This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft File: QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft (raw, json) Hash identifier: UbFw3UF4jnGqT56EDL2yJ82sUSAYnn0kQ8UdQnoCRz4= Subject key identifier: 85:55:5F:57:94:9E:B9:1E:91:00:15:DA:83:E5:D9:3B:05:B1:AB:10 Authority key identifier: 42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF Certificate issuer: /CN=42512561fc4ee54b799c5af428fffbcbafd454ef Certificate serial: 019AF2ADBC8469396035F406CC6FD6F26450 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft Manifest number: 149E Signing time: Sat 06 Dec 2025 08:01:03 +0000 Manifest this update: Sat 06 Dec 2025 08:01:03 +0000 Manifest next update: Sun 07 Dec 2025 08:01:03 +0000 Files and hashes: 1: F6ObM6UnximfbwiH1YL38MiUlBY.roa (hash: FMTxgNBaoS8PjWTC2HJz86nipqDf/pRuOEnb+E3AC9c=) 2: QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl (hash: GScySQzwehW7DgZA5CzaDQDnq3B1lvEHazW7sZIIMeE=) 3: sf13oGu2DAluNtQ_y1zSmgQAeHE.roa (hash: gqTUmbOHfz421/G+vBG6eJTQ7lB+mn9m4coW+T9SV2g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:bc:84:69:39:60:35:f4:06:cc:6f:d6:f2:64:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42512561fc4ee54b799c5af428fffbcbafd454ef Validity Not Before: Dec 6 08:01:03 2025 GMT Not After : Dec 7 08:01:03 2025 GMT Subject: CN=85555f57949eb91e910015da83e5d93b05b1ab10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e5:e8:a4:95:70:e2:61:f9:0f:52:3f:07:96: 4c:04:45:4f:8c:b2:24:8b:54:34:1e:4d:92:ee:f5: a5:2c:1e:83:f3:2e:ed:40:76:0a:64:1e:a1:33:3b: 4b:e1:18:e9:85:f0:00:ce:ea:41:18:d5:89:4e:e6: 38:93:c3:c4:73:a7:62:65:ef:d8:71:62:2a:f7:61: 15:63:95:c3:33:99:95:d4:31:e7:03:9d:0c:c3:19: 4e:4e:e0:f4:e9:a6:e9:f7:87:3d:7b:25:c4:b6:e1: f9:ff:16:90:93:f2:e2:f4:64:d1:4d:23:35:df:e2: d4:8c:c9:00:0a:d9:cc:5c:f9:ec:b9:69:0d:41:9b: 66:7b:81:1d:81:5e:bc:61:bc:27:b5:71:96:44:2a: 9d:a4:e4:51:fa:82:a6:73:bf:46:41:fa:86:41:55: ec:a0:80:cc:bc:76:0a:fc:88:cc:a0:7d:19:11:12: 65:25:7e:d5:e6:fa:dc:56:b6:95:bc:02:0e:0c:cb: c1:ae:d3:cb:14:a2:a1:91:62:85:c2:99:1a:f3:eb: 50:9c:d1:35:60:71:83:65:49:ef:cd:77:3c:c4:f5: 23:0e:0c:f8:5a:58:c8:68:96:c7:6d:a8:e4:22:67: 85:97:68:45:5c:e9:0c:1d:29:ba:1f:02:9f:26:51: 3c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:55:5F:57:94:9E:B9:1E:91:00:15:DA:83:E5:D9:3B:05:B1:AB:10 X509v3 Authority Key Identifier: keyid:42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:8b:bf:62:a5:40:1c:1f:7d:2a:7c:f0:ce:bd:ce:77:bd:43: 