This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft File: QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft (raw, json) Hash identifier: x/84kTl4UoKz7z3OWTT4eITe6QiY0MVG2QekutJo7qI= Subject key identifier: F8:F5:DE:52:3F:44:CE:E7:59:09:B3:4D:D4:DB:0E:DD:43:3A:1D:33 Authority key identifier: 40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45 Certificate issuer: /CN=4003350bcc7b540fadea951e046081d8da06c145 Certificate serial: 019AF68A9218A937991D5C74AAD498BCE089 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft Manifest number: 093E Signing time: Sun 07 Dec 2025 02:01:07 +0000 Manifest this update: Sun 07 Dec 2025 02:01:07 +0000 Manifest next update: Mon 08 Dec 2025 02:01:07 +0000 Files and hashes: 1: QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl (hash: uuc7sU6norxPpl/8EPvovEU/hWsm90EzZ2Gy1+ul5SQ=) 2: pqlsmAxEb6u37QxzF6qCzpQ4SBk.roa (hash: teI/DPbnnC6ro04KC4yzmzn/SS2I9ht6+3TdoQMOA3A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:92:18:a9:37:99:1d:5c:74:aa:d4:98:bc:e0:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4003350bcc7b540fadea951e046081d8da06c145 Validity Not Before: Dec 7 02:01:07 2025 GMT Not After : Dec 8 02:01:07 2025 GMT Subject: CN=f8f5de523f44cee75909b34dd4db0edd433a1d33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:00:7c:c0:c2:69:5d:5f:92:22:40:5f:1f:ab: 9d:11:00:4d:96:b9:b9:c1:8a:e9:fa:49:4e:85:dd: 95:eb:f6:71:5d:6b:d9:fb:2d:02:ca:a5:ac:86:fe: 07:99:c5:15:76:36:a2:18:7d:42:e8:cb:84:0d:2c: 18:80:f9:62:7a:1b:29:a7:c3:c0:08:71:26:7e:7d: 6e:6e:bc:7d:ca:34:08:d9:7d:a4:e4:10:68:38:dd: 8c:7d:4b:0e:8e:87:05:dc:ad:c8:e9:02:e4:02:33: 03:97:e1:b9:f6:79:97:36:95:38:c6:b7:59:77:a3: 42:e8:e5:01:fb:b6:8e:0c:c0:40:0f:21:3d:a1:55: 57:2b:f6:b4:99:be:3b:a7:93:22:63:51:af:ac:a9: 71:96:80:47:dd:06:63:5f:1a:43:38:c6:7a:ab:62: 2a:79:a5:14:fb:fa:7b:6c:d7:8f:60:87:9c:55:18: 61:02:b0:85:92:e4:29:0e:03:36:85:ed:79:89:9c: cb:9c:28:56:c0:b1:bb:78:d7:86:f3:2d:ea:89:60: c6:4a:bc:b9:48:b3:da:3d:1f:b9:c2:9a:5b:5c:74: 17:ca:de:d6:14:52:6d:4b:b0:ac:b1:0d:a9:f2:9e: 94:30:2c:7f:35:6b:93:dc:15:fd:f9:40:84:a1:4d: 39:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:F5:DE:52:3F:44:CE:E7:59:09:B3:4D:D4:DB:0E:DD:43:3A:1D:33 X509v3 Authority Key Identifier: keyid:40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:c2:81:40:63:78:76:c4:7d:c0:d5:f8:48:3d:f9:8c:fc:d4: 