This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft File: QCD01MdSjYqCfsckkY_i31NL2QU.mft (raw, json) Hash identifier: b/laMZhGNwFjjQro0f3JO/p8Z1oCT2nwkDUvkXtK/Pk= Subject key identifier: 19:EB:92:EB:0E:0A:4A:4C:03:17:CA:0A:03:2F:7D:86:98:CB:7A:DB Authority key identifier: 40:20:F4:D4:C7:52:8D:8A:82:7E:C7:24:91:8F:E2:DF:53:4B:D9:05 Certificate issuer: /CN=4020f4d4c7528d8a827ec724918fe2df534bd905 Certificate serial: 019B23630792F828D5912C034AB9CA5C60A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft Manifest number: 0680 Signing time: Mon 15 Dec 2025 19:00:50 +0000 Manifest this update: Mon 15 Dec 2025 19:00:50 +0000 Manifest next update: Tue 16 Dec 2025 19:00:50 +0000 Files and hashes: 1: QCD01MdSjYqCfsckkY_i31NL2QU.crl (hash: f5df0DrVXNE0hObvA4k9z4DK2MxfQAqr9bh6dQSacQk=) 2: Zx4sEHNKCl_Lh5FzOtQjZYd3ZCE.roa (hash: 2Xu5Qu43xBBRy4X2ZZ8tBlY4rjWAu0V1llrLDaiQerk=) 3: oaLZxtKD66NwRygInPYpaycKqOc.roa (hash: Ja3SjwoX4eh5IRVh7jPL7K8MqCmfJQ9Q/LWhTt+xawU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.crl rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:63:07:92:f8:28:d5:91:2c:03:4a:b9:ca:5c:60:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4020f4d4c7528d8a827ec724918fe2df534bd905 Validity Not Before: Dec 15 19:00:50 2025 GMT Not After : Dec 16 19:00:50 2025 GMT Subject: CN=19eb92eb0e0a4a4c0317ca0a032f7d8698cb7adb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:96:4e:17:7c:5f:78:ff:49:ef:42:cf:5b:10: 0d:0b:57:e5:d0:33:0a:82:b2:50:b5:15:8e:af:ff: 25:fe:f3:9c:ae:89:8c:a5:8c:14:ea:ec:a2:0b:5e: 04:5d:eb:96:f4:a4:5c:fa:3a:77:f0:ed:12:1e:bc: 20:ee:4f:3e:f1:0c:db:cd:f5:7e:a5:0a:4f:06:cd: ca:2a:d3:63:fa:13:02:52:98:c7:25:b6:38:bb:5c: d0:c1:50:d7:51:eb:83:96:16:20:93:09:c2:1f:0b: f7:aa:d6:e2:b9:db:fe:b9:e7:9b:a6:7c:08:96:a2: 14:41:3e:e3:2d:fb:68:af:10:5e:49:00:da:f7:3e: 75:e7:ca:3f:51:14:1e:c3:20:8e:92:bb:15:39:c3: d0:c2:b5:07:f1:fe:86:54:ed:25:0f:8b:5a:9d:a8: b8:fc:6b:a7:b7:25:b2:8b:94:56:02:2c:0d:77:61: d3:3b:56:2e:37:13:a6:f6:f7:4b:ca:3a:62:88:ed: 91:6b:96:6f:ab:8b:29:b3:8f:26:cf:1e:66:63:2b: 3e:42:a9:36:f5:f1:03:79:c5:4a:2a:28:bd:ac:d1: f3:70:37:60:52:a3:e6:c0:66:95:a1:15:f1:57:85: ff:33:5f:0d:34:71:1b:24:69:01:90:d7:cf:78:75: de:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:EB:92:EB:0E:0A:4A:4C:03:17:CA:0A:03:2F:7D:86:98:CB:7A:DB X509v3 Authority Key Identifier: keyid:40:20:F4:D4:C7:52:8D:8A:82:7E:C7:24:91:8F:E2:DF:53:4B:D9:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:5e:07:eb:17:63:a2:f4:f0:74:89:95:c2:56:48:0f:4b:97: 