This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft File: QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft (raw, json) Hash identifier: PxsjKJSt50NEGM98QX2LJWG/Idm+laBYFAQAz2YSh/U= Subject key identifier: B5:C3:0B:24:91:29:4B:62:F9:54:BA:E3:EB:79:44:1E:AC:A3:68:15 Authority key identifier: 41:19:52:04:67:70:F5:4E:8B:E1:FD:7D:67:31:32:26:5A:D7:0F:A8 Certificate issuer: /CN=411952046770f54e8be1fd7d673132265ad70fa8 Certificate serial: 019AF352BB64084B3526DE503B785878B50C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft Manifest number: 0E21 Signing time: Sat 06 Dec 2025 11:01:16 +0000 Manifest this update: Sat 06 Dec 2025 11:01:16 +0000 Manifest next update: Sun 07 Dec 2025 11:01:16 +0000 Files and hashes: 1: QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl (hash: aD0aiQLk9wci44Ph8NzaTupUAh4d5mFgZ9ae89eHcos=) 2: Xpf8O2DfxtSRMYLfH4Jhe7jGcr4.roa (hash: mr8J89/SuXN+JPAXQsryCuEFWqmHZudkRiHUpBMVGnw=) 3: qliDDfSLIfyZKuJ9vwyYrHItz_k.roa (hash: D8mFTN20TsuGjGw8I0yHs9/gZXV7jBDiD7YQatfWrpY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:bb:64:08:4b:35:26:de:50:3b:78:58:78:b5:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411952046770f54e8be1fd7d673132265ad70fa8 Validity Not Before: Dec 6 11:01:16 2025 GMT Not After : Dec 7 11:01:16 2025 GMT Subject: CN=b5c30b2491294b62f954bae3eb79441eaca36815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e4:ea:d1:87:ca:a8:32:00:52:f1:93:8e:1f: cb:cc:26:ce:7c:4f:ce:38:cb:e1:e9:f4:88:16:d6: 52:a5:9d:22:fd:00:e6:9c:2b:65:3b:43:ff:74:fc: 9e:f2:77:ce:7e:ce:33:6b:46:3a:fc:61:b3:a8:ed: 16:07:49:ea:c2:0b:b8:26:be:68:f0:b2:61:49:0c: 01:5e:25:b6:70:53:bd:7d:0c:af:2b:10:05:5c:6a: 2b:af:e1:30:31:f3:2a:9c:75:75:a7:c3:ec:f4:91: 40:75:85:32:26:eb:65:f2:ec:63:66:38:7b:3c:15: 0d:0e:eb:53:b9:79:87:0a:5d:38:ba:5b:5d:ed:b7: 15:4d:cd:a4:3f:75:8e:08:03:42:1e:6e:0f:6b:cb: c1:11:d2:a6:76:99:8a:30:5d:9b:71:c4:a7:98:86: 89:35:46:68:51:96:72:f2:f6:de:b9:9f:79:9b:7c: cc:3d:5c:41:89:97:50:71:da:20:b7:38:28:bb:a6: a7:1a:2c:00:0c:a1:60:b7:f3:7a:87:d3:dc:a7:b7: db:91:90:1d:cf:21:1f:c8:a6:0e:a7:8b:bb:cd:78: cf:84:55:9d:f0:98:29:2e:0e:70:1b:cf:ff:cb:59: 57:8c:ed:b2:ec:ba:a5:e1:2d:0a:c7:d3:3b:df:2c: 58:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:C3:0B:24:91:29:4B:62:F9:54:BA:E3:EB:79:44:1E:AC:A3:68:15 X509v3 Authority Key Identifier: keyid:41:19:52:04:67:70:F5:4E:8B:E1:FD:7D:67:31:32:26:5A:D7:0F:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:4f:76:3d:3e:9c:b5:63:0a:8e:32:c8:8f:53:5b:d8:1f:6b: b3:ca:25:2c:1b:55:34:e2:87:4f:80:8b:09:4f:67:2e:32:98: e3:dc:b3:cb:dc:75:cd:d4:f2:39:d2:43:56:8c:d5:4b:5d:0b: b5:48:a0:c8:09:01:df:80:b4:7b:7e:be:c7:7f:cc:7b:19:a7: a3:d8:af:0e:a3:87:14:c8:f7:34:72:b6:9f:bf:50:f7:6f:df: 26:7a:80:ac:e6:1c:95:9f:20:44:eb:22:56:4d:aa:cb:aa:9e: 44:02:b3:9c:ca:fa:45:1e:19:19:4e:33:55:14:80:95:6a:0d: 19:d2:53:32:95:4d:95:f1:65:05:e9:3e:76:a1:6f:8b:a8:79: 2a:fd:10:01:2e:ee:a9:cd:ae:57:6f:7f:ea:77:00:c9:55:e1: 6a:87:da:b1:21:2d:ea:e1:f7:00:03:87:63:82:aa:e7:ce:98: f2:f5:5f:0e:4a:19:37:c0:16:d1:f4:ef:93:51:90:06:f1:d7: 37:32:f0:f6:4f:93:36:0a:ee:b4:6a:9a:ae:dc:ce:bc:2f:9a: c7:f0:b6:d3:6f:e7:1d:dc:ce:7f:2e:f2:29:50:0a:be:55:ef: c5:4b:e4:bc:4e:ce:38:e1:db:5e:3c:a0:d8:60:c7:e0:79:5c: fc:87:6f:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUrtkCEs1Jt5QO3hYeLUMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMTk1MjA0Njc3MGY1NGU4YmUxZmQ3ZDY3MzEzMjI2NWFk NzBmYTgwHhcNMjUxMjA2MTEwMTE2WhcNMjUxMjA3MTEwMTE2WjAzMTEwLwYDVQQD EyhiNWMzMGIyNDkxMjk0YjYyZjk1NGJhZTNlYjc5NDQxZWFjYTM2ODE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOTq0YfKqDIAUvGTjh/LzCbOfE/O OMvh6fSIFtZSpZ0i/QDmnCtlO0P/dPye8nfOfs4za0Y6/GGzqO0WB0nqwgu4Jr5o 8LJhSQwBXiW2cFO9fQyvKxAFXGorr+EwMfMqnHV1p8Ps9JFAdYUyJutl8uxjZjh7 PBUNDutTuXmHCl04ultd7bcVTc2kP3WOCANCHm4Pa8vBEdKmdpmKMF2bccSnmIaJ NUZoUZZy8vbeuZ95m3zMPVxBiZdQcdogtzgou6anGiwADKFgt/N6h9Pcp7fbkZAd zyEfyKYOp4u7zXjPhFWd8JgpLg5wG8//y1lXjO2y7Lql4S0Kx9M73yxYMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLXDCySRKUti+VS64+t5RB6so2gVMB8GA1UdIwQY MBaAFEEZUgRncPVOi+H9fWcxMiZa1w+oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVJsU0JHZHc5VTZMNGYxOVp6RXlKbHJYRDZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zOTUwZDQtOWQ3Mi00ZmYwLTgxZGUt OGI5MWJjNjFlN2MzLzEvUVJsU0JHZHc5VTZMNGYxOVp6RXlKbHJYRDZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zOTUwZDQtOWQ3Mi00ZmYwLTgxZGUtOGI5MWJjNjFlN2Mz LzEvUVJsU0JHZHc5VTZMNGYxOVp6RXlKbHJYRDZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZE92PT6c tWMKjjLIj1Nb2B9rs8olLBtVNOKHT4CLCU9nLjKY49yzy9x1zdTyOdJDVozVS10L tUigyAkB34C0e36+x3/Mexmno9ivDqOHFMj3NHK2n79Q92/fJnqArOYclZ8gROsi Vk2qy6qeRAKznMr6RR4ZGU4zVRSAlWoNGdJTMpVNlfFlBek+dqFvi6h5Kv0QAS7u qc2uV29/6ncAyVXhaofasSEt6uH3AAOHY4Kq586Y8vVfDkoZN8AW0fTvk1GQBvHX NzLw9k+TNgrutGqartzOvC+ax/C202/nHdzOfy7yKVAKvlXvxUvkvE7OOOHbXjyg 2GDH4Hlc/IdvSA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:34:09 2025 by rpki-client