This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft File: RQLrIq5cC03NOaD5ZBolcGNEcfk.mft (raw, json) Hash identifier: ymoxGCwac2Uawv27CHafWnd4kLGuRg02CmjoyBqS2PY= Subject key identifier: D6:C7:22:C8:40:22:FD:B2:A7:25:22:0B:DB:22:BC:CE:9B:58:57:31 Authority key identifier: 45:02:EB:22:AE:5C:0B:4D:CD:39:A0:F9:64:1A:25:70:63:44:71:F9 Certificate issuer: /CN=4502eb22ae5c0b4dcd39a0f9641a2570634471f9 Certificate serial: 019B484B52686DB933D203D531E6B92E35CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft Manifest number: 07A5 Signing time: Mon 22 Dec 2025 23:00:54 +0000 Manifest this update: Mon 22 Dec 2025 23:00:54 +0000 Manifest next update: Tue 23 Dec 2025 23:00:54 +0000 Files and hashes: 1: RQLrIq5cC03NOaD5ZBolcGNEcfk.crl (hash: aCLcPDsND824oYQmduZKhXYZ9NUZ34eTSROydAyGL54=) 2: bEqgtrspfIQ8XBKsdOXgQ2Xyvsk.roa (hash: RpGyhN37kiaHNLFfnHAUkc7DrZnN6EVEiWZPE+rzTPU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.crl rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:4b:52:68:6d:b9:33:d2:03:d5:31:e6:b9:2e:35:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502eb22ae5c0b4dcd39a0f9641a2570634471f9 Validity Not Before: Dec 22 23:00:54 2025 GMT Not After : Dec 23 23:00:54 2025 GMT Subject: CN=d6c722c84022fdb2a725220bdb22bcce9b585731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3c:c1:8f:04:9f:d0:ab:51:36:4e:0b:c7:e8: 8d:ff:d1:61:a2:4a:39:77:80:84:53:4d:e4:72:14: cf:b3:b5:38:a7:fa:5a:bf:fb:8a:ae:d4:5a:62:33: 8b:01:f5:3e:3f:39:73:8a:4c:9d:40:1b:fe:d3:24: c1:60:7a:29:b2:99:12:31:22:d2:6a:17:e6:8e:b3: 87:f0:82:ec:19:37:51:5f:e7:90:fc:4c:22:27:98: e2:1c:4e:5c:5d:aa:5e:d1:79:cd:39:4b:92:95:47: db:ba:b3:d3:28:1a:91:62:14:88:13:60:ae:8f:40: 29:75:40:f3:32:99:fa:4a:0b:9b:af:8f:e8:0e:36: b6:ba:e3:6e:55:ae:76:7e:04:f9:d9:0f:aa:e5:6b: d0:69:d3:60:89:dc:fd:7e:cd:c4:48:09:d5:d5:43: a2:25:40:fb:87:8a:f1:45:aa:68:cc:b4:75:6c:48: 5a:5f:b1:9e:69:76:cd:4a:45:37:a3:b5:c1:04:e8: 70:ff:1a:fb:13:71:23:3c:4e:00:9f:78:d0:9d:c0: a5:ca:bc:d4:bb:b1:95:c0:d5:42:00:ce:ce:f5:d3: 70:4b:3f:eb:f4:60:40:20:01:1d:ca:bd:f3:7b:bf: 86:40:2d:da:9e:7f:a9:9a:89:17:79:b2:3a:bf:9b: bf:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C7:22:C8:40:22:FD:B2:A7:25:22:0B:DB:22:BC:CE:9B:58:57:31 X509v3 Authority Key Identifier: keyid:45:02:EB:22:AE:5C:0B:4D:CD:39:A0:F9:64:1A:25:70:63:44:71:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:4b:2e:1f:2a:b1:ae:9f:6e:ce:de:7e:95:97:d2:40:e2:16: 