This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft File: QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft (raw, json) Hash identifier: jMZXJBRcru8qv7gOMU/mTK/FBr2tkhZg7yv6MFH1+wM= Subject key identifier: 91:D5:25:8E:10:1E:2C:6A:51:35:4A:2F:19:F9:3D:7B:FA:9F:20:F8 Authority key identifier: 42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF Certificate issuer: /CN=42512561fc4ee54b799c5af428fffbcbafd454ef Certificate serial: 019B3DFE5348E9CC084BBA6EA86F3C605B6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft Manifest number: 14C5 Signing time: Sat 20 Dec 2025 23:00:36 +0000 Manifest this update: Sat 20 Dec 2025 23:00:36 +0000 Manifest next update: Sun 21 Dec 2025 23:00:36 +0000 Files and hashes: 1: F6ObM6UnximfbwiH1YL38MiUlBY.roa (hash: FMTxgNBaoS8PjWTC2HJz86nipqDf/pRuOEnb+E3AC9c=) 2: QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl (hash: 9pKpSAXKJ4FlTStKzqPBaX5iOcsD919Kmyv74LOdUm0=) 3: sf13oGu2DAluNtQ_y1zSmgQAeHE.roa (hash: gqTUmbOHfz421/G+vBG6eJTQ7lB+mn9m4coW+T9SV2g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:53:48:e9:cc:08:4b:ba:6e:a8:6f:3c:60:5b:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42512561fc4ee54b799c5af428fffbcbafd454ef Validity Not Before: Dec 20 23:00:36 2025 GMT Not After : Dec 21 23:00:36 2025 GMT Subject: CN=91d5258e101e2c6a51354a2f19f93d7bfa9f20f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:87:2a:c6:3b:54:0a:75:be:99:93:51:fd:a1: 84:11:32:48:14:82:31:26:d9:58:08:ae:3c:4a:99: 3a:0d:6f:17:21:39:05:95:73:eb:32:f0:a7:f8:5d: 16:45:b9:0c:98:9f:68:b3:55:87:2e:b1:19:dc:28: 06:d4:fb:3b:99:f2:dd:dc:a5:b8:d5:8e:7d:4c:0e: 98:4a:4e:42:fb:ce:49:fc:f4:0e:2a:f3:56:ac:4e: 9e:1f:cc:6f:38:24:b2:a4:25:e4:1a:97:54:dc:cf: f0:c4:cd:6f:e7:83:f1:5b:27:59:40:d2:29:19:56: 50:c8:d9:26:2b:74:77:74:da:f2:6e:19:13:fd:f6: bc:dc:68:cd:37:94:e3:13:09:d5:ff:df:5b:2e:0c: 3d:48:6d:9d:db:9b:8e:1e:51:ec:1d:39:c7:6a:d8: ec:60:ac:59:3f:1d:91:3e:e8:83:b0:fe:c2:8d:bd: fe:d8:87:28:75:65:41:04:69:e5:70:99:0b:ac:a5: c2:dc:ae:2e:95:f8:dd:4b:eb:bc:a4:62:d0:ca:1d: 7e:43:07:05:f8:59:65:b2:77:fb:e8:8b:4c:93:cc: 69:93:e9:fe:7b:6f:fe:9c:02:09:25:ee:bb:f3:53: fb:12:a2:88:67:d8:11:55:39:39:6b:11:df:0a:73: 19:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D5:25:8E:10:1E:2C:6A:51:35:4A:2F:19:F9:3D:7B:FA:9F:20:F8 X509v3 Authority Key Identifier: keyid:42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:35:11:04:f1:5d:4c:7d:df:29:48:44:de:de:b4:4b:74:37: 