This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft File: QCD01MdSjYqCfsckkY_i31NL2QU.mft (raw, json) Hash identifier: SqH5Zz1PnI45+MM+7bZ5xpv68yK/dxKLxjGM6gaPrdc= Subject key identifier: 2E:27:72:D4:5F:AE:C6:A3:34:95:FA:BF:73:30:F0:41:C3:6F:A6:54 Authority key identifier: 40:20:F4:D4:C7:52:8D:8A:82:7E:C7:24:91:8F:E2:DF:53:4B:D9:05 Certificate issuer: /CN=4020f4d4c7528d8a827ec724918fe2df534bd905 Certificate serial: 019B3A8FA606631E5CF0873DF9A770868390 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft Manifest number: 068C Signing time: Sat 20 Dec 2025 07:00:51 +0000 Manifest this update: Sat 20 Dec 2025 07:00:51 +0000 Manifest next update: Sun 21 Dec 2025 07:00:51 +0000 Files and hashes: 1: QCD01MdSjYqCfsckkY_i31NL2QU.crl (hash: cmIoCXV2Ip81xONIsQVFZh1utIO0ECiX7qUNnR6MhBc=) 2: Zx4sEHNKCl_Lh5FzOtQjZYd3ZCE.roa (hash: 2Xu5Qu43xBBRy4X2ZZ8tBlY4rjWAu0V1llrLDaiQerk=) 3: oaLZxtKD66NwRygInPYpaycKqOc.roa (hash: Ja3SjwoX4eh5IRVh7jPL7K8MqCmfJQ9Q/LWhTt+xawU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.crl rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:a6:06:63:1e:5c:f0:87:3d:f9:a7:70:86:83:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4020f4d4c7528d8a827ec724918fe2df534bd905 Validity Not Before: Dec 20 07:00:51 2025 GMT Not After : Dec 21 07:00:51 2025 GMT Subject: CN=2e2772d45faec6a33495fabf7330f041c36fa654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:eb:69:74:ea:19:51:1f:8b:0d:dd:22:07:83: 99:af:3d:f2:2f:ad:ca:08:89:26:6e:2c:a1:73:ff: 92:04:40:4b:81:e7:16:44:97:ee:49:0a:89:ba:15: 06:78:aa:85:43:ee:d4:a1:f3:63:76:13:cb:d4:f3: 9f:0e:c3:87:d3:03:e8:8a:d1:89:5e:dc:d8:7f:8a: a2:1f:5d:26:1a:e5:31:75:6d:37:d3:50:01:d5:b7: 7b:de:cf:b6:83:0f:0f:0d:f8:f7:f1:c8:fc:ca:b9: 00:bd:56:46:49:50:cf:75:0b:2f:d4:fb:04:d0:3f: 95:36:35:40:20:79:90:80:4f:1c:b9:9b:77:5f:c1: 6f:e2:18:cf:06:40:ab:be:95:2f:4d:61:9b:a7:9e: f8:58:fa:14:e0:aa:dd:aa:3a:8b:6d:d8:28:f0:fe: bc:5d:d6:64:1b:4e:6f:43:89:30:37:19:c6:76:bb: be:c6:ca:a0:38:a5:d4:1a:b8:8a:f3:63:52:42:27: 3a:4d:60:5a:52:37:46:0c:2b:6b:84:0e:84:bb:af: df:f2:8c:b4:d0:e1:9c:3c:fc:60:ed:3e:90:a5:1b: 23:3b:76:f3:9d:be:16:b9:cf:39:47:f9:4c:4d:9c: 51:f3:ab:6e:21:e9:85:aa:7d:28:43:bd:4d:52:f6: 85:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:27:72:D4:5F:AE:C6:A3:34:95:FA:BF:73:30:F0:41:C3:6F:A6:54 X509v3 Authority Key Identifier: keyid:40:20:F4:D4:C7:52:8D:8A:82:7E:C7:24:91:8F:E2:DF:53:4B:D9:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:c6:3a:e2:f6:8e:6e:ec:2f:30:2b:0f:44:25:b0:39:ec:88: 