This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft File: QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft (raw, json) Hash identifier: q3179UfFKNvEKi7OFvGFQ1vcHDHTRoT/XeJAvOwNDu8= Subject key identifier: B9:4A:4F:CE:02:52:40:2A:42:8A:DD:66:9C:97:E2:0A:09:63:B7:E3 Authority key identifier: 40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45 Certificate issuer: /CN=4003350bcc7b540fadea951e046081d8da06c145 Certificate serial: 019B4B83A9A71DAEABDA793E5C2FE3A9A534 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft Manifest number: 096A Signing time: Tue 23 Dec 2025 14:01:18 +0000 Manifest this update: Tue 23 Dec 2025 14:01:18 +0000 Manifest next update: Wed 24 Dec 2025 14:01:18 +0000 Files and hashes: 1: QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl (hash: lG8wR3Nux2AHnrKkKQ0djZc1qzh7TL7mj9xofoUAhXE=) 2: pqlsmAxEb6u37QxzF6qCzpQ4SBk.roa (hash: teI/DPbnnC6ro04KC4yzmzn/SS2I9ht6+3TdoQMOA3A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 14:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:83:a9:a7:1d:ae:ab:da:79:3e:5c:2f:e3:a9:a5:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4003350bcc7b540fadea951e046081d8da06c145 Validity Not Before: Dec 23 14:01:18 2025 GMT Not After : Dec 24 14:01:18 2025 GMT Subject: CN=b94a4fce0252402a428add669c97e20a0963b7e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8e:21:06:df:3f:19:3f:49:c1:56:d8:3a:a3: 00:6c:ff:92:81:8b:72:91:83:84:0a:75:56:1b:de: fb:fb:e6:f7:02:20:69:4e:3f:db:82:a3:e5:a0:d4: 63:b0:5e:e8:7b:a0:20:b7:a7:b7:a2:c2:a6:af:8e: 51:80:47:d7:d8:b5:ed:3b:1a:44:8c:35:79:99:df: c7:1e:2a:25:ce:c4:2d:03:85:7f:dd:72:cd:f2:5b: f2:d8:37:e3:61:0c:e2:77:de:41:de:a6:15:fc:94: 7d:df:91:9f:35:7e:a6:29:1f:90:24:c9:0a:6c:99: 42:95:87:0d:d0:1c:aa:76:4d:ef:0d:de:ec:fd:50: 63:66:3f:0f:9f:cb:78:f5:ee:70:b5:e7:2e:3e:ea: c8:10:33:e9:db:1e:84:66:81:3d:64:43:bd:bf:b2: c8:de:ac:2a:44:32:3f:99:6f:ba:67:1a:90:e9:fd: 07:8c:a5:b1:58:9d:da:21:f6:bc:65:01:c0:af:d3: 75:47:01:88:f8:67:b4:95:99:37:61:b1:c2:d3:f6: e8:4b:9b:98:45:f0:8f:a0:01:b9:ca:d2:fc:da:0a: 3e:41:66:ce:c3:9b:ef:c9:06:8b:81:6f:2c:96:32: 00:80:2a:a6:18:31:f0:b7:3f:56:06:82:f0:0f:ca: f2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:4A:4F:CE:02:52:40:2A:42:8A:DD:66:9C:97:E2:0A:09:63:B7:E3 X509v3 Authority Key Identifier: keyid:40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:e2:eb:95:23:5a:a9:61:33:c0:80:8d:03:5b:a3:e3:d3:64: