This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft File: qlTEdj6gGMPccCA9BO_nH9SxsGY.mft (raw, json) Hash identifier: Rr0sjdJHZc6a8Gta5CYBgbGyv5IotEUGISvWlu2RVnk= Subject key identifier: 8D:91:29:E7:39:85:E2:C8:6B:BA:21:DF:5A:48:8A:BA:31:F6:AB:93 Authority key identifier: AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66 Certificate issuer: /CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066 Certificate serial: 019B3CEC72F4B85B6F7954E415239707FFFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft Manifest number: 1467 Signing time: Sat 20 Dec 2025 18:01:27 +0000 Manifest this update: Sat 20 Dec 2025 18:01:27 +0000 Manifest next update: Sun 21 Dec 2025 18:01:27 +0000 Files and hashes: 1: 3uOrqvmP8Ja1Ais3wLBFc-Yv8js.roa (hash: exOhjbpn5m/SyHb+kmTmnk1GW2qg2u8lsLmmerL5o9w=) 2: IzP3cDAX9aykSDzKdoH0u3AyA2M.roa (hash: NC8YDjUxW5EM3pV7QmdgO/vAJ9HwNpXuNP3EpqENObk=) 3: f2dJVu8muGYFnZFPcMivMl98KP8.roa (hash: rWmOSQ2QhYKl4L1IyTfTDLKWAGfQI+Kz8vdUqnsATxs=) 4: qlTEdj6gGMPccCA9BO_nH9SxsGY.crl (hash: PG7zT0lJIirFD6y9EaYcMwJgRhuEH3zAuWSFFcLVg1U=) 5: svOlfPLlFDJ0sGLcz6b_IG_H3W0.roa (hash: zsvLBGGbQT+oIT4diXH9qGrVZIYbNUKP7yL6prMLg/0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:72:f4:b8:5b:6f:79:54:e4:15:23:97:07:ff:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066 Validity Not Before: Dec 20 18:01:27 2025 GMT Not After : Dec 21 18:01:27 2025 GMT Subject: CN=8d9129e73985e2c86bba21df5a488aba31f6ab93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:96:68:26:63:d0:5e:97:68:17:ba:fc:2c:c0: e6:4e:d7:be:73:b7:79:8b:b0:7c:ca:6e:e4:71:27: 38:5d:63:1e:9c:c3:ae:0d:45:94:17:a8:aa:5d:1f: 51:ae:93:13:d0:c0:1a:00:49:e6:44:45:57:17:b9: 77:a4:d9:fe:45:31:94:29:06:3e:67:11:90:e7:c0: fb:21:28:f4:5c:da:6a:61:b1:3a:ab:e8:5f:f1:cc: 52:cb:de:8c:11:ae:17:15:9a:cd:5e:e5:b3:e3:85: b2:29:cb:07:29:60:82:09:ce:ae:cd:ca:a5:64:3b: 65:f2:70:7d:7e:0b:50:57:c0:91:03:cf:ba:4e:4c: 9e:0a:26:24:0e:51:8a:a8:82:70:64:ca:72:ed:ab: ce:a8:0e:9f:94:53:eb:31:82:1f:02:cd:d8:18:86: be:9c:cf:12:f1:b6:8f:b8:28:9f:6c:d9:e5:c0:e4: ba:bc:81:e1:64:f1:47:41:39:73:94:43:b2:14:38: 38:dc:1c:b2:75:8a:ac:11:56:4e:b4:76:f5:c8:06: 0a:e8:a1:b8:1f:69:ad:d6:ac:23:cd:59:d6:25:0d: 8e:44:d4:de:09:c2:f4:a9:aa:59:72:a1:54:ca:df: 5a:d7:00:9f:fa:43:21:20:22:d5:f8:3a:00:d6:d5: d9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:91:29:E7:39:85:E2:C8:6B:BA:21:DF:5A:48:8A:BA:31:F6:AB:93 X509v3 Authority Key Identifier: keyid:AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:36:87:0e:07:a8:de:c6:1e:4e:f5:20:50:4b:81:b2:e0:bc: db:14:7a:b9:da:ab:0d:cd:d2:7a:89:4e:86:c6:e1:15:05:ca: b6:64:c8:fd:da:3a:1b:86:71:07:e0:ae:cc:d2:ed:d8:cc:dc: f8:b0:b5:0a:e0:36:83:eb:b5:45:37:ba:a3:b9:30:ce:c2:d8: fd:60:59:d3:ad:95:11:1c:cf:6a:15:23:1d:68:64:dd:58:95: 35:79:8f:6b:6b:69:d3:0e:9e:8b:b2:2a:f0:94:91:52:9a:9d: e1:5a:cc:ed:62:68:c9:41:23:91:2c:19:71:f2:d9:82:fb:66: 9b:36:8a:79:6b:b0:ca:a9:5d:70:82:9f:e1:c6:e7:f1:ca:a2: 4d:d7:f4:b6:61:2a:fa:ff:0a:91:69:b2:7b:8b:e7:a1:24:1c: 10:4e:cb:61:c4:df:4a:b6:13:d3:79:3b:0b:ad:bf:71:c1:04: b5:83:07:b9:34:1f:ab:70:38:ed:2b:31:66:f2:16:74:a7:81: 81:5a:d9:65:9b:17:ca:53:f0:08:63:fc:eb:95:60:40:82:0d: 1a:42:90:f1:80:4b:cc:fa:89:4b:77:34:06:88:9c:6e:6c:54: 12:93:e8:7c:85:6b:d5:cc:87:8c:c0:e5:1c:46:44:ae:de:76: 66:6d:e2:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87HL0uFtveVTkFSOXB///MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNTRjNDc2M2VhMDE4YzNkYzcwMjAzZDA0ZWZlNzFmZDRi MWIwNjYwHhcNMjUxMjIwMTgwMTI3WhcNMjUxMjIxMTgwMTI3WjAzMTEwLwYDVQQD Eyg4ZDkxMjllNzM5ODVlMmM4NmJiYTIxZGY1YTQ4OGFiYTMxZjZhYjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15ZoJmPQXpdoF7r8LMDmTte+c7d5 i7B8ym7kcSc4XWMenMOuDUWUF6iqXR9RrpMT0MAaAEnmREVXF7l3pNn+RTGUKQY+ ZxGQ58D7ISj0XNpqYbE6q+hf8cxSy96MEa4XFZrNXuWz44WyKcsHKWCCCc6uzcql ZDtl8nB9fgtQV8CRA8+6TkyeCiYkDlGKqIJwZMpy7avOqA6flFPrMYIfAs3YGIa+ nM8S8baPuCifbNnlwOS6vIHhZPFHQTlzlEOyFDg43ByydYqsEVZOtHb1yAYK6KG4 H2mt1qwjzVnWJQ2ORNTeCcL0qapZcqFUyt9a1wCf+kMhICLV+DoA1tXZfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI2RKec5heLIa7oh31pIirox9quTMB8GA1UdIwQY MBaAFKpUxHY+oBjD3HAgPQTv5x/UsbBmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWxURWRqNmdHTVBjY0NBOUJPX25IOVN4c0dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9hMjFjOWUtODdmMS00OTgzLTgzOTQt ZGUzNzY3M2M0MDljLzEvcWxURWRqNmdHTVBjY0NBOUJPX25IOVN4c0dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9hMjFjOWUtODdmMS00OTgzLTgzOTQtZGUzNzY3M2M0MDlj LzEvcWxURWRqNmdHTVBjY0NBOUJPX25IOVN4c0dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkTaHDgeo 3sYeTvUgUEuBsuC82xR6udqrDc3SeolOhsbhFQXKtmTI/do6G4ZxB+CuzNLt2Mzc +LC1CuA2g+u1RTe6o7kwzsLY/WBZ062VERzPahUjHWhk3ViVNXmPa2tp0w6ei7Iq 8JSRUpqd4VrM7WJoyUEjkSwZcfLZgvtmmzaKeWuwyqldcIKf4cbn8cqiTdf0tmEq +v8KkWmye4vnoSQcEE7LYcTfSrYT03k7C62/ccEEtYMHuTQfq3A47SsxZvIWdKeB gVrZZZsXylPwCGP865VgQIINGkKQ8YBLzPqJS3c0BoicbmxUEpPofIVr1cyHjMDl HEZErt52Zm3iuA== -----END CERTIFICATE-----Generated at Sun Dec 21 03:55:31 2025 by rpki-client