62:55:68:d0:38:06:b9:e2:6a:15:66:42:d8:65:a2:5c:2f:f5: fb:e3:1c:63:72:f7:58:a0:4e:94:f7:60:b5:4d:35:8a:15:8a: fb:df:d3:a5:de:29:2e:89:af:f5:b3:1a:a7:69:6d:7e:17:5c: 4e:65:72:fb:a0:33:8a:d4:c4:25:3d:08:e3:81:ab:09:0e:c9: 0c:2d:bf:19:b7:b7:8d:e3:7e:9b:5b:92:ae:f9:e2:65:8d:d6: 93:44:fb:f3:fd:dd:65:1d:ef:a8:bb:b1:a3:9f:2c:36:da:fe: 1e:61:b2:21:27:2d:fc:46:c5:0f:28:6e:4b:df:5d:28:bf:f3: b7:d6:10:fc:10:d7:32:25:6b:83:a0:26:4f:5a:92:8b:ff:c3: 7b:bf:08:1d:d8:a9:a4:8d:35:bc:db:55:a8:fc:45:f2:37:eb: 4a:bb:52:87:03:fe:f8:20:c3:bd:3a:d9:1e:ee:04:4f:07:21: 44:d6:5d:87:89:38:84:b3:53:42:f4:c3:7f:c3:1e:64:93:6e: f3:8e:9a:17:06:a5:98:ae:3d:33:04:1f:db:0e:37:6d:ec:ca: 03:64:54:44:67:94:c4:91:cc:11:63:16:4d:81:22:1a:4a:d9: f3:1e:08:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIS1Jobbkz0gPVMea5LjXKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1MDJlYjIyYWU1YzBiNGRjZDM5YTBmOTY0MWEyNTcwNjM0 NDcxZjkwHhcNMjUxMjIyMjMwMDU0WhcNMjUxMjIzMjMwMDU0WjAzMTEwLwYDVQQD EyhkNmM3MjJjODQwMjJmZGIyYTcyNTIyMGJkYjIyYmNjZTliNTg1NzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTzBjwSf0KtRNk4Lx+iN/9Fhoko5 d4CEU03kchTPs7U4p/pav/uKrtRaYjOLAfU+PzlzikydQBv+0yTBYHopspkSMSLS ahfmjrOH8ILsGTdRX+eQ/EwiJ5jiHE5cXape0XnNOUuSlUfburPTKBqRYhSIE2Cu j0ApdUDzMpn6Sgubr4/oDja2uuNuVa52fgT52Q+q5WvQadNgidz9fs3ESAnV1UOi JUD7h4rxRapozLR1bEhaX7GeaXbNSkU3o7XBBOhw/xr7E3EjPE4An3jQncClyrzU u7GVwNVCAM7O9dNwSz/r9GBAIAEdyr3ze7+GQC3ann+pmokXebI6v5u/sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNbHIshAIv2ypyUiC9sivM6bWFcxMB8GA1UdIwQY MBaAFEUC6yKuXAtNzTmg+WQaJXBjRHH5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlFMcklxNWNDMDNOT2FENVpCb2xjR05FY2ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS80NTY1OWItMjRkNy00MjIwLWExMTgt OTNmNDI1NWYyYjgyLzEvUlFMcklxNWNDMDNOT2FENVpCb2xjR05FY2ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS80NTY1OWItMjRkNy00MjIwLWExMTgtOTNmNDI1NWYyYjgy LzEvUlFMcklxNWNDMDNOT2FENVpCb2xjR05FY2ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAEsuHyqx rp9uzt5+lZfSQOIWYlVo0DgGueJqFWZC2GWiXC/1++McY3L3WKBOlPdgtU01ihWK +9/Tpd4pLomv9bMap2ltfhdcTmVy+6AzitTEJT0I44GrCQ7JDC2/Gbe3jeN+m1uS rvniZY3Wk0T78/3dZR3vqLuxo58sNtr+HmGyISct/EbFDyhuS99dKL/zt9YQ/BDX MiVrg6AmT1qSi//De78IHdippI01vNtVqPxF8jfrSrtShwP++CDDvTrZHu4ETwch RNZdh4k4hLNTQvTDf8MeZJNu846aFwalmK49MwQf2w43bezKA2RURGeUxJHMEWMW TYEiGkrZ8x4Ieg== -----END CERTIFICATE-----Generated at Tue Dec 23 01:54:16 2025 by rpki-client