This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft File: qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft (raw, json) Hash identifier: 5mn7cq2SplRPg9eVf6QDVEFglATTahGcwuDVG8hm6cY= Subject key identifier: 8A:C4:C5:69:AE:E7:2E:D0:44:52:B2:FB:BE:70:31:8F:46:90:BA:31 Authority key identifier: A8:B2:2F:0E:C0:14:C2:AD:A5:75:37:3F:A6:BD:2F:EC:50:F6:51:47 Certificate issuer: /CN=a8b22f0ec014c2ada575373fa6bd2fec50f65147 Certificate serial: 019B2F9EAB5A4357AEDDF92344F7132BF794 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLIvDsAUwq2ldTc_pr0v7FD2UUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft Manifest number: 0350 Signing time: Thu 18 Dec 2025 04:01:26 +0000 Manifest this update: Thu 18 Dec 2025 04:01:26 +0000 Manifest next update: Fri 19 Dec 2025 04:01:26 +0000 Files and hashes: 1: qLIvDsAUwq2ldTc_pr0v7FD2UUc.crl (hash: +yN8DQH1GenL3fV29NLtZ6IGpdyTr7IJQ3Uha98I4mw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft rsync://rpki.ripe.net/repository/DEFAULT/qLIvDsAUwq2ldTc_pr0v7FD2UUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:ab:5a:43:57:ae:dd:f9:23:44:f7:13:2b:f7:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8b22f0ec014c2ada575373fa6bd2fec50f65147 Validity Not Before: Dec 18 04:01:26 2025 GMT Not After : Dec 19 04:01:26 2025 GMT Subject: CN=8ac4c569aee72ed04452b2fbbe70318f4690ba31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7b:0b:99:8c:ff:ea:0a:27:7e:73:b2:dc:a4: 7f:af:9d:43:4c:df:94:ee:95:24:06:93:bc:34:4f: 93:b5:a1:3f:ea:67:a3:35:44:96:c0:c3:d3:a5:a7: a9:6d:4d:75:e5:84:59:cf:3d:6d:bf:1a:ee:73:14: 1f:bd:31:d4:d3:88:a6:31:d2:fb:6c:13:1d:a1:ee: 25:68:0f:11:d7:f9:14:2b:ea:16:4d:d2:7e:2f:d7: 33:17:ba:95:a7:4d:6c:aa:61:e1:54:4b:8a:52:b0: 73:d2:5f:9f:a7:24:e7:29:13:f7:2a:2c:5f:92:2a: 13:29:b2:52:11:52:4b:5c:ed:8b:69:3b:81:33:8c: f4:da:cf:5c:99:ca:84:b1:27:39:40:ac:2b:14:35: e9:fb:3f:37:27:d3:b3:ee:69:62:f7:64:11:b2:bb: 74:5d:83:52:29:ca:d1:fc:d9:39:e9:7c:f3:60:b7: c7:70:90:b1:4c:4c:cd:74:ff:34:89:89:27:ca:e6: cd:11:d6:06:28:71:6e:19:f5:25:e7:4b:9a:2b:47: 4e:bc:23:e1:47:ec:0b:9d:6c:1e:0f:dd:49:12:bf: db:71:fb:7c:12:2c:e7:f8:a0:a4:d6:86:64:cc:16: f9:be:70:e3:28:26:8d:f0:35:b7:10:10:45:93:f8: 4c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C4:C5:69:AE:E7:2E:D0:44:52:B2:FB:BE:70:31:8F:46:90:BA:31 X509v3 Authority Key Identifier: keyid:A8:B2:2F:0E:C0:14:C2:AD:A5:75:37:3F:A6:BD:2F:EC:50:F6:51:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLIvDsAUwq2ldTc_pr0v7FD2UUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:4c:6c:fa:cc:23:a6:cd:75:cf:4a:e8:0c:99:47:42:52:4d: 