This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.mft File: qltGOxeiXraN6recsPmJ79fkihU.mft (raw, json) Hash identifier: iA8jhsqsS8JHxYxr6ESXv5dVw/Bt9Z5P01tBlh35I+w= Subject key identifier: 61:29:86:7E:47:EB:29:B3:AD:DA:2F:CB:30:96:20:04:12:01:3C:6B Authority key identifier: AA:5B:46:3B:17:A2:5E:B6:8D:EA:B7:9C:B0:F9:89:EF:D7:E4:8A:15 Certificate issuer: /CN=aa5b463b17a25eb68deab79cb0f989efd7e48a15 Certificate serial: 019AF16411ED7E71CF29821EB190A6B908E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qltGOxeiXraN6recsPmJ79fkihU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.mft Manifest number: 0E Signing time: Sat 06 Dec 2025 02:00:58 +0000 Manifest this update: Sat 06 Dec 2025 02:00:58 +0000 Manifest next update: Sun 07 Dec 2025 02:00:58 +0000 Files and hashes: 1: qltGOxeiXraN6recsPmJ79fkihU.crl (hash: wdV3q+OlzNy4EmSPn+fCqDxZhBArWo3jMUe7f4hv1dw=) 2: snjhD4ZbdnCjhHGNejLaziB-EQw.asa (hash: k4YrVwNF0xC0R0c1Vt2SsaD9GQCIRybl7XtCYC8QQBE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.mft rsync://rpki.ripe.net/repository/DEFAULT/qltGOxeiXraN6recsPmJ79fkihU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:11:ed:7e:71:cf:29:82:1e:b1:90:a6:b9:08:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa5b463b17a25eb68deab79cb0f989efd7e48a15 Validity Not Before: Dec 6 02:00:58 2025 GMT Not After : Dec 7 02:00:58 2025 GMT Subject: CN=6129867e47eb29b3adda2fcb3096200412013c6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:da:39:07:6c:5d:a2:47:8a:be:d8:f3:b2:48: 58:e7:64:b0:cd:87:3a:94:da:58:99:72:8f:1a:49: 6a:aa:8f:4b:34:49:5b:86:37:0f:6e:77:84:05:a4: 2f:ee:c2:58:d2:c3:36:cb:cf:9c:c1:ea:42:33:60: e9:c6:1f:91:c1:47:b6:0b:57:c5:d1:3e:17:6a:52: bb:b8:6c:3e:a5:53:70:a3:ae:85:f9:50:a4:3c:5a: 12:33:31:e9:2b:60:f2:f1:b2:87:62:79:ab:73:fb: a7:33:10:48:ec:d7:7b:1f:97:0f:eb:cf:c7:f3:e5: 0a:2f:d7:81:a2:2c:bd:ae:3c:cb:cc:9f:9c:d6:6b: ec:22:e7:05:d2:31:fa:89:4b:a8:7c:78:fe:8a:18: 23:bb:65:de:7b:75:ff:68:f4:92:c6:3d:e8:75:03: 49:57:f4:69:34:6f:50:68:90:05:27:3b:7e:cd:5e: 4f:50:b2:e5:84:84:44:da:c9:25:2c:5c:dc:f8:39: 2d:c3:f1:0c:cc:ae:11:f0:b2:70:8a:bd:8e:70:ec: 11:5c:dc:cc:ad:e8:f6:74:5f:77:d3:39:bd:a5:7c: 1b:71:ef:88:28:f6:a0:eb:9b:fc:53:36:c8:7a:08: b2:44:6c:27:e2:7d:00:79:75:86:c0:01:d0:fa:2d: 42:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:29:86:7E:47:EB:29:B3:AD:DA:2F:CB:30:96:20:04:12:01:3C:6B X509v3 Authority Key Identifier: keyid:AA:5B:46:3B:17:A2:5E:B6:8D:EA:B7:9C:B0:F9:89:EF:D7:E4:8A:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qltGOxeiXraN6recsPmJ79fkihU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:fe:0f:b1:98:34:8b:14:34:1c:88:22:84:95:13:db:51:72: f9:dd:0d:0b:b6:b4:16:7e:b8:11:1f:76:d9:a9:9b:93:93:d2: 41:b6:1b:fb:c6:26:cc:31:3e:c9:c0:3a:b0:81:bb:73:01:5e: 80:9a:d0:05:72:94:83:8b:fb:20:8b:43:0b:70:6a:b0:e8:74: 16:6c:97:5d:c1:25:3d:5d:35:4f:ad:86:6c:78:67:16:b7:f9: 0a:ff:f5:e1:03:41:36:7b:92:60:2e:1c:26:e1:34:0a:4b:a0: 4a:04:ca:9e:74:5e:4a:20:01:79:32:ea:bd:65:71:e6:64:21: 5c:ee:1a:77:42:f2:a2:ba:eb:e4:51:0b:d3:9b:ca:73:22:38: e4:a9:07:6e:1c:3c:3e:fe:98:8e:c9:84:ff:c1:67:27:b6:1e: 1f:84:82:41:64:7b:fd:5f:1c:ed:49:fe:5a:ca:a6:81:3f:a7: 57:3d:ce:74:c4:d8:43:9c:cf:6e:ac:73:52:4a:81:6a:4f:17: df:bd:9c:be:f3:fd:fc:bd:45:f1:42:28:94:cf:65:9e:5d:34: 13:c7:0a:18:38:6b:45:4f:f0:6e:a3:31:6c:25:ed:a9:0e:64: 8f:d2:97:8c:48:3a:53:8c:ab:bc:5b:ec:93:ec:d7:30:f9:68: 0f:44:6c:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZBHtfnHPKYIesZCmuQjjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNWI0NjNiMTdhMjVlYjY4ZGVhYjc5Y2IwZjk4OWVmZDdl NDhhMTUwHhcNMjUxMjA2MDIwMDU4WhcNMjUxMjA3MDIwMDU4WjAzMTEwLwYDVQQD Eyg2MTI5ODY3ZTQ3ZWIyOWIzYWRkYTJmY2IzMDk2MjAwNDEyMDEzYzZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9o5B2xdokeKvtjzskhY52SwzYc6 lNpYmXKPGklqqo9LNElbhjcPbneEBaQv7sJY0sM2y8+cwepCM2Dpxh+RwUe2C1fF 0T4XalK7uGw+pVNwo66F+VCkPFoSMzHpK2Dy8bKHYnmrc/unMxBI7Nd7H5cP68/H 8+UKL9eBoiy9rjzLzJ+c1mvsIucF0jH6iUuofHj+ihgju2Xee3X/aPSSxj3odQNJ V/RpNG9QaJAFJzt+zV5PULLlhIRE2sklLFzc+Dktw/EMzK4R8LJwir2OcOwRXNzM rej2dF930zm9pXwbce+IKPag65v8UzbIegiyRGwn4n0AeXWGwAHQ+i1CVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGEphn5H6ymzrdovyzCWIAQSATxrMB8GA1UdIwQY MBaAFKpbRjsXol62jeq3nLD5ie/X5IoVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWx0R094ZWlYcmFONnJlY3NQbUo3OWZraWhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8xYmRhZWItMmYxYy00ZDhjLWI0YmIt YzdlNzExNWY0YTJlLzEvcWx0R094ZWlYcmFONnJlY3NQbUo3OWZraWhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8xYmRhZWItMmYxYy00ZDhjLWI0YmItYzdlNzExNWY0YTJl LzEvcWx0R094ZWlYcmFONnJlY3NQbUo3OWZraWhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeP4PsZg0 ixQ0HIgihJUT21Fy+d0NC7a0Fn64ER922ambk5PSQbYb+8YmzDE+ycA6sIG7cwFe gJrQBXKUg4v7IItDC3BqsOh0FmyXXcElPV01T62GbHhnFrf5Cv/14QNBNnuSYC4c JuE0CkugSgTKnnReSiABeTLqvWVx5mQhXO4ad0Lyorrr5FEL05vKcyI45KkHbhw8 Pv6YjsmE/8FnJ7YeH4SCQWR7/V8c7Un+WsqmgT+nVz3OdMTYQ5zPbqxzUkqBak8X 372cvvP9/L1F8UIolM9lnl00E8cKGDhrRU/wbqMxbCXtqQ5kj9KXjEg6U4yrvFvs k+zXMPloD0Rstw== -----END CERTIFICATE-----Generated at Sat Dec 6 05:37:23 2025 by rpki-client