This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft File: qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft (raw, json) Hash identifier: r4oMjf2uR3f5HspyFHnjGIABKQRllSd5hcBKn2R9L+s= Subject key identifier: F6:1C:A0:69:20:1F:70:05:26:EE:DD:27:69:51:72:D8:24:C1:24:F3 Authority key identifier: AA:52:12:95:8D:8E:1B:AA:14:4A:82:A8:21:F9:3A:89:0D:CB:A4:9A Certificate issuer: /CN=aa5212958d8e1baa144a82a821f93a890dcba49a Certificate serial: 019AF19AF512697FAB741C12C4E5B5CC4C28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft Manifest number: 01AE Signing time: Sat 06 Dec 2025 03:00:55 +0000 Manifest this update: Sat 06 Dec 2025 03:00:55 +0000 Manifest next update: Sun 07 Dec 2025 03:00:55 +0000 Files and hashes: 1: PZ4f-DMKLrdus7ifGNkwQRZC4kM.roa (hash: Frtdi2vXGM+9Wk9SACf8JGX2R9YvRbq5Bqkpr3xBZIY=) 2: k9g2HSjpxtETjvvmli-wSHo-GCU.roa (hash: scKaa9aBdckyktODEkOGuwYmySJZ3cmCI8jNYczbLys=) 3: qlISlY2OG6oUSoKoIfk6iQ3LpJo.crl (hash: 7Qf7ETeBrhPlmiJ9WqwvPak0rOHsMaOiRYXv95yKGjU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:f5:12:69:7f:ab:74:1c:12:c4:e5:b5:cc:4c:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa5212958d8e1baa144a82a821f93a890dcba49a Validity Not Before: Dec 6 03:00:55 2025 GMT Not After : Dec 7 03:00:55 2025 GMT Subject: CN=f61ca069201f700526eedd27695172d824c124f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:36:44:26:e5:e2:dc:b3:ea:85:48:60:77:5b: 6d:00:dd:63:38:9a:08:e0:71:d6:31:08:3d:35:a1: a0:c9:e2:c6:df:cf:91:a2:60:ce:65:91:61:52:de: 4d:81:0d:b9:4d:33:88:94:7f:38:e6:a1:08:b4:9b: cb:25:55:d9:aa:b2:d3:81:03:90:bc:9b:5d:bf:94: 1f:f9:d4:bd:12:9c:38:71:a6:1b:33:94:c6:40:e3: 31:fc:96:f9:7f:2a:ca:b8:92:02:ae:bd:21:d9:aa: ba:14:83:b8:b4:0c:63:07:b3:90:7a:cf:80:49:40: b8:c5:17:e8:84:18:43:a1:c9:e4:ac:f6:89:fa:4e: 2c:66:00:4c:9e:97:1d:7f:1c:97:73:5e:a6:d6:a3: 98:dd:db:ca:79:3d:b9:f1:78:f5:60:65:41:d3:17: 22:81:26:23:75:5f:1c:e0:ff:d8:2e:69:22:5d:52: cc:83:64:bb:b1:8d:52:96:55:4b:65:1a:6c:e7:1e: 13:e9:5f:7f:ab:a2:58:a2:c2:63:c9:de:c4:ca:0e: 0d:a6:c2:39:4e:59:68:d8:93:d4:27:3d:8e:20:8c: 5d:20:7a:50:ff:1f:30:30:f1:51:2d:bd:b5:90:16: f6:c8:56:87:1b:79:9e:7d:b9:55:69:96:d2:22:26: e9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:1C:A0:69:20:1F:70:05:26:EE:DD:27:69:51:72:D8:24:C1:24:F3 X509v3 Authority Key Identifier: keyid:AA:52:12:95:8D:8E:1B:AA:14:4A:82:A8:21:F9:3A:89:0D:CB:A4:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:53:27:5e:32:ad:6f:c7:28:08:72:96:e1:98:2f:a5:7c:ed: 