This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft File: qd_ImBI0BQeiouHnTRGCTe-BPzk.mft (raw, json) Hash identifier: E7hx/ayaV6NIQSqfi8F3z3ITKwmuolYWOIQMVErPd7M= Subject key identifier: 4E:98:FD:1B:9B:5A:1C:BA:A6:55:97:55:BB:0A:0D:41:CF:48:5A:42 Authority key identifier: A9:DF:C8:98:12:34:05:07:A2:A2:E1:E7:4D:11:82:4D:EF:81:3F:39 Certificate issuer: /CN=a9dfc89812340507a2a2e1e74d11824def813f39 Certificate serial: 019B3532331AF95ED2E28E899E7CAE288855 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft Manifest number: 1717 Signing time: Fri 19 Dec 2025 06:00:40 +0000 Manifest this update: Fri 19 Dec 2025 06:00:40 +0000 Manifest next update: Sat 20 Dec 2025 06:00:40 +0000 Files and hashes: 1: qd_ImBI0BQeiouHnTRGCTe-BPzk.crl (hash: k7g8ym77JgzN6MQAnofpACWfsl1cGijDT52yg8p1b0c=) 2: wn31uqf50k5LZthlgOfugKfLtQQ.roa (hash: uQ9o6KlMfbYE1Nkt8fbDl10YjNVh7yxdgG7JtO4ci4A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft rsync://rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:33:1a:f9:5e:d2:e2:8e:89:9e:7c:ae:28:88:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9dfc89812340507a2a2e1e74d11824def813f39 Validity Not Before: Dec 19 06:00:40 2025 GMT Not After : Dec 20 06:00:40 2025 GMT Subject: CN=4e98fd1b9b5a1cbaa6559755bb0a0d41cf485a42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bc:52:2b:e1:4a:33:1d:93:f0:82:7a:18:f5: 0e:a2:92:aa:0f:fb:98:3a:23:4e:58:06:cb:7b:ef: a0:b3:0a:79:66:71:a7:e8:d9:87:e9:03:92:fe:b3: 13:d8:08:a3:1e:ef:7f:dd:19:67:c9:04:d2:58:a3: 7f:92:43:15:ad:cb:71:99:29:f0:e8:34:1d:02:67: 0a:b7:22:a9:0d:5a:5f:23:33:61:ec:54:40:40:6b: fc:b7:35:a7:6c:bf:f1:0d:4b:51:40:a3:6b:39:a4: 6a:7f:bf:6f:de:b6:3e:c4:36:31:74:d0:94:9a:1a: b4:2d:16:41:20:33:a2:dc:f0:2d:16:59:97:15:4f: a0:36:c7:e1:fd:f2:01:4f:7e:5c:c0:a1:3a:9d:27: 26:fc:b4:4b:4d:3a:a0:74:85:35:25:f7:cd:d4:68: 86:18:4d:f4:e3:70:85:b9:c9:11:0f:79:50:76:86: 03:93:0e:3c:8c:1a:78:f0:28:0d:c7:26:4a:b3:1f: c6:73:56:ce:a8:bc:75:3f:e3:12:5a:93:53:34:e9: b0:3a:82:6b:b7:06:71:65:8c:d8:40:69:b9:88:dd: 6c:1a:40:83:90:bf:c9:90:e6:a8:5c:b9:de:92:fc: da:f8:fb:47:86:87:40:3d:f1:5e:f3:23:43:a6:6f: d4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:98:FD:1B:9B:5A:1C:BA:A6:55:97:55:BB:0A:0D:41:CF:48:5A:42 X509v3 Authority Key Identifier: keyid:A9:DF:C8:98:12:34:05:07:A2:A2:E1:E7:4D:11:82:4D:EF:81:3F:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:ca:cf:9e:05:91:b4:73:75:c2:1f:bb:12:0f:a6:50:6d:9a: 