This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft File: qlTEdj6gGMPccCA9BO_nH9SxsGY.mft (raw, json) Hash identifier: tv/JYt3Ze0kkXKRm/Rkf3gbzIBJujqOrc3MDQHI9U2g= Subject key identifier: EC:F3:E3:8C:E9:81:D3:C5:E4:D5:98:54:95:83:D8:14:97:6B:FB:8B Authority key identifier: AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66 Certificate issuer: /CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066 Certificate serial: 019B6D33D56E9A32EE31851D729FA176A801 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft Manifest number: 1480 Signing time: Tue 30 Dec 2025 03:01:11 +0000 Manifest this update: Tue 30 Dec 2025 03:01:11 +0000 Manifest next update: Wed 31 Dec 2025 03:01:11 +0000 Files and hashes: 1: 3uOrqvmP8Ja1Ais3wLBFc-Yv8js.roa (hash: exOhjbpn5m/SyHb+kmTmnk1GW2qg2u8lsLmmerL5o9w=) 2: IzP3cDAX9aykSDzKdoH0u3AyA2M.roa (hash: NC8YDjUxW5EM3pV7QmdgO/vAJ9HwNpXuNP3EpqENObk=) 3: f2dJVu8muGYFnZFPcMivMl98KP8.roa (hash: rWmOSQ2QhYKl4L1IyTfTDLKWAGfQI+Kz8vdUqnsATxs=) 4: qlTEdj6gGMPccCA9BO_nH9SxsGY.crl (hash: ORWFHnCoqeCM8ystRIutp5xeBhCcO3wta6QQyxcpMK0=) 5: svOlfPLlFDJ0sGLcz6b_IG_H3W0.roa (hash: zsvLBGGbQT+oIT4diXH9qGrVZIYbNUKP7yL6prMLg/0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:33:d5:6e:9a:32:ee:31:85:1d:72:9f:a1:76:a8:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066 Validity Not Before: Dec 30 03:01:11 2025 GMT Not After : Dec 31 03:01:11 2025 GMT Subject: CN=ecf3e38ce981d3c5e4d598549583d814976bfb8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e4:80:e7:ea:4b:77:ea:5d:8b:a5:52:85:7d: e8:d7:a8:a3:7a:40:b9:7f:eb:a4:b6:c9:95:04:d9: 87:7f:88:d1:be:87:b7:38:cd:44:19:9f:e8:1b:4e: 9c:1f:65:cf:93:ae:b2:da:7f:21:30:fb:dd:db:3a: e9:26:2a:42:8c:b0:ef:e7:72:99:70:05:70:49:71: 07:a2:51:e7:fa:fd:24:ac:22:64:37:37:d3:70:7b: 8d:89:ca:08:82:65:f5:2f:07:a1:8e:d2:49:fb:2c: 87:3f:3c:cc:a3:38:62:41:f7:3d:61:8c:e4:4e:8e: 68:88:c2:a1:94:a2:17:5c:09:6d:e4:19:1c:46:d6: e4:a7:03:d9:22:78:21:fc:d8:69:ae:fb:be:cf:80: ca:af:a3:6e:5b:87:94:0b:34:1d:08:84:79:13:03: fb:5b:c6:03:b7:f8:b1:85:c4:5d:46:fa:45:66:48: f4:cc:6d:cc:85:a9:6b:2c:73:98:2e:4e:13:19:9e: 4a:48:09:55:89:5d:d0:fa:f5:31:a3:b9:0c:b2:fc: 2f:39:d1:79:2b:58:34:f7:98:77:6c:27:b6:b4:8c: 9e:d7:6b:29:18:be:81:3d:15:ca:fb:d3:b7:f2:40: f4:10:8e:1e:cd:0d:70:f0:00:1e:f3:9a:29:2b:20: 06:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:F3:E3:8C:E9:81:D3:C5:E4:D5:98:54:95:83:D8:14:97:6B:FB:8B X509v3 Authority Key Identifier: keyid:AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:df:1e:a7:c7:f6:a1:00:76:82:8d:78:b3:16:96:c0:53:a4: 63:63:0b:6b:78:78:61:b5:28:c8:fc:76:11:5b:af:08:57:0c: 1b:2a:34:38:06:c0:6e:c4:7d:39:5a:3e:ff:36:73:41:e8:ef: 2c:81:4c:da:e2:c4:db:7d:db:98:fd:64:40:b9:7c:04:5b:79: 60:b7:20:7b:85:57:67:29:c7:9f:e2:e8:2b:71:8a:1a:5d:6d: 0d:e4:2c:8a:d0:f3:96:c3:32:5c:84:8b:18:de:21:09:2c:ad: 24:52:9c:ae:17:af:a9:5b:41:01:d4:02:0c:f2:db:91:c7:7b: c2:37:58:be:86:66:e5:8a:59:a3:ee:a4:bb:83:f4:3c:44:a4: ae:61:38:a0:0d:6e:82:74:2c:f9:a2:2f:1f:75:d1:5b:52:c8: e0:3d:fa:41:b2:f0:2c:07:61:e1:a9:2f:22:e6:b9:5c:14:af: 1f:9b:e2:80:6b:45:4e:2a:ca:25:65:61:83:d3:aa:3d:27:c6: 7b:2e:76:4a:f3:8a:e1:39:11:8c:60:f8:6a:7b:48:3d:40:5f: 0d:2d:9c:88:14:a2:a9:a6:04:fc:99:df:ba:7c:e4:b6:20:36: 84:44:eb:95:c2:4e:c4:d8:fa:b7:65:fa:bf:5b:ef:d6:cd:e2: e3:d5:db:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttM9VumjLuMYUdcp+hdqgBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNTRjNDc2M2VhMDE4YzNkYzcwMjAzZDA0ZWZlNzFmZDRi MWIwNjYwHhcNMjUxMjMwMDMwMTExWhcNMjUxMjMxMDMwMTExWjAzMTEwLwYDVQQD EyhlY2YzZTM4Y2U5ODFkM2M1ZTRkNTk4NTQ5NTgzZDgxNDk3NmJmYjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+SA5+pLd+pdi6VShX3o16ijekC5 f+uktsmVBNmHf4jRvoe3OM1EGZ/oG06cH2XPk66y2n8hMPvd2zrpJipCjLDv53KZ cAVwSXEHolHn+v0krCJkNzfTcHuNicoIgmX1LwehjtJJ+yyHPzzMozhiQfc9YYzk To5oiMKhlKIXXAlt5BkcRtbkpwPZIngh/Nhprvu+z4DKr6NuW4eUCzQdCIR5EwP7 W8YDt/ixhcRdRvpFZkj0zG3MhalrLHOYLk4TGZ5KSAlViV3Q+vUxo7kMsvwvOdF5 K1g095h3bCe2tIye12spGL6BPRXK+9O38kD0EI4ezQ1w8AAe85opKyAGEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOzz44zpgdPF5NWYVJWD2BSXa/uLMB8GA1UdIwQY MBaAFKpUxHY+oBjD3HAgPQTv5x/UsbBmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWxURWRqNmdHTVBjY0NBOUJPX25IOVN4c0dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9hMjFjOWUtODdmMS00OTgzLTgzOTQt ZGUzNzY3M2M0MDljLzEvcWxURWRqNmdHTVBjY0NBOUJPX25IOVN4c0dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9hMjFjOWUtODdmMS00OTgzLTgzOTQtZGUzNzY3M2M0MDlj LzEvcWxURWRqNmdHTVBjY0NBOUJPX25IOVN4c0dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr98ep8f2 oQB2go14sxaWwFOkY2MLa3h4YbUoyPx2EVuvCFcMGyo0OAbAbsR9OVo+/zZzQejv LIFM2uLE233bmP1kQLl8BFt5YLcge4VXZynHn+LoK3GKGl1tDeQsitDzlsMyXISL GN4hCSytJFKcrhevqVtBAdQCDPLbkcd7wjdYvoZm5YpZo+6ku4P0PESkrmE4oA1u gnQs+aIvH3XRW1LI4D36QbLwLAdh4akvIua5XBSvH5vigGtFTirKJWVhg9OqPSfG ey52SvOK4TkRjGD4antIPUBfDS2ciBSiqaYE/JnfunzktiA2hETrlcJOxNj6t2X6 v1vv1s3i49Xb/g== -----END CERTIFICATE-----Generated at Tue Dec 30 07:12:40 2025 by rpki-client