This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft File: QhLmk-jn-4sxqoVTsw2VvvBINyk.mft (raw, json) Hash identifier: BlSD6awjfck4/pKwznimfFqUBKYBgT/DWKsAG6PeLzo= Subject key identifier: A8:C7:08:4C:FA:D5:26:87:76:63:7E:9A:32:E8:EB:21:F8:85:68:BA Authority key identifier: 42:12:E6:93:E8:E7:FB:8B:31:AA:85:53:B3:0D:95:BE:F0:48:37:29 Certificate issuer: /CN=4212e693e8e7fb8b31aa8553b30d95bef0483729 Certificate serial: 019B35A0A34E1ECF1648F66F57D702DC5961 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 08:01:18 +0000 Manifest this update: Fri 19 Dec 2025 08:01:18 +0000 Manifest next update: Sat 20 Dec 2025 08:01:18 +0000 Files and hashes: 1: QhLmk-jn-4sxqoVTsw2VvvBINyk.crl (hash: 2y0ZvsFiDzTubuq38re04FTn26BXIhwQx6rFjh92u54=) 2: cjjqef6iWCl_1yFiNx4mwIqngEo.roa (hash: d/pj6gBhpaRW2JX3FWdfa1N0hGZit4d6dbXlFGA0bW4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.crl rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 08:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:a3:4e:1e:cf:16:48:f6:6f:57:d7:02:dc:59:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4212e693e8e7fb8b31aa8553b30d95bef0483729 Validity Not Before: Dec 19 08:01:18 2025 GMT Not After : Dec 20 08:01:18 2025 GMT Subject: CN=a8c7084cfad5268776637e9a32e8eb21f88568ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f4:09:b7:86:15:da:9d:3c:2f:64:41:40:01: ae:d5:f6:2e:e4:c9:57:49:4f:93:04:b3:f3:71:1a: 7a:6b:55:f2:87:14:4d:c8:97:97:c9:de:34:06:e9: 42:80:10:a1:e8:37:58:12:5f:71:3e:ca:63:cf:9c: 09:33:43:88:eb:06:5e:fc:38:94:74:c8:5a:b6:d7: 1a:80:e0:9e:48:08:c9:08:2a:6f:bb:6f:2d:4d:4e: 3d:98:f6:72:17:d7:0e:ac:55:ac:be:15:ba:86:0c: e2:44:51:71:06:81:4e:44:df:49:7e:f5:86:95:44: 66:5f:43:b8:99:ae:5e:b9:e3:9a:a4:86:34:f9:69: 0b:82:b2:db:60:98:b3:27:b2:b6:05:6b:7f:ba:7c: 57:db:43:aa:e4:07:4a:bd:d1:e3:63:9c:5c:ab:b2: db:41:bb:90:f3:5d:a2:56:00:ee:75:8d:4e:8f:96: 99:ab:d9:a7:5e:62:d0:b0:93:e2:bc:f5:e3:a4:9b: 91:d7:b6:78:4c:8e:0f:9d:14:b2:0b:c0:cc:59:ab: e4:1a:e0:95:6e:20:90:f4:f0:72:b4:24:30:2d:91: bf:d3:11:e5:37:e1:a8:6e:c6:7c:14:2e:30:39:b8: af:e4:5e:88:0e:87:13:b9:87:2f:d7:56:7f:72:9e: 63:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:C7:08:4C:FA:D5:26:87:76:63:7E:9A:32:E8:EB:21:F8:85:68:BA X509v3 Authority Key Identifier: keyid:42:12:E6:93:E8:E7:FB:8B:31:AA:85:53:B3:0D:95:BE:F0:48:37:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:54:1e:09:fa:f1:b1:5e:04:91:f7:d5:a3:16:b7:5c:80:63: 