This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft File: qeC20TzRHzYRT6mEAzgElByC8UM.mft (raw, json) Hash identifier: OjPYn7Rv+1vigqpZ0Vnr66MzEvUD6uS5dJJhidAX3kE= Subject key identifier: 31:E5:EB:54:CB:87:4D:89:74:26:D5:01:ED:B1:EB:EF:4D:A6:9D:F4 Authority key identifier: A9:E0:B6:D1:3C:D1:1F:36:11:4F:A9:84:03:38:04:94:1C:82:F1:43 Certificate issuer: /CN=a9e0b6d13cd11f36114fa984033804941c82f143 Certificate serial: 019B6D336B5F537232F3CDEDFE862A61DF07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft Manifest number: 137C Signing time: Tue 30 Dec 2025 03:00:44 +0000 Manifest this update: Tue 30 Dec 2025 03:00:44 +0000 Manifest next update: Wed 31 Dec 2025 03:00:44 +0000 Files and hashes: 1: lO3U7O5xn_SH8biBa02wbaj6rwE.roa (hash: Ur2/ddmmedYhTdeyhrYUxfNHrSlslVFvOy6wD+8Tc1U=) 2: qeC20TzRHzYRT6mEAzgElByC8UM.crl (hash: rnC3ENWEDyWwzZJFrTYSW309l4Am7xmMFAqrsu9viYo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:33:6b:5f:53:72:32:f3:cd:ed:fe:86:2a:61:df:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9e0b6d13cd11f36114fa984033804941c82f143 Validity Not Before: Dec 30 03:00:44 2025 GMT Not After : Dec 31 03:00:44 2025 GMT Subject: CN=31e5eb54cb874d897426d501edb1ebef4da69df4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:26:cb:db:6e:b9:de:98:26:ce:9f:6f:e0:61: 60:9a:1e:d4:14:04:18:71:a0:7b:21:81:bd:05:c6: 38:db:76:e9:db:f2:86:09:fb:7c:cf:90:a5:58:05: bd:42:b0:b1:9b:42:23:b7:4b:95:94:60:f7:ea:b3: 2f:12:eb:ee:66:81:38:1a:55:9f:4a:fe:46:be:74: 20:42:03:a7:13:25:cc:ba:ac:da:5a:21:31:38:94: 8b:3d:f5:fa:d6:57:e9:eb:cc:c7:26:a5:8c:93:91: 42:88:e9:00:95:c7:f4:28:fa:3b:c1:56:ef:fa:23: b8:97:7e:9f:ea:bb:cb:7d:2a:86:01:ae:5e:57:62: 41:39:ec:43:45:cc:c9:96:63:17:94:24:f0:8f:e2: 37:4f:c9:23:99:20:23:42:f2:34:73:d9:22:21:e5: aa:c3:9a:00:3d:76:03:45:65:9d:6f:12:a8:86:ac: 42:fe:d2:57:c0:44:fb:20:79:87:2b:40:be:a2:3e: 23:a0:19:92:83:34:22:52:3e:39:bd:54:ec:95:17: 9d:f8:96:83:34:26:30:cb:b7:08:ed:d6:d8:eb:e0: f3:70:d7:ba:9b:9f:99:03:26:a3:7e:5b:b9:3f:3b: 83:cb:18:f4:4f:9e:fc:d9:27:9c:61:e0:2b:c2:29: 27:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:E5:EB:54:CB:87:4D:89:74:26:D5:01:ED:B1:EB:EF:4D:A6:9D:F4 X509v3 Authority Key Identifier: keyid:A9:E0:B6:D1:3C:D1:1F:36:11:4F:A9:84:03:38:04:94:1C:82:F1:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:4c:d1:d4:a2:be:03:51:fe:b1:a2:75:1d:e1:fc:4d:fc:bc: 