5c:25:69:54:c6:ee:c3:c0:51:28:dc:00:4f:67:ab:bf:76:51: b5:ca:e5:a3:b0:c4:ea:2f:ce:6c:8f:99:3e:c9:b5:cd:bc:23: fa:2e:23:eb:17:f5:e8:24:d7:ba:db:fe:8c:8d:b4:b3:6b:dd: e7:6b:29:8f:3f:e4:9c:88:84:ec:25:ec:7d:a5:f6:f8:0c:b4: 1b:58:47:d8:82:d6:02:06:c0:f1:68:8f:37:69:ac:2c:c3:36: a7:76:da:b7:29:2e:86:4a:b3:bd:4f:40:52:0f:1c:5b:67:e5: b0:96:4b:a6:c7:d9:fa:54:3c:b0:0f:c3:52:a3:78:de:fc:31: 65:10:2e:72:cf:39:98:47:39:70:e2:17:7e:3e:e9:e3:7a:11: 2a:fb:ce:03:31:8b:16:22:77:6a:a8:e6:0e:2b:a8:59:c8:b4: f6:ea:d7:5e:1d:de:45:18:86:27:aa:ce:09:8d:9a:8f:e2:c1: 32:aa:af:17:c4:ab:79:57:2a:ed:c3:fd:12:32:8f:2b:e3:51: 3f:d8:08:16:be:1a:5f:39:24:7d:6b:4b:4c:01:3e:85:48:fd: 79:3b:5f:3b:12:48:e0:6a:e6:79:2c:13:a0:16:1b:e2:cd:a6: c1:09:c9:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnqtaQ1eu3fkjRPcTK/eUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4YjIyZjBlYzAxNGMyYWRhNTc1MzczZmE2YmQyZmVjNTBm NjUxNDcwHhcNMjUxMjE4MDQwMTI2WhcNMjUxMjE5MDQwMTI2WjAzMTEwLwYDVQQD Eyg4YWM0YzU2OWFlZTcyZWQwNDQ1MmIyZmJiZTcwMzE4ZjQ2OTBiYTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3sLmYz/6gonfnOy3KR/r51DTN+U 7pUkBpO8NE+TtaE/6mejNUSWwMPTpaepbU115YRZzz1tvxrucxQfvTHU04imMdL7 bBMdoe4laA8R1/kUK+oWTdJ+L9czF7qVp01sqmHhVEuKUrBz0l+fpyTnKRP3Kixf kioTKbJSEVJLXO2LaTuBM4z02s9cmcqEsSc5QKwrFDXp+z83J9Oz7mli92QRsrt0 XYNSKcrR/Nk56XzzYLfHcJCxTEzNdP80iYknyubNEdYGKHFuGfUl50uaK0dOvCPh R+wLnWweD91JEr/bcft8Eizn+KCk1oZkzBb5vnDjKCaN8DW3EBBFk/hMyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIrExWmu5y7QRFKy+75wMY9GkLoxMB8GA1UdIwQY MBaAFKiyLw7AFMKtpXU3P6a9L+xQ9lFHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUxJdkRzQVV3cTJsZFRjX3ByMHY3RkQyVVVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84NTQ1ZjAtYTYxZi00NDZkLWE3Mjgt ZDAxMDk5MWVlMzIzLzEvcUxJdkRzQVV3cTJsZFRjX3ByMHY3RkQyVVVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi84NTQ1ZjAtYTYxZi00NDZkLWE3MjgtZDAxMDk5MWVlMzIz LzEvcUxJdkRzQVV3cTJsZFRjX3ByMHY3RkQyVVVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcExs+swj ps11z0roDJlHQlJNXCVpVMbuw8BRKNwAT2erv3ZRtcrlo7DE6i/ObI+ZPsm1zbwj +i4j6xf16CTXutv+jI20s2vd52spjz/knIiE7CXsfaX2+Ay0G1hH2ILWAgbA8WiP N2msLMM2p3batykuhkqzvU9AUg8cW2flsJZLpsfZ+lQ8sA/DUqN43vwxZRAucs85 mEc5cOIXfj7p43oRKvvOAzGLFiJ3aqjmDiuoWci09urXXh3eRRiGJ6rOCY2aj+LB MqqvF8SreVcq7cP9EjKPK+NRP9gIFr4aXzkkfWtLTAE+hUj9eTtfOxJI4GrmeSwT oBYb4s2mwQnJJA== -----END CERTIFICATE-----Generated at Thu Dec 18 11:14:06 2025 by rpki-client