7a:aa:ba:b6:4c:3f:42:ac:c8:69:c8:07:19:6f:c4:23:18:c9: 5a:41:42:91:7e:e3:93:d9:70:32:6c:b3:ca:32:27:67:b7:21: df:d9:59:a2:3b:50:e1:01:1d:af:d0:1c:15:d0:50:28:9e:d5: c2:e0:d9:5b:b2:0d:15:6e:50:a4:b2:57:bb:d3:84:18:e0:86: 22:09:d2:36:07:e7:32:48:aa:c9:b8:bc:21:87:3e:c2:6a:b7: a2:62:ea:1d:00:12:7f:50:f4:94:06:da:43:33:b4:d5:96:1a: a9:f6:ce:80:21:cb:37:b4:2f:45:36:52:09:c6:9c:ca:ab:ed: ac:0d:ea:50:22:ba:ca:f0:38:f2:78:d0:fe:32:a0:8e:f4:bc: 9d:45:61:3d:26:18:de:96:96:d6:29:98:29:fb:59:5e:fc:e2: d4:ca:b2:0f:24:d0:f6:98:7a:b9:8f:ec:cb:be:38:70:9b:b2: 2e:6f:b2:9c:41:63:b2:76:92:54:d1:ce:53:28:a8:b8:13:99: 6d:5e:e1:81:52:cb:29:1a:5b:bc:d4:59:e1:fc:2d:fc:8d:57: 34:4f:5c:7d:b6:06:0a:4b:a9:2e:0d:31:9d:04:f0:19:f4:2a: 9e:89:38:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/lNI6cwIS7puqG88YFtvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNTEyNTYxZmM0ZWU1NGI3OTljNWFmNDI4ZmZmYmNiYWZk NDU0ZWYwHhcNMjUxMjIwMjMwMDM2WhcNMjUxMjIxMjMwMDM2WjAzMTEwLwYDVQQD Eyg5MWQ1MjU4ZTEwMWUyYzZhNTEzNTRhMmYxOWY5M2Q3YmZhOWYyMGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlocqxjtUCnW+mZNR/aGEETJIFIIx JtlYCK48Spk6DW8XITkFlXPrMvCn+F0WRbkMmJ9os1WHLrEZ3CgG1Ps7mfLd3KW4 1Y59TA6YSk5C+85J/PQOKvNWrE6eH8xvOCSypCXkGpdU3M/wxM1v54PxWydZQNIp GVZQyNkmK3R3dNrybhkT/fa83GjNN5TjEwnV/99bLgw9SG2d25uOHlHsHTnHatjs YKxZPx2RPuiDsP7Cjb3+2IcodWVBBGnlcJkLrKXC3K4ulfjdS+u8pGLQyh1+QwcF +Fllsnf76ItMk8xpk+n+e2/+nAIJJe6781P7EqKIZ9gRVTk5axHfCnMZGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHVJY4QHixqUTVKLxn5PXv6nyD4MB8GA1UdIwQY MBaAFEJRJWH8TuVLeZxa9Cj/+8uv1FTvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWxFbFlmeE81VXQ1bkZyMEtQXzd5Nl9VVk84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9iODhjODYtOTYyOS00M2M2LTgyMWUt N2E3MmUyNmM4OTE4LzEvUWxFbFlmeE81VXQ1bkZyMEtQXzd5Nl9VVk84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9iODhjODYtOTYyOS00M2M2LTgyMWUtN2E3MmUyNmM4OTE4 LzEvUWxFbFlmeE81VXQ1bkZyMEtQXzd5Nl9VVk84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMTURBPFd TH3fKUhE3t60S3Q3eqq6tkw/QqzIacgHGW/EIxjJWkFCkX7jk9lwMmyzyjInZ7ch 39lZojtQ4QEdr9AcFdBQKJ7VwuDZW7INFW5QpLJXu9OEGOCGIgnSNgfnMkiqybi8 IYc+wmq3omLqHQASf1D0lAbaQzO01ZYaqfbOgCHLN7QvRTZSCcacyqvtrA3qUCK6 yvA48njQ/jKgjvS8nUVhPSYY3paW1imYKftZXvzi1MqyDyTQ9ph6uY/sy744cJuy Lm+ynEFjsnaSVNHOUyiouBOZbV7hgVLLKRpbvNRZ4fwt/I1XNE9cfbYGCkupLg0x nQTwGfQqnok4aQ== -----END CERTIFICATE-----Generated at Sun Dec 21 01:50:54 2025 by rpki-client