This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft File: qlPNLFhKPcFiCLqTsNt0dzs_I74.mft (raw, json) Hash identifier: LqtoeU4hzlWEqOilQ7JWGNPQ57Ui5MzJJhW0OnL10fA= Subject key identifier: A9:14:6B:CD:58:12:90:F6:AF:93:18:C4:8E:F9:64:7C:F1:3E:15:4B Authority key identifier: AA:53:CD:2C:58:4A:3D:C1:62:08:BA:93:B0:DB:74:77:3B:3F:23:BE Certificate issuer: /CN=aa53cd2c584a3dc16208ba93b0db74773b3f23be Certificate serial: 019B424A4AF5BC40632F7CC4F3F9D5ABF72E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 19:02:03 +0000 Manifest this update: Sun 21 Dec 2025 19:02:03 +0000 Manifest next update: Mon 22 Dec 2025 19:02:03 +0000 Files and hashes: 1: 0koZyFChDezPZrlYJuMfvZjhl9U.roa (hash: de9sKJ93r6KtWpoBh4fQ9q5HQjJugLR9RFxcJ5k+oDo=) 2: qlPNLFhKPcFiCLqTsNt0dzs_I74.crl (hash: +ze3OI9Zph7FsbEbg+9wsFmzMeKlR8kmHaNB55BmR/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:4a:f5:bc:40:63:2f:7c:c4:f3:f9:d5:ab:f7:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa53cd2c584a3dc16208ba93b0db74773b3f23be Validity Not Before: Dec 21 19:02:03 2025 GMT Not After : Dec 22 19:02:03 2025 GMT Subject: CN=a9146bcd581290f6af9318c48ef9647cf13e154b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3b:24:a2:bd:8f:95:f0:8d:43:bb:1b:f3:6f: 3c:85:3b:43:7c:ad:71:33:d8:9f:79:0c:81:f8:26: e7:5d:d9:bc:05:62:af:39:f7:51:57:90:31:ce:ad: 3c:0e:b2:59:10:d0:5f:6a:06:f2:21:99:c3:08:0a: c2:b8:20:22:81:d0:56:8d:6b:75:ec:45:e2:2e:ad: a3:aa:35:d6:22:ae:01:95:d2:5d:c9:b7:ae:04:86: 7c:2a:47:6f:fd:4e:5f:1c:4e:3d:2a:33:a4:78:1a: 86:35:93:52:8c:22:3c:be:36:f2:60:59:69:bb:59: 14:ac:9f:34:fa:67:56:a8:97:74:69:14:d3:23:74: 80:50:6a:8e:65:23:ef:3c:a2:0b:8e:3b:e7:34:94: 66:4e:99:13:cf:16:9f:55:6f:76:e2:9b:b6:34:c1: c0:05:b9:7e:db:59:6c:fc:f6:1e:2a:69:99:b4:bb: 33:46:64:4c:b9:61:96:6e:9b:91:00:94:76:a2:b3: 0d:50:b0:10:a5:49:02:44:9d:ec:f4:b9:ab:c2:ac: 76:3c:e8:92:f2:f9:fd:b2:8b:50:5b:fc:5e:fb:58: 01:b0:75:c3:bc:b0:85:a9:30:39:b9:f3:ec:be:bf: 7c:5c:25:29:35:89:5a:5e:0f:1d:5b:39:70:a3:56: 25:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:14:6B:CD:58:12:90:F6:AF:93:18:C4:8E:F9:64:7C:F1:3E:15:4B X509v3 Authority Key Identifier: keyid:AA:53:CD:2C:58:4A:3D:C1:62:08:BA:93:B0:DB:74:77:3B:3F:23:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:fe:64:d1:b3:b9:89:ed:16:6c:8f:5f:3b:b9:40:89:51:e1: 73:1f:e1:51:6a:8b:a2:83:bb:e2:e9:74:49:6e:40:43:f4:12: