This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft File: Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft (raw, json) Hash identifier: B/hFHmFfK3yxZjur7kMa6bx8h0acPZvkyV2A1ibYtiM= Subject key identifier: 36:F3:0C:30:23:31:70:9C:C4:8E:FB:E9:E5:D1:10:51:93:AB:04:D4 Authority key identifier: 42:5B:F4:37:5F:17:A0:35:70:19:69:03:01:F9:41:93:24:FF:7D:44 Certificate issuer: /CN=425bf4375f17a0357019690301f9419324ff7d44 Certificate serial: 019B2BF8D8C609434E4E4051723864348E54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft Manifest number: 1716 Signing time: Wed 17 Dec 2025 11:01:27 +0000 Manifest this update: Wed 17 Dec 2025 11:01:27 +0000 Manifest next update: Thu 18 Dec 2025 11:01:27 +0000 Files and hashes: 1: Qlv0N18XoDVwGWkDAflBkyT_fUQ.crl (hash: 0vPmqm+XwtzwZmJeqixU9X8uIzfO0aCcFHTeB4KYavE=) 2: RhrEJBm06vcPBY7X0Je_fY5rgcI.roa (hash: 4yKx6aLoX0+QkHu1SlH9OK51/kRC6FYJDLkFroupLIw=) 3: mSlCJZv4uLXPX9TG5FqcmvMai0Y.roa (hash: Iq0hlW5EajbykdfiIDL0asLPrwjWnTj7+DtJoBY9nFw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:d8:c6:09:43:4e:4e:40:51:72:38:64:34:8e:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=425bf4375f17a0357019690301f9419324ff7d44 Validity Not Before: Dec 17 11:01:27 2025 GMT Not After : Dec 18 11:01:27 2025 GMT Subject: CN=36f30c302331709cc48efbe9e5d1105193ab04d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:39:3f:67:a4:93:fd:c5:fe:e2:ee:40:22:1e: 82:be:b2:5f:ae:c4:95:53:f7:08:95:2e:9a:ad:77: 4b:c1:b3:84:88:be:1a:e3:2a:08:ec:c9:65:0f:1b: 9b:41:5d:b8:50:06:82:6e:f4:92:72:5d:6c:05:d9: 41:07:b7:8f:ea:70:46:76:92:65:7e:d4:86:ef:91: e3:31:15:0a:4d:ee:80:a7:ad:ba:35:58:12:db:e7: ef:b2:f4:a3:3a:ed:c5:82:d7:ec:c1:5b:67:c9:0d: 98:bd:c1:29:54:12:89:e6:38:78:78:66:0d:95:6b: 59:e5:9b:03:98:e6:64:d8:d5:f9:48:e0:b7:23:ae: 95:0c:8c:30:e5:97:0d:8b:ed:b9:83:7a:a2:2c:83: e0:c4:41:30:a8:ee:cd:b5:25:fe:94:7d:27:8d:25: b5:67:89:64:c5:4d:57:91:cb:40:45:d0:71:84:10: 45:1f:bf:fd:fe:6c:27:cf:6c:53:e9:2d:7b:5a:21: 3e:56:ae:84:f7:d3:15:56:41:e5:89:8b:4a:14:36: bd:2a:90:be:12:00:8e:72:b7:2c:c1:55:b2:61:e1: 1c:69:44:d3:3d:72:62:60:7e:81:54:d2:26:0f:8d: 19:2d:c1:4b:b3:76:26:31:d6:68:25:1a:c7:51:54: 47:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F3:0C:30:23:31:70:9C:C4:8E:FB:E9:E5:D1:10:51:93:AB:04:D4 X509v3 Authority Key Identifier: keyid:42:5B:F4:37:5F:17:A0:35:70:19:69:03:01:F9:41:93:24:FF:7D:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:3b:e5:6e:f6:eb:83:5e:f1:da:aa:46:80:c7:7c:b7:2e:65: 