This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft File: QCAZkETFTCN5A_ZW-DsmQMLR30U.mft (raw, json) Hash identifier: JRXi/MHC5MvLfalLRYR8TNcVfj1u7uxSQHeatsWBtL4= Subject key identifier: EB:11:34:34:60:0C:A6:DC:A7:1E:1F:DD:9B:36:34:98:12:C6:91:8E Authority key identifier: 40:20:19:90:44:C5:4C:23:79:03:F6:56:F8:3B:26:40:C2:D1:DF:45 Certificate issuer: /CN=4020199044c54c237903f656f83b2640c2d1df45 Certificate serial: 019B3D5A10176F5B6AFCEBBF09782A721C7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft Manifest number: 0BE3 Signing time: Sat 20 Dec 2025 20:01:11 +0000 Manifest this update: Sat 20 Dec 2025 20:01:11 +0000 Manifest next update: Sun 21 Dec 2025 20:01:11 +0000 Files and hashes: 1: QCAZkETFTCN5A_ZW-DsmQMLR30U.crl (hash: A+zltHeAWEyotTpjWkMc/qEWVFk9UKNW4fgkpsBhVGA=) 2: i1vQfq5K6A-H06YMbg-F_fjtfl4.roa (hash: +8kYxsIrdCv4MUOM8YLp4u35KK9tvU6LHvc0dzsNKRw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:10:17:6f:5b:6a:fc:eb:bf:09:78:2a:72:1c:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4020199044c54c237903f656f83b2640c2d1df45 Validity Not Before: Dec 20 20:01:11 2025 GMT Not After : Dec 21 20:01:11 2025 GMT Subject: CN=eb113434600ca6dca71e1fdd9b36349812c6918e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:64:3d:d6:fe:75:bd:42:a5:9f:df:48:8d:af: 57:1f:c2:8c:80:2e:60:68:ad:e4:d7:ab:57:58:46: 80:12:93:82:60:d7:24:d9:53:d9:56:bd:57:7d:5f: 2d:22:51:51:4d:dd:a9:84:9b:cd:ab:28:ba:7e:cd: 27:4c:d2:a4:17:c3:f6:1b:7d:98:e0:be:8c:ae:2e: bd:73:4c:45:2f:1d:ce:ae:2f:54:8a:1a:bd:76:3a: 8d:fe:f9:6c:91:72:d4:15:ca:b5:ad:4d:ec:75:a5: 30:c6:7c:58:34:76:ec:e6:19:ae:5c:7a:7e:49:68: b9:6b:29:75:f1:b3:ee:b2:d6:24:fe:06:bf:f4:df: cb:92:28:c4:34:18:b2:92:09:87:f6:e2:43:65:53: bf:5b:cf:7c:12:90:15:6b:8f:b1:64:44:1e:3d:08: e2:59:a7:b6:5d:46:40:7a:2e:f9:50:5e:65:cc:55: e2:25:56:bb:b4:73:a9:42:3c:52:77:06:dc:86:fe: 45:27:2d:00:19:73:32:75:a9:24:09:97:45:e1:ba: 2b:b4:ea:49:aa:b8:a1:17:fd:07:fd:92:bc:65:57: 2a:b7:9d:f2:34:b9:3b:39:1a:04:ed:5e:a6:8a:18: 62:c0:5e:a8:22:40:7a:7d:21:ed:ec:de:c5:69:9d: 3a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:11:34:34:60:0C:A6:DC:A7:1E:1F:DD:9B:36:34:98:12:C6:91:8E X509v3 Authority Key Identifier: keyid:40:20:19:90:44:C5:4C:23:79:03:F6:56:F8:3B:26:40:C2:D1:DF:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:9c:b8:11:f5:9c:be:6e:86:37:43:0a:45:bd:d3:8b:56:fd: 