1f:8c:27:40:a1:c1:10:94:e6:82:a1:89:17:13:19:c3:52:8a: 5f:f5:56:2c:ea:a0:af:d6:a5:54:78:68:30:dc:cd:80:0e:3c: 63:8c:7f:e5:4c:83:f6:bd:58:16:01:cc:a5:20:b3:f1:7b:00: 5d:fb:4c:9d:65:eb:c4:b4:fc:e8:0b:d7:f6:d7:15:57:e2:f5: 2b:4f:79:d2:81:62:f2:70:cb:3d:3e:0c:9e:ba:af:bc:13:2a: 43:bf:36:0a:e6:94:0e:a8:c6:9f:d2:a2:14:5c:4b:3b:61:44: 35:1e:7b:98:0f:d6:29:73:12:88:3d:d4:b8:25:89:cc:c9:8e: bf:00:f0:b1:9c:36:18:a7:c5:1c:08:39:05:9d:1b:3b:0f:72: b0:e1:ad:f6:8d:87:83:d7:89:ed:dc:af:36:e3:2c:2c:e4:17: e8:86:af:57:27:8e:7c:0d:47:06:e3:1b:26:b2:72:09:c9:84: 9c:d2:b0:34:95:45:e4:1f:10:dd:6b:82:7a:fb:b1:59:37:7e: 15:97:39:87:1e:db:f7:2e:3e:b9:01:ae:98:45:6d:7a:76:4e: 4c:15:bb:e5:12:48:88:7e:4f:fd:c5:f7:bf:39:da:23:30:47: 53:b0:2b:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j6YGYx5c8Ic9+adwhoOQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMjBmNGQ0Yzc1MjhkOGE4MjdlYzcyNDkxOGZlMmRmNTM0 YmQ5MDUwHhcNMjUxMjIwMDcwMDUxWhcNMjUxMjIxMDcwMDUxWjAzMTEwLwYDVQQD EygyZTI3NzJkNDVmYWVjNmEzMzQ5NWZhYmY3MzMwZjA0MWMzNmZhNjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArutpdOoZUR+LDd0iB4OZrz3yL63K CIkmbiyhc/+SBEBLgecWRJfuSQqJuhUGeKqFQ+7UofNjdhPL1POfDsOH0wPoitGJ XtzYf4qiH10mGuUxdW0301AB1bd73s+2gw8PDfj38cj8yrkAvVZGSVDPdQsv1PsE 0D+VNjVAIHmQgE8cuZt3X8Fv4hjPBkCrvpUvTWGbp574WPoU4KrdqjqLbdgo8P68 XdZkG05vQ4kwNxnGdru+xsqgOKXUGriK82NSQic6TWBaUjdGDCtrhA6Eu6/f8oy0 0OGcPPxg7T6QpRsjO3bznb4Wuc85R/lMTZxR86tuIemFqn0oQ71NUvaFnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC4nctRfrsajNJX6v3Mw8EHDb6ZUMB8GA1UdIwQY MBaAFEAg9NTHUo2Kgn7HJJGP4t9TS9kFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUNEMDFNZFNqWXFDZnNja2tZX2kzMU5MMlFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8yZjdhNmUtZThjMS00ZjYyLTk1Zjkt NjRiZmI3OTkwMGQ2LzEvUUNEMDFNZFNqWXFDZnNja2tZX2kzMU5MMlFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy8yZjdhNmUtZThjMS00ZjYyLTk1ZjktNjRiZmI3OTkwMGQ2 LzEvUUNEMDFNZFNqWXFDZnNja2tZX2kzMU5MMlFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANcY64vaO buwvMCsPRCWwOeyIH4wnQKHBEJTmgqGJFxMZw1KKX/VWLOqgr9alVHhoMNzNgA48 Y4x/5UyD9r1YFgHMpSCz8XsAXftMnWXrxLT86AvX9tcVV+L1K0950oFi8nDLPT4M nrqvvBMqQ782CuaUDqjGn9KiFFxLO2FENR57mA/WKXMSiD3UuCWJzMmOvwDwsZw2 GKfFHAg5BZ0bOw9ysOGt9o2Hg9eJ7dyvNuMsLOQX6IavVyeOfA1HBuMbJrJyCcmE nNKwNJVF5B8Q3WuCevuxWTd+FZc5hx7b9y4+uQGumEVtenZOTBW75RJIiH5P/cX3 vznaIzBHU7Ar6Q== -----END CERTIFICATE-----Generated at Sat Dec 20 15:04:03 2025 by rpki-client