This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft File: QL_SbwstE2mcNW7Di5bGqCXSG2o.mft (raw, json) Hash identifier: iYCEUQo91KEAPqkBbETYs/rRzG141d0VCV0/U4LtlTk= Subject key identifier: 98:D7:B4:E6:35:6C:71:BD:D4:FE:AE:6C:47:9F:60:3E:8E:3A:18:62 Authority key identifier: 40:BF:D2:6F:0B:2D:13:69:9C:35:6E:C3:8B:96:C6:A8:25:D2:1B:6A Certificate issuer: /CN=40bfd26f0b2d13699c356ec38b96c6a825d21b6a Certificate serial: 019B34C4FC2B01F4D28CE262ECE2FCCF61C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft Manifest number: 08E9 Signing time: Fri 19 Dec 2025 04:01:23 +0000 Manifest this update: Fri 19 Dec 2025 04:01:23 +0000 Manifest next update: Sat 20 Dec 2025 04:01:23 +0000 Files and hashes: 1: QL_SbwstE2mcNW7Di5bGqCXSG2o.crl (hash: Sc9jCMHyM8XgD1zrgbrpHIkk23pXvZ3zhPc3NRrSkrs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft rsync://rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:fc:2b:01:f4:d2:8c:e2:62:ec:e2:fc:cf:61:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40bfd26f0b2d13699c356ec38b96c6a825d21b6a Validity Not Before: Dec 19 04:01:23 2025 GMT Not After : Dec 20 04:01:23 2025 GMT Subject: CN=98d7b4e6356c71bdd4feae6c479f603e8e3a1862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:23:29:95:4b:c3:ab:24:8c:70:ca:a4:9c:93: 21:ee:b8:c5:a6:b9:ae:b5:32:f7:00:19:9f:75:75: 2f:98:e9:0f:3d:77:f1:48:f6:d6:b3:93:eb:5c:45: f2:26:ba:a5:16:79:c5:e5:1a:cb:6f:18:21:37:bf: cd:24:a4:c0:b6:0a:71:61:84:e3:18:58:64:bd:3d: 8f:fa:6d:fe:2d:5f:5e:39:7b:7a:13:92:c2:13:77: 42:69:17:34:cd:1e:d9:fc:a6:5e:9c:2f:4d:e0:ed: 9e:54:cf:19:fa:61:9a:8a:89:1d:08:60:3c:d6:94: 7f:09:9b:47:1a:44:d2:b6:9b:55:74:81:69:dc:1f: fb:6a:c4:cb:e0:1c:ef:a2:07:d1:77:f5:ec:3a:f2: bc:de:77:79:b3:17:3a:c5:d8:6f:59:27:f7:08:d7: 3b:3d:4b:67:82:02:09:75:9c:4e:0c:21:cb:14:a1: 40:83:87:22:f4:c5:d5:3f:64:43:c5:0b:45:b9:0f: b3:88:f5:cf:1e:a5:5c:e4:ad:0d:05:1a:d5:55:b6: f3:7e:91:ec:68:4c:0e:17:df:f8:f8:6a:e1:21:a6: 3b:c3:86:d0:25:f5:21:ba:da:5d:cd:1e:71:e7:55: 58:82:dc:6a:35:d6:32:f6:35:f1:2f:b4:93:51:ef: c2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D7:B4:E6:35:6C:71:BD:D4:FE:AE:6C:47:9F:60:3E:8E:3A:18:62 X509v3 Authority Key Identifier: keyid:40:BF:D2:6F:0B:2D:13:69:9C:35:6E:C3:8B:96:C6:A8:25:D2:1B:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:09:c3:6c:1e:09:9a:66:79:f7:39:80:32:56:66:77:c2:cb: 58:25:50:55:28:3f:3f:80:7b:48:83:9d:e8:6d:92:74:6b:34: f6:d1:40:1e:ce:5c:c3:01:5e:ea:1a:ee:77:1b:36:e3:48:38: 3e:6a:db:9c:89:bd:b7:0b:84:e6:35:89:91:0e:58:56:b9:a0: a3:08:93:6e:ff:64:39:52:36:a2:30:ac:96:2b:a2:07:52:e4: 42:3a:42:39:09:11:1d:14:65:3d:3e:fb:68:08:7e:07:d8:02: c1:9a:bb:ab:21:1f:a6:87:03:99:28:bc:20:92:eb:f9:d7:15: fd:0f:10:d4:6f:f3:96:b4:e4:98:ba:8b:aa:10:e2:0c:63:2f: a7:a3:1b:3a:06:19:2c:ce:3f:60:cd:63:b9:78:30:44:ba:0a: 7d:11:ab:ca:17:ef:9c:14:81:0b:8d:0b:03:cf:b9:f3:22:31: f7:85:be:a6:78:7c:d4:77:01:76:bc:1d:28:f7:96:ba:0d:8a: 81:95:f5:83:4e:55:b1:51:44:3a:37:c8:2e:6f:f0:bd:ad:23: 06:b6:4f:ef:86:fd:9b:fb:7d:a0:77:dd:b1:dc:bf:59:35:ba: 7f:38:c8:b6:a9:c3:c8:51:e1:bb:b4:fc:b8:29:60:52:44:ec: f7:22:d9:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xPwrAfTSjOJi7OL8z2HEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwYmZkMjZmMGIyZDEzNjk5YzM1NmVjMzhiOTZjNmE4MjVk MjFiNmEwHhcNMjUxMjE5MDQwMTIzWhcNMjUxMjIwMDQwMTIzWjAzMTEwLwYDVQQD Eyg5OGQ3YjRlNjM1NmM3MWJkZDRmZWFlNmM0NzlmNjAzZThlM2ExODYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiMplUvDqySMcMqknJMh7rjFprmu tTL3ABmfdXUvmOkPPXfxSPbWs5PrXEXyJrqlFnnF5RrLbxghN7/NJKTAtgpxYYTj GFhkvT2P+m3+LV9eOXt6E5LCE3dCaRc0zR7Z/KZenC9N4O2eVM8Z+mGaiokdCGA8 1pR/CZtHGkTStptVdIFp3B/7asTL4BzvogfRd/XsOvK83nd5sxc6xdhvWSf3CNc7 PUtnggIJdZxODCHLFKFAg4ci9MXVP2RDxQtFuQ+ziPXPHqVc5K0NBRrVVbbzfpHs aEwOF9/4+GrhIaY7w4bQJfUhutpdzR5x51VYgtxqNdYy9jXxL7STUe/C8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJjXtOY1bHG91P6ubEefYD6OOhhiMB8GA1UdIwQY MBaAFEC/0m8LLRNpnDVuw4uWxqgl0htqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUxfU2J3c3RFMm1jTlc3RGk1YkdxQ1hTRzJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zMTViNGQtNmNlYi00MDk4LWJmZDIt NTA5M2M1MmUwMmNlLzEvUUxfU2J3c3RFMm1jTlc3RGk1YkdxQ1hTRzJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8zMTViNGQtNmNlYi00MDk4LWJmZDItNTA5M2M1MmUwMmNl LzEvUUxfU2J3c3RFMm1jTlc3RGk1YkdxQ1hTRzJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEwnDbB4J mmZ59zmAMlZmd8LLWCVQVSg/P4B7SIOd6G2SdGs09tFAHs5cwwFe6hrudxs240g4 PmrbnIm9twuE5jWJkQ5YVrmgowiTbv9kOVI2ojCsliuiB1LkQjpCOQkRHRRlPT77 aAh+B9gCwZq7qyEfpocDmSi8IJLr+dcV/Q8Q1G/zlrTkmLqLqhDiDGMvp6MbOgYZ LM4/YM1juXgwRLoKfRGryhfvnBSBC40LA8+58yIx94W+pnh81HcBdrwdKPeWug2K gZX1g05VsVFEOjfILm/wva0jBrZP74b9m/t9oHfdsdy/WTW6fzjItqnDyFHhu7T8 uClgUkTs9yLZjQ== -----END CERTIFICATE-----Generated at Fri Dec 19 14:37:54 2025 by rpki-client