This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft File: Qlivk-QTnPOem0pw4UpamyqOth4.mft (raw, json) Hash identifier: flB1f1+QMvvPJ4cTLerWTnENlwXsDjLlt2YPJVob4sU= Subject key identifier: EA:8D:F1:5C:48:4C:71:0B:DA:1A:9F:C3:47:57:AC:80:C1:9C:B7:65 Authority key identifier: 42:58:AF:93:E4:13:9C:F3:9E:9B:4A:70:E1:4A:5A:9B:2A:8E:B6:1E Certificate issuer: /CN=4258af93e4139cf39e9b4a70e14a5a9b2a8eb61e Certificate serial: 019AF31D3851F0C8A005C3C1A3C6C6F6B9CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qlivk-QTnPOem0pw4UpamyqOth4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 10:02:49 +0000 Manifest this update: Sat 06 Dec 2025 10:02:49 +0000 Manifest next update: Sun 07 Dec 2025 10:02:49 +0000 Files and hashes: 1: Qlivk-QTnPOem0pw4UpamyqOth4.crl (hash: IqYKaZDjjfiuKUzUyOOt3esxfAJytUyUyFVw3fNt02w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.crl rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft rsync://rpki.ripe.net/repository/DEFAULT/Qlivk-QTnPOem0pw4UpamyqOth4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:38:51:f0:c8:a0:05:c3:c1:a3:c6:c6:f6:b9:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4258af93e4139cf39e9b4a70e14a5a9b2a8eb61e Validity Not Before: Dec 6 10:02:49 2025 GMT Not After : Dec 7 10:02:49 2025 GMT Subject: CN=ea8df15c484c710bda1a9fc34757ac80c19cb765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:99:f2:b1:af:e1:4f:f2:95:b6:92:b4:f3:fe: e7:e6:7e:f5:6c:bb:29:29:33:ea:9e:83:26:c0:30: 3f:9b:d9:53:56:4e:7e:ba:8e:61:39:0d:37:cf:43: cf:c6:fb:f5:42:c7:60:7d:a8:ec:b0:a8:bd:5c:ea: db:55:1f:00:b1:3f:bc:e2:38:41:c6:2d:22:c8:50: a8:1b:57:7c:a1:5c:d0:c2:52:b3:fd:af:ff:87:06: 21:e9:9e:85:e4:d9:6a:1f:20:9f:cf:d3:27:83:31: d2:48:38:df:ae:f0:f0:02:1a:53:64:ac:ac:2f:80: da:63:ba:87:6e:e0:d0:1a:d1:cf:c4:ec:22:c1:43: cb:da:17:0b:be:cc:bf:46:48:32:18:2e:3b:b5:ff: 27:e2:58:33:3d:67:cd:bf:74:97:11:e0:80:88:a2: f1:75:42:de:cf:45:b7:c0:d6:c7:26:84:0b:1b:76: 61:ef:94:b1:79:6b:e7:7e:01:37:e8:4f:2c:58:9e: 2f:00:29:8f:a9:68:1c:d8:22:40:6a:15:9d:d7:3a: 33:98:c2:e8:03:80:04:cb:8f:ea:ef:2c:15:ae:67: bf:0f:d1:ff:3d:a1:82:9a:cb:7b:0d:d0:b7:9d:7e: e3:0a:d4:35:64:0f:98:09:ae:04:04:f2:6b:e5:50: 89:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:8D:F1:5C:48:4C:71:0B:DA:1A:9F:C3:47:57:AC:80:C1:9C:B7:65 X509v3 Authority Key Identifier: keyid:42:58:AF:93:E4:13:9C:F3:9E:9B:4A:70:E1:4A:5A:9B:2A:8E:B6:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qlivk-QTnPOem0pw4UpamyqOth4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:1b:c5:c1:bd:1b:f8:52:d6:1b:8d:ae:87:84:c4:78:f8:e3: 