This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft File: qlPNLFhKPcFiCLqTsNt0dzs_I74.mft (raw, json) Hash identifier: WDxNr5apGGT46i92CUueuSKl8Kg8/wV+HnwmtWB7P7Y= Subject key identifier: 2D:4D:04:43:A6:BF:43:73:29:8C:DB:AB:83:64:74:AF:05:E4:8B:A5 Authority key identifier: AA:53:CD:2C:58:4A:3D:C1:62:08:BA:93:B0:DB:74:77:3B:3F:23:BE Certificate issuer: /CN=aa53cd2c584a3dc16208ba93b0db74773b3f23be Certificate serial: 019B70A24483F8E9084BACF424F6E924AC77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft Manifest number: 17A3 Signing time: Tue 30 Dec 2025 19:00:41 +0000 Manifest this update: Tue 30 Dec 2025 19:00:41 +0000 Manifest next update: Wed 31 Dec 2025 19:00:41 +0000 Files and hashes: 1: 0koZyFChDezPZrlYJuMfvZjhl9U.roa (hash: de9sKJ93r6KtWpoBh4fQ9q5HQjJugLR9RFxcJ5k+oDo=) 2: qlPNLFhKPcFiCLqTsNt0dzs_I74.crl (hash: 6cnS2POoP6EktD9XFMb6ldWn8PZfh7JNaCBcpSkIYo4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 19:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:a2:44:83:f8:e9:08:4b:ac:f4:24:f6:e9:24:ac:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa53cd2c584a3dc16208ba93b0db74773b3f23be Validity Not Before: Dec 30 19:00:41 2025 GMT Not After : Dec 31 19:00:41 2025 GMT Subject: CN=2d4d0443a6bf4373298cdbab836474af05e48ba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:85:d9:0e:d2:4a:62:0a:b7:b9:55:3f:67:75: 69:a4:e3:50:42:78:8d:6a:d5:57:a9:ca:e6:1c:71: 9c:01:3b:69:af:47:7c:c5:3e:10:b9:b9:8e:d3:c3: 67:2d:bc:84:46:bc:68:63:bc:99:f3:7e:40:09:c6: 94:ed:92:5b:ff:45:d8:7b:0f:50:48:2c:b0:16:38: 1a:fa:62:88:85:4b:38:6f:cd:dc:61:32:0d:22:0d: 19:c3:11:5f:7b:13:09:1a:eb:f0:ab:13:d8:f7:94: c3:80:db:5d:d1:89:08:71:5f:7f:6f:f5:05:6c:ed: 96:9c:ec:9e:c1:38:70:15:02:eb:c7:69:34:5c:16: 39:b7:3d:84:b0:b5:83:2d:49:67:e9:9e:41:26:6d: fa:cc:14:8a:83:b5:af:ac:f2:c8:22:c1:d0:28:65: 8b:78:67:25:5d:80:da:70:0a:e6:44:79:71:58:a8: 82:b1:2d:2f:b3:9d:0d:fb:22:a2:36:7f:09:4a:40: ba:c3:da:10:18:5c:aa:44:93:47:6e:43:6a:7a:87: 1a:1a:a3:1f:72:f5:cd:af:a7:7e:ac:f9:20:0d:4c: d3:20:46:47:0c:39:24:f4:a2:b7:af:b8:44:f5:42: 75:d3:9a:ce:eb:07:30:43:bc:f0:9b:ab:be:ba:59: fd:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:4D:04:43:A6:BF:43:73:29:8C:DB:AB:83:64:74:AF:05:E4:8B:A5 X509v3 Authority Key Identifier: keyid:AA:53:CD:2C:58:4A:3D:C1:62:08:BA:93:B0:DB:74:77:3B:3F:23:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:83:6d:99:71:9b:a4:f8:8b:67:f6:11:a3:01:8f:75:1f:e9: ff:bb:bd:a7:62:67:c3:e3:dc:cf:78:fc:9a:bc:64:13:45:c1: a4:ae:03:96:a5:7c:30:a2:90:38:fd:3c:88:42:ac:91:1a:bd: 28:18:94:35:de:6b:9e:b5:e8:6c:c0:a0:ce:0e:98:3d:b7:26: 6a:bc:fd:24:b1:b6:20:ed:89:7f:c8:06:09:e4:52:8f:ec:26: 25:ea:d2:61:b9:d4:f5:77:f0:69:b2:a9:0b:cd:37:8b:a3:33: c8:59:71:cc:da:b3:0e:32:28:b3:1c:54:58:96:ef:d1:46:ab: b5:df:5f:51:12:59:50:9c:0b:d1:41:9f:44:1c:49:cd:d6:61: 92:7d:73:ec:94:3c:b6:c4:8b:1f:a2:a7:28:c7:5d:44:a1:2f: 43:a2:8b:86:ad:93:6a:13:6d:cd:be:8b:7a:ff:50:a3:10:bc: 6a:02:59:03:43:25:9e:59:3e:bf:bc:4b:6a:1c:cd:cd:fa:51: d9:0e:f3:ec:4f:f5:32:94:8e:3d:1e:4d:ef:fb:1d:e0:07:bd: e0:23:3f:0c:9e:d4:26:62:e5:3e:5d:d3:fe:c9:36:b5:03:d9: 5f:ce:c8:b8:9c:33:15:85:d4:ac:bc:ba:30:e1:ab:e2:40:9f: 9d:59:c6:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtwokSD+OkIS6z0JPbpJKx3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNTNjZDJjNTg0YTNkYzE2MjA4YmE5M2IwZGI3NDc3M2Iz ZjIzYmUwHhcNMjUxMjMwMTkwMDQxWhcNMjUxMjMxMTkwMDQxWjAzMTEwLwYDVQQD EygyZDRkMDQ0M2E2YmY0MzczMjk4Y2RiYWI4MzY0NzRhZjA1ZTQ4YmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24XZDtJKYgq3uVU/Z3VppONQQniN atVXqcrmHHGcATtpr0d8xT4QubmO08NnLbyERrxoY7yZ835ACcaU7ZJb/0XYew9Q SCywFjga+mKIhUs4b83cYTINIg0ZwxFfexMJGuvwqxPY95TDgNtd0YkIcV9/b/UF bO2WnOyewThwFQLrx2k0XBY5tz2EsLWDLUln6Z5BJm36zBSKg7WvrPLIIsHQKGWL eGclXYDacArmRHlxWKiCsS0vs50N+yKiNn8JSkC6w9oQGFyqRJNHbkNqeocaGqMf cvXNr6d+rPkgDUzTIEZHDDkk9KK3r7hE9UJ105rO6wcwQ7zwm6u+uln9BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC1NBEOmv0NzKYzbq4NkdK8F5IulMB8GA1UdIwQY MBaAFKpTzSxYSj3BYgi6k7DbdHc7PyO+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWxQTkxGaEtQY0ZpQ0xxVHNOdDBkenNfSTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lNjcwYTctYWQ3OC00NTdlLWFkODAt MDA3OTc4YmRiMDUyLzEvcWxQTkxGaEtQY0ZpQ0xxVHNOdDBkenNfSTc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9lNjcwYTctYWQ3OC00NTdlLWFkODAtMDA3OTc4YmRiMDUy LzEvcWxQTkxGaEtQY0ZpQ0xxVHNOdDBkenNfSTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANoNtmXGb pPiLZ/YRowGPdR/p/7u9p2Jnw+Pcz3j8mrxkE0XBpK4DlqV8MKKQOP08iEKskRq9 KBiUNd5rnrXobMCgzg6YPbcmarz9JLG2IO2Jf8gGCeRSj+wmJerSYbnU9XfwabKp C803i6MzyFlxzNqzDjIosxxUWJbv0Uartd9fURJZUJwL0UGfRBxJzdZhkn1z7JQ8 tsSLH6KnKMddRKEvQ6KLhq2TahNtzb6Lev9QoxC8agJZA0Mlnlk+v7xLahzNzfpR 2Q7z7E/1MpSOPR5N7/sd4Ae94CM/DJ7UJmLlPl3T/sk2tQPZX87IuJwzFYXUrLy6 MOGr4kCfnVnG5Q== -----END CERTIFICATE-----Generated at Wed Dec 31 01:59:08 2025 by rpki-client