This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.mft File: qltGOxeiXraN6recsPmJ79fkihU.mft (raw, json) Hash identifier: 7vV6SYefqac6/7N484ohjZABoiNqx2yo7zHV7e68Is0= Subject key identifier: EE:5B:E7:47:6F:6A:0A:5C:13:53:39:E2:C6:9D:A3:41:0B:86:A9:87 Authority key identifier: AA:5B:46:3B:17:A2:5E:B6:8D:EA:B7:9C:B0:F9:89:EF:D7:E4:8A:15 Certificate issuer: /CN=aa5b463b17a25eb68deab79cb0f989efd7e48a15 Certificate serial: 019AF91DE4E52A4D7F440B3527D105CBA9E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qltGOxeiXraN6recsPmJ79fkihU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.mft Manifest number: 12 Signing time: Sun 07 Dec 2025 14:01:17 +0000 Manifest this update: Sun 07 Dec 2025 14:01:17 +0000 Manifest next update: Mon 08 Dec 2025 14:01:17 +0000 Files and hashes: 1: qltGOxeiXraN6recsPmJ79fkihU.crl (hash: dfQJu86wHoUYwG/MDsgaJlQ0TMHkHRscXrVOw54EXFA=) 2: snjhD4ZbdnCjhHGNejLaziB-EQw.asa (hash: k4YrVwNF0xC0R0c1Vt2SsaD9GQCIRybl7XtCYC8QQBE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.mft rsync://rpki.ripe.net/repository/DEFAULT/qltGOxeiXraN6recsPmJ79fkihU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:1d:e4:e5:2a:4d:7f:44:0b:35:27:d1:05:cb:a9:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa5b463b17a25eb68deab79cb0f989efd7e48a15 Validity Not Before: Dec 7 14:01:17 2025 GMT Not After : Dec 8 14:01:17 2025 GMT Subject: CN=ee5be7476f6a0a5c135339e2c69da3410b86a987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:11:e8:8e:83:b5:a4:b1:1c:ff:2d:4b:25:4a: 66:9e:68:d7:fa:54:ab:d3:38:d2:e7:df:bc:d7:fe: 39:20:6d:d7:70:1c:91:b5:47:40:14:87:70:a8:6b: da:0f:ce:ec:c7:d3:48:12:f2:3f:c3:59:5b:72:fe: a1:0b:06:de:97:65:25:cf:82:1f:4e:f9:5a:53:7e: b5:4c:af:e5:1e:b2:ba:43:43:ea:2a:dc:15:9c:21: 82:9c:fe:c9:11:e3:00:e8:a1:f4:9d:32:fc:ce:eb: 0c:b4:6d:1d:c3:65:ea:06:09:39:63:16:88:94:5a: a8:d9:4c:f7:ee:ca:4c:a4:cd:ff:38:a4:d6:de:36: 46:58:82:04:ae:ef:6f:21:1e:7c:5e:d1:cf:f1:92: 5d:79:31:c3:7c:90:aa:92:5d:9d:15:37:e9:d0:cc: a7:07:55:02:77:ed:ee:d1:00:67:4b:71:19:1c:13: 31:f4:6b:13:17:1d:1a:ed:c8:a3:41:f6:4a:90:ed: ec:32:25:74:54:a7:8c:16:1e:35:10:5c:32:a0:64: 86:d6:ce:22:1d:27:03:dc:9d:2d:f6:d8:85:f6:40: 5e:d9:37:ce:32:68:ee:24:24:4b:65:15:7c:ba:37: b9:c0:e3:54:d2:fb:05:5b:e0:54:42:11:ed:a2:63: 87:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:5B:E7:47:6F:6A:0A:5C:13:53:39:E2:C6:9D:A3:41:0B:86:A9:87 X509v3 Authority Key Identifier: keyid:AA:5B:46:3B:17:A2:5E:B6:8D:EA:B7:9C:B0:F9:89:EF:D7:E4:8A:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qltGOxeiXraN6recsPmJ79fkihU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:60:a8:be:3e:64:fb:3a:cf:ed:9c:81:85:59:82:64:85:d9: 08:4e:6d:7d:31:f3:73:3f:ac:95:d3:da:66:05:12:6c:e7:a1: 47:d7:e7:82:c8:53:9f:0f:f8:f4:ea:bc:28:67:b0:85:54:c0: b3:2e:eb:73:be:8e:cc:df:5c:22:3a:1d:60:fd:63:53:04:66: ce:c5:9e:b7:31:4c:7c:ac:55:02:d6:f9:04:23:d9:67:62:e3: 77:09:ce:30:60:bd:02:09:c2:ee:da:29:b3:f7:fc:b5:d6:dd: f2:20:b6:aa:1f:9a:23:50:20:8b:df:5d:17:36:86:96:2c:96: 08:6e:da:6e:26:98:31:02:7e:de:00:de:bd:d4:d0:9b:53:0f: 40:71:5e:2f:e6:f3:2d:1a:1a:ae:c4:74:c8:c7:56:d1:ed:ec: a2:17:7c:98:11:65:a1:08:5b:eb:00:4f:0f:51:72:60:25:d8: bd:ce:59:b4:36:2d:21:3e:d4:59:e1:cd:42:92:83:3f:d9:f5: 0e:e1:18:80:db:76:53:b8:ac:24:b7:a4:08:a7:66:df:42:64: f0:9e:98:d1:d4:d4:71:47:bf:d9:ed:ef:8b:ef:c9:f2:b3:ee: a3:fe:95:6e:1a:7a:e5:98:b4:be:fa:c6:96:66:77:ea:59:89: a1:34:fe:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr5HeTlKk1/RAs1J9EFy6niMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNWI0NjNiMTdhMjVlYjY4ZGVhYjc5Y2IwZjk4OWVmZDdl NDhhMTUwHhcNMjUxMjA3MTQwMTE3WhcNMjUxMjA4MTQwMTE3WjAzMTEwLwYDVQQD EyhlZTViZTc0NzZmNmEwYTVjMTM1MzM5ZTJjNjlkYTM0MTBiODZhOTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BHojoO1pLEc/y1LJUpmnmjX+lSr 0zjS59+81/45IG3XcByRtUdAFIdwqGvaD87sx9NIEvI/w1lbcv6hCwbel2Ulz4If TvlaU361TK/lHrK6Q0PqKtwVnCGCnP7JEeMA6KH0nTL8zusMtG0dw2XqBgk5YxaI lFqo2Uz37spMpM3/OKTW3jZGWIIEru9vIR58XtHP8ZJdeTHDfJCqkl2dFTfp0Myn B1UCd+3u0QBnS3EZHBMx9GsTFx0a7cijQfZKkO3sMiV0VKeMFh41EFwyoGSG1s4i HScD3J0t9tiF9kBe2TfOMmjuJCRLZRV8uje5wONU0vsFW+BUQhHtomOH+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO5b50dvagpcE1M54sado0ELhqmHMB8GA1UdIwQY MBaAFKpbRjsXol62jeq3nLD5ie/X5IoVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWx0R094ZWlYcmFONnJlY3NQbUo3OWZraWhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8xYmRhZWItMmYxYy00ZDhjLWI0YmIt YzdlNzExNWY0YTJlLzEvcWx0R094ZWlYcmFONnJlY3NQbUo3OWZraWhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8xYmRhZWItMmYxYy00ZDhjLWI0YmItYzdlNzExNWY0YTJl LzEvcWx0R094ZWlYcmFONnJlY3NQbUo3OWZraWhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmWCovj5k +zrP7ZyBhVmCZIXZCE5tfTHzcz+sldPaZgUSbOehR9fngshTnw/49Oq8KGewhVTA sy7rc76OzN9cIjodYP1jUwRmzsWetzFMfKxVAtb5BCPZZ2LjdwnOMGC9AgnC7top s/f8tdbd8iC2qh+aI1Agi99dFzaGliyWCG7abiaYMQJ+3gDevdTQm1MPQHFeL+bz LRoarsR0yMdW0e3sohd8mBFloQhb6wBPD1FyYCXYvc5ZtDYtIT7UWeHNQpKDP9n1 DuEYgNt2U7isJLekCKdm30Jk8J6Y0dTUcUe/2e3vi+/J8rPuo/6Vbhp65Zi0vvrG lmZ36lmJoTT+/g== -----END CERTIFICATE-----Generated at Sun Dec 7 17:13:46 2025 by rpki-client