This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft File: QM_TpJvHHnSg0L9-NGyomylZehI.mft (raw, json) Hash identifier: nR4NyrqIvjc6Lakdo8jl5UBJ52viWoEc2JdaEXm2u+8= Subject key identifier: 65:84:D6:D1:FA:EE:24:BE:2E:2A:C5:C2:71:61:EA:51:BD:01:C4:D5 Authority key identifier: 40:CF:D3:A4:9B:C7:1E:74:A0:D0:BF:7E:34:6C:A8:9B:29:59:7A:12 Certificate issuer: /CN=40cfd3a49bc71e74a0d0bf7e346ca89b29597a12 Certificate serial: 019B3C7E50A03A2969832523FDB94F2E3033 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QM_TpJvHHnSg0L9-NGyomylZehI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 16:01:09 +0000 Manifest this update: Sat 20 Dec 2025 16:01:09 +0000 Manifest next update: Sun 21 Dec 2025 16:01:09 +0000 Files and hashes: 1: QM_TpJvHHnSg0L9-NGyomylZehI.crl (hash: SDhVoz1t4BLQ10uMDZK5X7et7HUMrp53iZVk90CpvX8=) 2: cOU0f1SCKSAnKUQtSDidcXUui3Y.roa (hash: SxetuqQIAbe3h1o0xhzW+JEeQWRKvCIOYuGwJHKjEXs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft rsync://rpki.ripe.net/repository/DEFAULT/QM_TpJvHHnSg0L9-NGyomylZehI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:50:a0:3a:29:69:83:25:23:fd:b9:4f:2e:30:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40cfd3a49bc71e74a0d0bf7e346ca89b29597a12 Validity Not Before: Dec 20 16:01:09 2025 GMT Not After : Dec 21 16:01:09 2025 GMT Subject: CN=6584d6d1faee24be2e2ac5c27161ea51bd01c4d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d5:8e:49:75:6a:ef:2c:00:54:8b:f6:3f:ca: 39:18:ff:41:df:f9:8b:2b:8c:8d:47:8d:f3:8c:80: 21:27:a1:00:04:1a:ef:28:f8:78:84:02:af:54:e6: 4e:2c:92:2c:a9:3c:a1:cc:da:b9:5b:5b:56:f8:4b: 7f:0e:18:c2:57:71:16:b3:53:ac:45:dd:33:d2:ff: 0c:01:11:05:0d:1d:a2:f7:e5:db:e7:5e:02:80:c6: de:de:49:05:95:6e:a0:e9:ed:4a:e9:6a:0e:3b:f4: b5:bf:63:f2:2e:59:01:87:1b:ae:68:0f:43:f0:b3: 02:1f:5d:c1:7c:64:65:c6:67:64:58:8f:bd:24:2d: 53:10:78:88:48:17:2c:bc:35:87:97:85:27:92:fb: c1:70:f1:3a:9f:0b:44:ac:40:49:2b:ec:2d:2f:ea: 2b:a9:53:59:88:69:c7:86:d4:b9:c1:93:59:b5:62: 3c:1b:fa:b9:ec:82:e1:15:96:0c:b5:75:42:9c:b7: 7b:e9:e4:c9:4f:15:04:72:57:28:eb:3f:1c:0a:36: 13:7a:71:b2:b9:26:cb:e2:12:64:e5:4c:ac:09:64: a0:86:c8:56:af:11:bc:11:44:eb:03:3a:a1:19:92: 45:bc:4e:e3:c1:6e:1f:48:2d:7f:f0:9c:4d:74:66: eb:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:84:D6:D1:FA:EE:24:BE:2E:2A:C5:C2:71:61:EA:51:BD:01:C4:D5 X509v3 Authority Key Identifier: keyid:40:CF:D3:A4:9B:C7:1E:74:A0:D0:BF:7E:34:6C:A8:9B:29:59:7A:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QM_TpJvHHnSg0L9-NGyomylZehI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:8b:d9:34:e4:b5:09:04:d8:f2:8c:4c:6a:0c:10:99:da:3f: f5:2a:19:ed:27:37:76:6c:80:88:71:cd:f3:15:ae:b9:29:0c: 7f:8e:77:4d:a0:6c:0a:84:ba:33:45:6c:40:1a:10:ae:fb:3e: f5:73:d2:6a:22:a7:19:b9:b3:f2:4b:88:6e:e9:9d:ae:5d:ec: 28:f1:4f:2e:c8:2e:00:59:59:e0:82:98:a6:0c:e8:38:5e:e6: 22:4c:11:81:d4:e6:cd:3a:ec:06:95:e0:94:d9:a7:9e:6c:83: 7d:2a:fb:23:0d:73:60:21:66:0a:90:df:36:cc:71:2e:70:6d: 2f:05:a5:13:c4:c5:d8:94:78:5f:5d:bc:8d:bf:4a:b8:ce:4e: de:93:7d:46:0a:44:c5:cb:aa:c5:8b:d1:a2:66:11:70:1d:8c: 4d:04:9a:04:09:02:92:ae:72:92:2c:f1:83:fd:c5:87:7b:f9: fd:9f:f3:0a:5e:70:4a:b4:c2:8c:20:82:12:e4:dc:24:0d:dd: 43:81:39:f7:9a:23:8b:ee:f5:68:65:7a:0b:d1:0f:65:95:ee: a8:39:64:00:28:ee:05:b8:6e:14:b7:ac:96:35:a5:d1:59:e5: 9e:7b:b8:80:64:72:1d:71:1c:fa:e0:31:26:61:66:43:36:c0: d8:99:b2:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8flCgOilpgyUj/blPLjAzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwY2ZkM2E0OWJjNzFlNzRhMGQwYmY3ZTM0NmNhODliMjk1 OTdhMTIwHhcNMjUxMjIwMTYwMTA5WhcNMjUxMjIxMTYwMTA5WjAzMTEwLwYDVQQD Eyg2NTg0ZDZkMWZhZWUyNGJlMmUyYWM1YzI3MTYxZWE1MWJkMDFjNGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdWOSXVq7ywAVIv2P8o5GP9B3/mL K4yNR43zjIAhJ6EABBrvKPh4hAKvVOZOLJIsqTyhzNq5W1tW+Et/DhjCV3EWs1Os Rd0z0v8MAREFDR2i9+Xb514CgMbe3kkFlW6g6e1K6WoOO/S1v2PyLlkBhxuuaA9D 8LMCH13BfGRlxmdkWI+9JC1TEHiISBcsvDWHl4UnkvvBcPE6nwtErEBJK+wtL+or qVNZiGnHhtS5wZNZtWI8G/q57ILhFZYMtXVCnLd76eTJTxUEclco6z8cCjYTenGy uSbL4hJk5UysCWSghshWrxG8EUTrAzqhGZJFvE7jwW4fSC1/8JxNdGbrXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGWE1tH67iS+LirFwnFh6lG9AcTVMB8GA1UdIwQY MBaAFEDP06Sbxx50oNC/fjRsqJspWXoSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU1fVHBKdkhIblNnMEw5LU5HeW9teWxaZWhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wYjlmMDctZjE2Ni00Njc1LWIxODUt NjBiNmViYmI3ZTZmLzEvUU1fVHBKdkhIblNnMEw5LU5HeW9teWxaZWhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wYjlmMDctZjE2Ni00Njc1LWIxODUtNjBiNmViYmI3ZTZm LzEvUU1fVHBKdkhIblNnMEw5LU5HeW9teWxaZWhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtIvZNOS1 CQTY8oxMagwQmdo/9SoZ7Sc3dmyAiHHN8xWuuSkMf453TaBsCoS6M0VsQBoQrvs+ 9XPSaiKnGbmz8kuIbumdrl3sKPFPLsguAFlZ4IKYpgzoOF7mIkwRgdTmzTrsBpXg lNmnnmyDfSr7Iw1zYCFmCpDfNsxxLnBtLwWlE8TF2JR4X128jb9KuM5O3pN9RgpE xcuqxYvRomYRcB2MTQSaBAkCkq5ykizxg/3Fh3v5/Z/zCl5wSrTCjCCCEuTcJA3d Q4E595oji+71aGV6C9EPZZXuqDlkACjuBbhuFLesljWl0Vnlnnu4gGRyHXEc+uAx JmFmQzbA2JmyYg== -----END CERTIFICATE-----Generated at Sun Dec 21 00:39:51 2025 by rpki-client