b6:72:aa:d7:80:fe:5d:58:9f:a1:08:45:3e:e9:c3:b1:51:0b: da:8b:c6:69:41:8b:db:71:9f:37:d1:08:b5:c5:b6:75:15:c8: 24:2f:8d:70:50:f0:7c:76:df:ef:c2:c6:d5:4d:23:5b:ff:f2: ad:49:ef:27:d9:06:98:59:29:94:16:18:9d:b7:9e:93:b4:45: fb:59:f4:8c:a9:8d:92:e2:cc:2a:3f:d9:d5:4c:85:62:9f:a4: 0e:e2:92:bc:85:26:68:a7:b3:56:87:eb:1e:fb:ca:41:7c:f3: a4:92:d5:4d:2e:9d:be:9f:c5:d5:fd:55:65:62:fa:1f:c0:72: db:dc:21:a7:5f:b0:e4:49:6e:de:03:47:63:ee:65:2e:38:12: 09:a5:db:7a:ac:d8:ac:5d:32:52:12:fd:ba:1f:a8:7a:51:a9: 64:66:fa:86:9d:f6:db:05:08:34:52:7a:69:2b:62:97:d9:ef: 2d:95:c7:15:67:c8:14:35:aa:8e:c6:bc:d4:8f:c5:8c:24:e5: 36:31:db:01:93:10:bd:03:d1:82:92:f8:97:f1:04:a6:fa:fd: 62:dc:4a:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSkr1vEBjL3zE8/nVq/cuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNTNjZDJjNTg0YTNkYzE2MjA4YmE5M2IwZGI3NDc3M2Iz ZjIzYmUwHhcNMjUxMjIxMTkwMjAzWhcNMjUxMjIyMTkwMjAzWjAzMTEwLwYDVQQD EyhhOTE0NmJjZDU4MTI5MGY2YWY5MzE4YzQ4ZWY5NjQ3Y2YxM2UxNTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzskor2PlfCNQ7sb8288hTtDfK1x M9ifeQyB+CbnXdm8BWKvOfdRV5Axzq08DrJZENBfagbyIZnDCArCuCAigdBWjWt1 7EXiLq2jqjXWIq4BldJdybeuBIZ8Kkdv/U5fHE49KjOkeBqGNZNSjCI8vjbyYFlp u1kUrJ80+mdWqJd0aRTTI3SAUGqOZSPvPKILjjvnNJRmTpkTzxafVW924pu2NMHA Bbl+21ls/PYeKmmZtLszRmRMuWGWbpuRAJR2orMNULAQpUkCRJ3s9Lmrwqx2POiS 8vn9sotQW/xe+1gBsHXDvLCFqTA5ufPsvr98XCUpNYlaXg8dWzlwo1YlVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKkUa81YEpD2r5MYxI75ZHzxPhVLMB8GA1UdIwQY MBaAFKpTzSxYSj3BYgi6k7DbdHc7PyO+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWxQTkxGaEtQY0ZpQ0xxVHNOdDBkenNfSTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lNjcwYTctYWQ3OC00NTdlLWFkODAt MDA3OTc4YmRiMDUyLzEvcWxQTkxGaEtQY0ZpQ0xxVHNOdDBkenNfSTc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9lNjcwYTctYWQ3OC00NTdlLWFkODAtMDA3OTc4YmRiMDUy LzEvcWxQTkxGaEtQY0ZpQ0xxVHNOdDBkenNfSTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALP5k0bO5 ie0WbI9fO7lAiVHhcx/hUWqLooO74ul0SW5AQ/QStnKq14D+XVifoQhFPunDsVEL 2ovGaUGL23GfN9EItcW2dRXIJC+NcFDwfHbf78LG1U0jW//yrUnvJ9kGmFkplBYY nbeek7RF+1n0jKmNkuLMKj/Z1UyFYp+kDuKSvIUmaKezVofrHvvKQXzzpJLVTS6d vp/F1f1VZWL6H8By29whp1+w5Elu3gNHY+5lLjgSCaXbeqzYrF0yUhL9uh+oelGp ZGb6hp322wUINFJ6aStil9nvLZXHFWfIFDWqjsa81I/FjCTlNjHbAZMQvQPRgpL4 l/EEpvr9YtxKJw== -----END CERTIFICATE-----Generated at Mon Dec 22 04:24:03 2025 by rpki-client