This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft File: QCD01MdSjYqCfsckkY_i31NL2QU.mft (raw, json) Hash identifier: IDisNmiaUWCYIou5yMov7yVsREpBiGgmq9sxqVG7WOI= Subject key identifier: B7:69:FB:94:6A:3A:29:5B:3C:96:56:05:AB:71:6E:57:4E:19:97:EA Authority key identifier: 40:20:F4:D4:C7:52:8D:8A:82:7E:C7:24:91:8F:E2:DF:53:4B:D9:05 Certificate issuer: /CN=4020f4d4c7528d8a827ec724918fe2df534bd905 Certificate serial: 019B443799B68E550C5A2D2BE164BAD7B88F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft Manifest number: 0691 Signing time: Mon 22 Dec 2025 04:00:53 +0000 Manifest this update: Mon 22 Dec 2025 04:00:53 +0000 Manifest next update: Tue 23 Dec 2025 04:00:53 +0000 Files and hashes: 1: QCD01MdSjYqCfsckkY_i31NL2QU.crl (hash: uwrlxp5ZmyHagnKFMIY0sAvzK4wFurp8j38wIKD2sQ0=) 2: Zx4sEHNKCl_Lh5FzOtQjZYd3ZCE.roa (hash: 2Xu5Qu43xBBRy4X2ZZ8tBlY4rjWAu0V1llrLDaiQerk=) 3: oaLZxtKD66NwRygInPYpaycKqOc.roa (hash: Ja3SjwoX4eh5IRVh7jPL7K8MqCmfJQ9Q/LWhTt+xawU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.crl rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:37:99:b6:8e:55:0c:5a:2d:2b:e1:64:ba:d7:b8:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4020f4d4c7528d8a827ec724918fe2df534bd905 Validity Not Before: Dec 22 04:00:53 2025 GMT Not After : Dec 23 04:00:53 2025 GMT Subject: CN=b769fb946a3a295b3c965605ab716e574e1997ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:85:b3:f7:c7:f5:c9:a8:26:ff:a3:70:d1:fb: f9:63:e2:48:e1:64:34:1f:28:2c:56:b7:fc:ac:e4: 92:76:85:76:c5:e6:a9:6b:b1:9f:cd:df:3e:b4:4c: d9:51:8f:da:fe:26:70:0d:08:b5:09:4d:d6:e4:38: 1d:d9:2e:ab:d8:4d:1b:a7:41:28:f2:0c:ef:df:3d: 7d:0f:41:a7:52:54:67:9b:1b:d0:b1:4d:e2:5e:49: 68:de:a8:16:dd:48:b7:74:25:5c:3f:83:16:11:91: 05:d5:7a:37:d4:cc:7b:5d:a2:1d:9a:76:44:f8:41: 6f:78:2c:6d:f4:1d:2c:a5:5b:7b:e3:76:9d:3c:03: 16:a2:7d:b5:56:9d:0c:58:56:57:8f:47:9c:00:f5: 4f:51:b0:07:73:30:d4:a2:5c:e1:d6:67:af:b5:de: 17:cf:73:fe:05:26:5b:21:c2:65:9a:0a:d5:e1:fa: e2:12:02:13:14:f8:86:7d:47:56:39:37:74:82:8c: 4c:0a:0f:44:7c:14:c5:94:c4:48:4e:a4:bb:62:54: d4:f5:05:7d:20:9c:32:a0:e5:62:a3:fe:21:f2:72: 17:8f:d4:20:c4:c5:04:39:fa:81:9d:f0:b6:81:2e: 82:40:8a:f5:b8:48:fa:04:e0:72:36:78:40:7f:58: 2e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:69:FB:94:6A:3A:29:5B:3C:96:56:05:AB:71:6E:57:4E:19:97:EA X509v3 Authority Key Identifier: keyid:40:20:F4:D4:C7:52:8D:8A:82:7E:C7:24:91:8F:E2:DF:53:4B:D9:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:c7:6b:85:00:f7:96:e8:34:a6:08:b4:46:d2:4d:8f:75:5e: ba:86:9d:43:b7:39:3b:89:8d:f6:81:96:cb:83:6e:04:8f:37: 54:97:67:cb:01:e7:f4:be:bb:1c:52:65:c2:3b:71:cc:cd:fa: 94:fe:28:a4:f7:d6:8d:07:ab:01:4d:48:c5:a7:86:9f:ae:29: c6:2a:40:85:80:e0:86:6c:b7:d3:b1:f1:25:50:44:1c:ff:ae: b2:4e:b2:b9:d4:79:a5:68:63:a3:e5:18:96:7c:50:d9:e9:ec: be:0f:30:7c:30:08:19:9f:ef:ee:c0:47:20:5d:4f:88:de:28: 1d:b7:06:c4:1e:9a:1e:87:c1:e6:7e:69:dc:92:55:3f:f9:ef: 41:be:68:f6:c6:d2:f6:ea:68:77:03:bc:17:af:d4:32:c8:44: 16:e7:75:4f:a5:fa:80:53:0c:07:15:bf:82:a4:ab:96:36:29: ac:91:87:fb:2e:24:16:56:94:e3:0d:1b:9b:59:f1:95:49:15: a0:29:28:d8:19:8a:9a:41:5a:87:fd:99:71:48:82:33:61:9e: 1f:97:1b:ea:33:ae:cf:d6:9d:05:31:b5:9f:db:dc:ed:bd:69: 25:be:31:41:73:0d:b1:38:b3:51:f1:1f:17:26:2c:38:ee:1c: e7:69:f2:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEN5m2jlUMWi0r4WS617iPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMjBmNGQ0Yzc1MjhkOGE4MjdlYzcyNDkxOGZlMmRmNTM0 YmQ5MDUwHhcNMjUxMjIyMDQwMDUzWhcNMjUxMjIzMDQwMDUzWjAzMTEwLwYDVQQD EyhiNzY5ZmI5NDZhM2EyOTViM2M5NjU2MDVhYjcxNmU1NzRlMTk5N2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YWz98f1yagm/6Nw0fv5Y+JI4WQ0 HygsVrf8rOSSdoV2xeapa7Gfzd8+tEzZUY/a/iZwDQi1CU3W5Dgd2S6r2E0bp0Eo 8gzv3z19D0GnUlRnmxvQsU3iXklo3qgW3Ui3dCVcP4MWEZEF1Xo31Mx7XaIdmnZE +EFveCxt9B0spVt743adPAMWon21Vp0MWFZXj0ecAPVPUbAHczDUolzh1mevtd4X z3P+BSZbIcJlmgrV4friEgITFPiGfUdWOTd0goxMCg9EfBTFlMRITqS7YlTU9QV9 IJwyoOVio/4h8nIXj9QgxMUEOfqBnfC2gS6CQIr1uEj6BOByNnhAf1guEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLdp+5RqOilbPJZWBatxbldOGZfqMB8GA1UdIwQY MBaAFEAg9NTHUo2Kgn7HJJGP4t9TS9kFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUNEMDFNZFNqWXFDZnNja2tZX2kzMU5MMlFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8yZjdhNmUtZThjMS00ZjYyLTk1Zjkt NjRiZmI3OTkwMGQ2LzEvUUNEMDFNZFNqWXFDZnNja2tZX2kzMU5MMlFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy8yZjdhNmUtZThjMS00ZjYyLTk1ZjktNjRiZmI3OTkwMGQ2 LzEvUUNEMDFNZFNqWXFDZnNja2tZX2kzMU5MMlFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH8drhQD3 lug0pgi0RtJNj3VeuoadQ7c5O4mN9oGWy4NuBI83VJdnywHn9L67HFJlwjtxzM36 lP4opPfWjQerAU1IxaeGn64pxipAhYDghmy307HxJVBEHP+usk6yudR5pWhjo+UY lnxQ2ensvg8wfDAIGZ/v7sBHIF1PiN4oHbcGxB6aHofB5n5p3JJVP/nvQb5o9sbS 9upodwO8F6/UMshEFud1T6X6gFMMBxW/gqSrljYprJGH+y4kFlaU4w0bm1nxlUkV oCko2BmKmkFah/2ZcUiCM2GeH5cb6jOuz9adBTG1n9vc7b1pJb4xQXMNsTizUfEf FyYsOO4c52nyCA== -----END CERTIFICATE-----Generated at Mon Dec 22 10:37:57 2025 by rpki-client