79:a4:09:4e:12:34:49:77:5d:5c:49:f2:33:85:2d:7f:33:e0: d4:2b:e1:5f:7f:6b:00:c3:88:a2:2b:d4:56:b6:e3:88:74:e9: 23:67:fb:99:33:7b:5e:e8:c0:29:92:e0:67:61:99:4e:37:66: 75:98:d4:f0:91:ab:07:32:b9:10:7b:a7:2b:af:a7:52:f7:2d: 1b:ae:00:72:e5:21:b0:ee:30:2d:b2:ca:f4:9a:c7:d9:47:e3: d7:5a:d1:60:60:8d:fe:7d:10:5e:df:b0:e2:43:37:42:13:57: 53:fc:f6:02:88:73:6a:c4:b2:96:e6:5b:87:2c:0a:d3:62:c0: e3:4d:a8:77:81:c9:ad:62:ec:9d:99:83:02:eb:e9:60:bc:e0: 45:67:83:e7:27:56:d2:74:08:59:11:e6:68:eb:26:4c:9d:dd: fc:0d:a7:6d:e9:2d:1a:0a:06:cc:bf:b0:35:0e:1c:96:c1:a8: 75:f5:f0:d3:36:1f:15:d4:32:a6:57:0d:cc:fc:07:76:21:33: c1:22:f3:86:21:bc:df:a1:45:37:ed:3d:be:d9:11:6c:3f:a5: 9b:28:1d:a2:fd:89:cf:5b:fe:ea:3e:b0:e3:d6:a9:08:ba:e8: fc:d3:1d:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHThR8MigBcPBo8bG9rnKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNThhZjkzZTQxMzljZjM5ZTliNGE3MGUxNGE1YTliMmE4 ZWI2MWUwHhcNMjUxMjA2MTAwMjQ5WhcNMjUxMjA3MTAwMjQ5WjAzMTEwLwYDVQQD EyhlYThkZjE1YzQ4NGM3MTBiZGExYTlmYzM0NzU3YWM4MGMxOWNiNzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5nysa/hT/KVtpK08/7n5n71bLsp KTPqnoMmwDA/m9lTVk5+uo5hOQ03z0PPxvv1QsdgfajssKi9XOrbVR8AsT+84jhB xi0iyFCoG1d8oVzQwlKz/a//hwYh6Z6F5NlqHyCfz9MngzHSSDjfrvDwAhpTZKys L4DaY7qHbuDQGtHPxOwiwUPL2hcLvsy/RkgyGC47tf8n4lgzPWfNv3SXEeCAiKLx dULez0W3wNbHJoQLG3Zh75SxeWvnfgE36E8sWJ4vACmPqWgc2CJAahWd1zozmMLo A4AEy4/q7ywVrme/D9H/PaGCmst7DdC3nX7jCtQ1ZA+YCa4EBPJr5VCJPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOqN8VxITHEL2hqfw0dXrIDBnLdlMB8GA1UdIwQY MBaAFEJYr5PkE5zznptKcOFKWpsqjrYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWxpdmstUVRuUE9lbTBwdzRVcGFteXFPdGg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81OTJhZGEtOWZiNS00MTExLWI3YWYt YWUxZjNlNDkwYzY5LzEvUWxpdmstUVRuUE9lbTBwdzRVcGFteXFPdGg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS81OTJhZGEtOWZiNS00MTExLWI3YWYtYWUxZjNlNDkwYzY5 LzEvUWxpdmstUVRuUE9lbTBwdzRVcGFteXFPdGg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEhvFwb0b +FLWG42uh4TEePjjeaQJThI0SXddXEnyM4UtfzPg1CvhX39rAMOIoivUVrbjiHTp I2f7mTN7XujAKZLgZ2GZTjdmdZjU8JGrBzK5EHunK6+nUvctG64AcuUhsO4wLbLK 9JrH2Ufj11rRYGCN/n0QXt+w4kM3QhNXU/z2AohzasSyluZbhywK02LA402od4HJ rWLsnZmDAuvpYLzgRWeD5ydW0nQIWRHmaOsmTJ3d/A2nbektGgoGzL+wNQ4clsGo dfXw0zYfFdQyplcNzPwHdiEzwSLzhiG836FFN+09vtkRbD+lmygdov2Jz1v+6j6w 49apCLro/NMdbA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:29:40 2025 by rpki-client