This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft File: QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft (raw, json) Hash identifier: 8KRW4WW8fn4lvj6ujrbzD9CFq/BhI3koqAthur4tV2I= Subject key identifier: 15:47:AA:C5:BE:B3:EC:16:32:C4:27:49:F9:9B:10:47:1D:78:37:23 Authority key identifier: 40:C3:D3:7B:E4:35:A9:C3:3F:1C:63:E5:0D:0D:64:64:ED:16:10:04 Certificate issuer: /CN=40c3d37be435a9c33f1c63e50d0d6464ed161004 Certificate serial: 019AF164544A49CDBFD87688BC10CE15210C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft Manifest number: 16BC Signing time: Sat 06 Dec 2025 02:01:15 +0000 Manifest this update: Sat 06 Dec 2025 02:01:15 +0000 Manifest next update: Sun 07 Dec 2025 02:01:15 +0000 Files and hashes: 1: I3asWb0Ke_YTZ9x8-oMXPECbM9c.roa (hash: DFO6kXzPePgIeZm2V5GpwnQuioD5uOOrmUgP/RCLs14=) 2: QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.crl (hash: XZpMxqetflwdIMn0gVI/fNCG/oGFejG2tGJQKPihwQE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:54:4a:49:cd:bf:d8:76:88:bc:10:ce:15:21:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40c3d37be435a9c33f1c63e50d0d6464ed161004 Validity Not Before: Dec 6 02:01:15 2025 GMT Not After : Dec 7 02:01:15 2025 GMT Subject: CN=1547aac5beb3ec1632c42749f99b10471d783723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:db:18:cd:3e:28:e5:cd:b0:72:d2:e4:63:c4: 8e:b4:28:6c:ed:a5:d9:c4:d7:fe:e6:26:b4:45:e7: 4e:ea:2f:04:39:77:18:c3:1e:28:fb:81:b2:11:1e: 0a:43:48:c7:51:68:25:c4:b9:2d:df:78:35:f8:a6: f2:37:99:a0:1f:9f:aa:ca:ee:f3:44:57:3e:94:5a: cc:50:a3:3b:fc:f2:63:a8:dd:45:65:94:78:2c:85: 43:59:63:19:29:77:1c:e4:ad:bd:a4:a3:e6:23:97: 54:dd:d0:98:5e:c9:0d:5f:3c:73:a4:f5:00:20:7b: 9f:46:15:94:40:9b:e9:57:d8:37:c9:89:0f:58:ba: f1:dc:9b:3c:7b:f9:e7:bf:ea:8e:5c:dd:d7:12:07: d5:3a:36:74:be:74:1d:a0:a5:4b:1b:90:2a:4d:a8: 53:3a:aa:bc:89:d9:27:fa:4c:c4:04:14:d6:16:e8: 1e:5c:b2:59:53:9b:34:76:e1:84:f1:f5:ea:b5:f4: 41:76:ae:40:b3:ac:d0:bb:76:2f:6c:1b:2a:2d:9e: 37:2a:b4:2f:7a:4b:e8:e2:8d:f5:47:29:ee:f1:a8: 29:da:f9:15:79:4f:16:8a:5f:a6:9c:56:3a:62:31: 70:91:9f:25:98:41:c6:1d:7e:a0:f7:4f:cc:32:f5: 1b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:47:AA:C5:BE:B3:EC:16:32:C4:27:49:F9:9B:10:47:1D:78:37:23 X509v3 Authority Key Identifier: keyid:40:C3:D3:7B:E4:35:A9:C3:3F:1C:63:E5:0D:0D:64:64:ED:16:10:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:05:43:5b:49:b2:4e:db:b8:44:b0:e6:7e:d5:07:a7:e9:85: 