This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.mft File: QlbgyzjNYSXO4U5Jcii4SQodQOk.mft (raw, json) Hash identifier: 7cvbqT1xA6IM9oKhELJdvr7jTDoGma9qsnZVnw6+fMI= Subject key identifier: D2:C6:EA:73:4B:A8:4A:A5:4A:22:C9:A3:4B:9A:AA:AB:8E:2F:05:2B Authority key identifier: 42:56:E0:CB:38:CD:61:25:CE:E1:4E:49:72:28:B8:49:0A:1D:40:E9 Certificate issuer: /CN=4256e0cb38cd6125cee14e497228b8490a1d40e9 Certificate serial: 019B3D5A2DC8F31CFD7E47A4681B7A1AEC95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlbgyzjNYSXO4U5Jcii4SQodQOk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.mft Manifest number: 06E4 Signing time: Sat 20 Dec 2025 20:01:18 +0000 Manifest this update: Sat 20 Dec 2025 20:01:18 +0000 Manifest next update: Sun 21 Dec 2025 20:01:18 +0000 Files and hashes: 1: QlbgyzjNYSXO4U5Jcii4SQodQOk.crl (hash: 9i0H2D8bHxYZCobkxYTxfzuk5qP7r8tfSDAxhoGWaoY=) 2: ekPIeumjzc0aQ-0qnlrmTiVhDJI.roa (hash: MI/BYhVlkTAuExjmOk0h+DG2/B/CqzwrvfdzA0OS10s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.crl rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.mft rsync://rpki.ripe.net/repository/DEFAULT/QlbgyzjNYSXO4U5Jcii4SQodQOk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:2d:c8:f3:1c:fd:7e:47:a4:68:1b:7a:1a:ec:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4256e0cb38cd6125cee14e497228b8490a1d40e9 Validity Not Before: Dec 20 20:01:18 2025 GMT Not After : Dec 21 20:01:18 2025 GMT Subject: CN=d2c6ea734ba84aa54a22c9a34b9aaaab8e2f052b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:38:34:9f:f5:5a:63:7a:ec:f5:8c:89:f9:1f: f6:d5:d2:c2:60:8d:b6:6e:79:a9:95:a7:24:fd:a6: 0e:a1:67:18:03:ad:51:de:5e:62:21:64:aa:bb:39: 54:11:7c:4b:fb:93:84:6b:5a:35:0e:44:8d:db:ad: e5:35:49:0f:ca:76:b0:7a:53:2d:a2:53:17:14:cc: 97:96:4a:42:08:82:62:69:11:b5:c0:96:4b:72:6a: 05:6d:a6:9d:46:a5:1f:24:c2:3c:64:47:37:53:a0: 9e:38:d5:e4:d6:f0:6d:08:a5:87:fe:b1:14:f8:0c: 0d:83:85:b5:8d:61:d3:4c:0f:69:1d:ea:35:10:fa: 03:c3:83:b7:76:4a:f5:b4:bd:7c:7d:5b:54:9d:7f: 74:35:96:f4:55:31:77:d8:51:91:0d:f5:59:29:d1: 88:71:bd:81:05:f2:16:5b:4e:2c:f9:23:20:d8:c7: 0e:8a:f0:bc:18:53:96:6c:a0:ac:bb:28:6d:df:4e: a9:5b:f6:16:ad:26:b6:c6:3b:f3:84:c9:db:32:96: 4a:53:5a:95:cc:11:ce:2d:01:79:e8:2e:4b:90:16: ab:9a:28:3a:e7:89:f7:25:87:dd:95:18:dd:0f:5f: f5:82:d1:ff:82:4e:53:63:4c:bc:4d:6e:95:b9:30: 94:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C6:EA:73:4B:A8:4A:A5:4A:22:C9:A3:4B:9A:AA:AB:8E:2F:05:2B X509v3 Authority Key Identifier: