This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft File: QL_e36qTma09VTH6RxoSs7_jfhI.mft (raw, json) Hash identifier: 06U/rGv8tAG5r3x+Oz5ZobuXVXZYsGtebhzAJHqC9tM= Subject key identifier: 2B:F1:11:16:DB:12:9B:CA:2D:5B:E6:F7:AC:4C:29:20:BE:00:81:F4 Authority key identifier: 40:BF:DE:DF:AA:93:99:AD:3D:55:31:FA:47:1A:12:B3:BF:E3:7E:12 Certificate issuer: /CN=40bfdedfaa9399ad3d5531fa471a12b3bfe37e12 Certificate serial: 019B6CC57836DA7A4CAD36F631A6DA0B7910 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QL_e36qTma09VTH6RxoSs7_jfhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft Manifest number: 0AC2 Signing time: Tue 30 Dec 2025 01:00:39 +0000 Manifest this update: Tue 30 Dec 2025 01:00:39 +0000 Manifest next update: Wed 31 Dec 2025 01:00:39 +0000 Files and hashes: 1: QL_e36qTma09VTH6RxoSs7_jfhI.crl (hash: aOsIf/vN6XriMf6MakHHMvAldVR4ZUXhOO3rooHNcLs=) 2: jSlm79fFu0VgJBsIaC81oVf4nGI.roa (hash: 8IYkRLo3mCrHlEs7aBNerIrNbkB27E7Mc7prSDZuZVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.crl rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft rsync://rpki.ripe.net/repository/DEFAULT/QL_e36qTma09VTH6RxoSs7_jfhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 23:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c5:78:36:da:7a:4c:ad:36:f6:31:a6:da:0b:79:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40bfdedfaa9399ad3d5531fa471a12b3bfe37e12 Validity Not Before: Dec 30 01:00:39 2025 GMT Not After : Dec 31 01:00:39 2025 GMT Subject: CN=2bf11116db129bca2d5be6f7ac4c2920be0081f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b6:f2:97:ed:af:bc:ad:a0:48:ae:97:45:a8: a9:41:b8:6e:a9:25:79:a6:69:7e:81:43:16:86:e1: a9:c2:d0:a7:37:40:93:77:f4:ff:70:84:fb:89:5c: f3:74:fd:a5:82:60:41:4d:9d:17:f3:52:30:bd:7d: 0b:dd:64:21:87:28:eb:49:b3:2f:e6:37:f5:0f:d1: 85:74:0d:f4:8f:c6:cb:97:f1:2b:c7:af:d2:e5:bc: 47:55:75:51:3e:99:b0:63:82:a5:e1:ba:64:8b:90: c4:3a:f0:40:52:2e:e4:ff:2a:3f:d4:b0:39:fe:94: ba:8a:ad:19:ec:03:2c:91:36:ed:c7:4f:c4:54:8a: cc:6b:8b:37:14:04:d1:37:55:99:3c:6b:9e:28:84: 25:66:91:6c:25:e7:40:c0:29:66:47:5f:8a:e2:b3: fa:89:8f:d3:9e:35:f2:1a:22:ac:86:20:fd:6f:0a: eb:95:2b:29:fd:32:67:6c:d5:e3:4f:65:4f:cb:c0: 43:8e:03:8c:fa:ec:09:2d:25:1d:fd:23:95:1c:9b: fa:6f:a1:9e:aa:c6:d8:ca:47:43:60:b5:af:8a:00: 3c:03:f1:47:73:9d:c3:61:a3:08:03:cc:98:79:f1: 66:2a:f0:5a:ce:88:03:70:ef:f9:1f:14:e2:7e:e8: 1e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F1:11:16:DB:12:9B:CA:2D:5B:E6:F7:AC:4C:29:20:BE:00:81:F4 X509v3 Authority Key Identifier: