This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft File: qlemjwii4wun1z1EyabiQA_Qo7E.mft (raw, json) Hash identifier: TlLL18IHthbUlAOD+Z7hgJOk2+zcWioWdCo5P5qV0IQ= Subject key identifier: E1:B3:F0:B9:EB:F0:08:29:D0:65:E5:FC:C8:71:EE:E4:39:A8:88:F8 Authority key identifier: AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1 Certificate issuer: /CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1 Certificate serial: 019B48164F56D8DE79BFF401658E0A1C5E03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft Manifest number: 0965 Signing time: Mon 22 Dec 2025 22:03:00 +0000 Manifest this update: Mon 22 Dec 2025 22:03:00 +0000 Manifest next update: Tue 23 Dec 2025 22:03:00 +0000 Files and hashes: 1: _uIcjPbTo2tZZuPbQQgAGU6uFaU.roa (hash: mFbVT5EqFo/vqgifNq4fzGvwXcCU4t6Rafq12c4CSak=) 2: qlemjwii4wun1z1EyabiQA_Qo7E.crl (hash: kZUDWN8gcO6a9E0WVWEbDEhNfD+Ji8O38ajCPq1MvEo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:16:4f:56:d8:de:79:bf:f4:01:65:8e:0a:1c:5e:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1 Validity Not Before: Dec 22 22:03:00 2025 GMT Not After : Dec 23 22:03:00 2025 GMT Subject: CN=e1b3f0b9ebf00829d065e5fcc871eee439a888f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:06:c5:bc:4e:78:f9:ab:e8:09:23:6f:ce:bd: df:8d:d3:68:fd:e8:9b:3d:be:44:91:c4:a4:66:8f: 25:ad:81:06:82:cd:ed:5e:ac:f3:53:a9:40:08:be: 41:f8:d2:41:76:cb:8f:5d:5e:6d:a6:3d:96:60:56: ce:7f:47:1d:26:79:bf:af:32:2a:7d:d7:4f:90:1c: c0:9f:86:5e:21:2a:07:21:c0:28:09:50:22:0e:96: ab:aa:2c:0b:23:ea:48:32:41:a3:c1:8f:4c:42:5b: 3f:c6:69:1d:d2:46:83:6d:fb:0d:36:5a:35:93:ac: 76:4a:ba:5c:ec:f6:2e:a3:5a:a6:29:c2:2f:08:84: e9:43:73:0c:45:83:12:85:b9:64:aa:ab:84:ac:7f: b5:05:0a:9e:93:19:8b:da:0d:fe:c4:2e:73:7b:83: 44:9a:5a:17:f1:03:86:96:29:64:08:a1:5a:b1:85: c3:ef:0a:25:2c:22:91:29:9d:e5:bc:54:1f:5e:48: a1:02:58:7b:93:2d:2c:c1:29:12:19:ac:b8:1e:62: cd:bd:a3:74:dd:de:5a:0c:f0:25:c3:b3:5e:a3:52: c8:0f:3b:8a:a8:0d:a4:e8:9d:98:79:a7:91:82:c5: c5:aa:f1:1c:7b:16:82:88:52:e6:ea:1e:29:cf:70: 65:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B3:F0:B9:EB:F0:08:29:D0:65:E5:FC:C8:71:EE:E4:39:A8:88:F8 X509v3 Authority Key Identifier: keyid:AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:a3:11:74:01:e2:d8:ce:0c:51:2e:c1:01:27:51:eb:12:2b: ab:7b:94:4e:6b:45:c4:c4:eb:fd:a2:2f:de:6f:ce:3c:cc:5e: f7:34:0c:4d:b1:a7:3d:7d:34:f9:53:b7:c5:73:71:62:de:43: 7b:6e:5a:df:95:e6:a7:2d:af:ad:d0:f3:b3:ea:08:7d:50:4c: af:24:2d:53:37:56:dd:cb:5e:36:bc:84:24:18:07:56:ce:b8: 9a:46:9f:76:c7:9b:11:5f:bf:87:b9:66:2d:bc:c3:91:97:57: 85:f4:4b:9c:1c:a4:f5:1d:74:15:c8:78:6d:a3:3b:7e:b0:fd: 74:23:f7:82:c7:15:03:96:f8:57:28:cf:18:8d:f2:43:45:6b: 24:b7:63:25:37:b9:94:85:ec:2f:58:ac:2e:7e:f6:c4:ee:fa: d1:e6:2f:5f:fe:17:2a:ee:dd:fe:91:f4:87:e0:d2:e5:60:1d: e0:c4:cd:41:4f:51:75:8b:b4:36:a0:d0:91:8e:6d:e2:85:31: af:2b:bb:22:cc:f5:4d:1a:4b:3b:eb:4f:2c:2d:a9:77:ee:40: ab:1e:a3:5e:78:6e:cb:49:a7:2f:e2:86:a1:6e:d2:4f:47:d5: 0a:dc:98:ef:7e:69:95:f6:f2:ca:19:a0:88:a5:c7:07:51:af: c7:17:05:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFk9W2N55v/QBZY4KHF4DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNTdhNjhmMDhhMmUzMGJhN2Q3M2Q0NGM5YTZlMjQwMGZk MGEzYjEwHhcNMjUxMjIyMjIwMzAwWhcNMjUxMjIzMjIwMzAwWjAzMTEwLwYDVQQD EyhlMWIzZjBiOWViZjAwODI5ZDA2NWU1ZmNjODcxZWVlNDM5YTg4OGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugbFvE54+avoCSNvzr3fjdNo/eib Pb5EkcSkZo8lrYEGgs3tXqzzU6lACL5B+NJBdsuPXV5tpj2WYFbOf0cdJnm/rzIq fddPkBzAn4ZeISoHIcAoCVAiDparqiwLI+pIMkGjwY9MQls/xmkd0kaDbfsNNlo1 k6x2Srpc7PYuo1qmKcIvCITpQ3MMRYMShblkqquErH+1BQqekxmL2g3+xC5ze4NE mloX8QOGlilkCKFasYXD7wolLCKRKZ3lvFQfXkihAlh7ky0swSkSGay4HmLNvaN0 3d5aDPAlw7Neo1LIDzuKqA2k6J2YeaeRgsXFqvEcexaCiFLm6h4pz3Bl/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOGz8Lnr8Agp0GXl/Mhx7uQ5qIj4MB8GA1UdIwQY MBaAFKpXpo8IouMLp9c9RMmm4kAP0KOxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWxlbWp3aWk0d3VuMXoxRXlhYmlRQV9RbzdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC85YjczNzctZDQ2NS00NmI5LWE1NjMt ODQ2OGU0OWYwMGVkLzEvcWxlbWp3aWk0d3VuMXoxRXlhYmlRQV9RbzdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC85YjczNzctZDQ2NS00NmI5LWE1NjMtODQ2OGU0OWYwMGVk LzEvcWxlbWp3aWk0d3VuMXoxRXlhYmlRQV9RbzdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo6MRdAHi 2M4MUS7BASdR6xIrq3uUTmtFxMTr/aIv3m/OPMxe9zQMTbGnPX00+VO3xXNxYt5D e25a35Xmpy2vrdDzs+oIfVBMryQtUzdW3cteNryEJBgHVs64mkafdsebEV+/h7lm LbzDkZdXhfRLnByk9R10Fch4baM7frD9dCP3gscVA5b4VyjPGI3yQ0VrJLdjJTe5 lIXsL1isLn72xO760eYvX/4XKu7d/pH0h+DS5WAd4MTNQU9RdYu0NqDQkY5t4oUx ryu7Isz1TRpLO+tPLC2pd+5Aqx6jXnhuy0mnL+KGoW7ST0fVCtyY735plfbyyhmg iKXHB1GvxxcF0g== -----END CERTIFICATE-----Generated at Tue Dec 23 01:00:51 2025 by rpki-client