This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft File: QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft (raw, json) Hash identifier: dXaLCXNKH6CTIDmudVnVdOOdvGTUsGuz8kDB1ybeodU= Subject key identifier: AE:2C:12:61:12:77:F2:01:92:20:F4:F5:DA:25:20:EB:69:53:33:AD Authority key identifier: 40:CF:69:CC:A2:C8:6E:19:47:54:78:8E:DC:D8:8E:35:2E:D4:E1:1C Certificate issuer: /CN=40cf69cca2c86e194754788edcd88e352ed4e11c Certificate serial: 019B3BD9BA4F069B3D2BF0076086294EA715 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QM9pzKLIbhlHVHiO3NiONS7U4Rw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft Manifest number: 0DA5 Signing time: Sat 20 Dec 2025 13:01:23 +0000 Manifest this update: Sat 20 Dec 2025 13:01:23 +0000 Manifest next update: Sun 21 Dec 2025 13:01:23 +0000 Files and hashes: 1: QM9pzKLIbhlHVHiO3NiONS7U4Rw.crl (hash: +eyx93fbcWGC0AVOtfLiFw8wKgrgPzBoRGk+EhRtgCg=) 2: vfjUIsx7CDVuZMrXZKkgTFoznUI.roa (hash: kc2fyWr6FJL7rTi0mPaMQj4eZbP6Y0dyJoouX+alOvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft rsync://rpki.ripe.net/repository/DEFAULT/QM9pzKLIbhlHVHiO3NiONS7U4Rw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:ba:4f:06:9b:3d:2b:f0:07:60:86:29:4e:a7:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40cf69cca2c86e194754788edcd88e352ed4e11c Validity Not Before: Dec 20 13:01:23 2025 GMT Not After : Dec 21 13:01:23 2025 GMT Subject: CN=ae2c12611277f2019220f4f5da2520eb695333ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:58:93:90:21:d4:42:a6:83:5f:02:6b:1d:38: 1a:85:d5:95:50:84:69:de:0d:5c:6f:e4:bf:3a:ea: c6:0c:66:29:e3:0f:27:b4:28:0a:db:61:a2:46:20: de:03:59:6c:ed:fa:01:74:d2:ca:15:c9:58:ca:fa: 45:57:39:2d:de:71:d9:dd:88:d1:bb:88:5b:20:6f: 48:36:f6:5c:b8:df:e9:c7:7a:fe:82:26:a4:5f:bf: 1b:56:75:fb:e0:ea:19:a1:ec:92:39:90:35:13:63: 0a:4c:7a:10:a6:54:38:15:7f:13:f2:76:64:8a:ee: 67:84:2c:9d:bb:5b:0b:70:9a:15:34:72:98:15:dc: 53:9e:2a:ae:bc:27:4c:88:9e:4a:74:77:06:80:d2: 01:c0:1f:be:5d:86:ae:55:47:bd:03:0a:8e:b8:3d: 99:44:d2:c1:5a:5d:77:d2:1e:12:89:67:6f:cb:05: f9:5a:5a:58:17:5b:0b:6c:6b:2c:e9:e2:d2:29:ea: da:ec:29:5e:00:cf:94:27:b3:7b:f7:5f:4b:0d:99: 66:e7:f7:cb:d5:e6:11:1e:8c:d9:cb:96:37:23:ac: 42:af:e1:df:8d:b2:1a:c5:49:ca:0c:16:aa:d5:87: 94:04:af:f4:45:8a:cc:9c:41:be:1f:00:9a:1e:24: fb:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:2C:12:61:12:77:F2:01:92:20:F4:F5:DA:25:20:EB:69:53:33:AD X509v3 Authority Key Identifier: keyid:40:CF:69:CC:A2:C8:6E:19:47:54:78:8E:DC:D8:8E:35:2E:D4:E1:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QM9pzKLIbhlHVHiO3NiONS7U4Rw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:b3:3e:fa:52:a8:2e:c1:8c:07:a2:57:76:4f:be:a3:4c:29: 18:b5:9d:ce:d9:60:1f:87:c8:22:d7:a7:de:20:f4:ce:7d:ef: 3f:44:7d:44:4d:b8:be:96:a6:4d:18:9f:0d:bf:df:e4:04:db: 32:ee:f5:64:bc:f0:fc:3c:0a:01:29:32:05:fe:e5:1f:c0:10: a7:a2:ac:96:6c:0f:47:17:d8:f9:cc:2d:ad:4d:5b:01:5d:8d: 24:c0:48:ae:30:fc:e4:5e:28:dd:28:28:69:8e:ca:34:5c:6b: 60:73:ed:89:44:6d:b3:26:33:6d:45:3a:33:82:1c:e2:cd:80: 44:f0:44:84:4b:d5:9d:77:26:c6:72:e7:dd:41:e8:12:93:22: a4:af:85:16:b2:9d:68:01:02:bd:39:1e:55:44:ca:a2:b5:4f: 05:48:ce:a4:7b:db:8f:42:b1:a0:84:5f:3d:b4:11:56:a6:ad: 68:e1:a9:42:69:e0:f7:9a:12:85:41:96:fb:7d:57:13:a8:d0: 26:fc:e7:cc:d6:bb:d7:20:be:8f:77:4e:21:1e:50:2d:cb:d3: 31:82:53:88:f7:0f:4a:28:a7:05:3f:8b:75:37:91:96:63:fe: f8:33:75:db:25:66:63:e1:8d:d9:3e:3c:8b:fc:f1:a5:83:a0: 0b:64:c1:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72bpPBps9K/AHYIYpTqcVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwY2Y2OWNjYTJjODZlMTk0NzU0Nzg4ZWRjZDg4ZTM1MmVk NGUxMWMwHhcNMjUxMjIwMTMwMTIzWhcNMjUxMjIxMTMwMTIzWjAzMTEwLwYDVQQD EyhhZTJjMTI2MTEyNzdmMjAxOTIyMGY0ZjVkYTI1MjBlYjY5NTMzM2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1iTkCHUQqaDXwJrHTgahdWVUIRp 3g1cb+S/OurGDGYp4w8ntCgK22GiRiDeA1ls7foBdNLKFclYyvpFVzkt3nHZ3YjR u4hbIG9INvZcuN/px3r+giakX78bVnX74OoZoeySOZA1E2MKTHoQplQ4FX8T8nZk iu5nhCydu1sLcJoVNHKYFdxTniquvCdMiJ5KdHcGgNIBwB++XYauVUe9AwqOuD2Z RNLBWl130h4SiWdvywX5WlpYF1sLbGss6eLSKera7CleAM+UJ7N7919LDZlm5/fL 1eYRHozZy5Y3I6xCr+HfjbIaxUnKDBaq1YeUBK/0RYrMnEG+HwCaHiT7vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK4sEmESd/IBkiD09dolIOtpUzOtMB8GA1UdIwQY MBaAFEDPacyiyG4ZR1R4jtzYjjUu1OEcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU05cHpLTEliaGxIVkhpTzNOaU9OUzdVNFJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iOGI2MDYtYzY1YS00MDlhLWJhOGQt Y2YxYTVkOGU1ZjZkLzEvUU05cHpLTEliaGxIVkhpTzNOaU9OUzdVNFJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9iOGI2MDYtYzY1YS00MDlhLWJhOGQtY2YxYTVkOGU1ZjZk LzEvUU05cHpLTEliaGxIVkhpTzNOaU9OUzdVNFJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyLM++lKo LsGMB6JXdk++o0wpGLWdztlgH4fIIten3iD0zn3vP0R9RE24vpamTRifDb/f5ATb Mu71ZLzw/DwKASkyBf7lH8AQp6KslmwPRxfY+cwtrU1bAV2NJMBIrjD85F4o3Sgo aY7KNFxrYHPtiURtsyYzbUU6M4Ic4s2ARPBEhEvVnXcmxnLn3UHoEpMipK+FFrKd aAECvTkeVUTKorVPBUjOpHvbj0KxoIRfPbQRVqataOGpQmng95oShUGW+31XE6jQ JvznzNa71yC+j3dOIR5QLcvTMYJTiPcPSiinBT+LdTeRlmP++DN12yVmY+GN2T48 i/zxpYOgC2TBUg== -----END CERTIFICATE-----Generated at Sat Dec 20 18:52:43 2025 by rpki-client