2b:4b:a3:f5:8e:77:6c:23:f1:5b:58:3f:7b:ca:82:dc:c6:79: 63:37:af:de:e3:a1:bb:6d:68:13:d4:e2:57:42:b2:18:59:8b: c0:07:84:be:1b:f9:68:6e:9c:e5:53:2c:68:fd:5c:b8:b4:f3: 3b:bf:42:18:a7:18:2d:f1:62:55:1e:46:43:9d:a3:50:71:76: 78:b3:a9:b1:c9:86:85:9d:1f:3f:dd:03:29:92:1b:7d:85:2a: 34:e4:49:93:96:f6:e1:20:47:40:a7:76:56:b9:21:26:f3:81: 20:5c:f8:3e:a3:9d:31:29:10:55:2b:5b:c4:f4:95:52:0e:83: d6:12:f8:dd:e7:04:9e:72:be:55:a6:2b:93:89:ae:7a:56:ab: 3d:6e:ac:ac:ac:86:3c:c6:6d:71:08:28:88:95:79:53:61:32: 58:eb:74:3e:0c:27:45:98:c3:32:1b:6e:20:2c:ff:c0:93:c9: cb:0d:82:ce:ff:0a:14:09:24:c7:a1:74:59:38:fe:73:71:76: 8f:24:d3:3a:dc:61:bd:63:e5:43:53:54:4b:e4:3a:3b:ff:3d: f1:20:7e:ad:42:c4:5c:58:5f:e2:86:74:19:8b:ff:da:d4:5d: 94:34:e1:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZFRKSc2/2HaIvBDOFSEMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwYzNkMzdiZTQzNWE5YzMzZjFjNjNlNTBkMGQ2NDY0ZWQx NjEwMDQwHhcNMjUxMjA2MDIwMTE1WhcNMjUxMjA3MDIwMTE1WjAzMTEwLwYDVQQD EygxNTQ3YWFjNWJlYjNlYzE2MzJjNDI3NDlmOTliMTA0NzFkNzgzNzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtsYzT4o5c2wctLkY8SOtChs7aXZ xNf+5ia0RedO6i8EOXcYwx4o+4GyER4KQ0jHUWglxLkt33g1+KbyN5mgH5+qyu7z RFc+lFrMUKM7/PJjqN1FZZR4LIVDWWMZKXcc5K29pKPmI5dU3dCYXskNXzxzpPUA IHufRhWUQJvpV9g3yYkPWLrx3Js8e/nnv+qOXN3XEgfVOjZ0vnQdoKVLG5AqTahT Oqq8idkn+kzEBBTWFugeXLJZU5s0duGE8fXqtfRBdq5As6zQu3YvbBsqLZ43KrQv ekvo4o31Rynu8agp2vkVeU8Wil+mnFY6YjFwkZ8lmEHGHX6g90/MMvUbnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBVHqsW+s+wWMsQnSfmbEEcdeDcjMB8GA1UdIwQY MBaAFEDD03vkNanDPxxj5Q0NZGTtFhAEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU1QVGUtUTFxY01fSEdQbERRMWtaTzBXRUFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi83ZTNjN2YtMjE4NC00MDNkLTgwY2Yt NmU0YjNjOTJhODI3LzEvUU1QVGUtUTFxY01fSEdQbERRMWtaTzBXRUFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi83ZTNjN2YtMjE4NC00MDNkLTgwY2YtNmU0YjNjOTJhODI3 LzEvUU1QVGUtUTFxY01fSEdQbERRMWtaTzBXRUFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADQVDW0my Ttu4RLDmftUHp+mFK0uj9Y53bCPxW1g/e8qC3MZ5Yzev3uOhu21oE9TiV0KyGFmL wAeEvhv5aG6c5VMsaP1cuLTzO79CGKcYLfFiVR5GQ52jUHF2eLOpscmGhZ0fP90D KZIbfYUqNORJk5b24SBHQKd2VrkhJvOBIFz4PqOdMSkQVStbxPSVUg6D1hL43ecE nnK+VaYrk4muelarPW6srKyGPMZtcQgoiJV5U2EyWOt0PgwnRZjDMhtuICz/wJPJ yw2Czv8KFAkkx6F0WTj+c3F2jyTTOtxhvWPlQ1NUS+Q6O/898SB+rULEXFhf4oZ0 GYv/2tRdlDThVQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:04:32 2025 by rpki-client