This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft File: QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft (raw, json) Hash identifier: 9faLx3EDB/MQdDJQCqObnmSjtjNPfgrgK0/bNOHDDNM= Subject key identifier: 04:EC:D8:5C:FF:A1:6C:66:23:81:A8:8A:69:7D:64:F0:BE:8D:63:0F Authority key identifier: 41:19:52:04:67:70:F5:4E:8B:E1:FD:7D:67:31:32:26:5A:D7:0F:A8 Certificate issuer: /CN=411952046770f54e8be1fd7d673132265ad70fa8 Certificate serial: 019B6354FC1A193A5B3FC9ABE5436FE5DCFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft Manifest number: 0E5B Signing time: Sun 28 Dec 2025 05:01:12 +0000 Manifest this update: Sun 28 Dec 2025 05:01:12 +0000 Manifest next update: Mon 29 Dec 2025 05:01:12 +0000 Files and hashes: 1: QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl (hash: bw72AmnXzlauci6DYB9MWLhVIE3CkIdymh5bDdXaUoM=) 2: Xpf8O2DfxtSRMYLfH4Jhe7jGcr4.roa (hash: mr8J89/SuXN+JPAXQsryCuEFWqmHZudkRiHUpBMVGnw=) 3: qliDDfSLIfyZKuJ9vwyYrHItz_k.roa (hash: D8mFTN20TsuGjGw8I0yHs9/gZXV7jBDiD7YQatfWrpY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:54:fc:1a:19:3a:5b:3f:c9:ab:e5:43:6f:e5:dc:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411952046770f54e8be1fd7d673132265ad70fa8 Validity Not Before: Dec 28 05:01:12 2025 GMT Not After : Dec 29 05:01:12 2025 GMT Subject: CN=04ecd85cffa16c662381a88a697d64f0be8d630f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:fb:13:bd:09:77:4b:60:78:cc:87:24:79:26: d4:ee:44:ec:38:ba:f9:f3:0f:04:dc:6c:4a:88:a9: 77:17:fb:a4:f5:21:f5:89:19:4f:a5:d2:c5:5c:92: 90:dd:0e:9c:de:c6:35:cd:7f:15:eb:1b:2e:ff:8d: 5e:2d:b6:74:e9:9d:42:6e:07:e9:66:2b:fe:33:42: 64:26:34:41:65:9a:fb:de:99:40:40:08:78:29:cf: 10:71:3b:69:27:fa:19:a0:67:8e:1c:4a:6e:aa:ae: be:ff:4d:3f:f7:57:97:95:5d:24:19:ca:46:88:6a: 71:8f:25:81:f6:7b:bd:94:7a:6a:3b:82:31:5d:bd: a0:92:e6:39:1f:61:31:be:7f:59:54:48:15:f5:cb: fc:ae:98:8b:98:82:fb:50:df:6a:de:e5:04:d8:77: e9:3e:bf:a8:9e:55:24:fd:ac:d7:b7:74:6e:f9:10: 09:d8:21:6f:53:84:0b:ff:50:06:cd:eb:ff:6b:06: c9:ef:fd:3c:91:3d:10:98:d3:87:77:21:2f:ac:44: cd:4e:95:1c:9d:d6:e2:a0:28:2e:f1:b8:c1:d5:aa: 57:98:f5:20:70:38:0d:b3:09:7d:f4:1e:f1:3f:85: 39:31:5e:77:66:08:80:b8:b6:ed:51:ca:b8:41:46: 54:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:EC:D8:5C:FF:A1:6C:66:23:81:A8:8A:69:7D:64:F0:BE:8D:63:0F X509v3 Authority Key Identifier: keyid:41:19:52:04:67:70:F5:4E:8B:E1:FD:7D:67:31:32:26:5A:D7:0F:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:98:25:07:dd:33:ac:f7:87:c1:b6:fa:58:ee:84:00:5d:bf: d8:d5:d8:8c:75:cc:08:c9:ad:8d:94:bf:10:32:2c:38:cc:9e: f5:44:13:11:f5:3b:a1:0d:87:c2:72:ee:e6:95:58:d4:a8:a1: 4e:14:f9:b2:c3:6b:ea:a5:dd:fa:a6:45:88:9a:13:ce:9a:2a: a5:4a:d4:34:ab:54:c6:6a:b0:cc:c1:ee:1b:44:a5:09:7c:1a: ac:f7:27:4d:c2:e2:47:78:38:01:5b:1b:5a:87:26:8d:61:32: e2:05:87:d3:90:5b:cb:d6:6d:cb:8a:11:52:18:cf:43:d3:a0: dc:e7:ff:02:ad:3a:9b:5f:46:e9:aa:8f:af:5c:5a:99:ce:3d: 89:95:c3:79:da:36:70:e0:04:6d:53:c4:c1:37:47:d6:1f:2c: 9b:ee:27:a7:83:33:cf:64:4a:11:11:63:c8:b7:cf:e5:39:67: 89:c6:ab:65:2c:22:80:27:52:9c:b1:00:6f:0a:95:aa:82:04: 30:99:b5:46:8d:0c:fd:12:6b:8a:f5:fd:0b:7f:32:b6:72:35: f9:3d:2e:df:76:9e:90:96:7d:8b:d1:05:5a:89:46:46:3a:98: fe:30:01:08:ea:be:28:b4:19:69:a1:9e:20:c0:58:d7:cd:34: 50:7c:81:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjVPwaGTpbP8mr5UNv5dz/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMTk1MjA0Njc3MGY1NGU4YmUxZmQ3ZDY3MzEzMjI2NWFk NzBmYTgwHhcNMjUxMjI4MDUwMTEyWhcNMjUxMjI5MDUwMTEyWjAzMTEwLwYDVQQD EygwNGVjZDg1Y2ZmYTE2YzY2MjM4MWE4OGE2OTdkNjRmMGJlOGQ2MzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/sTvQl3S2B4zIckeSbU7kTsOLr5 8w8E3GxKiKl3F/uk9SH1iRlPpdLFXJKQ3Q6c3sY1zX8V6xsu/41eLbZ06Z1Cbgfp Ziv+M0JkJjRBZZr73plAQAh4Kc8QcTtpJ/oZoGeOHEpuqq6+/00/91eXlV0kGcpG iGpxjyWB9nu9lHpqO4IxXb2gkuY5H2Exvn9ZVEgV9cv8rpiLmIL7UN9q3uUE2Hfp Pr+onlUk/azXt3Ru+RAJ2CFvU4QL/1AGzev/awbJ7/08kT0QmNOHdyEvrETNTpUc ndbioCgu8bjB1apXmPUgcDgNswl99B7xP4U5MV53ZgiAuLbtUcq4QUZUBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFATs2Fz/oWxmI4Goiml9ZPC+jWMPMB8GA1UdIwQY MBaAFEEZUgRncPVOi+H9fWcxMiZa1w+oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVJsU0JHZHc5VTZMNGYxOVp6RXlKbHJYRDZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zOTUwZDQtOWQ3Mi00ZmYwLTgxZGUt OGI5MWJjNjFlN2MzLzEvUVJsU0JHZHc5VTZMNGYxOVp6RXlKbHJYRDZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zOTUwZDQtOWQ3Mi00ZmYwLTgxZGUtOGI5MWJjNjFlN2Mz LzEvUVJsU0JHZHc5VTZMNGYxOVp6RXlKbHJYRDZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE5glB90z rPeHwbb6WO6EAF2/2NXYjHXMCMmtjZS/EDIsOMye9UQTEfU7oQ2HwnLu5pVY1Kih ThT5ssNr6qXd+qZFiJoTzpoqpUrUNKtUxmqwzMHuG0SlCXwarPcnTcLiR3g4AVsb WocmjWEy4gWH05Bby9Zty4oRUhjPQ9Og3Of/Aq06m19G6aqPr1xamc49iZXDedo2 cOAEbVPEwTdH1h8sm+4np4Mzz2RKERFjyLfP5TlnicarZSwigCdSnLEAbwqVqoIE MJm1Ro0M/RJrivX9C38ytnI1+T0u33aekJZ9i9EFWolGRjqY/jABCOq+KLQZaaGe IMBY1800UHyByQ== -----END CERTIFICATE-----Generated at Sun Dec 28 08:07:56 2025 by rpki-client