This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.mft File: QlbgyzjNYSXO4U5Jcii4SQodQOk.mft (raw, json) Hash identifier: corWMaOQrrz9b7PWrxidBxiwCXq+nA0rgw+68QHzT6Y= Subject key identifier: E8:D9:15:94:6F:C9:C2:A1:72:34:B8:A0:AF:11:56:76:FB:10:EB:74 Authority key identifier: 42:56:E0:CB:38:CD:61:25:CE:E1:4E:49:72:28:B8:49:0A:1D:40:E9 Certificate issuer: /CN=4256e0cb38cd6125cee14e497228b8490a1d40e9 Certificate serial: 019AF209006C5BD8EDDD96F50EC395AB84BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlbgyzjNYSXO4U5Jcii4SQodQOk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.mft Manifest number: 06BD Signing time: Sat 06 Dec 2025 05:01:07 +0000 Manifest this update: Sat 06 Dec 2025 05:01:07 +0000 Manifest next update: Sun 07 Dec 2025 05:01:07 +0000 Files and hashes: 1: QlbgyzjNYSXO4U5Jcii4SQodQOk.crl (hash: FJgNif4VuJyJEOUv+bnq7Hq3HHkIXd+3zflp66xlw84=) 2: ekPIeumjzc0aQ-0qnlrmTiVhDJI.roa (hash: MI/BYhVlkTAuExjmOk0h+DG2/B/CqzwrvfdzA0OS10s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.crl rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.mft rsync://rpki.ripe.net/repository/DEFAULT/QlbgyzjNYSXO4U5Jcii4SQodQOk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:00:6c:5b:d8:ed:dd:96:f5:0e:c3:95:ab:84:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4256e0cb38cd6125cee14e497228b8490a1d40e9 Validity Not Before: Dec 6 05:01:07 2025 GMT Not After : Dec 7 05:01:07 2025 GMT Subject: CN=e8d915946fc9c2a17234b8a0af115676fb10eb74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:dd:8f:a9:3d:f6:d5:03:4d:d3:02:a7:55:34: ce:d2:23:32:8f:a4:1b:29:4c:d1:4e:18:14:af:94: 69:60:6d:41:0a:c7:5e:f4:09:73:dd:71:bd:1d:c9: 67:0c:da:de:ee:56:f0:30:29:d2:52:32:e4:af:9d: d8:08:5c:88:f8:16:7f:17:ac:18:f2:dc:ff:68:94: b3:16:21:8d:f9:6e:bc:3b:51:7e:fb:7a:8a:b0:2d: e6:a3:2c:30:67:e7:cc:f8:51:a7:2d:6b:37:c7:ea: 58:47:b8:b9:fd:59:61:43:8e:c1:9e:82:e8:ae:83: 21:c1:cc:df:cf:f0:35:a8:9b:44:45:6e:ee:28:bc: 49:00:8f:ea:1f:0f:d2:21:56:ea:d8:4c:a3:84:72: b3:c7:67:0d:8c:18:c0:9e:9e:83:d8:54:12:39:83: bb:49:23:ad:22:10:24:12:7d:83:8c:bd:41:3f:26: b4:e5:08:92:25:67:ea:9f:7b:16:b6:19:1e:2f:f2: 1d:2d:9d:d4:86:3a:34:b7:37:83:0e:ba:a1:a3:a6: c9:13:6f:ea:23:98:62:59:87:b6:ce:f5:f4:cc:b5: ba:c1:96:da:a8:bb:fb:d4:97:29:38:b3:b8:24:af: ab:13:6e:8b:89:a0:1d:34:8f:39:e8:b9:c9:11:3f: c5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D9:15:94:6F:C9:C2:A1:72:34:B8:A0:AF:11:56:76:FB:10:EB:74 X509v3 Authority Key Identifier: keyid:42:56:E0:CB:38:CD:61:25:CE:E1:4E:49:72:28:B8:49:0A:1D:40:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlbgyzjNYSXO4U5Jcii4SQodQOk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:0b:2b:13:09:c0:2b:af:a4:27:3c:04:75:eb:68:b3:33:6e: d8:07:eb:48:c2:76:8d:2c:db:fc:b0:f3:f8:aa:1b:89:af:d2: ab:4c:f5:1d:2d:80:9a:b2:68:ea:8a:cc:c9:b4:d0:aa:ed:75: 5b:7d:7b:5d:8e:16:71:73:94:cb:a2:83:92:9c:ed:12:fb:2a: 03:71:8a:f5:4a:be:33:85:e1:ef:d1:09:8b:e9:7c:a0:78:5b: 3a:54:8c:09:c7:be:10:15:74:07:85:d2:be:6a:30:89:c4:ee: 8a:0f:31:6b:1a:17:5c:fd:da:4c:c0:16:ce:d3:e0:a9:87:d0: 9a:2d:b2:34:5b:7c:61:5e:a4:75:59:e0:52:0b:39:86:94:21: d6:03:b0:b6:85:f9:f0:13:ce:f5:d4:1a:1a:32:59:82:fa:0b: 54:f1:81:f3:98:35:7c:8e:4e:bf:fe:7e:8d:85:29:af:4f:ee: ad:3c:fa:c8:ba:38:18:21:f6:72:61:26:c8:5e:6e:8c:1d:c6: 3f:0a:d8:21:da:07:2a:40:4d:95:a5:9a:1d:9d:40:c7:61:a4: 44:fa:ea:c2:50:a7:31:00:c4:f7:5c:b0:8d:b3:13:dc:5e:0f: b1:c9:a8:72:9c:43:05:9e:b9:6b:00:d2:74:37:97:c4:60:1e: 3c:6e:6c:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCQBsW9jt3Zb1DsOVq4S+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNTZlMGNiMzhjZDYxMjVjZWUxNGU0OTcyMjhiODQ5MGEx ZDQwZTkwHhcNMjUxMjA2MDUwMTA3WhcNMjUxMjA3MDUwMTA3WjAzMTEwLwYDVQQD EyhlOGQ5MTU5NDZmYzljMmExNzIzNGI4YTBhZjExNTY3NmZiMTBlYjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm92PqT321QNN0wKnVTTO0iMyj6Qb KUzRThgUr5RpYG1BCsde9Alz3XG9HclnDNre7lbwMCnSUjLkr53YCFyI+BZ/F6wY 8tz/aJSzFiGN+W68O1F++3qKsC3moywwZ+fM+FGnLWs3x+pYR7i5/VlhQ47BnoLo roMhwczfz/A1qJtERW7uKLxJAI/qHw/SIVbq2EyjhHKzx2cNjBjAnp6D2FQSOYO7 SSOtIhAkEn2DjL1BPya05QiSJWfqn3sWthkeL/IdLZ3Uhjo0tzeDDrqho6bJE2/q I5hiWYe2zvX0zLW6wZbaqLv71JcpOLO4JK+rE26LiaAdNI856LnJET/F7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOjZFZRvycKhcjS4oK8RVnb7EOt0MB8GA1UdIwQY MBaAFEJW4Ms4zWElzuFOSXIouEkKHUDpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWxiZ3l6ak5ZU1hPNFU1SmNpaTRTUW9kUU9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9jMzE0ZjQtYjFhYy00MjZmLThmMjEt YTVlODUwYjZhMWJjLzEvUWxiZ3l6ak5ZU1hPNFU1SmNpaTRTUW9kUU9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9jMzE0ZjQtYjFhYy00MjZmLThmMjEtYTVlODUwYjZhMWJj LzEvUWxiZ3l6ak5ZU1hPNFU1SmNpaTRTUW9kUU9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQwsrEwnA K6+kJzwEdetoszNu2AfrSMJ2jSzb/LDz+Kobia/Sq0z1HS2AmrJo6orMybTQqu11 W317XY4WcXOUy6KDkpztEvsqA3GK9Uq+M4Xh79EJi+l8oHhbOlSMCce+EBV0B4XS vmowicTuig8xaxoXXP3aTMAWztPgqYfQmi2yNFt8YV6kdVngUgs5hpQh1gOwtoX5 8BPO9dQaGjJZgvoLVPGB85g1fI5Ov/5+jYUpr0/urTz6yLo4GCH2cmEmyF5ujB3G PwrYIdoHKkBNlaWaHZ1Ax2GkRPrqwlCnMQDE91ywjbMT3F4PscmocpxDBZ65awDS dDeXxGAePG5sFg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:15:29 2025 by rpki-client