This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.mft File: R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.mft (raw, json) Hash identifier: OwNs86OM16Hl2QndJzJKm/2lj87duOWyYb5WF0crlTE= Subject key identifier: FC:27:73:EE:4D:43:28:B3:3A:F4:68:8D:A2:7E:82:2F:59:11:45:34 Authority key identifier: 47:E4:22:33:ED:63:0B:0B:89:F5:2C:07:7F:F0:D5:C2:B3:7D:4D:FA Certificate issuer: /CN=47e42233ed630b0b89f52c077ff0d5c2b37d4dfa Certificate serial: 019B3B6BC0C60AC671696F23F8BF9D5B4431 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 11:01:16 +0000 Manifest this update: Sat 20 Dec 2025 11:01:16 +0000 Manifest next update: Sun 21 Dec 2025 11:01:16 +0000 Files and hashes: 1: R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.crl (hash: 1Cao3f+oR1fGskbYbshky+LTIFX2GfktN8QwCXKS41A=) 2: UBzZXqpHAZVZ_dUL4TUUD1ewE-4.roa (hash: dU40dyYAxG0jUVXRYy3IsfQ8lbv7vAwEo5+BvKJGXqw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.mft rsync://rpki.ripe.net/repository/DEFAULT/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:c0:c6:0a:c6:71:69:6f:23:f8:bf:9d:5b:44:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47e42233ed630b0b89f52c077ff0d5c2b37d4dfa Validity Not Before: Dec 20 11:01:16 2025 GMT Not After : Dec 21 11:01:16 2025 GMT Subject: CN=fc2773ee4d4328b33af4688da27e822f59114534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e9:68:dc:96:5c:2c:c6:3d:7e:a4:4f:15:ad: 4c:f5:c6:b6:d7:eb:21:d2:48:fa:26:cf:f0:55:63: ad:ca:9d:be:b1:29:15:ac:32:ae:9f:54:f7:76:fe: b9:08:ab:04:d4:4c:01:64:63:a7:c2:60:8e:5b:d1: ed:90:8a:c5:56:82:ea:6b:ec:f4:cf:81:ba:53:b6: 22:42:18:14:dd:16:2f:52:03:18:ab:e2:80:7d:5f: c9:db:3e:8d:3d:48:bd:e7:1d:3b:a1:9d:9e:e4:db: 2f:7f:4e:af:99:e4:3d:70:34:67:94:57:a6:42:ce: fe:af:53:42:6c:17:7e:7e:20:ec:88:7f:99:a1:a0: 4c:9d:6d:0f:19:ed:e5:06:4b:32:11:3f:81:97:96: 89:d8:a4:7a:50:af:62:fe:3b:b9:6d:45:64:2d:13: 9b:8c:cc:53:86:22:d8:a9:bb:5b:1d:e0:ec:88:d4: d5:2b:bf:69:fd:48:40:ca:d1:bc:1d:73:c1:31:26: a1:f9:d5:96:57:bb:16:30:c6:07:b0:f3:75:72:6d: 52:7d:a4:5d:65:4d:2e:9a:d4:e8:71:9d:7f:cd:9c: c9:8c:68:08:f5:e9:01:27:9c:c5:05:9c:15:ca:f2: 8a:d0:3f:9b:db:40:24:27:ea:2b:54:90:e7:6b:94: c2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:27:73:EE:4D:43:28:B3:3A:F4:68:8D:A2:7E:82:2F:59:11:45:34 X509v3 Authority Key Identifier: keyid:47:E4:22:33:ED:63:0B:0B:89:F5:2C:07:7F:F0:D5:C2:B3:7D:4D:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:9f:97:5a:fc:40:2e:f5:11:07:26:f3:57:60:33:ba:c6:49: 