This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft File: QCAZkETFTCN5A_ZW-DsmQMLR30U.mft (raw, json) Hash identifier: IbZEEhYtwL5zXx3PPvZHFi+fer7X7hLfV4zG61rObdY= Subject key identifier: 43:8B:FB:F8:D5:3B:E2:36:2B:0A:14:2B:5E:78:BF:90:C6:51:89:E9 Authority key identifier: 40:20:19:90:44:C5:4C:23:79:03:F6:56:F8:3B:26:40:C2:D1:DF:45 Certificate issuer: /CN=4020199044c54c237903f656f83b2640c2d1df45 Certificate serial: 019B41365BF67A7BD4DF2C7149D80BFF239D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft Manifest number: 0BE5 Signing time: Sun 21 Dec 2025 14:00:40 +0000 Manifest this update: Sun 21 Dec 2025 14:00:40 +0000 Manifest next update: Mon 22 Dec 2025 14:00:40 +0000 Files and hashes: 1: QCAZkETFTCN5A_ZW-DsmQMLR30U.crl (hash: AHmMYu9icl3jIJ0kOMROxbEKH+ri0N0q27qiNApoMiM=) 2: i1vQfq5K6A-H06YMbg-F_fjtfl4.roa (hash: +8kYxsIrdCv4MUOM8YLp4u35KK9tvU6LHvc0dzsNKRw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:5b:f6:7a:7b:d4:df:2c:71:49:d8:0b:ff:23:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4020199044c54c237903f656f83b2640c2d1df45 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=438bfbf8d53be2362b0a142b5e78bf90c65189e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7c:dd:a2:2e:4e:06:8b:77:26:2d:24:95:15: 6f:0f:3c:f0:2f:bf:be:58:1e:01:23:7b:40:aa:9f: 5f:00:39:6a:15:b5:c4:0a:e3:39:f5:d3:12:b7:e0: ef:0e:df:a0:7c:12:93:b4:cb:61:f1:e5:d3:bc:0c: df:22:db:73:91:01:61:b4:c1:44:25:c8:a4:aa:c7: 78:e9:f2:1f:4f:89:e0:ac:f0:fb:bc:8e:cd:ce:d7: 18:0e:34:3d:cf:53:a8:5b:a2:4b:15:8d:80:93:23: fc:47:91:16:11:59:97:f9:e5:94:83:02:c0:a2:db: 95:5f:2d:59:7c:07:63:97:06:9a:7f:c3:97:dc:cf: ab:ab:1c:a5:58:eb:e0:f7:e8:c6:3f:07:39:cc:34: 60:b2:d2:60:81:d8:67:4d:54:3c:0b:c4:c1:19:e1: a9:62:79:77:1d:05:0b:ab:b5:43:bf:74:19:52:29: 2d:24:97:99:48:63:7e:c6:ed:19:fa:68:68:06:f4: d0:fe:89:d6:b9:f9:44:9e:ac:5b:2a:bb:88:10:0e: 45:19:9e:4d:67:ad:4e:cd:84:0b:8d:68:6b:51:a0: 5a:76:b6:8d:e9:7a:26:cf:90:1c:ae:79:2d:95:4f: 01:37:41:c7:11:fe:a1:e6:2d:9b:5c:77:80:df:22: 6a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:8B:FB:F8:D5:3B:E2:36:2B:0A:14:2B:5E:78:BF:90:C6:51:89:E9 X509v3 Authority Key Identifier: keyid:40:20:19:90:44:C5:4C:23:79:03:F6:56:F8:3B:26:40:C2:D1:DF:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:dc:dc:bb:63:cd:49:f0:de:d5:c9:16:f0:61:42:da:37:0f: bc:33:65:1b:cc:37:81:52:8b:e3:4a:8b:37:91:a7:f1:9c:70: 