This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft File: qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft (raw, json) Hash identifier: NVRRbTuGTODfcu1pA6irtsuctQNJLDpVWnJk9OurM2o= Subject key identifier: 18:65:E8:A8:94:B2:CC:DC:93:F1:76:9C:F1:EA:FA:D4:4B:26:52:3A Authority key identifier: A8:B2:2F:0E:C0:14:C2:AD:A5:75:37:3F:A6:BD:2F:EC:50:F6:51:47 Certificate issuer: /CN=a8b22f0ec014c2ada575373fa6bd2fec50f65147 Certificate serial: 019B2BC20F033EDE500502E151F9AF537EF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLIvDsAUwq2ldTc_pr0v7FD2UUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft Manifest number: 034E Signing time: Wed 17 Dec 2025 10:01:36 +0000 Manifest this update: Wed 17 Dec 2025 10:01:36 +0000 Manifest next update: Thu 18 Dec 2025 10:01:36 +0000 Files and hashes: 1: qLIvDsAUwq2ldTc_pr0v7FD2UUc.crl (hash: qltHyGLJ8XJ5+t/zcLGxEfpGJyl7fp2AzpepZCf/ny0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft rsync://rpki.ripe.net/repository/DEFAULT/qLIvDsAUwq2ldTc_pr0v7FD2UUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c2:0f:03:3e:de:50:05:02:e1:51:f9:af:53:7e:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8b22f0ec014c2ada575373fa6bd2fec50f65147 Validity Not Before: Dec 17 10:01:36 2025 GMT Not After : Dec 18 10:01:36 2025 GMT Subject: CN=1865e8a894b2ccdc93f1769cf1eafad44b26523a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:46:a7:ab:66:82:b8:57:6a:51:76:86:32:eb: 61:68:b4:5c:76:33:9e:e2:5c:e0:28:ed:f7:83:e7: 1c:0b:0b:c1:e0:33:99:f0:f5:fd:78:3c:8a:cf:d2: f3:b2:6b:a7:9f:9e:de:d5:1f:80:e9:27:08:1d:6b: a5:52:a4:bc:78:83:76:b3:ce:f1:7f:c8:72:02:18: bf:c7:2e:83:60:d2:69:35:e7:a2:ca:7e:be:2e:0d: 03:50:57:6c:c3:b9:46:8b:8b:51:59:b2:34:7b:ce: dc:72:31:df:2a:6d:dd:b7:f8:7e:35:77:56:38:d4: 06:6a:0a:9a:f2:f8:4c:d5:00:03:13:f5:b3:52:9f: 6f:50:f9:4f:74:3f:8c:5b:1e:b3:63:de:12:c2:d7: 3a:65:1a:38:25:ed:b7:c7:25:78:69:f1:5d:c6:36: 84:ec:a3:5e:b9:aa:fc:2f:92:d8:43:7e:76:33:cc: e2:a6:e0:63:63:6d:14:08:71:10:5f:b0:b9:75:49: 05:cb:c7:aa:28:3e:76:1c:34:f4:a1:67:44:8b:ec: b2:8d:47:d5:27:40:51:26:d7:6c:c1:3d:88:87:d8: 38:9b:1b:df:82:e2:a9:2c:d7:dd:7d:20:b9:12:6f: 9a:f5:63:54:ee:72:26:4b:8a:e1:b7:71:48:17:75: 33:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:65:E8:A8:94:B2:CC:DC:93:F1:76:9C:F1:EA:FA:D4:4B:26:52:3A X509v3 Authority Key Identifier: keyid:A8:B2:2F:0E:C0:14:C2:AD:A5:75:37:3F:A6:BD:2F:EC:50:F6:51:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLIvDsAUwq2ldTc_pr0v7FD2UUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:07:f8:a5:a5:60:9c:a2:71:4e:ba:fd:2a:3d:f5:d1:7b:2f: 