e8:2a:b8:ea:a9:c2:59:be:37:be:24:52:c1:a3:48:39:e2:0a: 54:3d:e7:d9:36:40:8f:c8:aa:8d:93:6b:41:cf:2b:79:fe:5c: 3d:9d:6c:1f:55:18:14:c6:1a:29:1f:a1:a6:2e:f4:5b:65:8f: 1e:b9:07:25:06:a5:2a:40:5a:be:39:2f:1c:e5:46:59:5f:a0: c4:a4:01:ca:48:16:98:b9:9c:af:4b:e4:8b:52:6e:ca:92:68: 9c:bc:f2:49:f0:f2:79:07:4e:9a:d5:bf:d4:d9:15:e0:61:65: 67:2a:92:3d:2f:a0:04:e3:a3:c2:64:3a:62:16:4b:f6:66:ce: e9:9f:a3:68:44:0b:d9:60:9b:8d:c4:9b:77:60:36:a6:0f:3a: b1:cc:85:ab:48:92:44:66:ff:4e:a8:80:aa:b9:29:a7:ac:aa: db:c6:a7:51:b5:6b:a3:97:45:ab:37:ea:ff:94:ea:8c:96:70: 97:08:b4:b0:4e:4c:09:f1:95:53:d3:6e:5d:39:a9:94:47:bc: 3b:90:7a:7c:2b:9f:1b:07:77:7e:c0:50:a1:fa:ad:f5:15:c8: 91:f1:7e:a7:a5:e0:bd:19:36:04:81:59:49:83:85:4f:32:ca: 3c:0d:8d:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLg6mnHa6r2nk+XC/jqaU0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMDMzNTBiY2M3YjU0MGZhZGVhOTUxZTA0NjA4MWQ4ZGEw NmMxNDUwHhcNMjUxMjIzMTQwMTE4WhcNMjUxMjI0MTQwMTE4WjAzMTEwLwYDVQQD EyhiOTRhNGZjZTAyNTI0MDJhNDI4YWRkNjY5Yzk3ZTIwYTA5NjNiN2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw44hBt8/GT9JwVbYOqMAbP+SgYty kYOECnVWG977++b3AiBpTj/bgqPloNRjsF7oe6Agt6e3osKmr45RgEfX2LXtOxpE jDV5md/HHiolzsQtA4V/3XLN8lvy2DfjYQzid95B3qYV/JR935GfNX6mKR+QJMkK bJlClYcN0Byqdk3vDd7s/VBjZj8Pn8t49e5wtecuPurIEDPp2x6EZoE9ZEO9v7LI 3qwqRDI/mW+6ZxqQ6f0HjKWxWJ3aIfa8ZQHAr9N1RwGI+Ge0lZk3YbHC0/boS5uY RfCPoAG5ytL82go+QWbOw5vvyQaLgW8sljIAgCqmGDHwtz9WBoLwD8ryuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLlKT84CUkAqQordZpyX4goJY7fjMB8GA1UdIwQY MBaAFEADNQvMe1QPreqVHgRggdjaBsFFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUFNMUM4eDdWQS10NnBVZUJHQ0IyTm9Hd1VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kZDg4NzctZDA4Mi00MWVhLTlmODUt Njk2YjYxNWNiZWMzLzEvUUFNMUM4eDdWQS10NnBVZUJHQ0IyTm9Hd1VVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9kZDg4NzctZDA4Mi00MWVhLTlmODUtNjk2YjYxNWNiZWMz LzEvUUFNMUM4eDdWQS10NnBVZUJHQ0IyTm9Hd1VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAuLrlSNa qWEzwICNA1uj49Nk6Cq46qnCWb43viRSwaNIOeIKVD3n2TZAj8iqjZNrQc8ref5c PZ1sH1UYFMYaKR+hpi70W2WPHrkHJQalKkBavjkvHOVGWV+gxKQBykgWmLmcr0vk i1JuypJonLzySfDyeQdOmtW/1NkV4GFlZyqSPS+gBOOjwmQ6YhZL9mbO6Z+jaEQL 2WCbjcSbd2A2pg86scyFq0iSRGb/TqiAqrkpp6yq28anUbVro5dFqzfq/5TqjJZw lwi0sE5MCfGVU9NuXTmplEe8O5B6fCufGwd3fsBQofqt9RXIkfF+p6XgvRk2BIFZ SYOFTzLKPA2NOw== -----END CERTIFICATE-----Generated at Wed Dec 24 00:11:53 2025 by rpki-client