This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft File: QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft (raw, json) Hash identifier: DCIWdWtB1TMpoNN97h/3vQ1J8AYTYuLztjy0cxwu9HY= Subject key identifier: 46:C2:97:90:44:BE:EE:1C:29:CD:50:6D:0F:5C:89:36:A1:5A:7C:0F Authority key identifier: 42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF Certificate issuer: /CN=42512561fc4ee54b799c5af428fffbcbafd454ef Certificate serial: 019B07EC06CDE6E310E1E75D11BC2D1D425D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft Manifest number: 14A9 Signing time: Wed 10 Dec 2025 11:01:07 +0000 Manifest this update: Wed 10 Dec 2025 11:01:07 +0000 Manifest next update: Thu 11 Dec 2025 11:01:07 +0000 Files and hashes: 1: F6ObM6UnximfbwiH1YL38MiUlBY.roa (hash: FMTxgNBaoS8PjWTC2HJz86nipqDf/pRuOEnb+E3AC9c=) 2: QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl (hash: fHVp+8T5JNC6LLydIRWfj48twXsEmaaseqGPuN34W+k=) 3: sf13oGu2DAluNtQ_y1zSmgQAeHE.roa (hash: gqTUmbOHfz421/G+vBG6eJTQ7lB+mn9m4coW+T9SV2g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:ec:06:cd:e6:e3:10:e1:e7:5d:11:bc:2d:1d:42:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42512561fc4ee54b799c5af428fffbcbafd454ef Validity Not Before: Dec 10 11:01:07 2025 GMT Not After : Dec 11 11:01:07 2025 GMT Subject: CN=46c2979044beee1c29cd506d0f5c8936a15a7c0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:15:d7:34:58:bb:a0:59:c9:64:71:0d:21:2e: b4:54:cd:08:b0:81:27:0f:df:d6:46:3b:80:57:98: 8d:a7:0c:f6:43:43:8f:29:ae:84:a0:68:ae:62:4e: 03:5c:86:3b:37:77:de:88:98:b1:09:6d:06:f3:5f: 06:53:f6:dd:a2:db:87:c5:e1:c3:79:fa:75:98:d3: ba:f2:32:58:40:2d:fe:83:81:14:64:91:e0:2b:af: 04:3e:54:80:4b:1d:38:a0:d9:77:db:de:de:bc:d7: 57:e9:66:25:84:c5:b4:9c:b8:93:2a:d4:f8:f0:34: 2b:7d:16:ab:b7:3f:73:67:f2:b7:f8:03:2b:e4:1a: 4c:8c:0b:41:0c:d2:fe:2a:2e:39:f3:8e:cd:eb:4c: 39:d2:a2:71:b0:98:ce:d7:4e:47:bd:4a:99:13:89: 3d:56:7c:3d:ee:be:ca:c3:98:21:a7:59:e0:12:fa: 41:0e:66:d7:43:05:e7:24:44:96:77:c3:7c:1c:a9: 84:7b:99:ba:aa:7c:63:08:e6:e5:fa:3b:5d:af:22: e2:98:ad:f5:26:7c:cd:c1:17:87:24:3b:5a:8e:0b: 0e:1e:70:ab:79:4c:71:1f:dd:8d:24:e6:8c:b6:fc: 6e:dd:2a:aa:61:73:b6:24:4d:0c:9e:9d:cd:a5:52: 7f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:C2:97:90:44:BE:EE:1C:29:CD:50:6D:0F:5C:89:36:A1:5A:7C:0F X509v3 Authority Key Identifier: keyid:42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:fe:fa:68:54:df:7d:e2:02:b6:9c:d0:c5:0e:3b:4e:bf:17: 