This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft File: QclkksAECK1U1zDA62KeOgtQ2A8.mft (raw, json) Hash identifier: Im6PoTIXEwsZTfF0oWiMv9FMjsqbbtAyVoBTm1IQBYg= Subject key identifier: 15:61:35:2C:11:3E:43:9C:9A:59:AE:99:14:31:D6:E5:AB:DA:78:81 Authority key identifier: 41:C9:64:92:C0:04:08:AD:54:D7:30:C0:EB:62:9E:3A:0B:50:D8:0F Certificate issuer: /CN=41c96492c00408ad54d730c0eb629e3a0b50d80f Certificate serial: 019B30E978FA40B394C1EC7703836826C19E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QclkksAECK1U1zDA62KeOgtQ2A8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft Manifest number: 040C Signing time: Thu 18 Dec 2025 10:02:45 +0000 Manifest this update: Thu 18 Dec 2025 10:02:45 +0000 Manifest next update: Fri 19 Dec 2025 10:02:45 +0000 Files and hashes: 1: EpeCh_PHvVwvR1jtfMGPQVrMsrQ.roa (hash: XKVWPCeZYhwf3z1v0hUSbNv7x/hm4cVMh5YcJnXqtvg=) 2: QclkksAECK1U1zDA62KeOgtQ2A8.crl (hash: kPzhAg11P4MmzUHufkbAiXQ83EROx44JZAfJ2N5Ogfg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft rsync://rpki.ripe.net/repository/DEFAULT/QclkksAECK1U1zDA62KeOgtQ2A8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e9:78:fa:40:b3:94:c1:ec:77:03:83:68:26:c1:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41c96492c00408ad54d730c0eb629e3a0b50d80f Validity Not Before: Dec 18 10:02:45 2025 GMT Not After : Dec 19 10:02:45 2025 GMT Subject: CN=1561352c113e439c9a59ae991431d6e5abda7881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f7:6a:8a:7a:1f:4b:fd:0b:5a:2d:c0:0a:6d: 0a:89:90:1a:92:53:d2:20:cb:01:cb:dc:1f:34:dc: fb:77:de:4b:22:33:3a:6c:a2:f0:4b:ca:15:53:b1: bf:e9:52:e2:e6:b0:7e:6e:a5:65:fc:ad:d0:be:a7: 2b:0f:ef:04:8b:32:14:88:1e:60:c6:87:a8:5d:5f: 6f:54:bf:4f:9d:ff:b2:e5:97:2d:ee:e1:bd:cb:d8: b9:23:82:d0:5f:28:00:ce:78:e0:5c:37:3d:dd:6c: 05:40:5f:39:35:99:71:6b:6b:86:e0:e6:4e:6e:20: 4f:f6:65:44:28:74:cd:0b:5d:ea:91:86:96:27:b3: 35:9d:f9:4f:b9:c9:2d:83:a8:e7:c7:fc:b0:1e:b7: 84:ff:3b:6d:20:69:cc:53:66:9a:40:a8:38:f7:d1: 22:89:bd:f3:13:54:49:c5:7e:5e:fb:39:28:43:71: 85:25:a2:28:c9:b2:eb:be:2f:33:2b:f8:7e:23:a7: 00:b7:82:c2:9d:b7:fc:83:03:50:29:b5:7a:ba:b2: 97:f6:5e:8e:69:77:2d:e0:23:71:b0:dc:59:78:8d: ce:a4:43:9c:71:6b:0c:38:c4:64:af:cc:3c:f3:e6: c8:fb:a9:05:40:a9:9b:90:7f:f0:e6:75:d1:8f:20: b0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:61:35:2C:11:3E:43:9C:9A:59:AE:99:14:31:D6:E5:AB:DA:78:81 X509v3 Authority Key Identifier: keyid:41:C9:64:92:C0:04:08:AD:54:D7:30:C0:EB:62:9E:3A:0B:50:D8:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QclkksAECK1U1zDA62KeOgtQ2A8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:04:79:e9:58:05:4f:6c:7f:ac:cc:88:1a:0c:b8:84:dd:86: