This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft File: qlTEdj6gGMPccCA9BO_nH9SxsGY.mft (raw, json) Hash identifier: CVg7ygTbYj++9YECBFBO6VEXRT+ATT+j9ww3CGf7oEE= Subject key identifier: BE:E8:80:61:4F:6C:F5:84:45:23:62:3F:5A:46:AC:F2:7A:D7:E2:78 Authority key identifier: AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66 Certificate issuer: /CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066 Certificate serial: 019B21E26E43C5096774CD8FCE13591B4E79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft Manifest number: 1459 Signing time: Mon 15 Dec 2025 12:00:46 +0000 Manifest this update: Mon 15 Dec 2025 12:00:46 +0000 Manifest next update: Tue 16 Dec 2025 12:00:46 +0000 Files and hashes: 1: 3uOrqvmP8Ja1Ais3wLBFc-Yv8js.roa (hash: exOhjbpn5m/SyHb+kmTmnk1GW2qg2u8lsLmmerL5o9w=) 2: IzP3cDAX9aykSDzKdoH0u3AyA2M.roa (hash: NC8YDjUxW5EM3pV7QmdgO/vAJ9HwNpXuNP3EpqENObk=) 3: f2dJVu8muGYFnZFPcMivMl98KP8.roa (hash: rWmOSQ2QhYKl4L1IyTfTDLKWAGfQI+Kz8vdUqnsATxs=) 4: qlTEdj6gGMPccCA9BO_nH9SxsGY.crl (hash: 8cTyPsdr3eENI787nm2iRsBU9mM1rLOcU9pN0pry+kg=) 5: svOlfPLlFDJ0sGLcz6b_IG_H3W0.roa (hash: zsvLBGGbQT+oIT4diXH9qGrVZIYbNUKP7yL6prMLg/0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 12:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:e2:6e:43:c5:09:67:74:cd:8f:ce:13:59:1b:4e:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066 Validity Not Before: Dec 15 12:00:46 2025 GMT Not After : Dec 16 12:00:46 2025 GMT Subject: CN=bee880614f6cf5844523623f5a46acf27ad7e278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2e:f4:f2:31:ab:cd:7d:b8:49:56:8f:49:b7: 74:ad:d6:92:02:10:1b:a9:8c:98:eb:ed:9b:ba:41: 33:57:bd:2a:2e:49:13:f7:e4:47:cf:8d:0c:de:5b: ea:f3:6b:20:7c:6d:1d:e3:4a:66:eb:94:d5:4e:dc: 7e:98:13:59:eb:e9:86:86:c7:fa:04:06:b4:dd:ed: 6b:93:e4:ea:d4:2f:9f:3d:48:83:df:8f:53:1c:6e: 60:89:97:9f:cf:90:64:98:e1:45:e1:83:54:58:d1: 62:6b:e5:00:b7:40:78:d7:9b:0a:a2:66:00:36:6e: db:4e:44:f8:01:88:ae:fe:1f:55:af:04:1b:4c:e6: 93:22:b2:f9:08:85:f8:76:da:55:a0:a9:83:84:4a: b1:67:1c:23:18:47:13:fb:04:fa:5e:9e:c9:58:1a: ca:7d:bd:bd:7a:33:2e:e4:2b:81:d3:cd:7d:67:d3: 92:41:e0:cb:42:aa:e3:e9:c1:fd:3a:30:70:13:3f: 03:93:af:de:0f:e9:5d:05:9d:27:e4:b7:45:18:92: c3:56:37:41:68:a4:e5:c3:e6:53:60:af:4e:89:37: 65:07:ad:d1:c9:06:19:61:28:b9:02:1e:d5:22:8c: 38:38:65:f3:0c:7f:85:66:cc:26:d0:3f:24:73:b5: a0:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:E8:80:61:4F:6C:F5:84:45:23:62:3F:5A:46:AC:F2:7A:D7:E2:78 X509v3 Authority Key Identifier: keyid:AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:39:64:92:6d:e5:77:68:b6:4b:ea:c1:a8:39:84:f6:70:dd: ed:da:03:34:d2:31:9e:1c:59:9a:ce:3a:80:07:3e:f3:74:ae: f9:8f:89:5d:11:92:39:e5:6c:8b:10:13:2a:46:1d:5a:3a:3f: 76:ef:83:f2:2e:12:00:1f:30:52:4c:ff:08:8e:0b:31:5c:6a: c8:2c:8c:98:e4:22:8d:71:c8:71:37:e9:05:43:1e:e1:6e:01: 65:ed:e2:69:01:58:d3:56:3a:19:5a:65:d4:ff:d4:41:b1:0c: 12:b0:6f:7b:ca:cb:c6:26:05:a9:81:42:47:ab:4c:76:25:72: ce:68:b5:37:47:32:d7:b7:b5:2f:13:fd:d9:2a:e9:41:62:78: 3f:9e:17:e0:5e:1a:30:33:bf:6e:98:a6:b9:37:69:a3:03:e3: 5d:3a:b4:19:ff:28:b8:39:eb:ab:f7:3e:a2:65:c7:18:29:3d: 73:e5:c7:b3:48:e2:4b:15:1d:67:1c:bb:81:0b:07:b5:78:32: 97:c6:2c:ca:cb:58:5c:3b:a8:dc:a9:ff:a2:96:4e:32:3d:72: 16:ce:98:3d:eb:1e:26:35:ea:bf:42:43:38:cb:c1:14:8f:8e: 43:ed:b6:4f:19:4c:c2:0d:b9:19:6c:b1:65:b8:e0:c6:43:49: 6d:01:6f:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsh4m5DxQlndM2PzhNZG055MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNTRjNDc2M2VhMDE4YzNkYzcwMjAzZDA0ZWZlNzFmZDRi MWIwNjYwHhcNMjUxMjE1MTIwMDQ2WhcNMjUxMjE2MTIwMDQ2WjAzMTEwLwYDVQQD EyhiZWU4ODA2MTRmNmNmNTg0NDUyMzYyM2Y1YTQ2YWNmMjdhZDdlMjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtS708jGrzX24SVaPSbd0rdaSAhAb qYyY6+2bukEzV70qLkkT9+RHz40M3lvq82sgfG0d40pm65TVTtx+mBNZ6+mGhsf6 BAa03e1rk+Tq1C+fPUiD349THG5giZefz5BkmOFF4YNUWNFia+UAt0B415sKomYA Nm7bTkT4AYiu/h9VrwQbTOaTIrL5CIX4dtpVoKmDhEqxZxwjGEcT+wT6Xp7JWBrK fb29ejMu5CuB0819Z9OSQeDLQqrj6cH9OjBwEz8Dk6/eD+ldBZ0n5LdFGJLDVjdB aKTlw+ZTYK9OiTdlB63RyQYZYSi5Ah7VIow4OGXzDH+FZswm0D8kc7WghwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL7ogGFPbPWERSNiP1pGrPJ61+J4MB8GA1UdIwQY MBaAFKpUxHY+oBjD3HAgPQTv5x/UsbBmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWxURWRqNmdHTVBjY0NBOUJPX25IOVN4c0dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9hMjFjOWUtODdmMS00OTgzLTgzOTQt ZGUzNzY3M2M0MDljLzEvcWxURWRqNmdHTVBjY0NBOUJPX25IOVN4c0dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9hMjFjOWUtODdmMS00OTgzLTgzOTQtZGUzNzY3M2M0MDlj LzEvcWxURWRqNmdHTVBjY0NBOUJPX25IOVN4c0dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjTlkkm3l d2i2S+rBqDmE9nDd7doDNNIxnhxZms46gAc+83Su+Y+JXRGSOeVsixATKkYdWjo/ du+D8i4SAB8wUkz/CI4LMVxqyCyMmOQijXHIcTfpBUMe4W4BZe3iaQFY01Y6GVpl 1P/UQbEMErBve8rLxiYFqYFCR6tMdiVyzmi1N0cy17e1LxP92SrpQWJ4P54X4F4a MDO/bpimuTdpowPjXTq0Gf8ouDnrq/c+omXHGCk9c+XHs0jiSxUdZxy7gQsHtXgy l8YsystYXDuo3Kn/opZOMj1yFs6YPeseJjXqv0JDOMvBFI+OQ+22TxlMwg25GWyx ZbjgxkNJbQFvSA== -----END CERTIFICATE-----Generated at Mon Dec 15 16:53:35 2025 by rpki-client