64:12:72:09:20:b7:9e:5c:c5:e6:22:da:af:40:08:0a:c5:29: b6:59:9c:f6:3d:ff:c8:9e:b0:f1:54:60:97:3e:1e:24:c8:e3: 4b:d8:ec:f2:2a:be:f2:99:41:56:a3:b7:83:b2:fb:89:94:b4: ba:2c:f2:5a:bd:fc:9d:5b:c7:59:2d:ff:a0:61:6d:51:ad:5a: f5:28:12:fe:2e:fb:e3:d4:af:c3:8a:04:f7:3b:15:38:f4:56: ec:71:92:eb:55:fd:22:7d:be:fe:ef:2d:53:ba:85:c0:35:82: a4:3c:00:c0:02:25:c7:9a:f8:48:63:e8:2f:cc:00:26:ed:26: 90:a4:e1:1c:9e:83:0d:fc:e5:f3:fb:71:cf:af:f6:95:03:ef: 5f:64:92:fa:19:52:cb:ff:40:ef:d4:85:88:d6:b0:80:2c:d1: ae:d4:dd:fe:77:a7:16:bf:b6:48:59:b5:4f:35:a8:a4:1d:ab: 8b:e4:7f:9e:65:76:2e:06:3f:8d:3e:81:1f:a1:1f:89:93:cf: 18:3d:a9:22:36:db:f0:cc:ce:10:60:b6:b0:7d:40:1b:27:01: 7d:28:8f:94:23:62:9c:b7:47:08:e0:ed:f2:22:50:b3:61:86: a2:27:1c:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjYweS+CjVkSwDSrnKXGChMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMjBmNGQ0Yzc1MjhkOGE4MjdlYzcyNDkxOGZlMmRmNTM0 YmQ5MDUwHhcNMjUxMjE1MTkwMDUwWhcNMjUxMjE2MTkwMDUwWjAzMTEwLwYDVQQD EygxOWViOTJlYjBlMGE0YTRjMDMxN2NhMGEwMzJmN2Q4Njk4Y2I3YWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpZOF3xfeP9J70LPWxANC1fl0DMK grJQtRWOr/8l/vOcromMpYwU6uyiC14EXeuW9KRc+jp38O0SHrwg7k8+8QzbzfV+ pQpPBs3KKtNj+hMCUpjHJbY4u1zQwVDXUeuDlhYgkwnCHwv3qtbiudv+ueebpnwI lqIUQT7jLftorxBeSQDa9z5158o/URQewyCOkrsVOcPQwrUH8f6GVO0lD4tanai4 /GuntyWyi5RWAiwNd2HTO1YuNxOm9vdLyjpiiO2Ra5Zvq4sps48mzx5mYys+Qqk2 9fEDecVKKii9rNHzcDdgUqPmwGaVoRXxV4X/M18NNHEbJGkBkNfPeHXeRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBnrkusOCkpMAxfKCgMvfYaYy3rbMB8GA1UdIwQY MBaAFEAg9NTHUo2Kgn7HJJGP4t9TS9kFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUNEMDFNZFNqWXFDZnNja2tZX2kzMU5MMlFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8yZjdhNmUtZThjMS00ZjYyLTk1Zjkt NjRiZmI3OTkwMGQ2LzEvUUNEMDFNZFNqWXFDZnNja2tZX2kzMU5MMlFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy8yZjdhNmUtZThjMS00ZjYyLTk1ZjktNjRiZmI3OTkwMGQ2 LzEvUUNEMDFNZFNqWXFDZnNja2tZX2kzMU5MMlFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEl4H6xdj ovTwdImVwlZID0uXZBJyCSC3nlzF5iLar0AICsUptlmc9j3/yJ6w8VRglz4eJMjj S9js8iq+8plBVqO3g7L7iZS0uizyWr38nVvHWS3/oGFtUa1a9SgS/i7749Svw4oE 9zsVOPRW7HGS61X9In2+/u8tU7qFwDWCpDwAwAIlx5r4SGPoL8wAJu0mkKThHJ6D Dfzl8/txz6/2lQPvX2SS+hlSy/9A79SFiNawgCzRrtTd/nenFr+2SFm1TzWopB2r i+R/nmV2LgY/jT6BH6EfiZPPGD2pIjbb8MzOEGC2sH1AGycBfSiPlCNinLdHCODt 8iJQs2GGoiccCQ== -----END CERTIFICATE-----Generated at Mon Dec 15 21:34:18 2025 by rpki-client