This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft File: RQLrIq5cC03NOaD5ZBolcGNEcfk.mft (raw, json) Hash identifier: R+wq5UyEYyqirlFXJJ6l7fCtqqqLxb6c5i2aiVvmMmA= Subject key identifier: 2C:78:04:56:35:C8:C5:AF:D9:89:18:2E:40:29:CB:9D:F8:10:7E:76 Authority key identifier: 45:02:EB:22:AE:5C:0B:4D:CD:39:A0:F9:64:1A:25:70:63:44:71:F9 Certificate issuer: /CN=4502eb22ae5c0b4dcd39a0f9641a2570634471f9 Certificate serial: 019AF3520BA64335A627C8255C727184412E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft Manifest number: 0779 Signing time: Sat 06 Dec 2025 11:00:31 +0000 Manifest this update: Sat 06 Dec 2025 11:00:31 +0000 Manifest next update: Sun 07 Dec 2025 11:00:31 +0000 Files and hashes: 1: RQLrIq5cC03NOaD5ZBolcGNEcfk.crl (hash: QIn5ujOliIqmpS4gs1gmhj57wwdTCfhVlMmsBEGhN3Q=) 2: bEqgtrspfIQ8XBKsdOXgQ2Xyvsk.roa (hash: RpGyhN37kiaHNLFfnHAUkc7DrZnN6EVEiWZPE+rzTPU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.crl rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:0b:a6:43:35:a6:27:c8:25:5c:72:71:84:41:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502eb22ae5c0b4dcd39a0f9641a2570634471f9 Validity Not Before: Dec 6 11:00:31 2025 GMT Not After : Dec 7 11:00:31 2025 GMT Subject: CN=2c78045635c8c5afd989182e4029cb9df8107e76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:00:04:f9:66:80:11:b8:42:3d:1e:74:ac:db: f4:be:f7:9b:c9:ff:b3:67:89:4b:03:d5:56:a2:39: 54:09:cd:f5:9d:46:e9:0b:56:49:09:86:95:8b:46: fd:1b:3e:b5:78:d7:f3:05:29:a2:5c:eb:7c:6c:c7: 37:fc:d6:eb:86:66:02:b4:6c:06:8a:08:ce:bc:46: c9:cf:c8:8e:ac:46:f4:e9:62:cf:82:d0:34:15:0d: 66:9f:82:bc:ae:fd:00:60:09:12:82:2e:d5:64:50: 6b:1d:b7:39:fe:f4:93:25:67:61:0a:5b:d3:51:35: 30:0d:aa:61:be:aa:bc:94:e8:33:04:a4:97:9c:05: e2:ff:90:7d:4c:67:d8:f4:57:f1:60:5b:1a:f5:23: a0:87:74:74:73:d8:35:35:e5:f5:fd:94:76:45:de: 00:d8:6e:25:cd:ec:b8:13:b0:ad:38:1d:de:91:ed: 72:6b:5e:e9:22:32:9d:06:83:8d:78:c8:00:74:c2: b8:05:27:5d:3a:e9:c0:78:71:1f:38:a6:b8:0e:a9: 29:98:c8:b5:0b:1b:27:ed:23:70:89:78:7f:d8:6e: 96:5e:4d:f2:74:d5:92:23:69:73:16:84:24:23:3b: b9:92:fe:1c:53:b3:41:28:2a:bd:f2:4b:9c:e8:f8: de:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:78:04:56:35:C8:C5:AF:D9:89:18:2E:40:29:CB:9D:F8:10:7E:76 X509v3 Authority Key Identifier: keyid:45:02:EB:22:AE:5C:0B:4D:CD:39:A0:F9:64:1A:25:70:63:44:71:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:0a:33:76:4b:31:ae:27:3f:b9:4f:08:84:4a:82:5f:28:46: c5:f6:98:42:81:b9:51:3a:ab:54:0a:99:ea:d5:f2:e1:8e:0f: e5:3d:9f:a7:26:45:4e:87:fb:e7:03:e0:77:03:67:72:ec:c0: cf:dc:f9:6e:5d:c5:45:89:e0:1c:11:16:2d:fc:23:0d:ca:81: ff:cc:10:f2:ee:86:b0:dc:16:a8:84:ba:c0:36:70:d2:89:ec: c7:a2:1a:f6:a8:68:23:39:e4:ed:17:2a:d1:db:cc:23:33:08: 82:d0:ac:d9:d2:c3:9c:59:c1:a6:94:1a:18:a6:d7:81:3e:86: 2f:0b:b1:31:da:1d:28:06:e7:23:90:e2:05:5c:32:42:5a:03: 66:b1:14:ad:04:24:92:85:42:89:bd:2a:94:f5:d9:25:9a:a4: a3:50:44:54:58:c3:8a:f0:09:b1:f5:70:d7:14:67:34:d5:f1: 33:3f:b3:9d:e8:f0:4a:53:f1:bf:85:00:24:e7:50:f0:86:98: 8c:45:35:b4:7e:99:b8:c2:82:5c:bd:07:1e:e7:83:80:8a:8d: f4:ab:69:0d:60:12:77:6b:47:9c:4f:86:67:80:48:17:4a:00: 91:bf:f7:c8:89:9c:28:ec:db:29:e0:c6:57:2e:72:ad:07:42: e2:c7:74:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUgumQzWmJ8glXHJxhEEuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1MDJlYjIyYWU1YzBiNGRjZDM5YTBmOTY0MWEyNTcwNjM0 NDcxZjkwHhcNMjUxMjA2MTEwMDMxWhcNMjUxMjA3MTEwMDMxWjAzMTEwLwYDVQQD EygyYzc4MDQ1NjM1YzhjNWFmZDk4OTE4MmU0MDI5Y2I5ZGY4MTA3ZTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQAE+WaAEbhCPR50rNv0vvebyf+z Z4lLA9VWojlUCc31nUbpC1ZJCYaVi0b9Gz61eNfzBSmiXOt8bMc3/NbrhmYCtGwG igjOvEbJz8iOrEb06WLPgtA0FQ1mn4K8rv0AYAkSgi7VZFBrHbc5/vSTJWdhClvT UTUwDaphvqq8lOgzBKSXnAXi/5B9TGfY9FfxYFsa9SOgh3R0c9g1NeX1/ZR2Rd4A 2G4lzey4E7CtOB3eke1ya17pIjKdBoONeMgAdMK4BSddOunAeHEfOKa4DqkpmMi1 Cxsn7SNwiXh/2G6WXk3ydNWSI2lzFoQkIzu5kv4cU7NBKCq98kuc6PjeWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCx4BFY1yMWv2YkYLkApy534EH52MB8GA1UdIwQY MBaAFEUC6yKuXAtNzTmg+WQaJXBjRHH5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlFMcklxNWNDMDNOT2FENVpCb2xjR05FY2ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS80NTY1OWItMjRkNy00MjIwLWExMTgt OTNmNDI1NWYyYjgyLzEvUlFMcklxNWNDMDNOT2FENVpCb2xjR05FY2ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS80NTY1OWItMjRkNy00MjIwLWExMTgtOTNmNDI1NWYyYjgy LzEvUlFMcklxNWNDMDNOT2FENVpCb2xjR05FY2ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEQozdksx ric/uU8IhEqCXyhGxfaYQoG5UTqrVAqZ6tXy4Y4P5T2fpyZFTof75wPgdwNncuzA z9z5bl3FRYngHBEWLfwjDcqB/8wQ8u6GsNwWqIS6wDZw0onsx6Ia9qhoIznk7Rcq 0dvMIzMIgtCs2dLDnFnBppQaGKbXgT6GLwuxMdodKAbnI5DiBVwyQloDZrEUrQQk koVCib0qlPXZJZqko1BEVFjDivAJsfVw1xRnNNXxMz+znejwSlPxv4UAJOdQ8IaY jEU1tH6ZuMKCXL0HHueDgIqN9KtpDWASd2tHnE+GZ4BIF0oAkb/3yImcKOzbKeDG Vy5yrQdC4sd0kg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:45:34 2025 by rpki-client