This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft File: qlemjwii4wun1z1EyabiQA_Qo7E.mft (raw, json) Hash identifier: R8OjfiBZG54XP8IGjFLhTYMfXiLmDOiY/ceZgYP1QNQ= Subject key identifier: 69:D0:D3:20:92:48:0F:56:80:A7:C8:56:38:8A:2A:CB:1B:11:74:4A Authority key identifier: AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1 Certificate issuer: /CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1 Certificate serial: 019B3E6E0D742A6CFB3776AEDC5B345738F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft Manifest number: 0960 Signing time: Sun 21 Dec 2025 01:02:38 +0000 Manifest this update: Sun 21 Dec 2025 01:02:38 +0000 Manifest next update: Mon 22 Dec 2025 01:02:38 +0000 Files and hashes: 1: _uIcjPbTo2tZZuPbQQgAGU6uFaU.roa (hash: mFbVT5EqFo/vqgifNq4fzGvwXcCU4t6Rafq12c4CSak=) 2: qlemjwii4wun1z1EyabiQA_Qo7E.crl (hash: sH8HmrvXaKJ2uzD+BJJCbJ1uaXPulqZemlGwN+nYleo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6e:0d:74:2a:6c:fb:37:76:ae:dc:5b:34:57:38:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1 Validity Not Before: Dec 21 01:02:38 2025 GMT Not After : Dec 22 01:02:38 2025 GMT Subject: CN=69d0d32092480f5680a7c856388a2acb1b11744a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:52:ae:96:a2:4b:0d:c7:37:fb:55:f2:4e:e6: 08:af:e1:6a:72:6d:d9:b7:5f:60:88:e5:dc:21:91: e9:84:90:d6:6d:67:2b:06:c4:bd:7f:0b:25:79:ed: 74:f5:67:a9:fb:69:ab:81:b5:2e:b5:55:e7:87:11: 91:bb:55:fe:48:e1:11:75:2c:c8:aa:82:56:99:03: 21:f1:e2:2a:9e:96:01:1f:01:9f:cb:a1:50:9d:c0: b9:bd:ae:50:41:be:6f:95:d2:d9:b3:e1:48:8e:2a: 95:9f:c5:25:c9:e3:8c:89:e1:bd:f8:57:64:40:6e: b1:0b:bd:93:29:2f:9f:73:de:b7:59:7c:80:36:56: 5e:fb:6d:64:d9:06:d6:95:32:9f:fc:1c:25:50:e2: 95:ba:06:b2:93:d0:1c:1d:b1:74:f3:ff:8c:9d:c9: 31:56:26:09:97:ac:de:48:e5:c4:26:db:52:e9:c2: 8d:20:4b:de:aa:6f:19:3c:ea:60:16:1a:af:36:c5: 23:c0:71:f7:ae:62:a3:0e:d8:a6:ab:6b:be:f9:d6: 2b:b9:62:3b:6f:52:ad:98:f7:fb:aa:64:a4:52:2e: 3e:a7:5b:25:4a:1c:db:b8:e4:81:ae:d2:98:7c:2c: 79:ec:57:63:08:2b:de:29:f9:82:4e:a3:3a:9a:84: d3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D0:D3:20:92:48:0F:56:80:A7:C8:56:38:8A:2A:CB:1B:11:74:4A X509v3 Authority Key Identifier: keyid:AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:92:64:ad:7a:d7:91:50:25:d3:7b:70:d9:99:7d:36:5c:b3: 1a:fb:a8:09:84:3c:62:5b:65:26:96:33:dc:42:2c:4e:77:af: