This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft File: qlPNLFhKPcFiCLqTsNt0dzs_I74.mft (raw, json) Hash identifier: xXRRfbx0W9r1PWWY9+iSHZsrQH+l/SrdZj02s72Pvp0= Subject key identifier: 47:42:F9:56:AB:CF:0F:30:06:C5:67:00:D4:D6:07:1C:3D:B6:2F:D0 Authority key identifier: AA:53:CD:2C:58:4A:3D:C1:62:08:BA:93:B0:DB:74:77:3B:3F:23:BE Certificate issuer: /CN=aa53cd2c584a3dc16208ba93b0db74773b3f23be Certificate serial: 019B38A1C918CA21CFB4E012AAD88BF70ABC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 22:01:25 +0000 Manifest this update: Fri 19 Dec 2025 22:01:25 +0000 Manifest next update: Sat 20 Dec 2025 22:01:25 +0000 Files and hashes: 1: 0koZyFChDezPZrlYJuMfvZjhl9U.roa (hash: de9sKJ93r6KtWpoBh4fQ9q5HQjJugLR9RFxcJ5k+oDo=) 2: qlPNLFhKPcFiCLqTsNt0dzs_I74.crl (hash: 4BE0virfxnfzF3juikwLt1gByPFkrl5MQSMawqnscDg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:c9:18:ca:21:cf:b4:e0:12:aa:d8:8b:f7:0a:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa53cd2c584a3dc16208ba93b0db74773b3f23be Validity Not Before: Dec 19 22:01:25 2025 GMT Not After : Dec 20 22:01:25 2025 GMT Subject: CN=4742f956abcf0f3006c56700d4d6071c3db62fd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8b:47:a6:af:5c:e3:a1:00:bc:d7:2e:be:a5: 9e:f0:9f:72:99:d9:ce:f3:4a:a9:a3:d4:ad:89:0c: 10:fd:c1:b1:f4:c8:af:59:ed:7d:a6:ba:71:95:f0: 66:a7:93:9e:bf:10:0f:9b:77:1c:34:d5:5e:4c:b9: ef:87:59:d5:a3:22:fb:97:c4:8c:ec:d3:8d:99:05: 3a:8e:0e:75:37:e3:99:64:27:5a:bc:66:85:5a:d3: 0b:80:f2:10:81:aa:99:97:c7:de:05:a7:6a:e5:bf: db:09:d9:fc:77:52:fb:0c:a8:28:53:5b:13:f5:f5: 30:a0:94:99:a2:a1:02:89:b2:c7:95:48:c5:18:0b: b6:9c:73:03:f6:37:ec:c6:d7:47:68:57:84:b5:39: 35:48:8e:6f:d6:86:2e:0a:c2:d3:ed:dc:ee:b3:f1: 28:1a:3d:3b:8a:86:e3:77:ee:18:cb:c2:99:81:3b: a7:d6:94:b0:c2:59:ad:af:39:85:e0:74:d1:24:fe: 4d:f6:cf:8b:aa:7f:3b:83:33:a9:dd:05:a3:71:79: 9a:0a:c4:d1:7c:86:ff:e2:6d:ec:7a:73:87:c6:f4: 3c:f3:5f:71:0f:52:6e:9a:de:5e:36:78:50:6f:b7: e5:ac:16:4d:4c:fd:3d:aa:86:02:c8:ea:e0:ac:ab: a8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:42:F9:56:AB:CF:0F:30:06:C5:67:00:D4:D6:07:1C:3D:B6:2F:D0 X509v3 Authority Key Identifier: keyid:AA:53:CD:2C:58:4A:3D:C1:62:08:BA:93:B0:DB:74:77:3B:3F:23:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:5d:1a:eb:ab:99:8a:7d:05:c7:f5:4e:23:ff:89:9e:fd:6d: 01:e8:32:ab:5d:82:e9:ac:bb:72:b7:fb:38:99:96:01:d8:e8: db:0a:1d:9a:46:09:bf:b1:59:2d:07:52:cc:d7:30:6d:e5:99: 3b:96:dc:47:78:b9:37:66:56:34:2b:1d:92:69:06:76:f7:c1: da:0c:1a:34:d0:e5:34:91:dd:5d:76:cd:54:b7:8d:a6:e8:49: 2c:2b:96:a6:c3:5e:a0:23:ef:94:ed:3f:73:7a:9b:f2:0f:53: 1c:69:ad:04:81:13:41:88:bc:7e:ce:ec:2b:83:cd:96:4e:89: a5:06:06:a0:07:21:43:73:f7:ff:22:06:d8:2f:1d:34:15:23: 01:9f:cc:9c:43:6f:45:e2:2a:9b:71:97:f7:6e:2b:a1:b3:5f: 34:c0:57:77:97:fc:2b:5a:b3:06:38:61:5e:0b:82:3d:40:55: b8:38:24:0c:08:b8:c5:f2:e0:27:7b:01:a3:e0:6e:31:3a:ed: 8e:5f:00:05:d4:ac:f4:2c:b9:de:c4:fe:b2:c9:51:a2:35:60: 9b:39:af:44:d5:5b:a1:17:07:9e:ea:d5:f0:d3:d8:a4:3f:d7: ad:a2:0d:a6:4b:9a:1d:e2:13:7d:43:a8:28:21:0a:6c:1a:bc: de:da:30:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4ockYyiHPtOASqtiL9wq8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNTNjZDJjNTg0YTNkYzE2MjA4YmE5M2IwZGI3NDc3M2Iz ZjIzYmUwHhcNMjUxMjE5MjIwMTI1WhcNMjUxMjIwMjIwMTI1WjAzMTEwLwYDVQQD Eyg0NzQyZjk1NmFiY2YwZjMwMDZjNTY3MDBkNGQ2MDcxYzNkYjYyZmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArotHpq9c46EAvNcuvqWe8J9ymdnO 80qpo9StiQwQ/cGx9MivWe19prpxlfBmp5OevxAPm3ccNNVeTLnvh1nVoyL7l8SM 7NONmQU6jg51N+OZZCdavGaFWtMLgPIQgaqZl8feBadq5b/bCdn8d1L7DKgoU1sT 9fUwoJSZoqECibLHlUjFGAu2nHMD9jfsxtdHaFeEtTk1SI5v1oYuCsLT7dzus/Eo Gj07iobjd+4Yy8KZgTun1pSwwlmtrzmF4HTRJP5N9s+Lqn87gzOp3QWjcXmaCsTR fIb/4m3senOHxvQ8819xD1Jumt5eNnhQb7flrBZNTP09qoYCyOrgrKuowQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEdC+Varzw8wBsVnANTWBxw9ti/QMB8GA1UdIwQY MBaAFKpTzSxYSj3BYgi6k7DbdHc7PyO+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWxQTkxGaEtQY0ZpQ0xxVHNOdDBkenNfSTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lNjcwYTctYWQ3OC00NTdlLWFkODAt MDA3OTc4YmRiMDUyLzEvcWxQTkxGaEtQY0ZpQ0xxVHNOdDBkenNfSTc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9lNjcwYTctYWQ3OC00NTdlLWFkODAtMDA3OTc4YmRiMDUy LzEvcWxQTkxGaEtQY0ZpQ0xxVHNOdDBkenNfSTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAel0a66uZ in0Fx/VOI/+Jnv1tAegyq12C6ay7crf7OJmWAdjo2wodmkYJv7FZLQdSzNcwbeWZ O5bcR3i5N2ZWNCsdkmkGdvfB2gwaNNDlNJHdXXbNVLeNpuhJLCuWpsNeoCPvlO0/ c3qb8g9THGmtBIETQYi8fs7sK4PNlk6JpQYGoAchQ3P3/yIG2C8dNBUjAZ/MnENv ReIqm3GX924robNfNMBXd5f8K1qzBjhhXguCPUBVuDgkDAi4xfLgJ3sBo+BuMTrt jl8ABdSs9Cy53sT+sslRojVgmzmvRNVboRcHnurV8NPYpD/XraINpkuaHeITfUOo KCEKbBq83tow+Q== -----END CERTIFICATE-----Generated at Sat Dec 20 07:35:07 2025 by rpki-client