This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.mft File: QlbgyzjNYSXO4U5Jcii4SQodQOk.mft (raw, json) Hash identifier: I1ziKHObUz2dhoCacY6wi3wzQIP72Uiqzx+OjxPfEOQ= Subject key identifier: 6E:97:19:15:E5:8D:C2:27:55:41:F6:92:E6:14:D5:93:46:5B:FE:0B Authority key identifier: 42:56:E0:CB:38:CD:61:25:CE:E1:4E:49:72:28:B8:49:0A:1D:40:E9 Certificate issuer: /CN=4256e0cb38cd6125cee14e497228b8490a1d40e9 Certificate serial: 019B529866EEA5D132580CF9977EA5AFB883 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlbgyzjNYSXO4U5Jcii4SQodQOk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.mft Manifest number: 06EF Signing time: Wed 24 Dec 2025 23:01:18 +0000 Manifest this update: Wed 24 Dec 2025 23:01:18 +0000 Manifest next update: Thu 25 Dec 2025 23:01:18 +0000 Files and hashes: 1: QlbgyzjNYSXO4U5Jcii4SQodQOk.crl (hash: eP6yciMlAquOSc3FZLXp7J5JstISnxa387ZC1TVdQNw=) 2: ekPIeumjzc0aQ-0qnlrmTiVhDJI.roa (hash: MI/BYhVlkTAuExjmOk0h+DG2/B/CqzwrvfdzA0OS10s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.crl rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.mft rsync://rpki.ripe.net/repository/DEFAULT/QlbgyzjNYSXO4U5Jcii4SQodQOk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:98:66:ee:a5:d1:32:58:0c:f9:97:7e:a5:af:b8:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4256e0cb38cd6125cee14e497228b8490a1d40e9 Validity Not Before: Dec 24 23:01:18 2025 GMT Not After : Dec 25 23:01:18 2025 GMT Subject: CN=6e971915e58dc2275541f692e614d593465bfe0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:dc:7e:54:be:db:bb:33:c7:c5:b5:d6:c1:02: ec:ab:9d:d7:d4:e6:33:1b:47:89:e7:b9:10:10:a6: 3f:83:38:ff:c9:e0:e8:48:71:57:e5:a8:d5:bd:74: 51:6f:c7:63:ff:fd:e7:3e:64:e6:12:89:d3:56:27: 33:bb:f3:b9:09:35:b4:a8:99:1a:f5:ff:d0:ca:65: 16:e3:eb:04:54:56:64:28:2d:e8:0b:d5:df:fa:da: 1a:80:07:3d:06:40:7f:9d:59:05:6d:d9:96:7c:38: 2b:c7:6d:fd:c1:11:84:c0:e9:81:84:f5:c2:70:86: 50:cc:71:8e:a4:99:65:26:a5:f7:e2:15:84:76:70: 15:ab:69:d2:df:4c:dc:f6:0d:86:85:be:e4:af:96: bd:fe:76:cf:1e:4e:5a:df:da:92:63:8d:c2:66:a5: c5:e1:16:52:c0:66:cc:a1:1d:29:20:44:ec:d4:84: 95:fc:66:f1:a1:f3:e7:23:10:44:c0:7d:2f:cb:27: 4e:b5:5f:83:f3:a9:f5:63:5f:2a:25:17:58:52:3a: 7e:80:e4:31:1f:a6:7b:2b:cf:aa:57:b2:8f:66:a5: 53:0d:84:86:c0:7a:ce:07:63:0d:ea:eb:63:c8:f2: d8:d0:e7:01:a8:a4:fd:87:b0:f0:90:d4:1c:80:5e: 93:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:97:19:15:E5:8D:C2:27:55:41:F6:92:E6:14:D5:93:46:5B:FE:0B X509v3 Authority Key Identifier: keyid:42:56:E0:CB:38:CD:61:25:CE:E1:4E:49:72:28:B8:49:0A:1D:40:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlbgyzjNYSXO4U5Jcii4SQodQOk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:46:d6:8b:2c:d7:6d:6f:8a:05:44:19:e0:20:cb:f4:da:47: 4a:8b:48:5c:56:c5:86:db:86:78:bd:fe:b0:16:5b:9b:e5:9a: 69:9e:2c:8c:50:e0:ac:f4:07:c7:e9:8c:61:43:f2:3c:93:97: 6d:e6:ec:cd:26:5b:f2:ca:84:c1:f1:09:fc:1f:25:9b:f6:7a: 94:15:c6:1f:18:d1:bc:d1:dd:0d:ef:63:a7:c4:4b:3e:6f:b7: 1a:ff:db:03:a7:52:81:3d:38:4e:91:48:85:d7:8d:fa:8d:b0: d8:27:6a:12:0e:2c:e9:9a:e9:fd:d7:52:f2:97:65:35:50:09: 80:0b:1e:92:47:10:22:f2:eb:95:7f:85:92:91:4b:f7:71:82: c4:5a:41:9c:ba:16:a0:72:16:93:0f:51:d3:0d:2c:91:5f:48: c7:d7:f0:59:c4:77:35:1b:d2:86:fa:1f:ea:c7:de:54:03:b9: a6:8b:ec:f0:13:29:70:87:37:7e:e8:be:e9:d0:1b:c3:24:f8: 8c:7a:b3:08:36:ca:c2:a5:7d:4a:cf:1a:0f:fd:cf:5c:a8:41: 68:10:1d:9c:9c:12:e9:83:69:77:c8:cf:81:f7:14:cc:ec:77: 60:75:68:28:bd:62:01:b8:7d:8c:5e:fa:84:81:f9:a3:ea:3d: f9:62:db:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSmGbupdEyWAz5l36lr7iDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNTZlMGNiMzhjZDYxMjVjZWUxNGU0OTcyMjhiODQ5MGEx ZDQwZTkwHhcNMjUxMjI0MjMwMTE4WhcNMjUxMjI1MjMwMTE4WjAzMTEwLwYDVQQD Eyg2ZTk3MTkxNWU1OGRjMjI3NTU0MWY2OTJlNjE0ZDU5MzQ2NWJmZTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69x+VL7buzPHxbXWwQLsq53X1OYz G0eJ57kQEKY/gzj/yeDoSHFX5ajVvXRRb8dj//3nPmTmEonTViczu/O5CTW0qJka 9f/QymUW4+sEVFZkKC3oC9Xf+toagAc9BkB/nVkFbdmWfDgrx239wRGEwOmBhPXC cIZQzHGOpJllJqX34hWEdnAVq2nS30zc9g2Ghb7kr5a9/nbPHk5a39qSY43CZqXF 4RZSwGbMoR0pIETs1ISV/GbxofPnIxBEwH0vyydOtV+D86n1Y18qJRdYUjp+gOQx H6Z7K8+qV7KPZqVTDYSGwHrOB2MN6utjyPLY0OcBqKT9h7DwkNQcgF6TdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG6XGRXljcInVUH2kuYU1ZNGW/4LMB8GA1UdIwQY MBaAFEJW4Ms4zWElzuFOSXIouEkKHUDpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWxiZ3l6ak5ZU1hPNFU1SmNpaTRTUW9kUU9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9jMzE0ZjQtYjFhYy00MjZmLThmMjEt YTVlODUwYjZhMWJjLzEvUWxiZ3l6ak5ZU1hPNFU1SmNpaTRTUW9kUU9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9jMzE0ZjQtYjFhYy00MjZmLThmMjEtYTVlODUwYjZhMWJj LzEvUWxiZ3l6ak5ZU1hPNFU1SmNpaTRTUW9kUU9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhEbWiyzX bW+KBUQZ4CDL9NpHSotIXFbFhtuGeL3+sBZbm+WaaZ4sjFDgrPQHx+mMYUPyPJOX bebszSZb8sqEwfEJ/B8lm/Z6lBXGHxjRvNHdDe9jp8RLPm+3Gv/bA6dSgT04TpFI hdeN+o2w2CdqEg4s6Zrp/ddS8pdlNVAJgAsekkcQIvLrlX+FkpFL93GCxFpBnLoW oHIWkw9R0w0skV9Ix9fwWcR3NRvShvof6sfeVAO5povs8BMpcIc3fui+6dAbwyT4 jHqzCDbKwqV9Ss8aD/3PXKhBaBAdnJwS6YNpd8jPgfcUzOx3YHVoKL1iAbh9jF76 hIH5o+o9+WLblw== -----END CERTIFICATE-----Generated at Thu Dec 25 03:37:29 2025 by rpki-client