b6:c1:02:30:20:88:a0:fe:78:96:94:ee:a8:9f:77:46:51:15: f0:54:e2:c1:21:b1:98:12:b4:1d:31:b4:ce:48:38:bd:cd:2f: 1f:c0:e7:c4:b5:90:17:27:52:22:de:c9:c4:9b:98:4f:07:42: 3f:fd:f7:a4:20:3a:54:e0:75:8a:b4:55:cd:42:28:bd:54:fd: 36:76:79:d4:3a:b9:f6:14:08:85:e6:29:b1:1f:e8:ee:46:d6: 13:a0:41:0c:62:b9:8c:dc:57:56:45:3c:63:d2:05:95:c2:3d: 23:e1:8b:d8:12:18:7c:4e:5e:98:d1:a5:5c:b1:db:5d:0d:11: 27:13:49:a3:09:6b:d1:05:ef:0c:8e:5d:80:91:cb:73:9d:d0: ee:be:be:19:74:f6:e5:51:75:ea:97:15:d1:35:c9:38:74:e0: ff:b1:9e:7b:f7:93:c9:f4:49:fc:c2:17:a7:e9:58:12:83:98: 19:7b:bc:a7:50:4c:9d:54:9a:1d:7a:cf:6c:77:60:4d:7c:91: d1:55:80:ec:2a:ef:3a:d0:ce:8a:09:5c:30:cb:2d:63:9f:cb: 7b:85:f2:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bg10Kmz7N3au3Fs0Vzj3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNTdhNjhmMDhhMmUzMGJhN2Q3M2Q0NGM5YTZlMjQwMGZk MGEzYjEwHhcNMjUxMjIxMDEwMjM4WhcNMjUxMjIyMDEwMjM4WjAzMTEwLwYDVQQD Eyg2OWQwZDMyMDkyNDgwZjU2ODBhN2M4NTYzODhhMmFjYjFiMTE3NDRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslKulqJLDcc3+1XyTuYIr+Fqcm3Z t19giOXcIZHphJDWbWcrBsS9fwslee109Wep+2mrgbUutVXnhxGRu1X+SOERdSzI qoJWmQMh8eIqnpYBHwGfy6FQncC5va5QQb5vldLZs+FIjiqVn8UlyeOMieG9+Fdk QG6xC72TKS+fc963WXyANlZe+21k2QbWlTKf/BwlUOKVugayk9AcHbF08/+Mnckx ViYJl6zeSOXEJttS6cKNIEveqm8ZPOpgFhqvNsUjwHH3rmKjDtimq2u++dYruWI7 b1KtmPf7qmSkUi4+p1slShzbuOSBrtKYfCx57FdjCCveKfmCTqM6moTTeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGnQ0yCSSA9WgKfIVjiKKssbEXRKMB8GA1UdIwQY MBaAFKpXpo8IouMLp9c9RMmm4kAP0KOxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWxlbWp3aWk0d3VuMXoxRXlhYmlRQV9RbzdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC85YjczNzctZDQ2NS00NmI5LWE1NjMt ODQ2OGU0OWYwMGVkLzEvcWxlbWp3aWk0d3VuMXoxRXlhYmlRQV9RbzdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC85YjczNzctZDQ2NS00NmI5LWE1NjMtODQ2OGU0OWYwMGVk LzEvcWxlbWp3aWk0d3VuMXoxRXlhYmlRQV9RbzdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdpJkrXrX kVAl03tw2Zl9NlyzGvuoCYQ8YltlJpYz3EIsTnevtsECMCCIoP54lpTuqJ93RlEV 8FTiwSGxmBK0HTG0zkg4vc0vH8DnxLWQFydSIt7JxJuYTwdCP/33pCA6VOB1irRV zUIovVT9NnZ51Dq59hQIheYpsR/o7kbWE6BBDGK5jNxXVkU8Y9IFlcI9I+GL2BIY fE5emNGlXLHbXQ0RJxNJowlr0QXvDI5dgJHLc53Q7r6+GXT25VF16pcV0TXJOHTg /7Gee/eTyfRJ/MIXp+lYEoOYGXu8p1BMnVSaHXrPbHdgTXyR0VWA7CrvOtDOiglc MMstY5/Le4XyfA== -----END CERTIFICATE-----Generated at Sun Dec 21 04:58:46 2025 by rpki-client