71:bd:b5:04:f7:8c:a7:b8:04:08:e5:43:a8:7d:79:ba:c1:ee: 7f:51:7a:58:86:38:93:08:c1:bf:d2:27:4a:5d:f3:f1:47:91: ee:b8:b4:f5:af:55:31:ac:cc:32:db:9b:3d:2e:83:bc:81:f4: c5:e9:7b:35:21:d1:9a:8b:37:27:32:05:1f:4f:78:b0:ac:57: f9:eb:e8:38:0a:dc:b4:81:5f:ac:9a:05:b8:99:fa:9c:d7:cb: 63:e1:8f:10:bd:42:e7:4e:38:55:e5:d3:29:44:36:c8:db:91: 95:e4:48:2b:b5:10:94:b1:46:fa:86:aa:06:42:51:e9:53:67: f1:34:e0:15:52:93:40:a7:7f:6b:5e:95:d5:70:21:66:40:b3: 98:1c:64:58:87:db:fd:1a:d0:19:e0:ec:b5:ae:a1:f9:27:99: ac:49:6b:67:00:63:96:44:2f:74:aa:ab:58:36:4b:93:87:3b: 8f:b4:e0:e8:58:db:0b:04:fb:1f:05:23:66:d9:e5:cf:67:69: 28:a3:cc:78:4e:c1:81:54:22:e7:0b:60:e2:4e:23:0d:17:a2: 32:fc:3f:33:e0:0f:cd:58:fb:b5:2b:9e:d7:cd:e4:f1:bb:29: 8e:b2:08:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrwg8DPt5QBQLhUfmvU373MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4YjIyZjBlYzAxNGMyYWRhNTc1MzczZmE2YmQyZmVjNTBm NjUxNDcwHhcNMjUxMjE3MTAwMTM2WhcNMjUxMjE4MTAwMTM2WjAzMTEwLwYDVQQD EygxODY1ZThhODk0YjJjY2RjOTNmMTc2OWNmMWVhZmFkNDRiMjY1MjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykanq2aCuFdqUXaGMuthaLRcdjOe 4lzgKO33g+ccCwvB4DOZ8PX9eDyKz9Lzsmunn57e1R+A6ScIHWulUqS8eIN2s87x f8hyAhi/xy6DYNJpNeeiyn6+Lg0DUFdsw7lGi4tRWbI0e87ccjHfKm3dt/h+NXdW ONQGagqa8vhM1QADE/WzUp9vUPlPdD+MWx6zY94Swtc6ZRo4Je23xyV4afFdxjaE 7KNeuar8L5LYQ352M8zipuBjY20UCHEQX7C5dUkFy8eqKD52HDT0oWdEi+yyjUfV J0BRJtdswT2Ih9g4mxvfguKpLNfdfSC5Em+a9WNU7nImS4rht3FIF3Uz7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBhl6KiUsszck/F2nPHq+tRLJlI6MB8GA1UdIwQY MBaAFKiyLw7AFMKtpXU3P6a9L+xQ9lFHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUxJdkRzQVV3cTJsZFRjX3ByMHY3RkQyVVVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84NTQ1ZjAtYTYxZi00NDZkLWE3Mjgt ZDAxMDk5MWVlMzIzLzEvcUxJdkRzQVV3cTJsZFRjX3ByMHY3RkQyVVVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi84NTQ1ZjAtYTYxZi00NDZkLWE3MjgtZDAxMDk5MWVlMzIz LzEvcUxJdkRzQVV3cTJsZFRjX3ByMHY3RkQyVVVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABwf4paVg nKJxTrr9Kj310Xsvcb21BPeMp7gECOVDqH15usHuf1F6WIY4kwjBv9InSl3z8UeR 7ri09a9VMazMMtubPS6DvIH0xel7NSHRmos3JzIFH094sKxX+evoOArctIFfrJoF uJn6nNfLY+GPEL1C5044VeXTKUQ2yNuRleRIK7UQlLFG+oaqBkJR6VNn8TTgFVKT QKd/a16V1XAhZkCzmBxkWIfb/RrQGeDsta6h+SeZrElrZwBjlkQvdKqrWDZLk4c7 j7Tg6FjbCwT7HwUjZtnlz2dpKKPMeE7BgVQi5wtg4k4jDReiMvw/M+APzVj7tSue 183k8bspjrIIbA== -----END CERTIFICATE-----Generated at Wed Dec 17 19:54:33 2025 by rpki-client