This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft File: QM_TpJvHHnSg0L9-NGyomylZehI.mft (raw, json) Hash identifier: Z38EMtnZQS4O2wckQLzg+o1ly21vmtKgerCnUPvHGWo= Subject key identifier: 10:FB:4A:15:30:C8:83:A6:48:CE:C0:2E:9D:9D:F8:CC:5C:E7:7E:A0 Authority key identifier: 40:CF:D3:A4:9B:C7:1E:74:A0:D0:BF:7E:34:6C:A8:9B:29:59:7A:12 Certificate issuer: /CN=40cfd3a49bc71e74a0d0bf7e346ca89b29597a12 Certificate serial: 019B2B1D39FEB1D7C46446B0AB2E011ED27D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QM_TpJvHHnSg0L9-NGyomylZehI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft Manifest number: 177F Signing time: Wed 17 Dec 2025 07:01:34 +0000 Manifest this update: Wed 17 Dec 2025 07:01:34 +0000 Manifest next update: Thu 18 Dec 2025 07:01:34 +0000 Files and hashes: 1: QM_TpJvHHnSg0L9-NGyomylZehI.crl (hash: jVOHeBbU+4T7HbrnplUjvhI7b/4FeMingz1R2f1iX1s=) 2: cOU0f1SCKSAnKUQtSDidcXUui3Y.roa (hash: SxetuqQIAbe3h1o0xhzW+JEeQWRKvCIOYuGwJHKjEXs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft rsync://rpki.ripe.net/repository/DEFAULT/QM_TpJvHHnSg0L9-NGyomylZehI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1d:39:fe:b1:d7:c4:64:46:b0:ab:2e:01:1e:d2:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40cfd3a49bc71e74a0d0bf7e346ca89b29597a12 Validity Not Before: Dec 17 07:01:34 2025 GMT Not After : Dec 18 07:01:34 2025 GMT Subject: CN=10fb4a1530c883a648cec02e9d9df8cc5ce77ea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:21:73:d8:cb:ae:fd:54:e2:50:25:5b:e1:51: 22:ac:c0:f9:99:d8:58:14:93:fc:40:1a:d6:6b:cb: ef:5d:ea:cf:9d:f9:13:f3:9a:47:27:dc:7b:0d:71: 65:60:a6:10:7d:e9:b8:d1:d1:11:24:6d:bd:2d:c6: 4e:8d:0b:28:64:22:66:fc:3a:a2:33:77:0d:51:e6: 2f:13:4c:6b:c1:44:4c:e1:f3:a2:52:ec:20:07:47: ee:bb:35:87:3e:57:f3:25:a7:67:ca:55:3b:a4:c0: d7:47:07:74:7d:81:7e:bb:f3:8a:ff:fe:03:c7:36: f9:ea:d9:8d:e8:35:a3:28:ec:54:a9:fa:a9:13:da: b0:43:54:41:c9:94:c8:56:bd:44:28:f4:fb:12:f3: 2c:5f:7f:43:90:10:71:55:da:e5:7c:02:20:c2:8e: e5:96:0d:ee:bc:76:ab:0d:74:e0:ca:d0:12:a1:0e: 25:77:e8:5b:5f:c0:98:21:30:25:12:d6:15:ee:c7: 99:4d:13:89:7a:72:d6:76:a1:99:94:21:63:65:eb: 61:d8:18:22:3a:c4:05:a5:7d:da:76:b6:bc:b5:ca: da:c1:48:d3:bf:87:8a:83:f3:f4:d2:98:db:6c:0e: 46:da:30:58:0d:8d:5d:02:1b:67:ea:ed:c0:59:1d: 06:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:FB:4A:15:30:C8:83:A6:48:CE:C0:2E:9D:9D:F8:CC:5C:E7:7E:A0 X509v3 Authority Key Identifier: