This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft File: QCAZkETFTCN5A_ZW-DsmQMLR30U.mft (raw, json) Hash identifier: WWSxB90DuEchAoUz2x0VDUVTtJaXwOtscchRo35hvZY= Subject key identifier: 8D:7D:F7:AE:73:40:AC:56:02:74:28:DE:F4:7A:C2:B6:D5:DB:3E:63 Authority key identifier: 40:20:19:90:44:C5:4C:23:79:03:F6:56:F8:3B:26:40:C2:D1:DF:45 Certificate issuer: /CN=4020199044c54c237903f656f83b2640c2d1df45 Certificate serial: 019AF5E5CC29E4BF4FCB61F0D5BADFE1A57D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft Manifest number: 0BBE Signing time: Sat 06 Dec 2025 23:01:09 +0000 Manifest this update: Sat 06 Dec 2025 23:01:09 +0000 Manifest next update: Sun 07 Dec 2025 23:01:09 +0000 Files and hashes: 1: QCAZkETFTCN5A_ZW-DsmQMLR30U.crl (hash: R8Li6r6RAvLfsXgozVdM405k6+2zDxSOj1/O+0Pftzc=) 2: i1vQfq5K6A-H06YMbg-F_fjtfl4.roa (hash: +8kYxsIrdCv4MUOM8YLp4u35KK9tvU6LHvc0dzsNKRw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:cc:29:e4:bf:4f:cb:61:f0:d5:ba:df:e1:a5:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4020199044c54c237903f656f83b2640c2d1df45 Validity Not Before: Dec 6 23:01:09 2025 GMT Not After : Dec 7 23:01:09 2025 GMT Subject: CN=8d7df7ae7340ac56027428def47ac2b6d5db3e63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9d:24:50:d1:33:b1:25:cf:37:86:fe:0e:fa: b9:e6:89:3d:be:5a:0f:66:89:74:d5:46:36:14:90: ea:92:11:e6:ae:08:10:df:0a:8c:dd:0f:00:4c:66: 79:83:4b:3d:4a:bc:0b:eb:2e:d0:c6:50:0f:b6:7d: 3f:ac:d2:62:87:46:08:07:68:61:24:e0:d0:6e:06: 09:41:b0:fe:86:16:22:c1:f4:5d:97:7f:68:f4:87: 8b:50:73:43:9d:a8:73:00:b1:b4:86:31:96:38:2d: 61:0a:42:60:b2:56:36:48:2d:3e:b8:48:e1:5f:25: bb:8e:34:99:f0:85:85:8b:8c:df:6d:ad:cf:63:03: 69:47:f2:34:6e:1c:af:36:e8:56:80:1f:a1:0f:d9: 85:52:0f:7b:7e:f9:4c:2b:45:a1:ac:4e:99:9c:ca: 63:e2:0a:b7:7b:dc:88:98:de:65:a7:86:10:3d:75: f2:2b:35:9c:b2:3c:b4:23:2a:5f:2c:1c:0e:be:b1: ce:11:d1:06:cb:7c:41:5b:02:77:09:9e:49:a2:51: bf:f6:ab:8b:d9:2f:e7:a8:84:ff:e2:aa:96:6a:e9: 3e:c7:70:05:0c:50:58:f8:27:e4:e0:fb:f0:61:2a: 9b:45:a5:53:1e:0d:70:7b:6d:03:a4:ca:6f:42:6a: 04:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:7D:F7:AE:73:40:AC:56:02:74:28:DE:F4:7A:C2:B6:D5:DB:3E:63 X509v3 Authority Key Identifier: keyid:40:20:19:90:44:C5:4C:23:79:03:F6:56:F8:3B:26:40:C2:D1:DF:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:d2:4f:e0:02:9d:c0:8b:b6:b3:8a:0d:2a:1e:12:44:86:69: b4:88:35:f1:71:b5:3a:13:29:13:45:aa:38:4e:7d:fb:5b:50: d5:be:79:20:cc:44:0b:0f:3e:d6:82:48:36:3c:0a:e1:db:cd: ef:95:35:f8:de:8e:a9:62:8c:c2:41:7b:bb:c7:19:5e:ca:bb: 8f:5c:0d:02:d1:b1:dd:17:d8:3d:bf:f3:71:f4:99:fe:c7:33: b8:0a:e4:79:54:bc:4f:8b:a2:47:b4:f0:e4:af:ec:26:73:8c: f9:81:7a:a1:38:90:0e:15:32:c1:bb:e9:98:a4:85:3d:29:6a: 27:4d:58:1a:a1:d8:75:82:9c:09:fc:37:6a:76:6b:46:90:a5: c6:51:00:ca:d1:d3:7e:dc:46:4f:e7:b7:8c:2b:bf:7c:f3:b5: b9:2b:bc:05:65:a8:7e:23:36:77:bc:5b:49:f3:64:08:47:1e: db:f0:e7:3d:a3:f8:6b:37:f4:bc:74:5b:c2:53:17:4a:d2:4b: f6:db:3d:af:0f:61:86:4f:b2:c6:cf:a5:9c:9c:12:29:be:0a: ba:c4:32:95:f3:7b:92:dd:64:46:31:0e:4a:b9:28:4d:c3:2d: 9a:37:10:45:61:23:ad:4e:ed:4a:63:46:f8:76:5a:8f:68:f8: d1:5e:bc:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15cwp5L9Py2Hw1brf4aV9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMjAxOTkwNDRjNTRjMjM3OTAzZjY1NmY4M2IyNjQwYzJk MWRmNDUwHhcNMjUxMjA2MjMwMTA5WhcNMjUxMjA3MjMwMTA5WjAzMTEwLwYDVQQD Eyg4ZDdkZjdhZTczNDBhYzU2MDI3NDI4ZGVmNDdhYzJiNmQ1ZGIzZTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr50kUNEzsSXPN4b+Dvq55ok9vloP Zol01UY2FJDqkhHmrggQ3wqM3Q8ATGZ5g0s9SrwL6y7QxlAPtn0/rNJih0YIB2hh JODQbgYJQbD+hhYiwfRdl39o9IeLUHNDnahzALG0hjGWOC1hCkJgslY2SC0+uEjh XyW7jjSZ8IWFi4zfba3PYwNpR/I0bhyvNuhWgB+hD9mFUg97fvlMK0WhrE6ZnMpj 4gq3e9yImN5lp4YQPXXyKzWcsjy0IypfLBwOvrHOEdEGy3xBWwJ3CZ5JolG/9quL 2S/nqIT/4qqWauk+x3AFDFBY+Cfk4PvwYSqbRaVTHg1we20DpMpvQmoEAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI19965zQKxWAnQo3vR6wrbV2z5jMB8GA1UdIwQY MBaAFEAgGZBExUwjeQP2Vvg7JkDC0d9FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUNBWmtFVEZUQ041QV9aVy1Ec21RTUxSMzBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS80YmEwZGMtNDcwMi00N2MxLWJhOWUt NGI3NTBiYmM2MTY3LzEvUUNBWmtFVEZUQ041QV9aVy1Ec21RTUxSMzBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS80YmEwZGMtNDcwMi00N2MxLWJhOWUtNGI3NTBiYmM2MTY3 LzEvUUNBWmtFVEZUQ041QV9aVy1Ec21RTUxSMzBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY9JP4AKd wIu2s4oNKh4SRIZptIg18XG1OhMpE0WqOE59+1tQ1b55IMxECw8+1oJINjwK4dvN 75U1+N6OqWKMwkF7u8cZXsq7j1wNAtGx3RfYPb/zcfSZ/sczuArkeVS8T4uiR7Tw 5K/sJnOM+YF6oTiQDhUywbvpmKSFPSlqJ01YGqHYdYKcCfw3anZrRpClxlEAytHT ftxGT+e3jCu/fPO1uSu8BWWofiM2d7xbSfNkCEce2/DnPaP4azf0vHRbwlMXStJL 9ts9rw9hhk+yxs+lnJwSKb4KusQylfN7kt1kRjEOSrkoTcMtmjcQRWEjrU7tSmNG +HZaj2j40V68pw== -----END CERTIFICATE-----Generated at Sun Dec 7 00:38:15 2025 by rpki-client