This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft File: Q15Blg1ZDpmATpC5rwNlWExxLHI.mft (raw, json) Hash identifier: kcsORinpkhZh1e3iQjRPbizRx3G4ujUaiDmTjCpcpb8= Subject key identifier: E0:36:B2:86:FA:73:89:4C:39:3F:13:80:43:AE:20:00:5D:F6:36:30 Authority key identifier: 43:5E:41:96:0D:59:0E:99:80:4E:90:B9:AF:03:65:58:4C:71:2C:72 Certificate issuer: /CN=435e41960d590e99804e90b9af0365584c712c72 Certificate serial: 019AF19B4D79441D698B24A06C39B79502EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft Manifest number: 14B7 Signing time: Sat 06 Dec 2025 03:01:18 +0000 Manifest this update: Sat 06 Dec 2025 03:01:18 +0000 Manifest next update: Sun 07 Dec 2025 03:01:18 +0000 Files and hashes: 1: Q15Blg1ZDpmATpC5rwNlWExxLHI.crl (hash: i3EHG2AhTzgMQMj95BfbfzNBNVRXd3OROHzzUJNWgQE=) 2: Qgkf9isvn9G1i53cocvwB25dPG0.roa (hash: 7pOvhNxITVVpr4C2N2+h/b2aAgFP8cFKYE5FjzDD/YQ=) 3: XGxdWNZPiFptk-3w7OILGgkhItU.roa (hash: xf5heCAI8Pty8+MuLnNYj13qa72HA9enfkhk9E22KD4=) 4: XQLqdml-mlBf3Z-90xd5Tk9chkc.roa (hash: nSfERnt4sWaMf0P1jQhY7bLFNZayDQ04cDYTAEFX1MA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.crl rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:4d:79:44:1d:69:8b:24:a0:6c:39:b7:95:02:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=435e41960d590e99804e90b9af0365584c712c72 Validity Not Before: Dec 6 03:01:18 2025 GMT Not After : Dec 7 03:01:18 2025 GMT Subject: CN=e036b286fa73894c393f138043ae20005df63630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:04:26:de:50:0e:ac:5c:15:d6:e4:53:c4:f5: fa:c2:f6:6a:68:60:77:58:3c:86:cb:b6:02:f6:9d: 50:2a:3f:34:9f:9b:da:84:de:80:67:c3:f5:9d:a1: 96:12:4d:90:11:e7:97:96:60:a1:eb:d3:d0:49:f8: 91:56:30:96:ee:b1:7e:15:7f:e9:29:45:b8:0b:53: 2c:de:6d:9b:b4:94:65:fd:05:74:19:b4:d4:d8:79: 82:9c:64:f3:fa:81:df:86:db:28:37:31:a7:cb:a3: 6f:78:6b:6a:45:ba:85:15:9c:6a:a3:5f:fb:0b:07: 86:79:ca:80:89:68:8d:b8:8f:e3:3a:b3:6c:67:0b: 19:32:a6:af:fe:93:a6:27:be:05:80:8a:46:c0:25: 7c:e2:9e:a5:b7:78:dc:30:87:e3:8b:5d:d2:05:2f: 7c:ed:4a:7a:27:7e:e2:69:3b:4a:fd:c0:0f:80:11: 4a:d0:32:3c:89:ed:eb:ce:8b:5a:72:1f:ab:fb:a4: cd:12:bb:a5:50:e0:ed:c5:02:52:9b:3d:39:6b:99: 93:6c:4e:fc:1d:b9:4d:56:3c:ae:6d:dc:9b:14:cf: 71:5f:f1:b5:f8:00:06:0c:92:f6:a9:aa:56:7e:3e: c2:fc:51:39:85:0a:f3:30:a2:80:a7:99:14:f3:14: bf:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:36:B2:86:FA:73:89:4C:39:3F:13:80:43:AE:20:00:5D:F6:36:30 X509v3 Authority Key Identifier: keyid:43:5E:41:96:0D:59:0E:99:80:4E:90:B9:AF:03:65:58:4C:71:2C:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:a2:28:cc:c6:f1:a8:3d:b9:57:1e:ab:9d:26:ab:c4:5d:4e: 42:d3:51:e7:87:84:1d:bb:c0:7c:13:3b:c3:b0:d4:2a:1f:ed: ae:12:db:97:fc:2d:8b:16:4e:29:dd:60:ab:7b:d8:a5:81:41: 7f:3f:57:2a:c6:98:c1:c4:cd:92:e7:0c:14:6a:5a:1b:9f:c2: d5:4e:ba:17:ce:fc:96:2f:81:7b:02:79:6b:09:0a:f4:80:c2: a5:44:f3:66:d1:90:5e:df:88:0a:81:ca:b1:2a:f7:33:f5:c3: fd:f1:80:96:27:10:28:03:a8:32:d6:7a:2a:01:d9:70:34:d9: ba:91:0a:c2:cd:d2:f6:f5:26:10:33:79:c9:48:e7:d2:31:5a: 6e:0f:d8:44:fc:a2:a7:be:fb:c9:21:d7:a4:5e:59:61:b1:0a: 45:43:70:f2:63:fa:a6:5c:e3:59:3d:83:1b:9c:ce:d1:50:ec: eb:90:48:1e:1d:87:0d:62:77:c9:ba:a8:c1:2e:99:d8:50:dd: 94:51:a2:db:79:60:26:67:a5:75:05:33:67:53:d6:a0:f4:af: a4:8d:7e:b9:d1:a6:3f:91:ce:c5:01:ff:d6:84:29:54:51:94: 24:e4:9d:33:8f:3e:c6:09:53:5c:ec:91:25:c8:a1:f0:88:44: f8:5e:eb:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm015RB1piySgbDm3lQLrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzNWU0MTk2MGQ1OTBlOTk4MDRlOTBiOWFmMDM2NTU4NGM3 MTJjNzIwHhcNMjUxMjA2MDMwMTE4WhcNMjUxMjA3MDMwMTE4WjAzMTEwLwYDVQQD EyhlMDM2YjI4NmZhNzM4OTRjMzkzZjEzODA0M2FlMjAwMDVkZjYzNjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAQm3lAOrFwV1uRTxPX6wvZqaGB3 WDyGy7YC9p1QKj80n5vahN6AZ8P1naGWEk2QEeeXlmCh69PQSfiRVjCW7rF+FX/p KUW4C1Ms3m2btJRl/QV0GbTU2HmCnGTz+oHfhtsoNzGny6NveGtqRbqFFZxqo1/7 CweGecqAiWiNuI/jOrNsZwsZMqav/pOmJ74FgIpGwCV84p6lt3jcMIfji13SBS98 7Up6J37iaTtK/cAPgBFK0DI8ie3rzotach+r+6TNErulUODtxQJSmz05a5mTbE78 HblNVjyubdybFM9xX/G1+AAGDJL2qapWfj7C/FE5hQrzMKKAp5kU8xS/YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOA2sob6c4lMOT8TgEOuIABd9jYwMB8GA1UdIwQY MBaAFENeQZYNWQ6ZgE6Qua8DZVhMcSxyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTE1QmxnMVpEcG1BVHBDNXJ3TmxXRXh4TEhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83ZTJmMjgtNWNhZS00ZTZmLWE1ZjAt MDFiYjVmZDUzNGY1LzEvUTE1QmxnMVpEcG1BVHBDNXJ3TmxXRXh4TEhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC83ZTJmMjgtNWNhZS00ZTZmLWE1ZjAtMDFiYjVmZDUzNGY1 LzEvUTE1QmxnMVpEcG1BVHBDNXJ3TmxXRXh4TEhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG6IozMbx qD25Vx6rnSarxF1OQtNR54eEHbvAfBM7w7DUKh/trhLbl/wtixZOKd1gq3vYpYFB fz9XKsaYwcTNkucMFGpaG5/C1U66F878li+BewJ5awkK9IDCpUTzZtGQXt+ICoHK sSr3M/XD/fGAlicQKAOoMtZ6KgHZcDTZupEKws3S9vUmEDN5yUjn0jFabg/YRPyi p777ySHXpF5ZYbEKRUNw8mP6plzjWT2DG5zO0VDs65BIHh2HDWJ3ybqowS6Z2FDd lFGi23lgJmeldQUzZ1PWoPSvpI1+udGmP5HOxQH/1oQpVFGUJOSdM48+xglTXOyR Jcih8IhE+F7riA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:03:18 2025 by rpki-client