97:b6:b4:80:de:7b:13:f2:ed:37:03:80:3a:b3:3a:18:7c:6f: 57:f7:6f:fe:ce:94:74:33:ae:a7:b3:2c:cd:5c:9b:85:af:3b: 56:3e:55:5c:4a:40:7f:aa:a1:64:aa:1c:de:95:a8:6f:63:c9: cb:2c:aa:7d:e3:92:cc:2e:d7:fe:96:66:aa:d1:d0:85:e1:a7: 51:4b:f5:66:86:6b:17:c2:6d:7b:de:a5:ec:23:ee:55:38:8c: 61:cc:fb:6e:c7:00:d8:64:d1:31:8a:4d:3f:bf:68:f2:35:28: 3b:36:8e:a8:b4:03:68:7a:ef:e2:45:0c:40:c7:38:e0:1a:27: 94:81:71:b2:6c:d5:a4:f1:8b:50:75:a4:98:00:73:4e:e6:4c: 47:6e:26:cc:36:ce:f6:b9:da:db:2a:7e:8f:89:90:5c:87:7a: f4:c7:73:68:b1:34:a6:a0:a2:47:08:1b:31:11:94:0d:84:dc: ee:68:0a:95:31:72:c4:b7:d9:e9:5a:af:3d:3d:0e:32:82:44: a8:34:e8:2c:36:d2:46:8e:82:22:88:08:aa:92:65:c0:0d:97: 6f:c0:00:1c:31:93:be:29:88:30:a0:d0:c8:87:fa:8d:21:65: cf:75:3d:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+NjGCUNOTkBRcjhkNI5UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNWJmNDM3NWYxN2EwMzU3MDE5NjkwMzAxZjk0MTkzMjRm ZjdkNDQwHhcNMjUxMjE3MTEwMTI3WhcNMjUxMjE4MTEwMTI3WjAzMTEwLwYDVQQD EygzNmYzMGMzMDIzMzE3MDljYzQ4ZWZiZTllNWQxMTA1MTkzYWIwNGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjk/Z6ST/cX+4u5AIh6CvrJfrsSV U/cIlS6arXdLwbOEiL4a4yoI7MllDxubQV24UAaCbvSScl1sBdlBB7eP6nBGdpJl ftSG75HjMRUKTe6Ap626NVgS2+fvsvSjOu3FgtfswVtnyQ2YvcEpVBKJ5jh4eGYN lWtZ5ZsDmOZk2NX5SOC3I66VDIww5ZcNi+25g3qiLIPgxEEwqO7NtSX+lH0njSW1 Z4lkxU1XkctARdBxhBBFH7/9/mwnz2xT6S17WiE+Vq6E99MVVkHliYtKFDa9KpC+ EgCOcrcswVWyYeEcaUTTPXJiYH6BVNImD40ZLcFLs3YmMdZoJRrHUVRH8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDbzDDAjMXCcxI776eXREFGTqwTUMB8GA1UdIwQY MBaAFEJb9DdfF6A1cBlpAwH5QZMk/31EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWx2ME4xOFhvRFZ3R1drREFmbEJreVRfZlVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9mMjhhNzUtZDUzZi00ZTlmLTgyZGQt ZjBlZDhmZTgyYjk3LzEvUWx2ME4xOFhvRFZ3R1drREFmbEJreVRfZlVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9mMjhhNzUtZDUzZi00ZTlmLTgyZGQtZjBlZDhmZTgyYjk3 LzEvUWx2ME4xOFhvRFZ3R1drREFmbEJreVRfZlVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACTvlbvbr g17x2qpGgMd8ty5ll7a0gN57E/LtNwOAOrM6GHxvV/dv/s6UdDOup7MszVybha87 Vj5VXEpAf6qhZKoc3pWob2PJyyyqfeOSzC7X/pZmqtHQheGnUUv1ZoZrF8Jte96l 7CPuVTiMYcz7bscA2GTRMYpNP79o8jUoOzaOqLQDaHrv4kUMQMc44BonlIFxsmzV pPGLUHWkmABzTuZMR24mzDbO9rna2yp+j4mQXId69MdzaLE0pqCiRwgbMRGUDYTc 7mgKlTFyxLfZ6VqvPT0OMoJEqDToLDbSRo6CIogIqpJlwA2Xb8AAHDGTvimIMKDQ yIf6jSFlz3U96g== -----END CERTIFICATE-----Generated at Wed Dec 17 16:47:11 2025 by rpki-client