2e:1d:0b:2f:c4:f7:0b:a8:d2:f1:03:0d:69:5c:af:2c:39:8c: 62:b2:1e:39:9e:6d:57:31:46:5c:35:35:95:a3:24:8e:2d:92: 9c:e2:84:22:9c:53:82:03:59:01:7c:61:d6:48:b4:6b:f8:25: b4:0a:87:b8:29:f8:b0:1c:d5:aa:01:93:ca:55:f7:f0:9f:8f: 70:2f:59:14:eb:f6:65:5c:87:cd:8d:90:a6:94:16:bd:f1:3d: 2c:33:61:7d:9b:3d:03:76:6d:38:41:30:d8:2d:8b:f4:0f:88: 86:bb:ad:b1:f2:58:6b:8e:0f:a7:96:6c:8d:b8:cf:18:e9:19: 5b:62:fb:9b:50:0c:e3:84:4b:48:ec:d7:cd:2a:f0:e8:4c:58: 70:52:25:65:28:9e:f8:20:6c:ce:0b:47:3d:98:e5:7d:19:07: f8:99:a2:25:59:a9:00:53:6b:b5:2b:43:fd:1c:a0:d2:1b:1e: 04:af:44:87:07:cf:cc:87:7a:0b:9e:d1:c7:88:e0:d4:a1:b7: 56:2e:d9:fb:8a:5a:5d:98:66:00:3a:ef:58:56:e9:31:7c:b5: 5a:09:80:c2:07:76:7e:ea:10:f4:a1:f2:5b:cb:0b:db:66:21: 85:f0:14:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrbyEaTlgNfQGzG/W8mRQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNTEyNTYxZmM0ZWU1NGI3OTljNWFmNDI4ZmZmYmNiYWZk NDU0ZWYwHhcNMjUxMjA2MDgwMTAzWhcNMjUxMjA3MDgwMTAzWjAzMTEwLwYDVQQD Eyg4NTU1NWY1Nzk0OWViOTFlOTEwMDE1ZGE4M2U1ZDkzYjA1YjFhYjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOXopJVw4mH5D1I/B5ZMBEVPjLIk i1Q0Hk2S7vWlLB6D8y7tQHYKZB6hMztL4RjphfAAzupBGNWJTuY4k8PEc6diZe/Y cWIq92EVY5XDM5mV1DHnA50MwxlOTuD06abp94c9eyXEtuH5/xaQk/Li9GTRTSM1 3+LUjMkACtnMXPnsuWkNQZtme4EdgV68YbwntXGWRCqdpORR+oKmc79GQfqGQVXs oIDMvHYK/IjMoH0ZERJlJX7V5vrcVraVvAIODMvBrtPLFKKhkWKFwpka8+tQnNE1 YHGDZUnvzXc8xPUjDgz4WljIaJbHbajkImeFl2hFXOkMHSm6HwKfJlE8SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIVVX1eUnrkekQAV2oPl2TsFsasQMB8GA1UdIwQY MBaAFEJRJWH8TuVLeZxa9Cj/+8uv1FTvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWxFbFlmeE81VXQ1bkZyMEtQXzd5Nl9VVk84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9iODhjODYtOTYyOS00M2M2LTgyMWUt N2E3MmUyNmM4OTE4LzEvUWxFbFlmeE81VXQ1bkZyMEtQXzd5Nl9VVk84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9iODhjODYtOTYyOS00M2M2LTgyMWUtN2E3MmUyNmM4OTE4 LzEvUWxFbFlmeE81VXQ1bkZyMEtQXzd5Nl9VVk84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfIu/YqVA HB99Knzwzr3Od71DLh0LL8T3C6jS8QMNaVyvLDmMYrIeOZ5tVzFGXDU1laMkji2S nOKEIpxTggNZAXxh1ki0a/gltAqHuCn4sBzVqgGTylX38J+PcC9ZFOv2ZVyHzY2Q ppQWvfE9LDNhfZs9A3ZtOEEw2C2L9A+IhrutsfJYa44Pp5ZsjbjPGOkZW2L7m1AM 44RLSOzXzSrw6ExYcFIlZSie+CBszgtHPZjlfRkH+JmiJVmpAFNrtStD/Ryg0hse BK9EhwfPzId6C57Rx4jg1KG3Vi7Z+4paXZhmADrvWFbpMXy1WgmAwgd2fuoQ9KHy W8sL22YhhfAUmQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:20:38 2025 by rpki-client