33:5c:e5:e5:a4:cd:f5:18:d6:eb:ad:1b:51:25:d4:96:e9:6a: 00:f1:88:7f:77:f2:ac:b6:48:ab:8f:d7:bf:08:b1:e6:ff:cc: 3a:fe:35:4c:92:86:32:11:5b:36:cd:ed:85:44:9c:2b:3d:8f: c6:0a:6e:48:0e:ad:8c:5e:b1:d6:2c:df:31:30:e6:58:76:95: 8d:d0:42:87:42:2b:7f:fe:19:55:0b:ed:29:ff:74:79:fa:54: 41:58:33:73:4e:e5:b2:f4:d2:ce:d8:e9:9a:07:74:5b:2f:df: eb:97:38:1a:5e:18:f5:69:b2:d1:61:85:8a:b6:d7:00:20:1e: 52:02:3c:a5:e7:f2:b2:99:fc:63:6a:de:c7:3a:6a:49:76:4b: 5d:bd:64:71:5a:dd:db:6c:c8:cd:78:8e:67:f7:89:20:d2:5a: 22:9b:e0:e4:2b:36:6e:68:c0:7e:42:aa:8d:37:36:87:74:3e: 2f:06:d0:7e:d5:de:4f:c8:8d:a4:53:d9:2a:5c:da:55:55:05: 68:09:a2:ff:dc:da:50:56:54:85:03:cf:1c:e4:18:c8:48:72: 71:17:b0:9b:67:07:a1:ea:19:75:7e:9f:e4:40:c5:cb:8b:d7: f4:6e:f3:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmvUSaX+rdBwSxOW1zEwoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNTIxMjk1OGQ4ZTFiYWExNDRhODJhODIxZjkzYTg5MGRj YmE0OWEwHhcNMjUxMjA2MDMwMDU1WhcNMjUxMjA3MDMwMDU1WjAzMTEwLwYDVQQD EyhmNjFjYTA2OTIwMWY3MDA1MjZlZWRkMjc2OTUxNzJkODI0YzEyNGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDZEJuXi3LPqhUhgd1ttAN1jOJoI 4HHWMQg9NaGgyeLG38+RomDOZZFhUt5NgQ25TTOIlH845qEItJvLJVXZqrLTgQOQ vJtdv5Qf+dS9Epw4caYbM5TGQOMx/Jb5fyrKuJICrr0h2aq6FIO4tAxjB7OQes+A SUC4xRfohBhDocnkrPaJ+k4sZgBMnpcdfxyXc16m1qOY3dvKeT258Xj1YGVB0xci gSYjdV8c4P/YLmkiXVLMg2S7sY1SllVLZRps5x4T6V9/q6JYosJjyd7Eyg4NpsI5 Tllo2JPUJz2OIIxdIHpQ/x8wMPFRLb21kBb2yFaHG3mefblVaZbSIibpWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPYcoGkgH3AFJu7dJ2lRctgkwSTzMB8GA1UdIwQY MBaAFKpSEpWNjhuqFEqCqCH5OokNy6SaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWxJU2xZMk9HNm9VU29Lb0lmazZpUTNMcEpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9kOGU1ZTMtZjg5Ny00ZGEyLTlkZjYt YjQwMWE0YTA0NDkyLzEvcWxJU2xZMk9HNm9VU29Lb0lmazZpUTNMcEpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9kOGU1ZTMtZjg5Ny00ZGEyLTlkZjYtYjQwMWE0YTA0NDky LzEvcWxJU2xZMk9HNm9VU29Lb0lmazZpUTNMcEpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUlMnXjKt b8coCHKW4ZgvpXztM1zl5aTN9RjW660bUSXUlulqAPGIf3fyrLZIq4/Xvwix5v/M Ov41TJKGMhFbNs3thUScKz2PxgpuSA6tjF6x1izfMTDmWHaVjdBCh0Irf/4ZVQvt Kf90efpUQVgzc07lsvTSztjpmgd0Wy/f65c4Gl4Y9Wmy0WGFirbXACAeUgI8pefy spn8Y2rexzpqSXZLXb1kcVrd22zIzXiOZ/eJINJaIpvg5Cs2bmjAfkKqjTc2h3Q+ LwbQftXeT8iNpFPZKlzaVVUFaAmi/9zaUFZUhQPPHOQYyEhycRewm2cHoeoZdX6f 5EDFy4vX9G7z2Q== -----END CERTIFICATE-----Generated at Sat Dec 6 11:06:11 2025 by rpki-client