04:48:e7:36:0a:47:08:1b:7d:e5:cb:88:d4:bb:7b:df:d8:5f: f7:bb:3a:04:58:bd:5e:0a:66:f1:29:8c:ed:44:8c:16:0b:cd: 7f:18:3f:e8:85:cc:d3:cf:64:f4:de:0e:bf:34:d4:3a:79:90: 5c:fe:81:fc:b4:82:e5:b1:6f:60:5a:fe:88:3c:0d:b9:f5:f1: 43:b7:31:41:25:a7:d6:77:06:be:87:79:80:c6:e3:b7:06:6d: 4e:cc:76:7c:fe:77:11:21:ab:42:62:ce:ab:ad:37:2e:a7:ad: 4e:1e:a7:83:96:66:c5:bb:86:05:69:0f:39:b4:7f:86:9a:f1: b2:17:08:15:0e:2d:a2:d1:8c:c7:74:3f:11:70:43:2f:46:37: bb:c2:22:b5:f2:b5:08:07:57:42:c0:1f:92:4c:25:a5:a8:42: 76:28:76:ec:05:29:7c:d4:b2:07:23:be:1d:0a:1e:9c:8a:fd: 90:c2:82:fa:dd:56:c8:ec:05:c4:d1:89:35:df:59:b1:ce:02: 59:f7:d8:c8:22:9f:6d:84:90:ad:c7:ca:ea:97:08:c3:58:89: 08:40:1c:33:7f:59:15:00:9a:41:e5:96:6b:c1:77:11:8a:e1: 90:d8:3f:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oKNOHs8WSPZvV9cC3FlhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMTJlNjkzZThlN2ZiOGIzMWFhODU1M2IzMGQ5NWJlZjA0 ODM3MjkwHhcNMjUxMjE5MDgwMTE4WhcNMjUxMjIwMDgwMTE4WjAzMTEwLwYDVQQD EyhhOGM3MDg0Y2ZhZDUyNjg3NzY2MzdlOWEzMmU4ZWIyMWY4ODU2OGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfQJt4YV2p08L2RBQAGu1fYu5MlX SU+TBLPzcRp6a1XyhxRNyJeXyd40BulCgBCh6DdYEl9xPspjz5wJM0OI6wZe/DiU dMhattcagOCeSAjJCCpvu28tTU49mPZyF9cOrFWsvhW6hgziRFFxBoFORN9JfvWG lURmX0O4ma5eueOapIY0+WkLgrLbYJizJ7K2BWt/unxX20Oq5AdKvdHjY5xcq7Lb QbuQ812iVgDudY1Oj5aZq9mnXmLQsJPivPXjpJuR17Z4TI4PnRSyC8DMWavkGuCV biCQ9PBytCQwLZG/0xHlN+GobsZ8FC4wObiv5F6IDocTuYcv11Z/cp5jIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKjHCEz61SaHdmN+mjLo6yH4hWi6MB8GA1UdIwQY MBaAFEIS5pPo5/uLMaqFU7MNlb7wSDcpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWhMbWstam4tNHN4cW9WVHN3MlZ2dkJJTnlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9lMjEzMjUtOTkxMC00N2U4LTk5Y2Mt NzVhNTU1YzhmYjQxLzEvUWhMbWstam4tNHN4cW9WVHN3MlZ2dkJJTnlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9lMjEzMjUtOTkxMC00N2U4LTk5Y2MtNzVhNTU1YzhmYjQx LzEvUWhMbWstam4tNHN4cW9WVHN3MlZ2dkJJTnlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA11QeCfrx sV4EkffVoxa3XIBjBEjnNgpHCBt95cuI1Lt739hf97s6BFi9Xgpm8SmM7USMFgvN fxg/6IXM089k9N4OvzTUOnmQXP6B/LSC5bFvYFr+iDwNufXxQ7cxQSWn1ncGvod5 gMbjtwZtTsx2fP53ESGrQmLOq603LqetTh6ng5ZmxbuGBWkPObR/hprxshcIFQ4t otGMx3Q/EXBDL0Y3u8IitfK1CAdXQsAfkkwlpahCdih27AUpfNSyByO+HQoenIr9 kMKC+t1WyOwFxNGJNd9Zsc4CWffYyCKfbYSQrcfK6pcIw1iJCEAcM39ZFQCaQeWW a8F3EYrhkNg/4A== -----END CERTIFICATE-----Generated at Fri Dec 19 17:27:27 2025 by rpki-client