This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.mft File: QLt2qpbfjrfWd3s1clLhEVUjh4U.mft (raw, json) Hash identifier: ipiiFBUz83UbTlV3lyHnMSyreO5uP7GatxpyynCgB7A= Subject key identifier: 0D:89:D0:BF:38:6F:AF:A4:92:3C:55:55:D9:ED:65:C7:AB:39:C4:DD Authority key identifier: 40:BB:76:AA:96:DF:8E:B7:D6:77:7B:35:72:52:E1:11:55:23:87:85 Certificate issuer: /CN=40bb76aa96df8eb7d6777b357252e11155238785 Certificate serial: 019B2EF921230AE2F1150B459733FD58D617 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLt2qpbfjrfWd3s1clLhEVUjh4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.mft Manifest number: 14D9 Signing time: Thu 18 Dec 2025 01:00:37 +0000 Manifest this update: Thu 18 Dec 2025 01:00:37 +0000 Manifest next update: Fri 19 Dec 2025 01:00:37 +0000 Files and hashes: 1: 78S4WmbXMNI8p1WLj4U6NB6Bpk8.roa (hash: bBamnPgie/uUwEiZyXlGtHo6lmaBP0c5URwdBpztxDc=) 2: QLt2qpbfjrfWd3s1clLhEVUjh4U.crl (hash: VDnRehjs/NKUbswWWlakLfSF56Qzkmqnffnpmxm1siM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.crl rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.mft rsync://rpki.ripe.net/repository/DEFAULT/QLt2qpbfjrfWd3s1clLhEVUjh4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:21:23:0a:e2:f1:15:0b:45:97:33:fd:58:d6:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40bb76aa96df8eb7d6777b357252e11155238785 Validity Not Before: Dec 18 01:00:37 2025 GMT Not After : Dec 19 01:00:37 2025 GMT Subject: CN=0d89d0bf386fafa4923c5555d9ed65c7ab39c4dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:54:ac:28:d2:4b:53:8c:1e:b3:71:76:e9:89: e1:9d:b1:61:8f:40:3c:5a:57:e1:6f:70:89:c4:de: d5:6d:66:09:92:7f:22:64:83:ac:a5:96:58:a2:b2: aa:60:38:78:22:3b:a4:65:4f:10:6e:ae:19:16:e3: 58:80:90:4b:92:b1:d4:ef:3c:41:b6:38:7c:38:dd: c9:63:82:60:54:3f:25:65:40:8f:f3:1d:53:47:72: 64:35:2b:e2:f7:a9:07:f4:94:0f:d1:22:5b:66:0b: 55:f4:d7:c6:4a:05:6e:01:c2:1e:44:b8:99:db:fe: 2f:ca:ff:52:ba:59:0c:61:a5:44:57:3c:88:60:86: 6c:46:3a:72:14:0b:90:e4:2a:0f:fb:80:90:4c:6f: bb:ed:f7:31:08:0b:a3:7e:40:51:1d:fb:f5:ee:38: 4d:1d:b5:f6:77:d8:ec:a4:2e:79:16:27:ab:cf:9b: 17:46:d6:57:5c:31:d4:f1:ba:82:6e:31:bc:23:67: da:13:98:48:92:b2:17:76:ac:1c:5b:8f:51:34:57: 04:18:58:3c:c1:51:6b:62:b2:5c:5d:0f:cd:07:64: c9:0a:00:0f:21:8e:1e:c4:47:ec:bd:34:e8:9b:a2: fd:52:e7:0b:b6:67:42:54:5a:62:48:d4:c1:b6:dc: c3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:89:D0:BF:38:6F:AF:A4:92:3C:55:55:D9:ED:65:C7:AB:39:C4:DD X509v3 Authority Key Identifier: keyid:40:BB:76:AA:96:DF:8E:B7:D6:77:7B:35:72:52:E1:11:55:23:87:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLt2qpbfjrfWd3s1clLhEVUjh4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:85:3d:a4:e1:ea:9e:bc:27:0e:b4:d8:a8:ea:ce:e6:ce:53: bf:bf:8a:d8:3f:65:17:38:73:4d:59:e5:29:ad:ba:e8:12:62: 26:c6:9b:80:be:a8:21:08:bb:d9:76:73:b7:b8:b3:35:44:2c: 36:d4:ba:57:35:76:b2:ce:24:af:46:6c:76:e7:f2:8c:24:17: c2:82:05:f8:bf:d5:36:1d:18:2e:97:a7:c5:8b:a9:11:4d:8f: 53:3d:1f:65:0a:18:6a:f7:c8:76:21:92:89:57:c9:98:69:92: 4c:2a:ac:63:e5:78:78:69:9f:19:17:93:78:35:ff:37:90:1f: e1:cc:fd:d9:d5:dd:e1:01:c5:f9:34:b3:b5:2a:86:f1:d8:d6: b3:24:1b:2f:4a:2c:43:20:31:11:85:a6:49:5d:95:7b:40:ee: 87:70:dd:c2:13:bb:12:77:f7:29:2a:e4:84:5b:e1:02:03:be: 8a:9f:43:6b:2e:25:75:2c:98:31:ac:26:a5:1d:6e:61:68:09: 91:34:50:03:f1:00:de:97:92:f2:d8:43:99:f6:20:c1:ff:37: 23:7a:c3:96:a8:c3:f4:90:84:88:a2:7f:3c:6f:e2:f5:28:98: d5:90:7a:e3:1e:c2:86:f8:2a:76:0b:e4:01:5e:2d:ff:bb:53: 69:29:7c:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+SEjCuLxFQtFlzP9WNYXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwYmI3NmFhOTZkZjhlYjdkNjc3N2IzNTcyNTJlMTExNTUy Mzg3ODUwHhcNMjUxMjE4MDEwMDM3WhcNMjUxMjE5MDEwMDM3WjAzMTEwLwYDVQQD EygwZDg5ZDBiZjM4NmZhZmE0OTIzYzU1NTVkOWVkNjVjN2FiMzljNGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlSsKNJLU4wes3F26YnhnbFhj0A8 Wlfhb3CJxN7VbWYJkn8iZIOspZZYorKqYDh4IjukZU8Qbq4ZFuNYgJBLkrHU7zxB tjh8ON3JY4JgVD8lZUCP8x1TR3JkNSvi96kH9JQP0SJbZgtV9NfGSgVuAcIeRLiZ 2/4vyv9SulkMYaVEVzyIYIZsRjpyFAuQ5CoP+4CQTG+77fcxCAujfkBRHfv17jhN HbX2d9jspC55Fierz5sXRtZXXDHU8bqCbjG8I2faE5hIkrIXdqwcW49RNFcEGFg8 wVFrYrJcXQ/NB2TJCgAPIY4exEfsvTTom6L9UucLtmdCVFpiSNTBttzDGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA2J0L84b6+kkjxVVdntZcerOcTdMB8GA1UdIwQY MBaAFEC7dqqW34631nd7NXJS4RFVI4eFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUx0MnFwYmZqcmZXZDNzMWNsTGhFVlVqaDRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9lMzFkNjgtY2I2My00YmQxLTk5Yjkt MzVlZTdhNzM5ZmQ5LzEvUUx0MnFwYmZqcmZXZDNzMWNsTGhFVlVqaDRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9lMzFkNjgtY2I2My00YmQxLTk5YjktMzVlZTdhNzM5ZmQ5 LzEvUUx0MnFwYmZqcmZXZDNzMWNsTGhFVlVqaDRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiYU9pOHq nrwnDrTYqOrO5s5Tv7+K2D9lFzhzTVnlKa266BJiJsabgL6oIQi72XZzt7izNUQs NtS6VzV2ss4kr0ZsdufyjCQXwoIF+L/VNh0YLpenxYupEU2PUz0fZQoYavfIdiGS iVfJmGmSTCqsY+V4eGmfGReTeDX/N5Af4cz92dXd4QHF+TSztSqG8djWsyQbL0os QyAxEYWmSV2Ve0Duh3DdwhO7Enf3KSrkhFvhAgO+ip9Day4ldSyYMawmpR1uYWgJ kTRQA/EA3peS8thDmfYgwf83I3rDlqjD9JCEiKJ/PG/i9SiY1ZB64x7Chvgqdgvk AV4t/7tTaSl8Pg== -----END CERTIFICATE-----Generated at Thu Dec 18 05:42:13 2025 by rpki-client