38:c2:a1:ea:a1:8d:f8:b5:b7:8e:60:ae:06:6b:92:9d:ce:6d: 6d:92:be:f7:ae:ae:f9:1c:c8:e4:fd:41:84:33:fb:ca:1c:e3: 19:09:a9:d0:58:b1:36:ac:53:7d:a8:6e:81:a9:a7:ab:42:48: a4:82:f2:1d:86:24:67:bc:d1:c7:d9:27:45:99:ab:90:56:4e: 50:7b:64:cd:2c:ed:e1:78:1d:03:b3:0e:5b:63:8a:1e:84:6b: 5f:7e:19:ae:d8:e5:25:03:ba:7d:9a:95:74:40:e0:65:fb:b1: 0d:f7:1a:13:fc:89:67:a7:f9:8b:66:fe:9d:54:8a:86:67:86: f9:72:94:79:8f:33:52:bd:b4:57:c4:23:72:e8:1d:3e:3d:5f: de:a5:a4:49:92:52:2b:02:24:95:1f:f1:2e:8e:76:01:85:40: 81:89:1d:6d:94:d1:f7:96:f8:c2:89:9e:99:40:63:5f:64:12: 61:6c:5b:61:71:20:13:a7:65:9a:28:a6:3f:0a:15:44:95:30: 3f:35:41:f2:0f:5f:f5:8e:03:39:c8:8e:32:28:e8:d9:6c:0b: eb:3d:9c:13:9d:ec:c7:03:f5:08:66:e9:73:26:2c:c0:ce:48: 5c:12:12:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WhAXb1tq/Ou/CXgqchx6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMjAxOTkwNDRjNTRjMjM3OTAzZjY1NmY4M2IyNjQwYzJk MWRmNDUwHhcNMjUxMjIwMjAwMTExWhcNMjUxMjIxMjAwMTExWjAzMTEwLwYDVQQD EyhlYjExMzQzNDYwMGNhNmRjYTcxZTFmZGQ5YjM2MzQ5ODEyYzY5MThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWQ91v51vUKln99Ija9XH8KMgC5g aK3k16tXWEaAEpOCYNck2VPZVr1XfV8tIlFRTd2phJvNqyi6fs0nTNKkF8P2G32Y 4L6Mri69c0xFLx3Ori9Uihq9djqN/vlskXLUFcq1rU3sdaUwxnxYNHbs5hmuXHp+ SWi5ayl18bPustYk/ga/9N/LkijENBiykgmH9uJDZVO/W898EpAVa4+xZEQePQji Wae2XUZAei75UF5lzFXiJVa7tHOpQjxSdwbchv5FJy0AGXMydakkCZdF4bortOpJ qrihF/0H/ZK8ZVcqt53yNLk7ORoE7V6mihhiwF6oIkB6fSHt7N7FaZ06cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOsRNDRgDKbcpx4f3Zs2NJgSxpGOMB8GA1UdIwQY MBaAFEAgGZBExUwjeQP2Vvg7JkDC0d9FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUNBWmtFVEZUQ041QV9aVy1Ec21RTUxSMzBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS80YmEwZGMtNDcwMi00N2MxLWJhOWUt NGI3NTBiYmM2MTY3LzEvUUNBWmtFVEZUQ041QV9aVy1Ec21RTUxSMzBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS80YmEwZGMtNDcwMi00N2MxLWJhOWUtNGI3NTBiYmM2MTY3 LzEvUUNBWmtFVEZUQ041QV9aVy1Ec21RTUxSMzBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJJy4EfWc vm6GN0MKRb3Ti1b9OMKh6qGN+LW3jmCuBmuSnc5tbZK+966u+RzI5P1BhDP7yhzj GQmp0FixNqxTfahugamnq0JIpILyHYYkZ7zRx9knRZmrkFZOUHtkzSzt4XgdA7MO W2OKHoRrX34ZrtjlJQO6fZqVdEDgZfuxDfcaE/yJZ6f5i2b+nVSKhmeG+XKUeY8z Ur20V8QjcugdPj1f3qWkSZJSKwIklR/xLo52AYVAgYkdbZTR95b4womemUBjX2QS YWxbYXEgE6dlmiimPwoVRJUwPzVB8g9f9Y4DOciOMijo2WwL6z2cE53sxwP1CGbp cyYswM5IXBIStQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:41:02 2025 by rpki-client