This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft File: QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft (raw, json) Hash identifier: 1ml9wJQp9hGyu6xAtOKRxhI08giHWTheHEbddtZT0bc= Subject key identifier: 72:74:6F:0E:DD:38:0F:E5:56:96:38:AE:FB:41:6C:61:0F:CB:EB:C7 Authority key identifier: 42:56:0F:C1:CF:6B:97:46:67:37:C3:02:71:23:FA:12:0B:19:54:D5 Certificate issuer: /CN=42560fc1cf6b97466737c3027123fa120b1954d5 Certificate serial: 019B1871A850F2C3757A68D61D7EC1649827 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft Manifest number: 1501 Signing time: Sat 13 Dec 2025 16:01:00 +0000 Manifest this update: Sat 13 Dec 2025 16:01:00 +0000 Manifest next update: Sun 14 Dec 2025 16:01:00 +0000 Files and hashes: 1: QlYPwc9rl0ZnN8MCcSP6EgsZVNU.crl (hash: JmZ5w6jJsuhaJSQSQV6+XSj2MLwwnTD3VGm2WRjk/Ag=) 2: s2rqpwumhtmvSEX63lF_jSCCIqI.roa (hash: 8m00LdhJd4srRCMsExEiNSzzG4jj/QWLsZ3SSDUCdOo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.crl rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 16:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:71:a8:50:f2:c3:75:7a:68:d6:1d:7e:c1:64:98:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42560fc1cf6b97466737c3027123fa120b1954d5 Validity Not Before: Dec 13 16:01:00 2025 GMT Not After : Dec 14 16:01:00 2025 GMT Subject: CN=72746f0edd380fe5569638aefb416c610fcbebc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:12:da:b4:95:ac:b2:d0:07:56:5f:6c:4e:47: 40:39:1e:7a:b1:d9:0d:ca:5e:94:45:4f:42:66:6c: 54:cb:b3:5d:72:a6:2f:1a:ff:0c:db:a4:19:1d:4b: a1:7c:1e:3b:ce:52:a0:95:19:50:d8:2f:6a:b1:f4: 5c:4a:87:7a:b8:35:62:61:e0:5f:e0:f8:b5:17:29: 3b:3f:7c:16:dc:b9:e1:e5:c7:7e:6a:e1:60:d9:7c: 40:44:d7:95:d3:60:be:db:16:d6:e4:94:cc:2f:a4: 77:2c:f5:c1:58:c0:b0:7f:52:82:c7:33:6a:7e:7c: d9:89:c8:65:11:97:07:3e:1f:93:15:00:2a:b9:e9: f0:8c:07:33:b3:f8:7a:3a:cd:70:b1:26:ea:d8:49: 22:0b:d3:65:13:31:6e:77:24:83:0c:d0:79:ba:7f: 0f:4f:48:b5:d2:ab:71:2f:cf:8e:95:f1:6a:63:90: 95:f6:8a:dc:3c:68:a3:55:1e:ee:ce:c6:34:ca:55: ca:54:33:2c:f5:ca:7b:48:32:6e:95:45:f5:ed:05: 59:5c:f9:4e:67:1c:f9:92:2f:40:5f:09:92:22:6a: 3e:a8:cc:8e:2b:3a:ad:e5:95:f1:a1:99:c8:e5:97: 83:48:a9:d6:ff:a8:d4:7c:29:ea:7d:4c:91:7a:87: 74:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:74:6F:0E:DD:38:0F:E5:56:96:38:AE:FB:41:6C:61:0F:CB:EB:C7 X509v3 Authority Key Identifier: keyid:42:56:0F:C1:CF:6B:97:46:67:37:C3:02:71:23:FA:12:0B:19:54:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:54:4c:4e:99:4e:6c:a8:08:ce:dd:18:82:53:f9:29:13:06: c6:37:62:a8:44:20:62:9b:70:e2:53:bd:af:1c:b7:a9:23:fc: d8:e8:95:89:55:85:62:b9:f8:4b:3e:07:17:21:e5:90:7c:f3: 36:39:86:af:cf:91:c1:96:66:5e:ec:d7:18:d6:96:c4:5c:f0: 2c:56:f9:cd:fb:5b:c6:a5:38:6f:7d:31:62:c8:88:c1:13:40: f0:ed:b0:8b:04:78:2a:05:55:8a:32:de:b4:66:d0:de:c6:f5: 78:9f:cd:f6:1a:41:a6:c6:5e:c9:72:e3:73:25:8e:6a:fd:90: b7:ff:a9:ae:c4:a9:fc:b5:8f:01:68:8f:7b:8f:98:8c:6c:33: fd:00:27:61:f3:63:79:10:b0:c0:06:03:1b:b3:ce:6f:d5:85: 0c:82:86:2f:1d:73:1b:1c:28:b8:45:23:6c:92:e1:db:0a:29: 92:3c:26:28:a9:36:8b:ad:90:39:a0:e2:66:3d:fe:d1:e8:a2: 10:44:a2:b4:54:e9:ee:e5:b7:f0:7c:42:88:12:6c:43:8c:87: 38:34:8e:fb:a1:50:5b:46:5b:27:1b:ea:b3:68:3a:68:0b:fe: 45:4f:96:aa:48:ec:08:2b:43:e4:6b:e9:c8:bd:f5:cd:2d:62: 0c:d6:59:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYcahQ8sN1emjWHX7BZJgnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNTYwZmMxY2Y2Yjk3NDY2NzM3YzMwMjcxMjNmYTEyMGIx OTU0ZDUwHhcNMjUxMjEzMTYwMTAwWhcNMjUxMjE0MTYwMTAwWjAzMTEwLwYDVQQD Eyg3Mjc0NmYwZWRkMzgwZmU1NTY5NjM4YWVmYjQxNmM2MTBmY2JlYmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBLatJWsstAHVl9sTkdAOR56sdkN yl6URU9CZmxUy7NdcqYvGv8M26QZHUuhfB47zlKglRlQ2C9qsfRcSod6uDViYeBf 4Pi1Fyk7P3wW3Lnh5cd+auFg2XxARNeV02C+2xbW5JTML6R3LPXBWMCwf1KCxzNq fnzZichlEZcHPh+TFQAquenwjAczs/h6Os1wsSbq2EkiC9NlEzFudySDDNB5un8P T0i10qtxL8+OlfFqY5CV9orcPGijVR7uzsY0ylXKVDMs9cp7SDJulUX17QVZXPlO Zxz5ki9AXwmSImo+qMyOKzqt5ZXxoZnI5ZeDSKnW/6jUfCnqfUyReod0jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHJ0bw7dOA/lVpY4rvtBbGEPy+vHMB8GA1UdIwQY MBaAFEJWD8HPa5dGZzfDAnEj+hILGVTVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWxZUHdjOXJsMFpuTjhNQ2NTUDZFZ3NaVk5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mYjA3M2YtNmIzOC00ZWNiLWI5NmYt MmMyMDc5ZDkxNmFkLzEvUWxZUHdjOXJsMFpuTjhNQ2NTUDZFZ3NaVk5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9mYjA3M2YtNmIzOC00ZWNiLWI5NmYtMmMyMDc5ZDkxNmFk LzEvUWxZUHdjOXJsMFpuTjhNQ2NTUDZFZ3NaVk5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYlRMTplO bKgIzt0YglP5KRMGxjdiqEQgYptw4lO9rxy3qSP82OiViVWFYrn4Sz4HFyHlkHzz NjmGr8+RwZZmXuzXGNaWxFzwLFb5zftbxqU4b30xYsiIwRNA8O2wiwR4KgVVijLe tGbQ3sb1eJ/N9hpBpsZeyXLjcyWOav2Qt/+prsSp/LWPAWiPe4+YjGwz/QAnYfNj eRCwwAYDG7POb9WFDIKGLx1zGxwouEUjbJLh2wopkjwmKKk2i62QOaDiZj3+0eii EESitFTp7uW38HxCiBJsQ4yHODSO+6FQW0ZbJxvqs2g6aAv+RU+WqkjsCCtD5Gvp yL31zS1iDNZZuQ== -----END CERTIFICATE-----Generated at Sun Dec 14 01:55:16 2025 by rpki-client