6b:1e:c9:b7:25:7b:21:fd:1e:7e:68:8a:b1:f6:dc:1d:03:24: b1:a9:e4:4e:65:ac:a2:4a:19:b6:9c:51:62:d2:24:f1:89:a6: f3:33:ca:9f:15:f3:bd:99:c6:ac:4e:50:79:0e:07:1d:4f:9c: 9f:c3:e7:0f:6f:2a:88:68:72:02:0e:10:d0:48:19:ea:7f:9f: a5:38:ec:c3:ef:84:8d:8f:f0:65:f5:ed:89:b1:05:30:84:54: 35:7b:e7:69:c8:a8:51:0a:e8:4b:6d:1e:88:61:a5:e3:0c:37: cb:4c:cb:18:23:cf:b1:4f:7a:25:da:f0:d2:46:74:17:fe:58: 1f:8a:7c:0a:e4:a5:c6:69:3b:d2:c2:83:03:55:1e:01:4f:36: da:99:14:92:6d:0c:a4:04:44:58:f7:50:f1:1b:b6:36:21:a4: 36:92:78:ac:c3:26:76:7d:15:c8:a3:91:1b:6d:e5:44:4f:c9: 3a:b0:1b:06:55:7f:7c:e0:3a:6a:bf:74:98:02:00:c7:08:cc: 09:b8:e7:a6:cd:22:1d:f6:03:b5:ae:09:2f:3e:ef:72:9c:2c: 0f:4a:c2:d2:ff:2a:04:31:d8:05:6b:8e:dc:ca:0e:ca:cf:a9: 1f:de:48:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a8DGCsZxaW8j+L+dW0QxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3ZTQyMjMzZWQ2MzBiMGI4OWY1MmMwNzdmZjBkNWMyYjM3 ZDRkZmEwHhcNMjUxMjIwMTEwMTE2WhcNMjUxMjIxMTEwMTE2WjAzMTEwLwYDVQQD EyhmYzI3NzNlZTRkNDMyOGIzM2FmNDY4OGRhMjdlODIyZjU5MTE0NTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOlo3JZcLMY9fqRPFa1M9ca21+sh 0kj6Js/wVWOtyp2+sSkVrDKun1T3dv65CKsE1EwBZGOnwmCOW9HtkIrFVoLqa+z0 z4G6U7YiQhgU3RYvUgMYq+KAfV/J2z6NPUi95x07oZ2e5Nsvf06vmeQ9cDRnlFem Qs7+r1NCbBd+fiDsiH+ZoaBMnW0PGe3lBksyET+Bl5aJ2KR6UK9i/ju5bUVkLROb jMxThiLYqbtbHeDsiNTVK79p/UhAytG8HXPBMSah+dWWV7sWMMYHsPN1cm1SfaRd ZU0umtTocZ1/zZzJjGgI9ekBJ5zFBZwVyvKK0D+b20AkJ+orVJDna5TCkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPwnc+5NQyizOvRojaJ+gi9ZEUU0MB8GA1UdIwQY MBaAFEfkIjPtYwsLifUsB3/w1cKzfU36MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUi1RaU0tMWpDd3VKOVN3SGZfRFZ3ck45VGZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9lOTQ4MTctZjI1OS00ZmZhLTliYTMt N2ViOTVjYzBmNzQ5LzEvUi1RaU0tMWpDd3VKOVN3SGZfRFZ3ck45VGZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9lOTQ4MTctZjI1OS00ZmZhLTliYTMtN2ViOTVjYzBmNzQ5 LzEvUi1RaU0tMWpDd3VKOVN3SGZfRFZ3ck45VGZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXp+XWvxA LvURBybzV2AzusZJax7JtyV7If0efmiKsfbcHQMksankTmWsokoZtpxRYtIk8Ymm 8zPKnxXzvZnGrE5QeQ4HHU+cn8PnD28qiGhyAg4Q0EgZ6n+fpTjsw++EjY/wZfXt ibEFMIRUNXvnacioUQroS20eiGGl4ww3y0zLGCPPsU96Jdrw0kZ0F/5YH4p8CuSl xmk70sKDA1UeAU822pkUkm0MpAREWPdQ8Ru2NiGkNpJ4rMMmdn0VyKORG23lRE/J OrAbBlV/fOA6ar90mAIAxwjMCbjnps0iHfYDta4JLz7vcpwsD0rC0v8qBDHYBWuO 3MoOys+pH95IsQ== -----END CERTIFICATE-----Generated at Sat Dec 20 19:57:21 2025 by rpki-client