This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/5c9b74-753b-42e2-b41a-2b649d5ebaf3/1/QBMclDl36gqT787s000dXRyxgq8.mft File: QBMclDl36gqT787s000dXRyxgq8.mft (raw, json) Hash identifier: KjPT+GP5oEqXhNdroycIyRzzfKOR6oTYG+c+ujjvyTs= Subject key identifier: 05:63:14:51:90:E4:28:67:1B:12:6C:C1:44:2E:85:12:F5:3B:2E:84 Authority key identifier: 40:13:1C:94:39:77:EA:0A:93:EF:CE:EC:D3:4D:1D:5D:1C:B1:82:AF Certificate issuer: /CN=40131c943977ea0a93efceecd34d1d5d1cb182af Certificate serial: 019B6BB323136314A5B82B87873B0F6A27CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QBMclDl36gqT787s000dXRyxgq8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/5c9b74-753b-42e2-b41a-2b649d5ebaf3/1/QBMclDl36gqT787s000dXRyxgq8.mft Manifest number: 104F Signing time: Mon 29 Dec 2025 20:01:00 +0000 Manifest this update: Mon 29 Dec 2025 20:01:00 +0000 Manifest next update: Tue 30 Dec 2025 20:01:00 +0000 Files and hashes: 1: QBMclDl36gqT787s000dXRyxgq8.crl (hash: HpDwqRBvVa9Jf5FRe1f4ssp+XDaH8UguhKuDGzep7fE=) 2: ULUALQSKNZEpPcNq68X1y69o-9w.roa (hash: u+zVU0SkY5ZMKNVKnpjmcvlKMcttm6HzHNnhk032Vso=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/5c9b74-753b-42e2-b41a-2b649d5ebaf3/1/QBMclDl36gqT787s000dXRyxgq8.crl rsync://rpki.ripe.net/repository/DEFAULT/38/5c9b74-753b-42e2-b41a-2b649d5ebaf3/1/QBMclDl36gqT787s000dXRyxgq8.mft rsync://rpki.ripe.net/repository/DEFAULT/QBMclDl36gqT787s000dXRyxgq8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 20:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:b3:23:13:63:14:a5:b8:2b:87:87:3b:0f:6a:27:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40131c943977ea0a93efceecd34d1d5d1cb182af Validity Not Before: Dec 29 20:01:00 2025 GMT Not After : Dec 30 20:01:00 2025 GMT Subject: CN=0563145190e428671b126cc1442e8512f53b2e84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:4b:f4:05:db:8f:eb:45:d6:7f:81:bf:78:95: 50:74:7c:ba:d5:5f:2d:3e:55:e5:c2:15:36:b2:1e: 36:3a:f7:af:6c:2b:62:03:c4:1c:6c:63:5d:79:07: e8:eb:f8:f0:21:68:ee:1b:c0:f7:06:f6:e7:9c:76: 01:23:40:12:87:12:57:52:fd:72:1e:8b:c9:4f:68: 16:3f:e8:cb:ae:81:41:ec:94:30:ba:f9:18:96:2c: 30:22:1f:cc:97:b3:b2:b8:88:1d:f7:48:32:0f:3a: 8f:b5:a5:c4:87:db:43:df:cb:eb:5a:48:51:2c:dc: cd:2a:fd:5f:db:b2:90:77:67:63:7a:26:9a:e2:40: 50:bb:b9:ac:da:de:0b:44:b0:17:a0:f5:56:b0:a3: db:a5:33:da:45:d8:b8:c6:df:8a:5e:66:a1:0c:cc: 2b:af:1c:6a:df:b8:c0:e7:51:74:63:33:d4:0e:9d: 33:8c:82:b3:39:40:40:96:08:ab:e1:b8:53:bc:27: d7:70:f4:e9:f2:38:92:62:b9:fc:3d:10:ab:32:01: ae:d4:ba:4c:f8:b2:5e:70:27:e4:6f:ab:63:b2:f7: 94:24:cf:36:40:14:d2:62:1a:d0:30:16:83:8a:bc: 00:54:d7:7a:07:f8:bb:0d:1e:b4:17:bc:4a:8c:21: 4b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:63:14:51:90:E4:28:67:1B:12:6C:C1:44:2E:85:12:F5:3B:2E:84 X509v3 Authority Key Identifier: keyid:40:13:1C:94:39:77:EA:0A:93:EF:CE:EC:D3:4D:1D:5D:1C:B1:82:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QBMclDl36gqT787s000dXRyxgq8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5c9b74-753b-42e2-b41a-2b649d5ebaf3/1/QBMclDl36gqT787s000dXRyxgq8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5c9b74-753b-42e2-b41a-2b649d5ebaf3/1/QBMclDl36gqT787s000dXRyxgq8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:7a:c3:64:3e:85:93:27:13:32:c0:f8:ac:f0:f9:d6:22:78: 51:90:bc:e1:a3:9c:52:2c:70:29:29:20:df:8f:e6:0f:ca:92: 0c:73:01:34:ef:34:da:37:fb:77:bd:05:00:20:6b:92:5d:1c: 03:92:8f:67:dd:8e:4b:35:69:a1:f5:89:31:39:77:69:88:7f: 79:05:5b:13:81:21:0e:e6:60:69:57:6a:6f:c5:12:13:1c:74: b8:12:ea:eb:6e:4d:0d:0a:64:28:14:e7:12:88:08:e2:d4:1c: 34:45:35:55:82:ca:e5:c5:47:45:c8:5f:7d:d5:0e:b2:30:ad: 6e:d2:19:eb:c9:54:db:85:de:fc:e5:24:f6:e1:85:07:88:a6: c3:51:82:2a:4d:27:da:8c:02:56:c8:9c:2b:8d:0d:33:e4:85: ef:e8:13:49:85:e7:f5:27:4d:42:82:d2:aa:38:82:20:48:3b: f1:0b:c5:4d:59:37:d9:20:29:2c:1a:0e:1c:bd:7f:91:7f:20: 53:48:e7:6e:00:af:14:03:d5:9a:76:4c:e7:2b:b9:48:87:ac: 53:88:fc:07:48:01:7d:03:8b:13:fd:6c:b6:3b:51:4a:df:db: 4c:8f:f2:89:74:78:89:2f:bf:74:9d:81:71:c2:85:2a:9b:ce: ff:53:21:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtrsyMTYxSluCuHhzsPaifNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMTMxYzk0Mzk3N2VhMGE5M2VmY2VlY2QzNGQxZDVkMWNi MTgyYWYwHhcNMjUxMjI5MjAwMTAwWhcNMjUxMjMwMjAwMTAwWjAzMTEwLwYDVQQD EygwNTYzMTQ1MTkwZTQyODY3MWIxMjZjYzE0NDJlODUxMmY1M2IyZTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6kv0BduP60XWf4G/eJVQdHy61V8t PlXlwhU2sh42OvevbCtiA8QcbGNdeQfo6/jwIWjuG8D3BvbnnHYBI0AShxJXUv1y HovJT2gWP+jLroFB7JQwuvkYliwwIh/Ml7OyuIgd90gyDzqPtaXEh9tD38vrWkhR LNzNKv1f27KQd2djeiaa4kBQu7ms2t4LRLAXoPVWsKPbpTPaRdi4xt+KXmahDMwr rxxq37jA51F0YzPUDp0zjIKzOUBAlgir4bhTvCfXcPTp8jiSYrn8PRCrMgGu1LpM +LJecCfkb6tjsveUJM82QBTSYhrQMBaDirwAVNd6B/i7DR60F7xKjCFLuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAVjFFGQ5ChnGxJswUQuhRL1Oy6EMB8GA1UdIwQY MBaAFEATHJQ5d+oKk+/O7NNNHV0csYKvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUJNY2xEbDM2Z3FUNzg3czAwMGRYUnl4Z3E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC81YzliNzQtNzUzYi00MmUyLWI0MWEt MmI2NDlkNWViYWYzLzEvUUJNY2xEbDM2Z3FUNzg3czAwMGRYUnl4Z3E4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC81YzliNzQtNzUzYi00MmUyLWI0MWEtMmI2NDlkNWViYWYz LzEvUUJNY2xEbDM2Z3FUNzg3czAwMGRYUnl4Z3E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAonrDZD6F kycTMsD4rPD51iJ4UZC84aOcUixwKSkg34/mD8qSDHMBNO802jf7d70FACBrkl0c A5KPZ92OSzVpofWJMTl3aYh/eQVbE4EhDuZgaVdqb8USExx0uBLq625NDQpkKBTn EogI4tQcNEU1VYLK5cVHRchffdUOsjCtbtIZ68lU24Xe/OUk9uGFB4imw1GCKk0n 2owCVsicK40NM+SF7+gTSYXn9SdNQoLSqjiCIEg78QvFTVk32SApLBoOHL1/kX8g U0jnbgCvFAPVmnZM5yu5SIesU4j8B0gBfQOLE/1stjtRSt/bTI/yiXR4iS+/dJ2B ccKFKpvO/1MhOQ== -----END CERTIFICATE-----Generated at Tue Dec 30 03:19:45 2025 by rpki-client