This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft File: qd_ImBI0BQeiouHnTRGCTe-BPzk.mft (raw, json) Hash identifier: vtyrDMBAkgwRtkFJgUQmHQehBg7mquyjRXz8T6wU54w= Subject key identifier: 39:5D:5D:D9:F5:4C:5E:7A:07:F4:64:90:C4:FB:ED:AD:BD:15:EF:B6 Authority key identifier: A9:DF:C8:98:12:34:05:07:A2:A2:E1:E7:4D:11:82:4D:EF:81:3F:39 Certificate issuer: /CN=a9dfc89812340507a2a2e1e74d11824def813f39 Certificate serial: 019B4A70B5C2DC4AC0096D78F9DBC6C761AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft Manifest number: 1722 Signing time: Tue 23 Dec 2025 09:00:59 +0000 Manifest this update: Tue 23 Dec 2025 09:00:59 +0000 Manifest next update: Wed 24 Dec 2025 09:00:59 +0000 Files and hashes: 1: qd_ImBI0BQeiouHnTRGCTe-BPzk.crl (hash: UXxVT5Sk31nPgcxno/9angAw4wggmVjeXekOSHPBKgw=) 2: wn31uqf50k5LZthlgOfugKfLtQQ.roa (hash: uQ9o6KlMfbYE1Nkt8fbDl10YjNVh7yxdgG7JtO4ci4A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft rsync://rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:70:b5:c2:dc:4a:c0:09:6d:78:f9:db:c6:c7:61:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9dfc89812340507a2a2e1e74d11824def813f39 Validity Not Before: Dec 23 09:00:59 2025 GMT Not After : Dec 24 09:00:59 2025 GMT Subject: CN=395d5dd9f54c5e7a07f46490c4fbedadbd15efb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:dd:3d:6f:63:35:d4:3d:9e:f8:d2:f3:19:5d: b7:a8:d5:fa:f5:20:3a:ef:21:b9:c3:c6:50:aa:77: d3:b9:10:db:0b:12:14:ac:9e:9d:8c:4c:ca:96:bb: d3:65:7f:f2:9c:ee:d9:9e:c0:da:07:cf:23:61:bb: 79:2f:94:b5:45:02:be:9a:2d:c6:c9:1b:66:f9:f5: ba:86:01:93:e1:5a:d8:c8:4a:5d:45:89:14:34:2c: c4:dc:b1:4c:32:52:78:5e:67:90:b5:2a:a5:a4:b8: 05:59:28:16:2d:5a:d6:e8:d3:19:95:4c:09:e3:95: fd:64:2e:48:78:d9:47:a1:a3:d6:bc:9f:c0:11:5a: ef:05:87:ac:91:ba:48:5f:8e:28:6e:d2:b3:cb:8b: 58:3e:97:11:58:63:04:86:ff:b2:12:62:bd:5c:37: 6c:92:2b:a4:c9:91:84:12:a5:4b:53:c6:0f:93:86: 7a:b0:0d:f0:e0:65:57:93:4a:dd:a8:14:a8:2c:43: bc:1c:28:e4:da:a3:88:77:04:4d:d8:12:8b:f0:c3: 4a:e8:e6:16:5d:3a:25:f7:17:6f:64:11:ce:b9:67: 79:22:83:d9:04:eb:2f:e5:10:78:1c:64:1f:45:07: 82:43:10:f3:0c:51:bf:c0:dc:1b:e5:05:f6:97:4d: 4c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:5D:5D:D9:F5:4C:5E:7A:07:F4:64:90:C4:FB:ED:AD:BD:15:EF:B6 X509v3 Authority Key Identifier: keyid:A9:DF:C8:98:12:34:05:07:A2:A2:E1:E7:4D:11:82:4D:EF:81:3F:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:20:e2:d0:5b:a5:2e:40:ae:9b:95:bf:b6:a6:aa:dc:5f:d3: c4:c6:40:c6:21:2a:c2:53:8e:0c:83:e9:48:0c:3f:e5:97:be: 5f:e7:a6:b4:fa:7d:01:09:05:5b:c2:bf:9f:b4:ca:61:4f:3f: f0:e2:22:b8:37:b7:6b:0b:22:42:81:6c:3a:b8:f0:6e:3b:64: 00:79:11:0b:ad:14:e4:c5:1c:d2:8a:90:6f:83:35:1b:d3:fe: d3:6e:55:dc:5b:b7:ac:3e:79:83:9e:94:de:2c:1b:f3:c8:59: 4e:3a:72:e6:11:59:d5:55:32:84:70:83:a7:9f:34:04:c3:ed: ef:a0:b7:96:da:15:ca:82:9d:16:d8:77:d0:65:14:06:5c:34: 94:b3:af:ad:f9:ba:d1:70:c1:9e:f7:29:a5:15:de:de:2d:d8: 38:9d:7b:59:f9:18:5b:0b:e6:70:2c:56:b2:9f:1b:2f:a5:82: 51:2a:96:3f:a9:86:78:0a:28:76:e3:a8:66:5d:b5:85:10:d9: 52:b3:10:07:b9:fd:01:8f:21:89:ad:33:34:b9:60:a4:e4:9f: 2f:d8:4a:91:80:22:61:3b:b1:87:60:41:fe:4f:98:2b:1a:d7: 81:c9:be:05:31:75:a2:72:86:d6:33:a3:94:22:23:6a:58:d6: fe:8c:9d:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKcLXC3ErACW14+dvGx2GtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ZGZjODk4MTIzNDA1MDdhMmEyZTFlNzRkMTE4MjRkZWY4 MTNmMzkwHhcNMjUxMjIzMDkwMDU5WhcNMjUxMjI0MDkwMDU5WjAzMTEwLwYDVQQD EygzOTVkNWRkOWY1NGM1ZTdhMDdmNDY0OTBjNGZiZWRhZGJkMTVlZmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0t09b2M11D2e+NLzGV23qNX69SA6 7yG5w8ZQqnfTuRDbCxIUrJ6djEzKlrvTZX/ynO7ZnsDaB88jYbt5L5S1RQK+mi3G yRtm+fW6hgGT4VrYyEpdRYkUNCzE3LFMMlJ4XmeQtSqlpLgFWSgWLVrW6NMZlUwJ 45X9ZC5IeNlHoaPWvJ/AEVrvBYeskbpIX44obtKzy4tYPpcRWGMEhv+yEmK9XDds kiukyZGEEqVLU8YPk4Z6sA3w4GVXk0rdqBSoLEO8HCjk2qOIdwRN2BKL8MNK6OYW XTol9xdvZBHOuWd5IoPZBOsv5RB4HGQfRQeCQxDzDFG/wNwb5QX2l01MAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDldXdn1TF56B/RkkMT77a29Fe+2MB8GA1UdIwQY MBaAFKnfyJgSNAUHoqLh500Rgk3vgT85MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWRfSW1CSTBCUWVpb3VIblRSR0NUZS1CUHprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mN2Q1OGUtMzNkYS00MzE5LWI1NGIt NzA0NDAzZmZmODJlLzEvcWRfSW1CSTBCUWVpb3VIblRSR0NUZS1CUHprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9mN2Q1OGUtMzNkYS00MzE5LWI1NGItNzA0NDAzZmZmODJl LzEvcWRfSW1CSTBCUWVpb3VIblRSR0NUZS1CUHprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAliDi0Ful LkCum5W/tqaq3F/TxMZAxiEqwlOODIPpSAw/5Ze+X+emtPp9AQkFW8K/n7TKYU8/ 8OIiuDe3awsiQoFsOrjwbjtkAHkRC60U5MUc0oqQb4M1G9P+025V3Fu3rD55g56U 3iwb88hZTjpy5hFZ1VUyhHCDp580BMPt76C3ltoVyoKdFth30GUUBlw0lLOvrfm6 0XDBnvcppRXe3i3YOJ17WfkYWwvmcCxWsp8bL6WCUSqWP6mGeAooduOoZl21hRDZ UrMQB7n9AY8hia0zNLlgpOSfL9hKkYAiYTuxh2BB/k+YKxrXgcm+BTF1onKG1jOj lCIjaljW/oydsw== -----END CERTIFICATE-----Generated at Tue Dec 23 15:51:01 2025 by rpki-client