keyid:42:56:E0:CB:38:CD:61:25:CE:E1:4E:49:72:28:B8:49:0A:1D:40:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlbgyzjNYSXO4U5Jcii4SQodQOk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:7d:25:70:57:87:72:eb:42:5f:ee:7d:b9:ba:26:89:44:5e: 3a:0d:9e:fe:0d:09:d9:b1:03:69:0c:40:cb:64:c3:ca:70:b8: ac:ef:b4:d7:5a:3f:d7:ba:2f:38:3e:e8:8d:33:8e:d0:fe:2d: 8d:c0:1c:ab:e6:61:63:88:ba:da:5c:a6:93:0f:a8:f1:05:23: 25:3a:ff:63:6a:3e:82:2c:8d:c2:8c:88:7a:2b:7d:d4:8c:18: 0b:cb:43:ce:f6:0c:19:a6:c5:9b:99:d1:ff:0f:5f:ed:12:13: 90:bd:0d:c3:35:9e:ed:92:82:fe:6a:09:b8:8c:e8:3b:80:93: 7b:a5:28:ce:fd:c5:42:45:b5:b3:99:9b:ee:dc:7a:ab:8d:02: bd:c1:5c:38:eb:80:98:34:2e:40:83:24:f1:09:bf:3e:74:50: 4c:8d:56:62:f4:3d:76:fe:14:cd:fa:16:cb:df:94:1d:e4:21: d8:1e:c8:e7:53:57:7b:43:f2:2d:d5:14:fe:1c:46:7f:aa:3f: 9e:1b:79:9d:62:dd:7f:ac:80:74:8d:2b:6e:c9:8d:23:c5:a1: d6:58:33:7f:e4:c2:fa:90:58:8a:fb:55:ca:4b:b2:ae:ce:a1: d1:aa:d8:a8:60:46:a6:8b:60:f9:c5:9e:55:05:8d:dc:10:e6: de:19:5b:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Wi3I8xz9fkekaBt6GuyVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNTZlMGNiMzhjZDYxMjVjZWUxNGU0OTcyMjhiODQ5MGEx ZDQwZTkwHhcNMjUxMjIwMjAwMTE4WhcNMjUxMjIxMjAwMTE4WjAzMTEwLwYDVQQD EyhkMmM2ZWE3MzRiYTg0YWE1NGEyMmM5YTM0YjlhYWFhYjhlMmYwNTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzg0n/VaY3rs9YyJ+R/21dLCYI22 bnmplack/aYOoWcYA61R3l5iIWSquzlUEXxL+5OEa1o1DkSN263lNUkPynawelMt olMXFMyXlkpCCIJiaRG1wJZLcmoFbaadRqUfJMI8ZEc3U6CeONXk1vBtCKWH/rEU +AwNg4W1jWHTTA9pHeo1EPoDw4O3dkr1tL18fVtUnX90NZb0VTF32FGRDfVZKdGI cb2BBfIWW04s+SMg2McOivC8GFOWbKCsuyht306pW/YWrSa2xjvzhMnbMpZKU1qV zBHOLQF56C5LkBarmig654n3JYfdlRjdD1/1gtH/gk5TY0y8TW6VuTCUvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNLG6nNLqEqlSiLJo0uaqquOLwUrMB8GA1UdIwQY MBaAFEJW4Ms4zWElzuFOSXIouEkKHUDpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWxiZ3l6ak5ZU1hPNFU1SmNpaTRTUW9kUU9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9jMzE0ZjQtYjFhYy00MjZmLThmMjEt YTVlODUwYjZhMWJjLzEvUWxiZ3l6ak5ZU1hPNFU1SmNpaTRTUW9kUU9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9jMzE0ZjQtYjFhYy00MjZmLThmMjEtYTVlODUwYjZhMWJj LzEvUWxiZ3l6ak5ZU1hPNFU1SmNpaTRTUW9kUU9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZX0lcFeH cutCX+59ubomiUReOg2e/g0J2bEDaQxAy2TDynC4rO+011o/17ovOD7ojTOO0P4t jcAcq+ZhY4i62lymkw+o8QUjJTr/Y2o+giyNwoyIeit91IwYC8tDzvYMGabFm5nR /w9f7RITkL0NwzWe7ZKC/moJuIzoO4CTe6Uozv3FQkW1s5mb7tx6q40CvcFcOOuA mDQuQIMk8Qm/PnRQTI1WYvQ9dv4UzfoWy9+UHeQh2B7I51NXe0PyLdUU/hxGf6o/ nht5nWLdf6yAdI0rbsmNI8Wh1lgzf+TC+pBYivtVykuyrs6h0arYqGBGpotg+cWe VQWN3BDm3hlbcw== -----END CERTIFICATE-----Generated at Sun Dec 21 02:44:09 2025 by rpki-client