This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/QUjLrRdIIFtPQzS7pjjGTCsh_A4.mft File: QUjLrRdIIFtPQzS7pjjGTCsh_A4.mft (raw, json) Hash identifier: RR60aBjlslBPNXViESUoeTXjebvVeJ4mQ4m5Dw5oRHE= Subject key identifier: A6:F3:BE:AE:79:00:ED:5B:0E:0C:77:6C:A5:EF:A9:44:03:BF:BD:94 Authority key identifier: 41:48:CB:AD:17:48:20:5B:4F:43:34:BB:A6:38:C6:4C:2B:21:FC:0E Certificate issuer: /CN=4148cbad1748205b4f4334bba638c64c2b21fc0e Certificate serial: 019B311F1DF686D00743799C4A0F92316848 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QUjLrRdIIFtPQzS7pjjGTCsh_A4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/QUjLrRdIIFtPQzS7pjjGTCsh_A4.mft Manifest number: 11B0 Signing time: Thu 18 Dec 2025 11:01:21 +0000 Manifest this update: Thu 18 Dec 2025 11:01:21 +0000 Manifest next update: Fri 19 Dec 2025 11:01:21 +0000 Files and hashes: 1: 4ylLEVDeXKrfF8Se5wkM9llLd1w.roa (hash: 4hQQfVDyFUxXBSnxIrSQDsLfslrlkzzZ+2tzn4mkErM=) 2: QUjLrRdIIFtPQzS7pjjGTCsh_A4.crl (hash: MZq3aw0gtSWRGQFPz51fTZn6iJraxhmChXQEA4oNICw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/QUjLrRdIIFtPQzS7pjjGTCsh_A4.crl rsync://rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/QUjLrRdIIFtPQzS7pjjGTCsh_A4.mft rsync://rpki.ripe.net/repository/DEFAULT/QUjLrRdIIFtPQzS7pjjGTCsh_A4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 11:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:1f:1d:f6:86:d0:07:43:79:9c:4a:0f:92:31:68:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4148cbad1748205b4f4334bba638c64c2b21fc0e Validity Not Before: Dec 18 11:01:21 2025 GMT Not After : Dec 19 11:01:21 2025 GMT Subject: CN=a6f3beae7900ed5b0e0c776ca5efa94403bfbd94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:67:7a:26:3a:ee:4d:2b:04:75:f4:aa:18:e5: 54:e1:51:75:d3:ca:67:ef:e7:7f:4f:33:9a:5a:60: fd:16:e0:45:e0:5a:8b:31:05:db:56:64:c1:3d:6c: 84:01:83:07:7b:a2:1f:97:18:28:ba:15:60:0a:84: 24:ff:79:72:a0:08:af:b8:ea:ee:d1:71:81:e0:cc: 4d:33:35:ac:66:e7:65:92:f1:cd:57:9d:8a:4c:80: 1c:d0:03:d7:02:7f:00:c0:21:a7:5b:96:c6:d6:42: 02:2d:31:fe:4a:71:db:0b:cb:c7:07:13:18:73:09: 50:b1:b6:49:26:d2:3b:c5:b8:e9:44:77:37:22:bb: ad:d9:87:e4:b8:33:9c:bc:aa:89:02:1f:36:f4:49: 7c:f5:15:30:53:1b:7f:a4:94:07:36:95:43:6d:97: 51:2f:29:15:08:85:f3:2c:30:7a:55:6d:00:51:e9: 27:0b:3e:2e:01:b1:79:7f:e1:d5:b4:ff:e0:41:4d: d8:e4:e6:db:07:b5:c2:50:c3:16:ea:99:ad:2e:44: cb:bf:76:d4:09:b6:33:e5:88:37:0c:ed:c9:4d:6d: c5:f3:9e:74:d9:77:d3:c7:e6:66:99:54:27:83:5d: b7:74:a6:4b:3c:1e:3f:f2:04:63:5a:67:2b:2e:ac: ea:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:F3:BE:AE:79:00:ED:5B:0E:0C:77:6C:A5:EF:A9:44:03:BF:BD:94 X509v3 Authority Key Identifier: keyid:41:48:CB:AD:17:48:20:5B:4F:43:34:BB:A6:38:C6:4C:2B:21:FC:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUjLrRdIIFtPQzS7pjjGTCsh_A4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/QUjLrRdIIFtPQzS7pjjGTCsh_A4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/QUjLrRdIIFtPQzS7pjjGTCsh_A4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:ad:51:ba:bb:08:2c:04:b8:75:11:7f:27:04:34:9a:0b:b6: 82:ea:6a:12:b1:d7:1e:b3:21:ac:a3:69:1a:43:87:a0:b3:b7: a0:cb:89:88:dc:f2:9c:46:54:c9:53:f3:b6:b6:16:98:ce:d9: 40:5b:15:e9:ae:ce:57:52:da:f3:84:5c:22:11:9c:49:19:55: b4:42:6a:e8:51:11:4f:4b:8e:ee:80:f0:a9:fb:77:9d:3a:db: a8:54:c3:c9:90:af:cf:a5:31:93:70:d7:02:ae:c6:0f:2b:79: 8f:76:4b:11:6f:e2:5f:60:c3:99:c4:30:d2:9c:89:a8:45:93: d4:66:e6:07:cc:88:ef:f3:b6:af:fd:3b:b5:ab:5a:37:15:8f: 86:b1:56:bc:13:01:40:c7:d4:ca:51:95:ba:76:93:70:95:12: 50:48:94:54:10:86:67:21:27:31:13:4a:ce:c5:16:ca:19:f7: b9:06:f6:9e:db:2b:ae:9e:4f:f9:14:c6:31:e7:b8:70:90:81: 27:e7:d1:e4:15:d5:a8:0f:90:12:ea:ae:0b:7a:da:f2:03:e3: ce:17:aa:ed:0b:86:5b:e5:44:5f:4d:09:32:f1:47:7b:8e:09: 31:48:1b:66:a3:af:51:b4:c4:f0:66:8a:83:2f:3c:e6:f6:5c: 94:d6:51:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxHx32htAHQ3mcSg+SMWhIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNDhjYmFkMTc0ODIwNWI0ZjQzMzRiYmE2MzhjNjRjMmIy MWZjMGUwHhcNMjUxMjE4MTEwMTIxWhcNMjUxMjE5MTEwMTIxWjAzMTEwLwYDVQQD EyhhNmYzYmVhZTc5MDBlZDViMGUwYzc3NmNhNWVmYTk0NDAzYmZiZDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Wd6JjruTSsEdfSqGOVU4VF108pn 7+d/TzOaWmD9FuBF4FqLMQXbVmTBPWyEAYMHe6IflxgouhVgCoQk/3lyoAivuOru 0XGB4MxNMzWsZudlkvHNV52KTIAc0APXAn8AwCGnW5bG1kICLTH+SnHbC8vHBxMY cwlQsbZJJtI7xbjpRHc3Irut2YfkuDOcvKqJAh829El89RUwUxt/pJQHNpVDbZdR LykVCIXzLDB6VW0AUeknCz4uAbF5f+HVtP/gQU3Y5ObbB7XCUMMW6pmtLkTLv3bU CbYz5Yg3DO3JTW3F85502XfTx+ZmmVQng123dKZLPB4/8gRjWmcrLqzqFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKbzvq55AO1bDgx3bKXvqUQDv72UMB8GA1UdIwQY MBaAFEFIy60XSCBbT0M0u6Y4xkwrIfwOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVVqTHJSZElJRnRQUXpTN3BqakdUQ3NoX0E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9jZTIxYjMtYzRkZS00NTZkLWI1Mzgt OTc5NzVkMzRmYzZjLzEvUVVqTHJSZElJRnRQUXpTN3BqakdUQ3NoX0E0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9jZTIxYjMtYzRkZS00NTZkLWI1MzgtOTc5NzVkMzRmYzZj LzEvUVVqTHJSZElJRnRQUXpTN3BqakdUQ3NoX0E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlq1RursI LAS4dRF/JwQ0mgu2gupqErHXHrMhrKNpGkOHoLO3oMuJiNzynEZUyVPztrYWmM7Z QFsV6a7OV1La84RcIhGcSRlVtEJq6FERT0uO7oDwqft3nTrbqFTDyZCvz6Uxk3DX Aq7GDyt5j3ZLEW/iX2DDmcQw0pyJqEWT1GbmB8yI7/O2r/07tataNxWPhrFWvBMB QMfUylGVunaTcJUSUEiUVBCGZyEnMRNKzsUWyhn3uQb2ntsrrp5P+RTGMee4cJCB J+fR5BXVqA+QEuquC3ra8gPjzheq7QuGW+VEX00JMvFHe44JMUgbZqOvUbTE8GaK gy885vZclNZRsA== -----END CERTIFICATE-----Generated at Thu Dec 18 18:35:10 2025 by rpki-client