nI8VqSnH+5FEtJzPXrVFmeZbdANQ4jKB35DE=) 2: cOU0f1SCKSAnKUQtSDidcXUui3Y.roa (hash: SxetuqQIAbe3h1o0xhzW+JEeQWRKvCIOYuGwJHKjEXs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft rsync://rpki.ripe.net/repository/DEFAULT/QM_TpJvHHnSg0L9-NGyomylZehI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:d7:6e:b8:d8:1d:73:ea:d7:54:64:18:d1:99:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40cfd3a49bc71e74a0d0bf7e346ca89b29597a12 Validity Not Before: Dec 6 01:01:44 2025 GMT Not After : Dec 7 01:01:44 2025 GMT Subject: CN=de328c8dd7ecb34a4b91d4742a079581d6255b1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:68:9f:81:f6:6d:d0:7d:e0:55:b0:78:40:0f: 0c:e3:39:b6:49:76:1e:bc:6f:d8:ef:39:aa:bf:0f: d9:22:55:89:fa:cb:01:88:a4:f9:3d:b4:d1:25:d2: fa:6d:93:b5:3a:8b:7d:8b:80:37:1b:64:e4:cc:6f: 4a:25:b4:10:28:97:6e:9a:e4:c7:c7:9f:92:12:be: a0:c7:bb:a8:34:94:1b:89:ff:3b:24:32:a6:8a:ed: ad:07:67:ab:65:1d:b6:9d:4d:cb:c2:95:a7:92:d3: 35:9b:ad:66:c7:dc:af:18:c0:3d:27:fc:96:a7:2d: 32:97:c4:98:de:c3:39:34:29:ab:1e:c1:73:90:f9: be:c9:11:22:f1:54:26:af:0e:9c:49:8b:2d:fa:ab: 6a:db:ac:59:87:d2:34:5a:86:fd:8c:51:42:ba:8a: eb:6a:09:1b:10:f6:4f:47:a8:d3:42:d7:4f:ba:2e: de:8d:b6:26:d1:15:55:14:67:01:07:1c:85:86:b9: 87:cd:dc:5d:ca:c6:82:2a:5f:07:1b:d9:f3:56:68: 17:b6:ef:a9:5a:0c:09:8b:d5:39:ee:84:a5:ad:9d: cb:3e:8b:d1:24:6e:eb:b8:23:3c:bc:09:c9:ec:d3: cf:44:7b:c2:27:c7:1f:ae:27:cc:1b:f3:13:87:fc: 19:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:32:8C:8D:D7:EC:B3:4A:4B:91:D4:74:2A:07:95:81:D6:25:5B:1F X509v3 Authority Key Identifier: keyid:40:CF:D3:A4:9B:C7:1E:74:A0:D0:BF:7E:34:6C:A8:9B:29:59:7A:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QM_TpJvHHnSg0L9-NGyomylZehI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:4f:b3:88:37:c0:c4:10:d9:66:09:89:80:47:f7:3c:cf:21: 7a:e0:79:f4:c0:15:88:29:a8:7f:18:03:09:6f:a2:0c:6f:bf: d3:f3:a7:f8:28:a7:9f:e7:de:7b:71:71:ec:f0:30:03:ab:ff: 3a:5d:63:71:90:6f:c8:36:0b:3c:71:82:6b:1e:9f:bf:53:1c: a7:83:22:7c:e0:27:7a:bb:16:e3:4b:41:d7:73:54:64:b8:39: 08:70:8f:21:43:37:cf:b9:eb:e4:c3:32:44:96:0b:66:ac:25: ef:75:43:76:3d:38:c0:e9:5e:d3:5e:5a:36:ab:e0:44:4e:5c: b0:0a:0a:12:f6:9b:87:fc:22:88:46:78:1d:17:bd:13:13:c6: f6:f9:d7:67:2b:90:b7:8f:6b:0e:e9:09:19:39:16:df:fe:c0: 79:dc:1a:c3:a5:2b:0d:76:2e:78:2b:81:70:c9:2c:89:2a:f6: 3e:2d:5a:32:b4:06:7d:b5:86:5b:72:b0:4d:59:eb:25:8e:5b: ff:d0:3a:82:8d:a1:a4:32:c7:d1:37:e5:30:a3:da:e1:5c:b3: c7:28:c2:3d:42:c2:fe:88:7e:bb:0c:06:c6:0b:7d:c6:a5:e6: d6:ef:eb:cf:cd:fb:8e:88:8d:f8:ce:2e:37:fe:2d:5b:1f:76: 69:ab:bf:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLdduuNgdc+rXVGQY0ZmpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwY2ZkM2E0OWJjNzFlNzRhMGQwYmY3ZTM0NmNhODliMjk1 OTdhMTIwHhcNMjUxMjA2MDEwMTQ0WhcNMjUxMjA3MDEwMTQ0WjAzMTEwLwYDVQQD EyhkZTMyOGM4ZGQ3ZWNiMzRhNGI5MWQ0NzQyYTA3OTU4MWQ2MjU1YjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mifgfZt0H3gVbB4QA8M4zm2SXYe vG/Y7zmqvw/ZIlWJ+ssBiKT5PbTRJdL6bZO1Oot9i4A3G2TkzG9KJbQQKJdumuTH x5+SEr6gx7uoNJQbif87JDKmiu2tB2erZR22nU3LwpWnktM1m61mx9yvGMA9J/yW py0yl8SY3sM5NCmrHsFzkPm+yREi8VQmrw6cSYst+qtq26xZh9I0Wob9jFFCuorr agkbEPZPR6jTQtdPui7ejbYm0RVVFGcBBxyFhrmHzdxdysaCKl8HG9nzVmgXtu+p WgwJi9U57oSlrZ3LPovRJG7ruCM8vAnJ7NPPRHvCJ8cfrifMG/MTh/wZmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN4yjI3X7LNKS5HUdCoHlYHWJVsfMB8GA1UdIwQY MBaAFEDP06Sbxx50oNC/fjRsqJspWXoSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU1fVHBKdkhIblNnMEw5LU5HeW9teWxaZWhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wYjlmMDctZjE2Ni00Njc1LWIxODUt NjBiNmViYmI3ZTZmLzEvUU1fVHBKdkhIblNnMEw5LU5HeW9teWxaZWhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wYjlmMDctZjE2Ni00Njc1LWIxODUtNjBiNmViYmI3ZTZm LzEvUU1fVHBKdkhIblNnMEw5LU5HeW9teWxaZWhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjk+ziDfA xBDZZgmJgEf3PM8heuB59MAViCmofxgDCW+iDG+/0/On+Cinn+fee3Fx7PAwA6v/ Ol1jcZBvyDYLPHGCax6fv1Mcp4MifOAnersW40tB13NUZLg5CHCPIUM3z7nr5MMy RJYLZqwl73VDdj04wOle015aNqvgRE5csAoKEvabh/wiiEZ4HRe9ExPG9vnXZyuQ t49rDukJGTkW3/7Aedwaw6UrDXYueCuBcMksiSr2Pi1aMrQGfbWGW3KwTVnrJY5b /9A6go2hpDLH0TflMKPa4VyzxyjCPULC/oh+uwwGxgt9xqXm1u/rz837joiN+M4u N/4tWx92aau/sg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:23 2025 by rpki-client