5c:a9:fe:3e:7f:ed:e9:4b:95:ad:15:ff:03:cb:c8:72:1a:ab: de:ed:23:6e:f9:7d:b2:27:4f:09:f5:88:6a:8a:8e:10:c0:4b: 25:08:36:86:f9:35:89:b2:e5:d3:72:83:12:99:93:38:c0:dd: c5:56:63:22:1d:ae:6a:fc:8a:d6:e3:d9:81:a2:53:3b:db:9b: 10:63:66:7f:88:e8:10:e4:80:60:b9:a7:16:4c:a0:15:79:28: d7:92:a9:e8:d2:b5:08:83:a6:45:83:d4:0a:9b:ce:de:44:d8: 14:cd:2e:7f:39:19:9c:ed:e7:58:15:3f:39:7c:a2:76:ca:e9: d0:0f:57:7b:89:36:61:4d:e1:99:65:36:84:d9:8f:31:9f:2e: 98:3a:a4:d4:00:aa:36:04:97:bc:df:51:63:60:69:bd:81:db: 1f:eb:bd:fa:2b:b0:7b:ae:17:fe:9f:c5:6c:51:de:7a:82:02: c6:e7:fc:1a:3e:e2:eb:26:af:21:0e:ce:65:36:fa:42:b8:ee: 6c:70:d7:40:c5:b1:ac:5b:a1:1a:d3:7e:55:aa:0c:37:e8:c9: 59:c7:ea:a6:80:1a:0d:ed:57:a0:4b:47:6d:dd:dd:d7:51:47: 63:87:88:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttM2tfU3Iy883t/oYqYd8HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ZTBiNmQxM2NkMTFmMzYxMTRmYTk4NDAzMzgwNDk0MWM4 MmYxNDMwHhcNMjUxMjMwMDMwMDQ0WhcNMjUxMjMxMDMwMDQ0WjAzMTEwLwYDVQQD EygzMWU1ZWI1NGNiODc0ZDg5NzQyNmQ1MDFlZGIxZWJlZjRkYTY5ZGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ybL22653pgmzp9v4GFgmh7UFAQY caB7IYG9BcY423bp2/KGCft8z5ClWAW9QrCxm0Ijt0uVlGD36rMvEuvuZoE4GlWf Sv5GvnQgQgOnEyXMuqzaWiExOJSLPfX61lfp68zHJqWMk5FCiOkAlcf0KPo7wVbv +iO4l36f6rvLfSqGAa5eV2JBOexDRczJlmMXlCTwj+I3T8kjmSAjQvI0c9kiIeWq w5oAPXYDRWWdbxKohqxC/tJXwET7IHmHK0C+oj4joBmSgzQiUj45vVTslRed+JaD NCYwy7cI7dbY6+DzcNe6m5+ZAyajflu5PzuDyxj0T5782SecYeArwiknCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDHl61TLh02JdCbVAe2x6+9Npp30MB8GA1UdIwQY MBaAFKngttE80R82EU+phAM4BJQcgvFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWVDMjBUelJIellSVDZtRUF6Z0VsQnlDOFVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi81MjU2NWItYjhiZC00ZTk1LTg5ZGUt ZDMyZjhkODc1Zjk4LzEvcWVDMjBUelJIellSVDZtRUF6Z0VsQnlDOFVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi81MjU2NWItYjhiZC00ZTk1LTg5ZGUtZDMyZjhkODc1Zjk4 LzEvcWVDMjBUelJIellSVDZtRUF6Z0VsQnlDOFVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfkzR1KK+ A1H+saJ1HeH8Tfy8XKn+Pn/t6UuVrRX/A8vIchqr3u0jbvl9sidPCfWIaoqOEMBL JQg2hvk1ibLl03KDEpmTOMDdxVZjIh2uavyK1uPZgaJTO9ubEGNmf4joEOSAYLmn FkygFXko15Kp6NK1CIOmRYPUCpvO3kTYFM0ufzkZnO3nWBU/OXyidsrp0A9Xe4k2 YU3hmWU2hNmPMZ8umDqk1ACqNgSXvN9RY2BpvYHbH+u9+iuwe64X/p/FbFHeeoIC xuf8Gj7i6yavIQ7OZTb6QrjubHDXQMWxrFuhGtN+VaoMN+jJWcfqpoAaDe1XoEtH bd3d11FHY4eITg== -----END CERTIFICATE-----Generated at Tue Dec 30 07:11:26 2025 by rpki-client