This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft File: QL_SbwstE2mcNW7Di5bGqCXSG2o.mft (raw, json) Hash identifier: ZS5xvSn++2IeMvxww3YqHynmdqj46u7vStbOMaWWiaM= Subject key identifier: AC:E6:E0:BE:5E:D9:D4:45:2B:75:A9:57:7F:A9:31:3C:85:26:05:E4 Authority key identifier: 40:BF:D2:6F:0B:2D:13:69:9C:35:6E:C3:8B:96:C6:A8:25:D2:1B:6A Certificate issuer: /CN=40bfd26f0b2d13699c356ec38b96c6a825d21b6a Certificate serial: 019B3C7ED0514CAF320F3327793DB21E6392 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft Manifest number: 08ED Signing time: Sat 20 Dec 2025 16:01:42 +0000 Manifest this update: Sat 20 Dec 2025 16:01:42 +0000 Manifest next update: Sun 21 Dec 2025 16:01:42 +0000 Files and hashes: 1: QL_SbwstE2mcNW7Di5bGqCXSG2o.crl (hash: HQQZX+BtXLppW1eb7dynvQEVQxMx19FmUJ4j3x8KoD0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft rsync://rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:d0:51:4c:af:32:0f:33:27:79:3d:b2:1e:63:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40bfd26f0b2d13699c356ec38b96c6a825d21b6a Validity Not Before: Dec 20 16:01:42 2025 GMT Not After : Dec 21 16:01:42 2025 GMT Subject: CN=ace6e0be5ed9d4452b75a9577fa9313c852605e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2b:d3:46:51:08:0f:ab:b2:1b:09:2b:d3:58: d3:70:4f:d5:0e:a8:f7:bc:d0:57:0a:4a:b6:6b:d6: 9e:6a:af:19:e4:68:91:2d:d0:48:38:2f:cd:c2:30: 86:01:c5:5c:44:34:9d:e4:60:90:4e:ae:17:b2:66: 78:f6:ca:a5:44:aa:bc:05:48:ff:82:4d:c4:c3:4e: 85:4d:e2:33:2c:a8:98:b8:b6:d4:29:c4:46:a7:dc: f0:a0:52:c2:01:76:44:3a:d4:23:06:74:70:19:aa: d3:21:49:a1:1a:84:02:89:17:07:1a:28:0b:3c:10: aa:ea:62:45:35:03:b1:c6:64:26:47:15:9d:49:16: 87:6e:f4:e3:a6:b6:22:51:3f:90:27:b7:35:43:5d: 9a:2f:48:6d:f9:c1:89:7a:0d:26:08:be:3f:ff:8b: 00:47:b0:20:7b:76:4f:85:9f:86:9c:12:49:43:c4: cf:eb:af:59:b5:37:2a:ae:1b:75:6f:f2:8f:8f:b7: 4e:04:33:f2:78:16:45:6f:cb:ec:f6:a5:68:95:98: 4d:e1:38:58:ce:8c:24:f6:82:c5:58:62:27:d7:ec: 51:b4:82:d2:6c:dc:26:30:e9:98:c6:e9:8f:75:f3: 68:03:ec:94:62:80:71:59:7a:0b:3b:d7:37:83:2a: 04:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E6:E0:BE:5E:D9:D4:45:2B:75:A9:57:7F:A9:31:3C:85:26:05:E4 X509v3 Authority Key Identifier: keyid:40:BF:D2:6F:0B:2D:13:69:9C:35:6E:C3:8B:96:C6:A8:25:D2:1B:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:ad:5d:35:36:7e:1b:d3:f0:09:cc:12:aa:bb:e7:fb:af:5e: 9e:8a:6e:64:d7:0c:db:b9:91:95:4e:8a:e2:3f:8c:17:13:7c: c9:13:2c:c8:1f:27:be:13:25:1f:11:a3:cd:6a:18:b3:99:e1: 7c:79:d6:13:92:b4:44:3e:02:7e:cf:6f:44:a0:61:56:71:b8: 88:7f:43:b9:9b:c2:3b:26:58:42:01:a3:0f:55:d1:2f:4f:5f: cf:57:4b:8f:a0:15:58:c6:61:8f:d7:2a:24:5d:3a:38:96:67: dc:18:ad:31:b7:74:d0:03:57:fa:67:58:1e:09:c3:3f:bb:55: 7c:d4:70:36:4d:ff:9c:9d:7d:06:88:bd:3c:fd:8b:2d:80:79: 7e:1c:7b:f1:cd:5e:22:cb:6d:7a:da:23:82:1c:67:99:02:83: 92:20:a6:79:50:db:01:1f:be:85:5a:5f:28:09:bb:11:36:02: 97:38:cf:23:84:0a:e4:21:b8:f1:08:41:40:79:37:19:d9:0a: 90:83:89:d2:4f:5b:ff:e5:4e:de:bc:e1:12:fd:11:a3:b5:9d: 95:32:12:d9:66:76:55:e9:fa:0a:6c:84:2c:2b:d6:ec:ba:68: 54:2d:62:20:b9:36:a0:ac:48:fe:80:80:c0:46:eb:c2:be:84: d7:35:e5:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8ftBRTK8yDzMneT2yHmOSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwYmZkMjZmMGIyZDEzNjk5YzM1NmVjMzhiOTZjNmE4MjVk MjFiNmEwHhcNMjUxMjIwMTYwMTQyWhcNMjUxMjIxMTYwMTQyWjAzMTEwLwYDVQQD EyhhY2U2ZTBiZTVlZDlkNDQ1MmI3NWE5NTc3ZmE5MzEzYzg1MjYwNWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyvTRlEID6uyGwkr01jTcE/VDqj3 vNBXCkq2a9aeaq8Z5GiRLdBIOC/NwjCGAcVcRDSd5GCQTq4XsmZ49sqlRKq8BUj/ gk3Ew06FTeIzLKiYuLbUKcRGp9zwoFLCAXZEOtQjBnRwGarTIUmhGoQCiRcHGigL PBCq6mJFNQOxxmQmRxWdSRaHbvTjprYiUT+QJ7c1Q12aL0ht+cGJeg0mCL4//4sA R7Age3ZPhZ+GnBJJQ8TP669ZtTcqrht1b/KPj7dOBDPyeBZFb8vs9qVolZhN4ThY zowk9oLFWGIn1+xRtILSbNwmMOmYxumPdfNoA+yUYoBxWXoLO9c3gyoE1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKzm4L5e2dRFK3WpV3+pMTyFJgXkMB8GA1UdIwQY MBaAFEC/0m8LLRNpnDVuw4uWxqgl0htqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUxfU2J3c3RFMm1jTlc3RGk1YkdxQ1hTRzJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zMTViNGQtNmNlYi00MDk4LWJmZDIt NTA5M2M1MmUwMmNlLzEvUUxfU2J3c3RFMm1jTlc3RGk1YkdxQ1hTRzJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8zMTViNGQtNmNlYi00MDk4LWJmZDItNTA5M2M1MmUwMmNl LzEvUUxfU2J3c3RFMm1jTlc3RGk1YkdxQ1hTRzJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfa1dNTZ+ G9PwCcwSqrvn+69enopuZNcM27mRlU6K4j+MFxN8yRMsyB8nvhMlHxGjzWoYs5nh fHnWE5K0RD4Cfs9vRKBhVnG4iH9DuZvCOyZYQgGjD1XRL09fz1dLj6AVWMZhj9cq JF06OJZn3BitMbd00ANX+mdYHgnDP7tVfNRwNk3/nJ19Boi9PP2LLYB5fhx78c1e IsttetojghxnmQKDkiCmeVDbAR++hVpfKAm7ETYClzjPI4QK5CG48QhBQHk3GdkK kIOJ0k9b/+VO3rzhEv0Ro7WdlTIS2WZ2Ven6CmyELCvW7LpoVC1iILk2oKxI/oCA wEbrwr6E1zXl1A== -----END CERTIFICATE-----Generated at Sat Dec 20 21:27:21 2025 by rpki-client