This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft File: Q15Blg1ZDpmATpC5rwNlWExxLHI.mft (raw, json) Hash identifier: yK9jePQVgOxP672Mng6GgreoVG6F+An5FQinsi8u5z8= Subject key identifier: EC:CA:5F:BE:2C:DA:AC:7F:AC:70:73:2D:0F:63:28:AC:C0:C4:58:4B Authority key identifier: 43:5E:41:96:0D:59:0E:99:80:4E:90:B9:AF:03:65:58:4C:71:2C:72 Certificate issuer: /CN=435e41960d590e99804e90b9af0365584c712c72 Certificate serial: 019B59E3958618237FD6A58FDF225C218CF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft Manifest number: 14ED Signing time: Fri 26 Dec 2025 09:00:45 +0000 Manifest this update: Fri 26 Dec 2025 09:00:45 +0000 Manifest next update: Sat 27 Dec 2025 09:00:45 +0000 Files and hashes: 1: Q15Blg1ZDpmATpC5rwNlWExxLHI.crl (hash: xuu4Lp8vrLN40earUqreggj34Wp3cOQZUIxGmHYDqwE=) 2: Qgkf9isvn9G1i53cocvwB25dPG0.roa (hash: 7pOvhNxITVVpr4C2N2+h/b2aAgFP8cFKYE5FjzDD/YQ=) 3: XGxdWNZPiFptk-3w7OILGgkhItU.roa (hash: xf5heCAI8Pty8+MuLnNYj13qa72HA9enfkhk9E22KD4=) 4: XQLqdml-mlBf3Z-90xd5Tk9chkc.roa (hash: nSfERnt4sWaMf0P1jQhY7bLFNZayDQ04cDYTAEFX1MA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.crl rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:95:86:18:23:7f:d6:a5:8f:df:22:5c:21:8c:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=435e41960d590e99804e90b9af0365584c712c72 Validity Not Before: Dec 26 09:00:45 2025 GMT Not After : Dec 27 09:00:45 2025 GMT Subject: CN=ecca5fbe2cdaac7fac70732d0f6328acc0c4584b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:45:a6:0e:df:91:f4:33:41:2c:dc:f1:40:4a: 7c:bf:00:26:76:43:f4:25:5d:7a:10:1d:53:45:73: 5a:3f:fa:db:10:20:49:58:d6:f3:cf:ef:8d:ff:e2: 29:59:9a:5a:d9:d8:66:81:58:70:ec:8f:43:74:c6: 9f:07:69:da:49:49:20:e0:7a:1f:0c:5d:d4:9c:5f: 34:02:aa:cf:73:79:7a:3b:b9:56:63:1d:0e:52:14: 2b:26:fe:ba:3a:20:0a:83:1e:e8:8b:0f:ea:4c:b2: 77:8c:e6:d1:06:d3:a2:fd:e7:c0:63:a4:7f:f3:e6: 65:5c:5d:ed:89:fd:d8:47:8b:87:68:57:bd:e9:5c: 0b:f7:e1:b4:aa:54:20:4e:0a:5f:8c:d1:06:99:07: 47:c9:e3:94:ee:91:6a:26:fa:8a:d2:fe:13:c4:6d: 97:23:e2:ad:70:97:b5:5f:fc:b4:d6:bf:72:bc:36: 59:89:9c:2d:77:fd:16:79:ea:f3:cd:1b:9e:f7:a8: 88:13:ba:90:4e:a5:15:bc:13:db:f2:7d:14:74:6c: 13:46:95:aa:5e:c1:50:b7:15:2c:f1:92:d8:6b:c3: ed:c2:a5:91:1a:01:a7:e3:a1:08:90:5e:a7:05:89: 2d:70:bd:ac:1e:09:14:12:74:4a:0e:8b:2e:d5:fa: 5e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:CA:5F:BE:2C:DA:AC:7F:AC:70:73:2D:0F:63:28:AC:C0:C4:58:4B X509v3 Authority Key Identifier: keyid:43:5E:41:96:0D:59:0E:99:80:4E:90:B9:AF:03:65:58:4C:71:2C:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:4e:3c:30:77:bb:be:c3:f6:9e:b6:0a:22:3d:e0:44:df:4e: 04:be:d6:a8:22:f6:60:66:88:35:a0:8d:fa:e5:90:68:b6:55: 7e:fb:42:1c:0d:60:36:0a:83:92:74:75:e9:bf:9f:74:d3:da: 5b:99:24:70:bb:9e:9d:26:0b:64:22:7d:0d:a4:9b:23:8c:1a: f8:48:61:72:8d:53:b8:f8:9b:bb:db:0f:2b:17:f8:51:0f:0f: c2:eb:48:74:cd:70:e8:e4:a6:f2:ec:06:81:ed:32:50:b9:f5: f1:9e:08:5b:78:62:32:b0:07:29:f3:51:a7:bd:54:ca:43:6e: b7:4e:df:89:77:e3:5c:ad:c1:07:96:3e:06:81:4c:7b:3a:3d: 6b:4c:7a:70:88:df:c0:b8:d5:4f:0d:2c:53:5e:ca:c2:10:ef: 43:27:d7:26:db:04:22:46:2e:e7:6f:03:d7:b9:39:61:c2:6b: 35:c0:6a:f2:9c:6e:48:5b:9b:69:41:fb:fa:45:73:b2:0c:e9: bf:86:18:40:56:1a:e0:bb:13:12:fb:2f:45:24:c8:57:cc:53: 8c:46:77:9a:d4:76:27:08:c9:3e:a2:7d:6a:d0:d5:23:0b:a9: 16:b2:36:39:b3:37:60:d4:47:96:25:90:1f:9f:ac:95:62:bd: 6b:ba:43:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ45WGGCN/1qWP3yJcIYz0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzNWU0MTk2MGQ1OTBlOTk4MDRlOTBiOWFmMDM2NTU4NGM3 MTJjNzIwHhcNMjUxMjI2MDkwMDQ1WhcNMjUxMjI3MDkwMDQ1WjAzMTEwLwYDVQQD EyhlY2NhNWZiZTJjZGFhYzdmYWM3MDczMmQwZjYzMjhhY2MwYzQ1ODRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUWmDt+R9DNBLNzxQEp8vwAmdkP0 JV16EB1TRXNaP/rbECBJWNbzz++N/+IpWZpa2dhmgVhw7I9DdMafB2naSUkg4Hof DF3UnF80AqrPc3l6O7lWYx0OUhQrJv66OiAKgx7oiw/qTLJ3jObRBtOi/efAY6R/ 8+ZlXF3tif3YR4uHaFe96VwL9+G0qlQgTgpfjNEGmQdHyeOU7pFqJvqK0v4TxG2X I+KtcJe1X/y01r9yvDZZiZwtd/0WeerzzRue96iIE7qQTqUVvBPb8n0UdGwTRpWq XsFQtxUs8ZLYa8PtwqWRGgGn46EIkF6nBYktcL2sHgkUEnRKDosu1fpeFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOzKX74s2qx/rHBzLQ9jKKzAxFhLMB8GA1UdIwQY MBaAFENeQZYNWQ6ZgE6Qua8DZVhMcSxyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTE1QmxnMVpEcG1BVHBDNXJ3TmxXRXh4TEhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83ZTJmMjgtNWNhZS00ZTZmLWE1ZjAt MDFiYjVmZDUzNGY1LzEvUTE1QmxnMVpEcG1BVHBDNXJ3TmxXRXh4TEhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC83ZTJmMjgtNWNhZS00ZTZmLWE1ZjAtMDFiYjVmZDUzNGY1 LzEvUTE1QmxnMVpEcG1BVHBDNXJ3TmxXRXh4TEhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkk48MHe7 vsP2nrYKIj3gRN9OBL7WqCL2YGaINaCN+uWQaLZVfvtCHA1gNgqDknR16b+fdNPa W5kkcLuenSYLZCJ9DaSbI4wa+Ehhco1TuPibu9sPKxf4UQ8PwutIdM1w6OSm8uwG ge0yULn18Z4IW3hiMrAHKfNRp71UykNut07fiXfjXK3BB5Y+BoFMezo9a0x6cIjf wLjVTw0sU17KwhDvQyfXJtsEIkYu528D17k5YcJrNcBq8pxuSFubaUH7+kVzsgzp v4YYQFYa4LsTEvsvRSTIV8xTjEZ3mtR2JwjJPqJ9atDVIwupFrI2ObM3YNRHliWQ H5+slWK9a7pD4A== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:04 2025 by rpki-client