This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft File: QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft (raw, json) Hash identifier: Ieg4U2NBVBr9g1X+rJdy8n0kj39lI3eAqXTmWNsiGtY= Subject key identifier: 32:24:98:7F:15:C9:66:AE:AB:3B:B0:41:64:FB:F0:1A:A0:2C:46:19 Authority key identifier: 40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4 Certificate issuer: /CN=4092c47db8a21931154605d576c3b7341d06b4b4 Certificate serial: 019AF3891B604370A6773610686F46B5E551 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft Manifest number: 14EB Signing time: Sat 06 Dec 2025 12:00:40 +0000 Manifest this update: Sat 06 Dec 2025 12:00:40 +0000 Manifest next update: Sun 07 Dec 2025 12:00:40 +0000 Files and hashes: 1: QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl (hash: n2dDpfyx1Pm9EnSymqv9o8iUxE+7JV9yv9bq9EY5NMA=) 2: knkqtZcmX5gSTiCaXxHQZfriQgw.roa (hash: E9ZLKfrMdp8ZIK1kQ0GbAJkgNgAmhxZR6M5lJ1uXi1w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:1b:60:43:70:a6:77:36:10:68:6f:46:b5:e5:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4092c47db8a21931154605d576c3b7341d06b4b4 Validity Not Before: Dec 6 12:00:40 2025 GMT Not After : Dec 7 12:00:40 2025 GMT Subject: CN=3224987f15c966aeab3bb04164fbf01aa02c4619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:08:31:50:6a:d1:3e:95:37:e6:86:a3:a8:27: ee:9b:35:c2:8d:d6:2b:ab:6f:55:b0:1a:f7:73:e4: 7a:09:6b:13:9f:f5:0c:4b:25:d2:4c:6e:df:1b:35: 67:f9:8b:26:0c:2c:d7:30:1b:66:d7:ce:d7:a7:ae: d1:ab:c4:90:ac:6a:f3:bc:cc:16:13:b1:08:97:27: 33:04:96:78:f7:da:f1:ef:d4:2e:15:77:4d:15:71: 44:a8:8e:3b:cf:e6:d1:5f:3b:34:a5:ef:fa:3f:34: 95:2f:b9:0c:c6:b8:4b:a5:74:d5:ff:4d:a3:e9:e0: 15:6f:16:91:34:b4:e7:1f:b6:92:a5:80:c1:ba:70: 59:6d:94:80:a3:d9:92:a0:e0:35:8e:c3:e9:d9:0d: ff:82:8b:89:a2:2c:23:e4:21:3d:91:c0:da:a6:0f: 7d:65:58:08:26:7d:89:13:25:2e:2d:34:dd:ac:e0: 64:af:f2:bf:2e:d5:10:5c:b1:eb:b3:8b:d7:bc:df: 4b:22:96:1e:8a:e8:15:fd:a5:2d:d7:f9:1c:75:67: e3:ee:0f:d8:16:e3:ba:0d:51:63:d6:7e:d4:11:a7: b6:ea:5c:36:db:61:52:7e:70:43:a1:44:93:89:84: b3:35:1a:44:d2:24:bc:85:0d:fa:4d:17:a7:44:13: 06:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:24:98:7F:15:C9:66:AE:AB:3B:B0:41:64:FB:F0:1A:A0:2C:46:19 X509v3 Authority Key Identifier: keyid:40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:e2:66:0a:0a:2a:1b:8e:6e:b1:a1:46:7f:25:48:1a:2b:a2: 