This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft File: QdELiOsk9iYtkxU2il0B4eCGDE4.mft (raw, json) Hash identifier: Xb4sjY4FBXbEgjqEUZVLFuwQY4pCpO2C4iZJVdKe4fw= Subject key identifier: 82:26:F8:2F:5C:5F:3B:BD:1B:CC:5A:C5:50:6F:5C:C3:1D:F4:28:8F Authority key identifier: 41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E Certificate issuer: /CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e Certificate serial: 019B0DB751E2F22012C04984D470F5FB16C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft Manifest number: 0D46 Signing time: Thu 11 Dec 2025 14:01:16 +0000 Manifest this update: Thu 11 Dec 2025 14:01:16 +0000 Manifest next update: Fri 12 Dec 2025 14:01:16 +0000 Files and hashes: 1: MxIW_z7Ebidq95zbkkCpozAg-qo.roa (hash: Ne9BRTxSbvyD3v1mKUKjrJIdCst7ww6cgLtpKgmPXO4=) 2: QdELiOsk9iYtkxU2il0B4eCGDE4.crl (hash: n5H725PLYLDM0RMcdz022OofDjOjociboDYpcqfix3A=) 3: iF0hWqV8nyrtwGMxvXkpeZV-Ad0.roa (hash: NsX4Tk5b/sJjbOHt4Xm/gMH0eUzDRvHxvl47C618GF4=) 4: pK_RWKvtbpfARxQqcIN51CNOVR4.roa (hash: gYB8+JoJ6UyQv4AugtpSBUDhjHrwgsXQ9hiZfsU43O0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b7:51:e2:f2:20:12:c0:49:84:d4:70:f5:fb:16:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e Validity Not Before: Dec 11 14:01:16 2025 GMT Not After : Dec 12 14:01:16 2025 GMT Subject: CN=8226f82f5c5f3bbd1bcc5ac5506f5cc31df4288f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:13:48:a5:cb:78:69:25:a8:42:1d:55:23:bd: a5:e2:fd:41:00:66:8a:21:54:45:67:9e:ee:70:54: 64:d1:31:c5:e0:8d:22:71:34:3e:73:6a:d1:31:12: 87:64:20:f5:25:06:02:3a:77:dc:6c:ab:da:90:93: 39:31:89:e3:48:ad:3c:6e:9b:c0:16:bf:5f:c1:47: 30:32:d8:72:14:0b:b9:f3:14:d2:af:c0:9d:09:af: c6:2c:b7:40:f8:60:9a:19:d6:1d:d0:25:a6:bd:7e: 07:28:0c:ea:38:52:20:57:4b:25:84:01:e4:59:bf: 45:65:98:79:7d:47:b6:f9:d6:84:48:22:d4:06:25: fd:28:45:e6:b3:90:c3:70:17:ac:6d:3e:3c:1f:44: b0:25:e9:23:7d:bb:aa:b7:9d:e0:cd:72:e9:b2:1e: b2:4e:80:f8:4e:d6:c4:43:5b:c9:a8:e9:eb:a7:a1: 17:04:a6:15:4f:0a:06:49:7a:fc:9c:99:6b:d9:33: ec:2c:4e:3b:7d:36:54:0f:f6:74:f0:f2:e4:1d:93: 14:44:e1:ff:57:3e:ae:b4:1c:03:5a:3c:62:bb:98: e9:b0:03:1a:d2:e2:db:46:06:e8:56:55:a5:08:cd: 4c:10:9a:38:03:70:78:ac:90:ea:74:40:d5:90:bd: bd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:26:F8:2F:5C:5F:3B:BD:1B:CC:5A:C5:50:6F:5C:C3:1D:F4:28:8F X509v3 Authority Key Identifier: keyid:41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:65:90:ce:91:86:80:48:3e:87:eb:ef:d0:93:ab:be:4c:5d: ff:b8:6d:81:ce:f0:5a:ca:e0:6e:84:59:02:38:cc:1c:2d:3a: b2:11:07:3d:c8:94:79:e3:e4:5a:41:cc:d0:ef:2c:a9:0b:9f: f5:1c:0c:48:92:39:6c:24:64:a1:96:8c:d7:09:02:3f:58:a9: 5e:52:bc:b3:0e:df:a1:85:07:6b:ae:8b:8c:c8:c8:e8:42:f8: 64:67:03:4b:a6:56:2e:e0:07:7c:ce:bd:6a:85:15:75:ad:da: b4:34:0b:e3:9f:6c:4d:a2:85:69:db:e2:fa:f0:26:ac:11:75: a1:c9:73:5f:cc:b6:19:d3:f6:ba:99:70:df:00:9d:50:15:11: 6c:67:f0:c9:4d:48:15:f2:61:e6:9e:92:fa:6c:35:c6:d5:30: 51:cf:b3:0c:16:f0:d9:c5:3a:5f:81:3d:c4:7d:1f:b1:04:28: 6e:d0:99:6e:eb:11:e3:b4:67:df:45:2e:46:41:d2:c8:91:97: 19:c3:a3:c9:3e:a3:d2:72:61:43:62:6f:26:93:07:c8:c1:36: df:e9:28:ee:f2:b4:c6:c9:a6:25:42:6a:af:5d:4c:86:e5:b5: dd:be:54:19:d7:7e:17:a2:40:82:e2:20:84:63:66:c9:2e:b2: da:26:d7:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNt1Hi8iASwEmE1HD1+xbBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxZDEwYjg4ZWIyNGY2MjYyZDkzMTUzNjhhNWQwMWUxZTA4 NjBjNGUwHhcNMjUxMjExMTQwMTE2WhcNMjUxMjEyMTQwMTE2WjAzMTEwLwYDVQQD Eyg4MjI2ZjgyZjVjNWYzYmJkMWJjYzVhYzU1MDZmNWNjMzFkZjQyODhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRNIpct4aSWoQh1VI72l4v1BAGaK IVRFZ57ucFRk0THF4I0icTQ+c2rRMRKHZCD1JQYCOnfcbKvakJM5MYnjSK08bpvA Fr9fwUcwMthyFAu58xTSr8CdCa/GLLdA+GCaGdYd0CWmvX4HKAzqOFIgV0slhAHk Wb9FZZh5fUe2+daESCLUBiX9KEXms5DDcBesbT48H0SwJekjfbuqt53gzXLpsh6y ToD4TtbEQ1vJqOnrp6EXBKYVTwoGSXr8nJlr2TPsLE47fTZUD/Z08PLkHZMUROH/ Vz6utBwDWjxiu5jpsAMa0uLbRgboVlWlCM1MEJo4A3B4rJDqdEDVkL291wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIIm+C9cXzu9G8xaxVBvXMMd9CiPMB8GA1UdIwQY MBaAFEHRC4jrJPYmLZMVNopdAeHghgxOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWRFTGlPc2s5aVl0a3hVMmlsMEI0ZUNHREU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS85OTg3ODYtODcxOS00ZDhlLTk1MDAt ZWY5NzAwNmM0NTBiLzEvUWRFTGlPc2s5aVl0a3hVMmlsMEI0ZUNHREU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS85OTg3ODYtODcxOS00ZDhlLTk1MDAtZWY5NzAwNmM0NTBi LzEvUWRFTGlPc2s5aVl0a3hVMmlsMEI0ZUNHREU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACWWQzpGG gEg+h+vv0JOrvkxd/7htgc7wWsrgboRZAjjMHC06shEHPciUeePkWkHM0O8sqQuf 9RwMSJI5bCRkoZaM1wkCP1ipXlK8sw7foYUHa66LjMjI6EL4ZGcDS6ZWLuAHfM69 aoUVda3atDQL459sTaKFadvi+vAmrBF1oclzX8y2GdP2uplw3wCdUBURbGfwyU1I FfJh5p6S+mw1xtUwUc+zDBbw2cU6X4E9xH0fsQQobtCZbusR47Rn30UuRkHSyJGX GcOjyT6j0nJhQ2JvJpMHyME23+ko7vK0xsmmJUJqr11MhuW13b5UGdd+F6JAguIg hGNmyS6y2ibXhg== -----END CERTIFICATE-----Generated at Fri Dec 12 00:09:48 2025 by rpki-client