01:f9:76:d6:cf:d4:9b:0a:6f:71:40:58:9b:26:00:83:fa:a7: 23:55:43:81:4d:97:59:a9:c3:da:93:d4:4e:d1:8e:60:3f:69: cc:1d:45:e2:a4:2d:3d:93:b5:89:29:93:22:45:42:91:39:86: a8:01:24:31:e1:24:54:6c:5a:44:d9:25:c7:96:8f:a5:64:bf: e8:3f:6c:10:b7:b2:a5:db:92:4d:70:32:ac:bb:13:a6:33:58: df:cb:82:65:f4:25:34:e3:c6:df:fd:bf:6d:36:b7:9f:a8:68: e1:bc:15:07:a6:c3:3d:ce:1e:b4:25:e1:89:b8:4e:60:ed:3d: 4d:20:ba:68:3c:b9:30:99:34:8b:40:6a:b0:a4:73:44:1c:58: 13:8d:56:1c:44:b1:03:9c:7d:30:e1:e2:56:20:99:3d:a9:32: 31:9d:ff:f2:d1:97:2b:8b:50:94:be:b0:4a:88:70:07:83:08: 00:43:f7:89:eb:6e:ee:70:f5:ef:68:24:d5:8f:c7:31:b7:00: af:f9:9e:99:c5:8d:83:22:a9:25:13:92:f4:e9:e2:cd:ef:44: aa:1a:ff:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNlv2envU3yxxSdgL/yOdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMjAxOTkwNDRjNTRjMjM3OTAzZjY1NmY4M2IyNjQwYzJk MWRmNDUwHhcNMjUxMjIxMTQwMDQwWhcNMjUxMjIyMTQwMDQwWjAzMTEwLwYDVQQD Eyg0MzhiZmJmOGQ1M2JlMjM2MmIwYTE0MmI1ZTc4YmY5MGM2NTE4OWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHzdoi5OBot3Ji0klRVvDzzwL7++ WB4BI3tAqp9fADlqFbXECuM59dMSt+DvDt+gfBKTtMth8eXTvAzfIttzkQFhtMFE Jcikqsd46fIfT4ngrPD7vI7NztcYDjQ9z1OoW6JLFY2AkyP8R5EWEVmX+eWUgwLA otuVXy1ZfAdjlwaaf8OX3M+rqxylWOvg9+jGPwc5zDRgstJggdhnTVQ8C8TBGeGp Ynl3HQULq7VDv3QZUiktJJeZSGN+xu0Z+mhoBvTQ/onWuflEnqxbKruIEA5FGZ5N Z61OzYQLjWhrUaBadraN6Xomz5AcrnktlU8BN0HHEf6h5i2bXHeA3yJqIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEOL+/jVO+I2KwoUK154v5DGUYnpMB8GA1UdIwQY MBaAFEAgGZBExUwjeQP2Vvg7JkDC0d9FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUNBWmtFVEZUQ041QV9aVy1Ec21RTUxSMzBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS80YmEwZGMtNDcwMi00N2MxLWJhOWUt NGI3NTBiYmM2MTY3LzEvUUNBWmtFVEZUQ041QV9aVy1Ec21RTUxSMzBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS80YmEwZGMtNDcwMi00N2MxLWJhOWUtNGI3NTBiYmM2MTY3 LzEvUUNBWmtFVEZUQ041QV9aVy1Ec21RTUxSMzBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYNzcu2PN SfDe1ckW8GFC2jcPvDNlG8w3gVKL40qLN5Gn8ZxwAfl21s/UmwpvcUBYmyYAg/qn I1VDgU2XWanD2pPUTtGOYD9pzB1F4qQtPZO1iSmTIkVCkTmGqAEkMeEkVGxaRNkl x5aPpWS/6D9sELeypduSTXAyrLsTpjNY38uCZfQlNOPG3/2/bTa3n6ho4bwVB6bD Pc4etCXhibhOYO09TSC6aDy5MJk0i0BqsKRzRBxYE41WHESxA5x9MOHiViCZPaky MZ3/8tGXK4tQlL6wSohwB4MIAEP3ietu7nD172gk1Y/HMbcAr/memcWNgyKpJROS 9Onize9Eqhr/UA== -----END CERTIFICATE-----Generated at Sun Dec 21 19:29:06 2025 by rpki-client