This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft File: Q15Blg1ZDpmATpC5rwNlWExxLHI.mft (raw, json) Hash identifier: O63AEmanauzf+vy/Px6NFaVrT1+UhQYUS3a0Beuanwc= Subject key identifier: B4:D6:CA:5A:14:59:23:22:5F:37:35:81:A6:CD:37:46:B2:04:2A:64 Authority key identifier: 43:5E:41:96:0D:59:0E:99:80:4E:90:B9:AF:03:65:58:4C:71:2C:72 Certificate issuer: /CN=435e41960d590e99804e90b9af0365584c712c72 Certificate serial: 019B390EF4A49437511E5EBEB663D90177C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft Manifest number: 14DC Signing time: Sat 20 Dec 2025 00:00:40 +0000 Manifest this update: Sat 20 Dec 2025 00:00:40 +0000 Manifest next update: Sun 21 Dec 2025 00:00:40 +0000 Files and hashes: 1: Q15Blg1ZDpmATpC5rwNlWExxLHI.crl (hash: l+/SLhTztCufA7lTXbeWH6aO2Emso/Uh/Wbq9ZD0Xvo=) 2: Qgkf9isvn9G1i53cocvwB25dPG0.roa (hash: 7pOvhNxITVVpr4C2N2+h/b2aAgFP8cFKYE5FjzDD/YQ=) 3: XGxdWNZPiFptk-3w7OILGgkhItU.roa (hash: xf5heCAI8Pty8+MuLnNYj13qa72HA9enfkhk9E22KD4=) 4: XQLqdml-mlBf3Z-90xd5Tk9chkc.roa (hash: nSfERnt4sWaMf0P1jQhY7bLFNZayDQ04cDYTAEFX1MA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.crl rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0e:f4:a4:94:37:51:1e:5e:be:b6:63:d9:01:77:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=435e41960d590e99804e90b9af0365584c712c72 Validity Not Before: Dec 20 00:00:40 2025 GMT Not After : Dec 21 00:00:40 2025 GMT Subject: CN=b4d6ca5a145923225f373581a6cd3746b2042a64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b4:10:ea:59:a5:7f:27:91:69:da:8d:d2:32: d4:68:41:06:f6:5a:2e:a9:7f:8c:42:20:3a:10:fd: 85:f7:18:99:7a:f0:6a:91:84:f2:5b:f7:fc:b4:a8: a7:91:dc:b5:90:95:9d:7e:7b:2c:34:50:d6:af:87: 84:97:44:6c:1d:f6:66:9f:59:c5:c9:a8:03:9c:0e: a6:d1:b4:f3:52:32:3c:e3:00:2a:8a:45:6f:99:6f: cb:d7:35:5a:86:90:65:c9:77:f8:6c:f3:e0:d8:cf: 63:90:eb:e8:f9:0d:4a:43:bb:cb:6e:d7:4f:be:f9: b1:c0:7d:f8:e2:66:9d:40:c8:be:c7:09:50:2c:f5: 7c:0a:b8:7e:3d:f2:64:f4:63:00:46:84:8b:65:40: d9:50:55:bf:c5:3e:f0:74:a6:2b:2d:3e:77:81:e4: d2:66:9b:5a:90:41:a1:86:a5:f6:9b:de:ee:0d:42: 6d:7e:3c:ed:29:80:3d:de:5e:b9:c4:ba:ba:fe:b9: 36:a6:9d:0b:b0:a0:35:1e:5d:7b:ec:b5:18:b8:9e: 75:9b:60:11:a8:d3:85:1e:0f:09:29:37:49:02:d6: 3b:61:4a:21:53:a3:4e:b1:52:99:f8:fc:d1:e9:1f: c0:da:74:4b:42:41:d2:94:3f:87:f9:84:ab:83:d8: f8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:D6:CA:5A:14:59:23:22:5F:37:35:81:A6:CD:37:46:B2:04:2A:64 X509v3 Authority Key Identifier: keyid:43:5E:41:96:0D:59:0E:99:80:4E:90:B9:AF:03:65:58:4C:71:2C:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:29:27:55:f1:04:d2:44:d2:ed:00:fc:25:8a:23:22:b9:dd: b8:f3:f8:df:5e:8d:93:f6:37:1a:7b:45:e8:e9:ac:d9:ae:9d: 7c:97:3c:64:01:8b:ff:99:a5:04:10:4e:30:4d:72:a5:4c:42: 78:be:91:96:04:c9:78:72:ee:38:42:15:bd:f0:c0:dd:2e:2c: 0d:36:3d:d6:b5:2b:e7:35:47:f2:94:44:fc:fa:9a:99:1d:52: f3:d7:86:39:aa:43:90:b8:65:c9:4c:13:5e:27:5b:0f:3d:f2: 8e:fd:a7:e0:72:cf:0c:fd:ad:9c:27:24:9f:b4:b8:66:0b:36: 9d:ed:3e:be:90:e0:3d:2e:f6:8f:2a:cf:e8:b0:0d:87:43:7e: 52:2e:0c:45:ef:ad:d6:3a:fb:05:dd:31:06:0b:67:ca:5c:0f: a5:b6:83:16:81:d8:66:7f:e5:02:51:f6:8a:b2:67:93:29:69: e1:36:f5:b9:1c:e7:60:49:ed:0b:ba:df:8d:a6:3f:d1:6b:72: b7:52:ac:b3:d1:f4:ed:45:1d:9b:9c:2a:26:93:28:ed:bb:0e: 10:31:47:c4:60:d3:7e:fb:9d:0e:30:c3:e3:8f:81:f1:88:8c: 50:5a:0d:b6:7c:34:0b:0e:6e:7f:0f:3f:b2:53:19:74:5b:bc: 0c:7d:29:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5DvSklDdRHl6+tmPZAXfIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzNWU0MTk2MGQ1OTBlOTk4MDRlOTBiOWFmMDM2NTU4NGM3 MTJjNzIwHhcNMjUxMjIwMDAwMDQwWhcNMjUxMjIxMDAwMDQwWjAzMTEwLwYDVQQD EyhiNGQ2Y2E1YTE0NTkyMzIyNWYzNzM1ODFhNmNkMzc0NmIyMDQyYTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LQQ6lmlfyeRadqN0jLUaEEG9lou qX+MQiA6EP2F9xiZevBqkYTyW/f8tKinkdy1kJWdfnssNFDWr4eEl0RsHfZmn1nF yagDnA6m0bTzUjI84wAqikVvmW/L1zVahpBlyXf4bPPg2M9jkOvo+Q1KQ7vLbtdP vvmxwH344madQMi+xwlQLPV8Crh+PfJk9GMARoSLZUDZUFW/xT7wdKYrLT53geTS ZptakEGhhqX2m97uDUJtfjztKYA93l65xLq6/rk2pp0LsKA1Hl177LUYuJ51m2AR qNOFHg8JKTdJAtY7YUohU6NOsVKZ+PzR6R/A2nRLQkHSlD+H+YSrg9j4fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLTWyloUWSMiXzc1gabNN0ayBCpkMB8GA1UdIwQY MBaAFENeQZYNWQ6ZgE6Qua8DZVhMcSxyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTE1QmxnMVpEcG1BVHBDNXJ3TmxXRXh4TEhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83ZTJmMjgtNWNhZS00ZTZmLWE1ZjAt MDFiYjVmZDUzNGY1LzEvUTE1QmxnMVpEcG1BVHBDNXJ3TmxXRXh4TEhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC83ZTJmMjgtNWNhZS00ZTZmLWE1ZjAtMDFiYjVmZDUzNGY1 LzEvUTE1QmxnMVpEcG1BVHBDNXJ3TmxXRXh4TEhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPSknVfEE 0kTS7QD8JYojIrnduPP4316Nk/Y3GntF6Oms2a6dfJc8ZAGL/5mlBBBOME1ypUxC eL6RlgTJeHLuOEIVvfDA3S4sDTY91rUr5zVH8pRE/PqamR1S89eGOapDkLhlyUwT XidbDz3yjv2n4HLPDP2tnCckn7S4Zgs2ne0+vpDgPS72jyrP6LANh0N+Ui4MRe+t 1jr7Bd0xBgtnylwPpbaDFoHYZn/lAlH2irJnkylp4Tb1uRznYEntC7rfjaY/0Wty t1Kss9H07UUdm5wqJpMo7bsOEDFHxGDTfvudDjDD44+B8YiMUFoNtnw0Cw5ufw8/ slMZdFu8DH0plg== -----END CERTIFICATE-----Generated at Sat Dec 20 08:41:21 2025 by rpki-client