keyid:40:CF:D3:A4:9B:C7:1E:74:A0:D0:BF:7E:34:6C:A8:9B:29:59:7A:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QM_TpJvHHnSg0L9-NGyomylZehI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:da:28:0d:96:ab:ad:46:23:70:ea:c3:be:62:d0:7e:ad:c9: 86:c2:91:5f:46:11:b2:07:c5:3a:ac:a8:bf:cf:a6:d8:cf:12: f6:ad:b6:05:fa:4f:d4:5f:a3:be:0f:9a:3a:db:97:3e:d9:fb: 3b:1f:df:42:e7:40:6e:1c:aa:70:46:a6:cb:8a:4e:ed:24:47: 21:d8:cb:84:6d:57:5f:df:79:be:9e:92:0f:1c:46:e9:70:34: e6:a4:05:2c:b9:c0:32:97:1f:17:13:7b:fb:f1:66:c4:84:89: fb:aa:47:7f:12:b5:88:98:88:8f:74:da:8b:e0:a2:cb:95:36: 5f:01:69:f2:ca:90:46:bc:8b:81:9a:52:9f:8c:18:00:0a:42: 68:cb:1c:1f:a8:4f:05:9d:12:11:e9:6c:a0:8c:57:a0:70:c7: a5:65:40:51:76:9f:c2:2d:dc:2b:e7:16:d9:0e:38:6d:45:a0: b4:8e:64:a9:28:70:72:80:5f:d8:88:ab:da:cc:78:81:28:88: a5:a0:de:f1:26:7a:48:51:eb:52:dc:f4:ea:f9:25:c6:e8:8c: 3e:84:29:79:37:96:83:ef:18:73:7d:4f:17:52:9b:7e:fc:21: 9d:3d:88:a7:58:72:74:d5:1c:2a:87:38:07:db:98:d3:d7:70: fc:5d:4a:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHTn+sdfEZEawqy4BHtJ9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwY2ZkM2E0OWJjNzFlNzRhMGQwYmY3ZTM0NmNhODliMjk1 OTdhMTIwHhcNMjUxMjE3MDcwMTM0WhcNMjUxMjE4MDcwMTM0WjAzMTEwLwYDVQQD EygxMGZiNGExNTMwYzg4M2E2NDhjZWMwMmU5ZDlkZjhjYzVjZTc3ZWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiFz2Muu/VTiUCVb4VEirMD5mdhY FJP8QBrWa8vvXerPnfkT85pHJ9x7DXFlYKYQfem40dERJG29LcZOjQsoZCJm/Dqi M3cNUeYvE0xrwURM4fOiUuwgB0fuuzWHPlfzJadnylU7pMDXRwd0fYF+u/OK//4D xzb56tmN6DWjKOxUqfqpE9qwQ1RByZTIVr1EKPT7EvMsX39DkBBxVdrlfAIgwo7l lg3uvHarDXTgytASoQ4ld+hbX8CYITAlEtYV7seZTROJenLWdqGZlCFjZeth2Bgi OsQFpX3adra8tcrawUjTv4eKg/P00pjbbA5G2jBYDY1dAhtn6u3AWR0GNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBD7ShUwyIOmSM7ALp2d+Mxc536gMB8GA1UdIwQY MBaAFEDP06Sbxx50oNC/fjRsqJspWXoSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU1fVHBKdkhIblNnMEw5LU5HeW9teWxaZWhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wYjlmMDctZjE2Ni00Njc1LWIxODUt NjBiNmViYmI3ZTZmLzEvUU1fVHBKdkhIblNnMEw5LU5HeW9teWxaZWhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wYjlmMDctZjE2Ni00Njc1LWIxODUtNjBiNmViYmI3ZTZm LzEvUU1fVHBKdkhIblNnMEw5LU5HeW9teWxaZWhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZNooDZar rUYjcOrDvmLQfq3JhsKRX0YRsgfFOqyov8+m2M8S9q22BfpP1F+jvg+aOtuXPtn7 Ox/fQudAbhyqcEamy4pO7SRHIdjLhG1XX995vp6SDxxG6XA05qQFLLnAMpcfFxN7 +/FmxISJ+6pHfxK1iJiIj3Tai+Ciy5U2XwFp8sqQRryLgZpSn4wYAApCaMscH6hP BZ0SEelsoIxXoHDHpWVAUXafwi3cK+cW2Q44bUWgtI5kqShwcoBf2Iir2sx4gSiI paDe8SZ6SFHrUtz06vklxuiMPoQpeTeWg+8Yc31PF1KbfvwhnT2Ip1hydNUcKoc4 B9uY09dw/F1KMQ== -----END CERTIFICATE-----Generated at Wed Dec 17 16:36:06 2025 by rpki-client