This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft File: QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft (raw, json) Hash identifier: LqvzMNbYnox8wB3iCb82VXyY3YouNX5in7K5LQw4E1Y= Subject key identifier: CD:4F:2E:54:3A:2B:DF:23:45:5E:41:B3:84:32:E3:49:FE:47:6F:99 Authority key identifier: 42:56:0F:C1:CF:6B:97:46:67:37:C3:02:71:23:FA:12:0B:19:54:D5 Certificate issuer: /CN=42560fc1cf6b97466737c3027123fa120b1954d5 Certificate serial: 019AF1D1C612E55D8B002884A448143E92D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft Manifest number: 14ED Signing time: Sat 06 Dec 2025 04:00:48 +0000 Manifest this update: Sat 06 Dec 2025 04:00:48 +0000 Manifest next update: Sun 07 Dec 2025 04:00:48 +0000 Files and hashes: 1: QlYPwc9rl0ZnN8MCcSP6EgsZVNU.crl (hash: 6SoY8Usf9da9Ulp8w6Jygu5fkeFi7G82aN9FJRtcSBY=) 2: s2rqpwumhtmvSEX63lF_jSCCIqI.roa (hash: 8m00LdhJd4srRCMsExEiNSzzG4jj/QWLsZ3SSDUCdOo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.crl rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:c6:12:e5:5d:8b:00:28:84:a4:48:14:3e:92:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42560fc1cf6b97466737c3027123fa120b1954d5 Validity Not Before: Dec 6 04:00:48 2025 GMT Not After : Dec 7 04:00:48 2025 GMT Subject: CN=cd4f2e543a2bdf23455e41b38432e349fe476f99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e5:ab:ec:c1:c5:bc:05:64:72:af:b1:bd:4a: c4:16:f0:b2:ee:f1:78:cc:6c:e1:3b:05:7e:2f:ae: b0:6a:f1:94:92:3b:46:0d:e7:66:80:38:4e:d3:ab: e1:b6:8f:a3:d1:a1:53:6f:03:d6:b9:ff:e9:1f:34: f7:da:67:f3:41:53:90:f3:e2:79:a6:de:e9:41:b5: 1e:fa:b2:68:38:51:a1:e7:d0:09:89:7d:e9:03:a4: 9f:cb:a9:50:b3:91:96:31:94:21:92:6d:6a:c9:ed: 14:7b:f5:9e:26:87:cf:10:59:6e:75:a9:94:e5:47: 80:63:b3:5b:b0:52:95:49:aa:9a:b1:24:90:b5:25: 51:8e:5a:82:cc:2a:3f:93:f6:d0:fc:00:71:ca:cf: 76:72:55:2b:24:53:44:4a:4f:6f:3e:6d:93:e5:95: 00:6f:c7:56:d8:16:8a:a7:6b:a7:e8:89:cc:ce:e9: dc:56:d3:db:7f:6b:20:4e:9d:e7:35:57:97:71:50: 68:68:3a:a6:c0:d1:f1:75:ce:94:fe:8a:a4:c9:82: 93:0f:ef:e5:b2:90:24:fd:e8:54:30:09:00:f6:1c: b7:fe:fb:3b:1d:26:92:f6:b1:4f:55:74:d3:3e:9c: dc:d8:c9:5b:c2:fe:47:29:c7:62:b6:a3:20:a9:14: ed:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:4F:2E:54:3A:2B:DF:23:45:5E:41:B3:84:32:E3:49:FE:47:6F:99 X509v3 Authority Key Identifier: keyid:42:56:0F:C1:CF:6B:97:46:67:37:C3:02:71:23:FA:12:0B:19:54:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:90:89:85:a5:60:26:aa:2d:49:d5:d6:d6:8b:51:65:c0:8e: 