8a:31:74:1b:56:98:35:02:52:6f:a9:59:9a:f7:a7:a8:42:f6: ce:44:ac:f2:ee:01:f2:47:86:94:57:34:fa:2d:5c:c0:16:8d: c3:17:19:18:db:29:82:10:c9:74:2a:bb:d4:b7:d5:83:2d:fb: 16:06:30:b0:f9:74:d3:62:8a:ad:27:94:45:11:72:38:ef:f7: 96:30:ce:e2:64:05:a4:e4:7e:31:93:4b:7e:c3:cc:24:66:02: 53:65:4c:ff:05:95:68:0d:bb:d5:89:4b:83:da:9d:3f:d1:9c: 7f:75:57:1a:d0:c1:42:6f:bc:67:3f:75:b0:7c:df:64:4c:72: cf:7c:51:14:8e:69:c4:ef:92:56:9f:a9:a0:98:f9:f4:ce:0e: 8d:b7:ff:07:a1:9f:96:3c:96:13:3a:11:df:b7:74:37:43:c0: 56:86:fb:6d:c2:48:e2:17:0e:aa:8d:9f:72:ce:5e:9f:ab:73: a3:2f:de:e6:b6:8f:a3:0a:0c:77:c6:d0:b5:03:14:85:d0:44: 4a:ea:c5:0e:10:95:a9:23:56:6e:cb:99:7a:88:83:1b:56:6e: 2d:e7:fe:d4:ec:8a:7e:64:ee:e1:85:f0:5e:6a:83:9f:77:2f: 51:95:54:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsH7AbN5uMQ4eddEbwtHUJdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNTEyNTYxZmM0ZWU1NGI3OTljNWFmNDI4ZmZmYmNiYWZk NDU0ZWYwHhcNMjUxMjEwMTEwMTA3WhcNMjUxMjExMTEwMTA3WjAzMTEwLwYDVQQD Eyg0NmMyOTc5MDQ0YmVlZTFjMjljZDUwNmQwZjVjODkzNmExNWE3YzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hXXNFi7oFnJZHENIS60VM0IsIEn D9/WRjuAV5iNpwz2Q0OPKa6EoGiuYk4DXIY7N3feiJixCW0G818GU/bdotuHxeHD efp1mNO68jJYQC3+g4EUZJHgK68EPlSASx04oNl3297evNdX6WYlhMW0nLiTKtT4 8DQrfRartz9zZ/K3+AMr5BpMjAtBDNL+Ki45847N60w50qJxsJjO105HvUqZE4k9 Vnw97r7Kw5ghp1ngEvpBDmbXQwXnJESWd8N8HKmEe5m6qnxjCObl+jtdryLimK31 JnzNwReHJDtajgsOHnCreUxxH92NJOaMtvxu3SqqYXO2JE0Mnp3NpVJ/RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEbCl5BEvu4cKc1QbQ9ciTahWnwPMB8GA1UdIwQY MBaAFEJRJWH8TuVLeZxa9Cj/+8uv1FTvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWxFbFlmeE81VXQ1bkZyMEtQXzd5Nl9VVk84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9iODhjODYtOTYyOS00M2M2LTgyMWUt N2E3MmUyNmM4OTE4LzEvUWxFbFlmeE81VXQ1bkZyMEtQXzd5Nl9VVk84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9iODhjODYtOTYyOS00M2M2LTgyMWUtN2E3MmUyNmM4OTE4 LzEvUWxFbFlmeE81VXQ1bkZyMEtQXzd5Nl9VVk84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMv76aFTf feICtpzQxQ47Tr8XijF0G1aYNQJSb6lZmvenqEL2zkSs8u4B8keGlFc0+i1cwBaN wxcZGNspghDJdCq71LfVgy37FgYwsPl002KKrSeURRFyOO/3ljDO4mQFpOR+MZNL fsPMJGYCU2VM/wWVaA271YlLg9qdP9Gcf3VXGtDBQm+8Zz91sHzfZExyz3xRFI5p xO+SVp+poJj59M4Ojbf/B6GfljyWEzoR37d0N0PAVob7bcJI4hcOqo2fcs5en6tz oy/e5raPowoMd8bQtQMUhdBESurFDhCVqSNWbsuZeoiDG1ZuLef+1OyKfmTu4YXw XmqDn3cvUZVUvg== -----END CERTIFICATE-----Generated at Wed Dec 10 18:00:43 2025 by rpki-client