This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft File: 1QliA1xelRATygZwylaeefjWPBU.mft (raw, json) Hash identifier: kXRfZZWJfWyB3gqXaecYmdKUyH4c/Mu9KwBDXL3Go0o= Subject key identifier: 48:FD:25:C3:06:1D:04:C9:60:85:E8:D1:0F:BA:5E:D9:EF:A6:F6:39 Authority key identifier: D5:09:62:03:5C:5E:95:10:13:CA:06:70:CA:56:9E:79:F8:D6:3C:15 Certificate issuer: /CN=d50962035c5e951013ca0670ca569e79f8d63c15 Certificate serial: 019AF1D20568F4196A45DC9505FDB11FA873 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft Manifest number: 122D Signing time: Sat 06 Dec 2025 04:01:04 +0000 Manifest this update: Sat 06 Dec 2025 04:01:04 +0000 Manifest next update: Sun 07 Dec 2025 04:01:04 +0000 Files and hashes: 1: 1QliA1xelRATygZwylaeefjWPBU.crl (hash: g24Ie3HtHMJjSXd0XDfoYjE3167cku/rp99kkYSLS40=) 2: QgExJsLM6ckB_bwe9qRnk4o5HhA.roa (hash: P6xf+cz+/i4pkIjOYnliYy5pmyQWXuehaFAXXoyCR5k=) 3: fD4OezRM4UrasrKKJ10uGn5_Qug.roa (hash: +HiHjgUZa5Xei+THiDncnTXYzPCxqbbX0ahPYM7QsZE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:05:68:f4:19:6a:45:dc:95:05:fd:b1:1f:a8:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d50962035c5e951013ca0670ca569e79f8d63c15 Validity Not Before: Dec 6 04:01:04 2025 GMT Not After : Dec 7 04:01:04 2025 GMT Subject: CN=48fd25c3061d04c96085e8d10fba5ed9efa6f639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e5:0a:c8:1b:c3:0b:0a:79:4f:cf:8e:5c:8c: fb:48:3c:f5:ce:4f:2a:09:25:a2:a1:25:4c:dc:35: f5:ce:f0:40:d9:0a:76:54:6d:e9:6d:61:82:9a:fa: 85:93:4f:90:f4:e9:49:a5:9a:bd:be:eb:9f:a1:45: d2:83:2b:f3:73:7d:8a:37:86:1c:8f:1d:78:e9:03: 79:54:20:ee:fa:3d:33:4f:c8:e7:f0:46:1b:24:c5: c8:75:b6:01:c2:fa:15:01:f9:dc:37:95:57:85:be: 42:07:53:e6:0a:64:95:23:15:44:fd:c8:19:d8:99: c1:b0:60:4a:cc:a2:41:8b:dc:bc:7b:0c:20:e0:52: 0a:a7:e9:28:dc:fb:a8:b3:7f:3b:2e:8e:5b:e8:e0: 03:4a:3b:96:df:c8:2f:72:40:d6:83:88:57:49:66: 91:b0:8f:8a:19:34:eb:0b:64:57:bd:e0:cf:30:5f: f4:e8:dc:e9:48:98:51:f8:66:37:45:ea:fd:fd:f9: 2c:09:da:02:5b:58:7d:3b:82:f8:7b:ce:b5:b9:4a: 53:53:6e:32:dc:c1:18:4e:d3:62:59:b1:bc:35:f9: 7d:eb:09:18:33:35:48:7a:cb:70:a2:bd:f4:3b:16: 26:72:ec:63:fa:64:01:31:6a:14:ca:be:a0:a3:a4: bb:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:FD:25:C3:06:1D:04:C9:60:85:E8:D1:0F:BA:5E:D9:EF:A6:F6:39 X509v3 Authority Key Identifier: keyid:D5:09:62:03:5C:5E:95:10:13:CA:06:70:CA:56:9E:79:F8:D6:3C:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:93:03:ad:b4:bc:d3:39:eb:20:6e:cf:58:02:0d:97:1f:59: 