This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft File: qeC20TzRHzYRT6mEAzgElByC8UM.mft (raw, json) Hash identifier: ZVd3Vnbj2VYDZ71Vs/W3HSLFffOPj1knnT58rT0jCiA= Subject key identifier: E0:E1:4B:1C:FD:37:B2:B4:AC:E2:56:C7:82:A8:71:94:88:83:24:B9 Authority key identifier: A9:E0:B6:D1:3C:D1:1F:36:11:4F:A9:84:03:38:04:94:1C:82:F1:43 Certificate issuer: /CN=a9e0b6d13cd11f36114fa984033804941c82f143 Certificate serial: 019B33440B684EE248030636C1E5876F2590 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft Manifest number: 135E Signing time: Thu 18 Dec 2025 21:00:55 +0000 Manifest this update: Thu 18 Dec 2025 21:00:55 +0000 Manifest next update: Fri 19 Dec 2025 21:00:55 +0000 Files and hashes: 1: lO3U7O5xn_SH8biBa02wbaj6rwE.roa (hash: Ur2/ddmmedYhTdeyhrYUxfNHrSlslVFvOy6wD+8Tc1U=) 2: qeC20TzRHzYRT6mEAzgElByC8UM.crl (hash: RbqA5xXhGONZVc+1fgYqbgovcQKDGMF6zmc5YfeNHIw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:0b:68:4e:e2:48:03:06:36:c1:e5:87:6f:25:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9e0b6d13cd11f36114fa984033804941c82f143 Validity Not Before: Dec 18 21:00:55 2025 GMT Not After : Dec 19 21:00:55 2025 GMT Subject: CN=e0e14b1cfd37b2b4ace256c782a87194888324b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4e:80:86:d2:91:ce:8e:14:36:95:2f:9b:ee: 92:2a:c5:e2:0e:bb:c9:a9:43:c3:2e:53:04:f3:f3: a9:4c:7c:e0:ff:96:e7:db:c5:ef:1b:13:c5:a1:37: fd:7a:f8:2a:bd:19:ba:c2:dd:25:16:7f:95:e4:79: 0b:b1:53:50:5e:44:41:c5:c6:74:70:c1:95:a7:54: 53:70:0d:8a:73:e2:ce:8f:8a:fe:bb:34:a5:87:4a: 04:32:55:b0:cf:15:99:b5:60:1a:2c:da:3b:c3:5f: c2:1a:78:e7:20:2a:f1:55:53:0b:c7:32:3f:68:4d: 40:6b:ea:e9:fa:ea:e3:6f:1f:b7:da:a4:89:5e:33: 5a:84:7d:47:39:e8:dc:2c:15:78:ed:99:8a:37:ad: dd:18:91:8c:a6:28:4b:0f:7c:9b:44:ff:0d:83:bf: 3c:af:98:76:22:76:6e:a9:c4:bb:7c:b7:59:f4:e1: 8a:43:27:3a:fb:64:c2:d3:75:13:d3:1f:7e:91:6a: 2e:96:49:76:97:65:26:a2:1a:77:a6:73:e9:b7:c2: cb:f4:44:63:ae:b0:7d:31:4e:1c:f5:f3:fb:73:96: e4:b7:f9:40:0c:b6:42:c4:3b:0b:0f:f8:a6:f8:9c: 29:60:34:91:83:6c:20:53:d0:1e:05:37:f5:96:16: 04:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E1:4B:1C:FD:37:B2:B4:AC:E2:56:C7:82:A8:71:94:88:83:24:B9 X509v3 Authority Key Identifier: keyid:A9:E0:B6:D1:3C:D1:1F:36:11:4F:A9:84:03:38:04:94:1C:82:F1:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:91:4b:b0:76:ef:34:a3:db:f1:c4:4c:43:22:3f:ba:b1:12: f8:67:a5:4e:6f:18:09:44:f6:31:39:0b:2b:fd:60:18:59:5a: 35:89:db:da:c5:a6:7e:a5:c1:fc:6c:6e:a8:02:a4:ae:4a:2a: f1:d5:7b:04:fd:9e:f0:4e:25:0e:77:ce:b7:ee:29:4c:86:d8: e9:14:3e:1d:46:40:1a:cc:9b:bf:92:0b:df:6b:c0:62:e4:cd: cd:7c:c9:e7:f3:c7:97:45:79:ee:e8:86:08:26:ed:b5:50:cb: 2d:50:d4:65:22:28:63:87:be:18:11:ad:2a:a2:fc:8e:8e:ef: 49:74:f6:b2:a0:75:b9:30:0e:03:96:34:73:2e:d3:ce:f8:51: 1c:92:83:81:40:af:d6:a0:1c:12:06:9c:79:7d:6f:ce:f7:bc: 98:fd:18:a8:01:b8:fe:06:88:04:09:96:51:6f:54:d6:5f:bb: cc:f1:5d:33:af:ef:7a:ca:8f:7c:db:69:c4:cd:7d:22:4b:b1: 7e:19:e1:96:ba:8b:fa:fc:98:64:0c:8b:14:58:ac:0d:ea:d0: 4e:d1:6c:1b:be:46:fb:55:c8:fb:67:1d:cb:34:af:3c:6f:39: a4:f4:72:34:fa:d1:8b:08:7c:a7:82:d4:eb:49:ce:4d:c4:72: 6a:ad:66:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRAtoTuJIAwY2weWHbyWQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ZTBiNmQxM2NkMTFmMzYxMTRmYTk4NDAzMzgwNDk0MWM4 MmYxNDMwHhcNMjUxMjE4MjEwMDU1WhcNMjUxMjE5MjEwMDU1WjAzMTEwLwYDVQQD EyhlMGUxNGIxY2ZkMzdiMmI0YWNlMjU2Yzc4MmE4NzE5NDg4ODMyNGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1k6AhtKRzo4UNpUvm+6SKsXiDrvJ qUPDLlME8/OpTHzg/5bn28XvGxPFoTf9evgqvRm6wt0lFn+V5HkLsVNQXkRBxcZ0 cMGVp1RTcA2Kc+LOj4r+uzSlh0oEMlWwzxWZtWAaLNo7w1/CGnjnICrxVVMLxzI/ aE1Aa+rp+urjbx+32qSJXjNahH1HOejcLBV47ZmKN63dGJGMpihLD3ybRP8Ng788 r5h2InZuqcS7fLdZ9OGKQyc6+2TC03UT0x9+kWoulkl2l2Umohp3pnPpt8LL9ERj rrB9MU4c9fP7c5bkt/lADLZCxDsLD/im+JwpYDSRg2wgU9AeBTf1lhYE+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFODhSxz9N7K0rOJWx4KocZSIgyS5MB8GA1UdIwQY MBaAFKngttE80R82EU+phAM4BJQcgvFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWVDMjBUelJIellSVDZtRUF6Z0VsQnlDOFVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi81MjU2NWItYjhiZC00ZTk1LTg5ZGUt ZDMyZjhkODc1Zjk4LzEvcWVDMjBUelJIellSVDZtRUF6Z0VsQnlDOFVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi81MjU2NWItYjhiZC00ZTk1LTg5ZGUtZDMyZjhkODc1Zjk4 LzEvcWVDMjBUelJIellSVDZtRUF6Z0VsQnlDOFVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI5FLsHbv NKPb8cRMQyI/urES+GelTm8YCUT2MTkLK/1gGFlaNYnb2sWmfqXB/GxuqAKkrkoq 8dV7BP2e8E4lDnfOt+4pTIbY6RQ+HUZAGsybv5IL32vAYuTNzXzJ5/PHl0V57uiG CCbttVDLLVDUZSIoY4e+GBGtKqL8jo7vSXT2sqB1uTAOA5Y0cy7TzvhRHJKDgUCv 1qAcEgaceX1vzve8mP0YqAG4/gaIBAmWUW9U1l+7zPFdM6/vesqPfNtpxM19Ikux fhnhlrqL+vyYZAyLFFisDerQTtFsG75G+1XI+2cdyzSvPG85pPRyNPrRiwh8p4LU 60nOTcRyaq1muA== -----END CERTIFICATE-----Generated at Fri Dec 19 02:24:29 2025 by rpki-client