59:93:22:e5:d2:ce:b7:a1:b7:de:c4:28:28:e9:7f:31:f8:dd: 35:10:2b:71:a8:8a:32:9a:34:2a:f6:46:ad:59:7d:11:e9:91: d5:e5:8f:0c:d6:90:10:d6:81:4e:30:49:ba:e1:9f:35:96:f4: 10:96:90:ae:f1:97:65:5e:ff:8d:34:54:1d:e4:61:ab:0f:d7: a2:c9:9d:42:9e:be:15:a1:20:5e:ab:72:37:e2:bf:26:ac:63: 78:ee:03:ab:0c:e3:72:23:82:48:77:6d:fb:82:09:29:dc:ed: 6c:10:e8:0e:3d:6e:c0:98:dc:fd:f2:bb:9a:84:dc:5e:fd:7f: 60:ac:7e:bb:f8:c8:5a:b6:48:94:7e:ca:c0:bd:08:41:a5:19: d5:02:fc:8e:63:88:1f:6c:c0:ad:b2:72:35:ab:ca:3e:6f:15: 90:b5:6c:7f:1a:34:76:af:0a:e3:3e:57:3d:1f:8d:28:c5:0c: ca:bc:d7:99:ca:84:e1:39:84:71:66:cc:7c:0d:1d:18:0d:eb: 99:50:4c:18:0b:26:4f:4a:2c:0f:b9:e5:0d:98:5c:57:9a:00: 94:12:cd:2a:73:79:fe:d1:9b:79:7e:a5:0c:f1:30:e3:8f:71: 89:26:d7:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziRtgQ3CmdzYQaG9GteVRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwOTJjNDdkYjhhMjE5MzExNTQ2MDVkNTc2YzNiNzM0MWQw NmI0YjQwHhcNMjUxMjA2MTIwMDQwWhcNMjUxMjA3MTIwMDQwWjAzMTEwLwYDVQQD EygzMjI0OTg3ZjE1Yzk2NmFlYWIzYmIwNDE2NGZiZjAxYWEwMmM0NjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQgxUGrRPpU35oajqCfumzXCjdYr q29VsBr3c+R6CWsTn/UMSyXSTG7fGzVn+YsmDCzXMBtm187Xp67Rq8SQrGrzvMwW E7EIlyczBJZ499rx79QuFXdNFXFEqI47z+bRXzs0pe/6PzSVL7kMxrhLpXTV/02j 6eAVbxaRNLTnH7aSpYDBunBZbZSAo9mSoOA1jsPp2Q3/gouJoiwj5CE9kcDapg99 ZVgIJn2JEyUuLTTdrOBkr/K/LtUQXLHrs4vXvN9LIpYeiugV/aUt1/kcdWfj7g/Y FuO6DVFj1n7UEae26lw222FSfnBDoUSTiYSzNRpE0iS8hQ36TRenRBMGHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDIkmH8VyWauqzuwQWT78BqgLEYZMB8GA1UdIwQY MBaAFECSxH24ohkxFUYF1XbDtzQdBrS0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUpMRWZiaWlHVEVWUmdYVmRzTzNOQjBHdExRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iMjI4ZDktN2ZmMy00YzQwLTk1YTYt OGEzNmE2ZmFjZDUwLzEvUUpMRWZiaWlHVEVWUmdYVmRzTzNOQjBHdExRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9iMjI4ZDktN2ZmMy00YzQwLTk1YTYtOGEzNmE2ZmFjZDUw LzEvUUpMRWZiaWlHVEVWUmdYVmRzTzNOQjBHdExRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIuJmCgoq G45usaFGfyVIGiuiWZMi5dLOt6G33sQoKOl/MfjdNRArcaiKMpo0KvZGrVl9EemR 1eWPDNaQENaBTjBJuuGfNZb0EJaQrvGXZV7/jTRUHeRhqw/XosmdQp6+FaEgXqty N+K/JqxjeO4DqwzjciOCSHdt+4IJKdztbBDoDj1uwJjc/fK7moTcXv1/YKx+u/jI WrZIlH7KwL0IQaUZ1QL8jmOIH2zArbJyNavKPm8VkLVsfxo0dq8K4z5XPR+NKMUM yrzXmcqE4TmEcWbMfA0dGA3rmVBMGAsmT0osD7nlDZhcV5oAlBLNKnN5/tGbeX6l DPEw449xiSbXFA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:25:40 2025 by rpki-client