keyid:40:BF:DE:DF:AA:93:99:AD:3D:55:31:FA:47:1A:12:B3:BF:E3:7E:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QL_e36qTma09VTH6RxoSs7_jfhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:ea:0b:bc:0a:c8:78:18:c8:4b:81:46:6a:19:f1:0b:99:88: 5c:9a:64:45:b4:25:53:01:91:ba:f3:1b:e0:a0:29:ab:7e:ce: 57:86:03:19:4c:00:8c:2e:66:7d:8c:18:e8:15:56:ff:7b:83: 74:55:59:26:7f:60:4b:00:5d:7e:27:81:27:ff:77:56:80:b3: 08:30:29:11:72:9c:a2:91:4a:89:81:ca:70:ec:74:75:94:39: 70:91:e7:ec:09:21:08:5d:9f:cc:d2:4e:7a:a5:2e:90:77:5f: 34:e4:75:bf:b6:57:3e:e3:4c:4d:82:99:6a:83:b8:8c:4a:75: 9f:7d:76:c9:bc:29:b3:a8:ee:33:59:2d:38:5c:5e:bb:7a:f9: c5:b3:62:2a:04:c9:c2:c5:81:f1:a6:6a:01:98:4d:fb:1d:77: 3f:56:fe:42:39:31:d4:c5:b4:53:c0:a9:65:e7:88:bc:3a:a1: a9:9d:dc:26:d4:ae:9d:2f:3e:52:72:36:db:77:02:55:d2:a1: de:49:c7:a6:c5:92:86:f4:55:96:83:c9:10:2c:b2:38:c6:fe: 8a:1b:27:f8:17:aa:60:69:a0:42:cc:76:97:db:63:10:52:c2: ca:86:c9:25:b5:b1:28:88:ad:5f:9c:7d:67:e7:e6:c6:2a:a0: d9:81:a2:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxXg22npMrTb2MabaC3kQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwYmZkZWRmYWE5Mzk5YWQzZDU1MzFmYTQ3MWExMmIzYmZl MzdlMTIwHhcNMjUxMjMwMDEwMDM5WhcNMjUxMjMxMDEwMDM5WjAzMTEwLwYDVQQD EygyYmYxMTExNmRiMTI5YmNhMmQ1YmU2ZjdhYzRjMjkyMGJlMDA4MWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7byl+2vvK2gSK6XRaipQbhuqSV5 pml+gUMWhuGpwtCnN0CTd/T/cIT7iVzzdP2lgmBBTZ0X81IwvX0L3WQhhyjrSbMv 5jf1D9GFdA30j8bLl/Erx6/S5bxHVXVRPpmwY4Kl4bpki5DEOvBAUi7k/yo/1LA5 /pS6iq0Z7AMskTbtx0/EVIrMa4s3FATRN1WZPGueKIQlZpFsJedAwClmR1+K4rP6 iY/TnjXyGiKshiD9bwrrlSsp/TJnbNXjT2VPy8BDjgOM+uwJLSUd/SOVHJv6b6Ge qsbYykdDYLWvigA8A/FHc53DYaMIA8yYefFmKvBazogDcO/5HxTifugeqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCvxERbbEpvKLVvm96xMKSC+AIH0MB8GA1UdIwQY MBaAFEC/3t+qk5mtPVUx+kcaErO/434SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUxfZTM2cVRtYTA5VlRINlJ4b1NzN19qZmhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9kYjU1ZWMtMzU3Ny00MjFmLTg5MTYt OGU5ODUxYjdmODExLzEvUUxfZTM2cVRtYTA5VlRINlJ4b1NzN19qZmhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9kYjU1ZWMtMzU3Ny00MjFmLTg5MTYtOGU5ODUxYjdmODEx LzEvUUxfZTM2cVRtYTA5VlRINlJ4b1NzN19qZmhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB+oLvArI eBjIS4FGahnxC5mIXJpkRbQlUwGRuvMb4KApq37OV4YDGUwAjC5mfYwY6BVW/3uD dFVZJn9gSwBdfieBJ/93VoCzCDApEXKcopFKiYHKcOx0dZQ5cJHn7AkhCF2fzNJO eqUukHdfNOR1v7ZXPuNMTYKZaoO4jEp1n312ybwps6juM1ktOFxeu3r5xbNiKgTJ wsWB8aZqAZhN+x13P1b+Qjkx1MW0U8CpZeeIvDqhqZ3cJtSunS8+UnI223cCVdKh 3knHpsWShvRVloPJECyyOMb+ihsn+BeqYGmgQsx2l9tjEFLCyobJJbWxKIitX5x9 Z+fmxiqg2YGiDw== -----END CERTIFICATE-----Generated at Tue Dec 30 02:11:44 2025 by rpki-client