81:7f:72:45:21:7d:3b:03:90:37:be:db:98:5e:9c:96:e7:d6: 46:cb:c3:e3:c1:c0:db:af:05:15:1a:36:ff:19:42:18:d9:93: 97:9e:b1:96:e2:21:ae:d8:39:2f:15:96:ec:b0:2b:bd:f1:54: a9:20:eb:fe:3e:ef:7d:38:28:2e:a9:dc:4b:cc:b8:9e:85:17: 3f:a1:22:c3:69:e9:fc:f9:50:27:74:e1:ce:de:e4:06:9a:1a: a0:23:6b:c1:6a:b7:b6:c1:05:d3:7f:69:85:3d:68:44:79:a4: 8a:88:d5:d3:24:bc:1c:d6:a4:2b:38:07:14:a5:57:1a:b3:d0: ef:8a:42:f2:91:cf:ea:f6:1a:18:88:9a:f8:13:75:62:ba:02: b3:0c:35:8c:be:05:ed:3a:1b:85:c7:1b:c9:a8:b9:bc:8d:02: c4:81:59:fb:e5:b9:04:6c:5c:46:db:0e:dc:27:fa:66:ec:2b: 26:f3:e5:18:a4:6c:f6:9f:5c:a3:2c:f0:c4:e2:59:28:fb:f2: 58:a5:21:ed:b6:83:bf:ae:88:9b:c9:50:80:4c:82:06:20:b1: 4a:33:ce:bb:f4:57:67:90:b9:99:0f:8a:4d:e9:66:c1:72:1b: c1:f6:fe:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0cYS5V2LACiEpEgUPpLRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNTYwZmMxY2Y2Yjk3NDY2NzM3YzMwMjcxMjNmYTEyMGIx OTU0ZDUwHhcNMjUxMjA2MDQwMDQ4WhcNMjUxMjA3MDQwMDQ4WjAzMTEwLwYDVQQD EyhjZDRmMmU1NDNhMmJkZjIzNDU1ZTQxYjM4NDMyZTM0OWZlNDc2Zjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+Wr7MHFvAVkcq+xvUrEFvCy7vF4 zGzhOwV+L66wavGUkjtGDedmgDhO06vhto+j0aFTbwPWuf/pHzT32mfzQVOQ8+J5 pt7pQbUe+rJoOFGh59AJiX3pA6Sfy6lQs5GWMZQhkm1qye0Ue/WeJofPEFludamU 5UeAY7NbsFKVSaqasSSQtSVRjlqCzCo/k/bQ/ABxys92clUrJFNESk9vPm2T5ZUA b8dW2BaKp2un6InMzuncVtPbf2sgTp3nNVeXcVBoaDqmwNHxdc6U/oqkyYKTD+/l spAk/ehUMAkA9hy3/vs7HSaS9rFPVXTTPpzc2Mlbwv5HKcditqMgqRTtRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM1PLlQ6K98jRV5Bs4Qy40n+R2+ZMB8GA1UdIwQY MBaAFEJWD8HPa5dGZzfDAnEj+hILGVTVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWxZUHdjOXJsMFpuTjhNQ2NTUDZFZ3NaVk5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mYjA3M2YtNmIzOC00ZWNiLWI5NmYt MmMyMDc5ZDkxNmFkLzEvUWxZUHdjOXJsMFpuTjhNQ2NTUDZFZ3NaVk5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9mYjA3M2YtNmIzOC00ZWNiLWI5NmYtMmMyMDc5ZDkxNmFk LzEvUWxZUHdjOXJsMFpuTjhNQ2NTUDZFZ3NaVk5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoJCJhaVg JqotSdXW1otRZcCOgX9yRSF9OwOQN77bmF6clufWRsvD48HA268FFRo2/xlCGNmT l56xluIhrtg5LxWW7LArvfFUqSDr/j7vfTgoLqncS8y4noUXP6Eiw2np/PlQJ3Th zt7kBpoaoCNrwWq3tsEF039phT1oRHmkiojV0yS8HNakKzgHFKVXGrPQ74pC8pHP 6vYaGIia+BN1YroCsww1jL4F7Tobhccbyai5vI0CxIFZ++W5BGxcRtsO3Cf6Zuwr JvPlGKRs9p9coyzwxOJZKPvyWKUh7baDv66Im8lQgEyCBiCxSjPOu/RXZ5C5mQ+K TelmwXIbwfb+Cw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:28 2025 by rpki-client