59:dd:1e:53:2a:cb:3b:7d:16:05:04:83:5b:34:b1:a4:16:7c: 1f:cb:f7:dc:37:eb:39:f0:8a:4b:5d:75:ed:45:b0:c5:b7:64: df:bc:a7:6d:95:ca:df:f3:74:94:d3:55:c8:98:5e:db:ff:58: 72:6b:0a:6a:da:60:46:2a:65:e1:d0:27:ea:0d:cb:46:74:66: ce:2a:c8:e1:2f:6f:e6:e8:04:02:bb:ce:74:93:ff:f9:16:36: 69:88:48:7e:6f:6f:e7:89:45:74:cd:19:a2:ee:20:4a:e8:41: 7c:fc:ab:54:43:4d:78:2b:75:09:77:c6:53:f7:59:94:2d:1a: 84:1d:5d:9c:bb:eb:04:26:c9:f4:a7:69:79:62:10:41:f0:c8: d6:73:2f:91:9a:20:f9:ce:fc:4e:da:c9:65:58:d9:8b:30:48: 07:17:2c:fd:80:cd:f5:97:db:61:2a:d3:b3:b4:b8:60:81:97: c9:0e:4b:e7:ff:18:49:da:38:36:92:49:b2:5f:92:a0:2f:e3: 3b:77:a8:d1:f6:00:26:02:a6:f4:11:fe:d4:7f:78:bb:96:b7: 56:d6:77:fa:f0:b2:a3:64:c0:10:74:38:78:38:40:e6:ac:0a: 56:91:e2:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0gVo9BlqRdyVBf2xH6hzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MDk2MjAzNWM1ZTk1MTAxM2NhMDY3MGNhNTY5ZTc5Zjhk NjNjMTUwHhcNMjUxMjA2MDQwMTA0WhcNMjUxMjA3MDQwMTA0WjAzMTEwLwYDVQQD Eyg0OGZkMjVjMzA2MWQwNGM5NjA4NWU4ZDEwZmJhNWVkOWVmYTZmNjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseUKyBvDCwp5T8+OXIz7SDz1zk8q CSWioSVM3DX1zvBA2Qp2VG3pbWGCmvqFk0+Q9OlJpZq9vuufoUXSgyvzc32KN4Yc jx146QN5VCDu+j0zT8jn8EYbJMXIdbYBwvoVAfncN5VXhb5CB1PmCmSVIxVE/cgZ 2JnBsGBKzKJBi9y8ewwg4FIKp+ko3Puos387Lo5b6OADSjuW38gvckDWg4hXSWaR sI+KGTTrC2RXveDPMF/06NzpSJhR+GY3Rer9/fksCdoCW1h9O4L4e861uUpTU24y 3MEYTtNiWbG8Nfl96wkYMzVIestwor30OxYmcuxj+mQBMWoUyr6go6S7eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEj9JcMGHQTJYIXo0Q+6XtnvpvY5MB8GA1UdIwQY MBaAFNUJYgNcXpUQE8oGcMpWnnn41jwVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVFsaUExeGVsUkFUeWdad3lsYWVlZmpXUEJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9kNGU4ZTktMGQ0Ny00MTliLWIzZTIt MDU0YTM2MzExNWY1LzEvMVFsaUExeGVsUkFUeWdad3lsYWVlZmpXUEJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9kNGU4ZTktMGQ0Ny00MTliLWIzZTItMDU0YTM2MzExNWY1 LzEvMVFsaUExeGVsUkFUeWdad3lsYWVlZmpXUEJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiJMDrbS8 0znrIG7PWAINlx9ZWd0eUyrLO30WBQSDWzSxpBZ8H8v33DfrOfCKS1117UWwxbdk 37ynbZXK3/N0lNNVyJhe2/9YcmsKatpgRipl4dAn6g3LRnRmzirI4S9v5ugEArvO dJP/+RY2aYhIfm9v54lFdM0Zou4gSuhBfPyrVENNeCt1CXfGU/dZlC0ahB1dnLvr BCbJ9KdpeWIQQfDI1nMvkZog+c78TtrJZVjZizBIBxcs/YDN9ZfbYSrTs7S4YIGX yQ5L5/8YSdo4NpJJsl+SoC/jO3eo0fYAJgKm9BH+1H94u5a3VtZ3+vCyo2TAEHQ4 eDhA5qwKVpHiOQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:01:59 2025 by rpki-client