2b:ef:eb:24:32:7c:15:10:5a:3c:23:6e:ee:0c:39:52:a2:f9: 28:17:3f:7f:a0:cd:28:eb:78:69:a2:e6:13:65:9e:58:06:ea: a3:52:7c:00:22:dc:9b:bd:90:e7:3d:2c:18:e1:e2:d9:f0:93: b4:a8:64:e7:1f:7c:f0:9f:dd:e6:33:79:e7:17:69:2b:94:fb: 0a:06:b9:25:3c:ed:25:db:8d:e3:fc:30:e2:b8:e2:c8:be:23: 70:5a:a5:48:bf:14:4b:bb:09:a3:3e:a4:89:99:60:ea:24:17: 3c:b8:90:b7:e1:23:72:25:25:2c:33:15:e7:94:7a:11:75:b8: 94:08:c9:36:87:4a:da:2a:e7:dc:1d:0a:22:19:d5:cd:60:6e: fb:da:7e:03:23:ba:95:11:0a:81:ef:be:9f:a2:7c:ec:c6:3b: 39:b6:ef:df:39:fd:c9:79:26:9f:4c:30:9a:e9:6f:6c:25:f4: 48:99:f7:8b:06:74:e3:34:c2:eb:4a:e6:f3:5c:62:4c:49:7e: 24:b5:d3:6d:27:7e:9b:f7:68:e0:78:aa:7e:b5:66:50:fa:f8: d0:3d:d2:70:93:02:25:27:5c:fb:44:07:68:41:b2:c9:d3:f0: 97:d5:28:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MjMa+V7S4o6JnnyuKIhVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ZGZjODk4MTIzNDA1MDdhMmEyZTFlNzRkMTE4MjRkZWY4 MTNmMzkwHhcNMjUxMjE5MDYwMDQwWhcNMjUxMjIwMDYwMDQwWjAzMTEwLwYDVQQD Eyg0ZTk4ZmQxYjliNWExY2JhYTY1NTk3NTViYjBhMGQ0MWNmNDg1YTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7xSK+FKMx2T8IJ6GPUOopKqD/uY OiNOWAbLe++gswp5ZnGn6NmH6QOS/rMT2AijHu9/3RlnyQTSWKN/kkMVrctxmSnw 6DQdAmcKtyKpDVpfIzNh7FRAQGv8tzWnbL/xDUtRQKNrOaRqf79v3rY+xDYxdNCU mhq0LRZBIDOi3PAtFlmXFU+gNsfh/fIBT35cwKE6nScm/LRLTTqgdIU1JffN1GiG GE3043CFuckRD3lQdoYDkw48jBp48CgNxyZKsx/Gc1bOqLx1P+MSWpNTNOmwOoJr twZxZYzYQGm5iN1sGkCDkL/JkOaoXLnekvza+PtHhodAPfFe8yNDpm/U6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE6Y/RubWhy6plWXVbsKDUHPSFpCMB8GA1UdIwQY MBaAFKnfyJgSNAUHoqLh500Rgk3vgT85MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWRfSW1CSTBCUWVpb3VIblRSR0NUZS1CUHprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mN2Q1OGUtMzNkYS00MzE5LWI1NGIt NzA0NDAzZmZmODJlLzEvcWRfSW1CSTBCUWVpb3VIblRSR0NUZS1CUHprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9mN2Q1OGUtMzNkYS00MzE5LWI1NGItNzA0NDAzZmZmODJl LzEvcWRfSW1CSTBCUWVpb3VIblRSR0NUZS1CUHprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd8rPngWR tHN1wh+7Eg+mUG2aK+/rJDJ8FRBaPCNu7gw5UqL5KBc/f6DNKOt4aaLmE2WeWAbq o1J8ACLcm72Q5z0sGOHi2fCTtKhk5x988J/d5jN55xdpK5T7Cga5JTztJduN4/ww 4rjiyL4jcFqlSL8US7sJoz6kiZlg6iQXPLiQt+EjciUlLDMV55R6EXW4lAjJNodK 2irn3B0KIhnVzWBu+9p+AyO6lREKge++n6J87MY7Obbv3zn9yXkmn0wwmulvbCX0 SJn3iwZ04zTC60rm81xiTEl+JLXTbSd+m/do4HiqfrVmUPr40D3ScJMCJSdc+0QH aEGyydPwl9Uojw== -----END CERTIFICATE-----Generated at Fri Dec 19 07:52:32 2025 by rpki-client