f0:ac:75:80:1b:d1:05:38:97:0d:00:bc:cc:40:3d:07:57:fa: 4d:70:8b:d8:8a:86:83:ec:6c:ee:2b:44:72:06:a9:0a:92:66: de:84:82:0f:42:ae:99:ea:ac:31:3d:94:85:fb:03:09:b7:8b: 82:f5:f7:83:29:ce:0a:2f:12:0c:53:9a:c2:91:24:22:05:90: e2:f7:c7:55:6e:91:86:37:65:62:2f:c4:c5:57:f2:ee:06:0e: b6:38:98:55:18:03:1d:04:7a:73:ad:d9:2e:29:81:78:0a:18: 2b:30:3a:e2:8d:9e:80:29:71:bb:c3:8e:7d:f9:4e:c8:9f:07: d3:88:9b:aa:db:e3:e9:e8:48:8d:fc:a1:ae:7b:ad:1d:58:51: b2:a0:d4:12:8c:49:ce:2f:32:ca:43:97:d6:0a:5b:57:e9:82: 67:15:bd:f3:08:3d:5d:74:f8:0c:88:17:5f:a8:91:f7:3d:1c: 10:35:97:b2:53:9b:04:b9:68:20:5e:9f:93:13:4e:12:4b:c7: 8c:79:0a:f6:47:ab:0b:08:5d:26:ca:51:b8:d7:79:5d:9c:1c: ee:26:75:65:f9:38:61:e5:61:15:5c:ac:08:40:e5:31:64:72: 3a:62:04:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6Xj6QLOUwex3A4NoJsGeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxYzk2NDkyYzAwNDA4YWQ1NGQ3MzBjMGViNjI5ZTNhMGI1 MGQ4MGYwHhcNMjUxMjE4MTAwMjQ1WhcNMjUxMjE5MTAwMjQ1WjAzMTEwLwYDVQQD EygxNTYxMzUyYzExM2U0MzljOWE1OWFlOTkxNDMxZDZlNWFiZGE3ODgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofdqinofS/0LWi3ACm0KiZAaklPS IMsBy9wfNNz7d95LIjM6bKLwS8oVU7G/6VLi5rB+bqVl/K3QvqcrD+8EizIUiB5g xoeoXV9vVL9Pnf+y5Zct7uG9y9i5I4LQXygAznjgXDc93WwFQF85NZlxa2uG4OZO biBP9mVEKHTNC13qkYaWJ7M1nflPucktg6jnx/ywHreE/zttIGnMU2aaQKg499Ei ib3zE1RJxX5e+zkoQ3GFJaIoybLrvi8zK/h+I6cAt4LCnbf8gwNQKbV6urKX9l6O aXct4CNxsNxZeI3OpEOccWsMOMRkr8w88+bI+6kFQKmbkH/w5nXRjyCwNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBVhNSwRPkOcmlmumRQx1uWr2niBMB8GA1UdIwQY MBaAFEHJZJLABAitVNcwwOtinjoLUNgPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWNsa2tzQUVDSzFVMXpEQTYyS2VPZ3RRMkE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8xOWQwOTAtMTAzYi00M2RiLWIwNzQt YTRlMzdjODY3YjA5LzEvUWNsa2tzQUVDSzFVMXpEQTYyS2VPZ3RRMkE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS8xOWQwOTAtMTAzYi00M2RiLWIwNzQtYTRlMzdjODY3YjA5 LzEvUWNsa2tzQUVDSzFVMXpEQTYyS2VPZ3RRMkE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATQR56VgF T2x/rMyIGgy4hN2G8Kx1gBvRBTiXDQC8zEA9B1f6TXCL2IqGg+xs7itEcgapCpJm 3oSCD0KumeqsMT2UhfsDCbeLgvX3gynOCi8SDFOawpEkIgWQ4vfHVW6RhjdlYi/E xVfy7gYOtjiYVRgDHQR6c63ZLimBeAoYKzA64o2egClxu8OOfflOyJ8H04ibqtvj 6ehIjfyhrnutHVhRsqDUEoxJzi8yykOX1gpbV+mCZxW98wg9XXT4DIgXX6iR9z0c EDWXslObBLloIF6fkxNOEkvHjHkK9kerCwhdJspRuNd5XZwc7iZ1Zfk4YeVhFVys CEDlMWRyOmIEZA== -----END CERTIFICATE-----Generated at Thu Dec 18 14:07:43 2025 by rpki-client