10:a5:d2:64:e4:6b:d8:96:10:e0:95:a5:ae:0f:1d:78:9f:4e: 79:0d:ce:62:fb:98:e7:05:7c:4e:c6:f5:df:d4:8e:8e:cf:a2: 47:1d:40:1f:f4:cd:ab:4d:2f:b2:ff:55:1c:dd:81:d9:ca:ff: 32:c1:57:96:7d:7b:5c:be:7b:8f:69:02:9a:2f:72:c0:3b:52: 70:26:12:49:3a:e1:ce:b7:49:8b:6f:79:0d:99:ab:7b:80:49: 2c:be:9d:d5:bc:80:39:13:a1:13:68:07:b0:de:3f:47:a9:18: 37:d0:79:87:7e:85:06:c6:94:b6:9a:d9:57:a4:e4:6a:e2:9d: 87:b1:c8:29:be:b9:64:9a:d6:5b:ea:a6:9a:44:f5:c7:06:e7: 53:7e:10:d2:3d:dd:3e:a8:e0:f8:7f:6f:2b:d9:a9:47:d0:fd: d3:bc:a0:3a:25:19:ca:4c:4d:10:62:e8:33:b6:d4:b0:9f:80: fb:94:0e:51:ae:d3:e1:c9:06:33:02:84:af:74:1d:b5:d7:35: 9c:d7:8d:36:ef:9b:f1:c6:94:f7:f5:3d:1c:e1:c0:f4:6a:93: cd:aa:76:2b:1f:12:98:0d:8d:65:35:7e:54:67:14:ce:2b:4a: fb:ba:69:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2ipIYqTeZHVx0qtSYvOCJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMDMzNTBiY2M3YjU0MGZhZGVhOTUxZTA0NjA4MWQ4ZGEw NmMxNDUwHhcNMjUxMjA3MDIwMTA3WhcNMjUxMjA4MDIwMTA3WjAzMTEwLwYDVQQD EyhmOGY1ZGU1MjNmNDRjZWU3NTkwOWIzNGRkNGRiMGVkZDQzM2ExZDMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4AB8wMJpXV+SIkBfH6udEQBNlrm5 wYrp+klOhd2V6/ZxXWvZ+y0CyqWshv4HmcUVdjaiGH1C6MuEDSwYgPliehspp8PA CHEmfn1ubrx9yjQI2X2k5BBoON2MfUsOjocF3K3I6QLkAjMDl+G59nmXNpU4xrdZ d6NC6OUB+7aODMBADyE9oVVXK/a0mb47p5MiY1GvrKlxloBH3QZjXxpDOMZ6q2Iq eaUU+/p7bNePYIecVRhhArCFkuQpDgM2he15iZzLnChWwLG7eNeG8y3qiWDGSry5 SLPaPR+5wppbXHQXyt7WFFJtS7CssQ2p8p6UMCx/NWuT3BX9+UCEoU05zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPj13lI/RM7nWQmzTdTbDt1DOh0zMB8GA1UdIwQY MBaAFEADNQvMe1QPreqVHgRggdjaBsFFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUFNMUM4eDdWQS10NnBVZUJHQ0IyTm9Hd1VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kZDg4NzctZDA4Mi00MWVhLTlmODUt Njk2YjYxNWNiZWMzLzEvUUFNMUM4eDdWQS10NnBVZUJHQ0IyTm9Hd1VVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9kZDg4NzctZDA4Mi00MWVhLTlmODUtNjk2YjYxNWNiZWMz LzEvUUFNMUM4eDdWQS10NnBVZUJHQ0IyTm9Hd1VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABcKBQGN4 dsR9wNX4SD35jPzUEKXSZORr2JYQ4JWlrg8deJ9OeQ3OYvuY5wV8Tsb139SOjs+i Rx1AH/TNq00vsv9VHN2B2cr/MsFXln17XL57j2kCmi9ywDtScCYSSTrhzrdJi295 DZmre4BJLL6d1byAOROhE2gHsN4/R6kYN9B5h36FBsaUtprZV6TkauKdh7HIKb65 ZJrWW+qmmkT1xwbnU34Q0j3dPqjg+H9vK9mpR9D907ygOiUZykxNEGLoM7bUsJ+A +5QOUa7T4ckGMwKEr3Qdtdc1nNeNNu+b8caU9/U9HOHA9GqTzap2Kx8SmA2NZTV+ VGcUzitK+7ppDA== -----END CERTIFICATE-----Generated at Sun Dec 7 09:18:26 2025 by rpki-client