This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft File: qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft (raw, json) Hash identifier: DgDVcIJi865//a1jiIvThLax0Yy+sf3Kvw4dcJCKPWc= Subject key identifier: F4:E2:0E:8C:02:4F:2C:E6:A7:7C:42:CA:2F:D2:92:7A:5B:2C:14:A0 Authority key identifier: AA:52:12:95:8D:8E:1B:AA:14:4A:82:A8:21:F9:3A:89:0D:CB:A4:9A Certificate issuer: /CN=aa5212958d8e1baa144a82a821f93a890dcba49a Certificate serial: 019B25BF31ADEAA380442719B5FAD4CD711D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft Manifest number: 01CA Signing time: Tue 16 Dec 2025 06:00:45 +0000 Manifest this update: Tue 16 Dec 2025 06:00:45 +0000 Manifest next update: Wed 17 Dec 2025 06:00:45 +0000 Files and hashes: 1: PZ4f-DMKLrdus7ifGNkwQRZC4kM.roa (hash: Frtdi2vXGM+9Wk9SACf8JGX2R9YvRbq5Bqkpr3xBZIY=) 2: PrnecMxNHe2u3Fw2gcFyEcky08w.roa (hash: fOMHDoxW+MiL0eOBbV8PO+2eJTiyo9i2d0o+CgmUXRU=) 3: k9g2HSjpxtETjvvmli-wSHo-GCU.roa (hash: scKaa9aBdckyktODEkOGuwYmySJZ3cmCI8jNYczbLys=) 4: qlISlY2OG6oUSoKoIfk6iQ3LpJo.crl (hash: 5ldDjA5PmRAfRKZB6A0oGUa3Ai74BVWnL8VlOu3Wk14=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 06:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:bf:31:ad:ea:a3:80:44:27:19:b5:fa:d4:cd:71:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa5212958d8e1baa144a82a821f93a890dcba49a Validity Not Before: Dec 16 06:00:45 2025 GMT Not After : Dec 17 06:00:45 2025 GMT Subject: CN=f4e20e8c024f2ce6a77c42ca2fd2927a5b2c14a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a8:e7:16:9d:67:a3:82:2e:3d:d6:f4:48:15: 42:31:be:40:bb:50:d3:a4:f3:87:a9:e2:98:d7:6a: b0:85:3a:b6:70:2f:d2:33:81:c0:75:22:a0:78:5a: 29:cc:24:d1:1c:44:b2:36:7b:da:ff:d3:8b:2c:5a: e8:b9:16:0b:85:f0:73:6e:fb:16:f6:75:4b:3c:cd: 0e:d0:4f:ee:91:56:d1:fd:d9:9c:21:2e:2b:b2:f3: 0a:52:65:fb:10:bf:93:84:91:f1:0d:70:9f:ec:e3: ee:87:67:02:18:9a:d3:69:89:1f:51:e0:97:5f:5e: 08:93:ea:df:67:cb:cf:c4:86:b5:23:37:9e:05:c3: 77:51:89:ed:ea:62:1a:40:6a:ce:aa:86:ed:b9:e6: e8:6a:e7:7c:ac:12:80:8d:ca:2c:98:1a:68:a3:f6: 8b:c9:74:70:ed:76:3a:67:fd:e6:85:92:42:25:44: 28:83:0a:64:92:2e:4e:7a:d9:6c:78:5e:91:75:ef: 5c:b5:88:c9:35:b7:ce:57:b3:bf:af:3b:5a:cd:67: 12:2b:de:d0:95:83:cf:61:3d:ac:1a:80:8d:29:80: a5:b0:69:bc:36:a5:64:d6:6a:75:78:c8:51:f1:39: 2f:3f:13:ab:77:7e:61:2f:d3:85:0c:89:3c:43:34: 32:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E2:0E:8C:02:4F:2C:E6:A7:7C:42:CA:2F:D2:92:7A:5B:2C:14:A0 X509v3 Authority Key Identifier: keyid:AA:52:12:95:8D:8E:1B:AA:14:4A:82:A8:21:F9:3A:89:0D:CB:A4:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:b9:d8:c9:91:ab:c2:01:c5:5b:5c:68:4c:03:11:60:c4:35: 52:27:96:89:40:82:64:37:18:5f:0a:30:52:37:7e:6d:17:48: 13:f4:df:26:81:d1:47:5e:ad:bc:06:10:21:54:55:1b:77:ab: 35:a0:8d:dc:72:6a:45:d1:dc:8d:af:62:f7:4b:26:5f:6f:28: 72:96:41:e7:4f:c6:e9:ae:62:cd:11:da:17:5d:25:0d:4a:b1: 6b:96:68:f1:3d:58:50:bd:17:c1:06:75:42:71:9b:c1:1c:c3: 41:22:fe:18:2b:7a:ae:72:d4:5c:0e:f4:ab:df:15:d4:c4:95: b1:62:37:28:6a:22:a1:b9:c6:ad:54:92:0b:b5:a8:d5:72:d7: 98:e9:c7:c4:8f:5e:4e:89:c7:82:49:00:ef:71:a7:09:07:aa: 7a:76:a2:7b:b3:f7:2f:c2:d4:56:2e:3d:a7:ad:f7:49:7a:28: 2d:b1:12:dd:a1:92:99:ed:e3:37:cb:39:36:5b:37:6e:1d:9a: 2b:af:81:ff:30:b4:5e:dc:d0:fc:c1:a1:41:1a:41:69:d3:83: ca:6d:f9:9a:8f:5e:06:a2:52:49:5d:89:e8:e3:3b:1f:c0:55: a5:3b:96:25:29:d6:91:05:62:f8:d8:f7:2d:fc:f3:22:44:d4: 48:d3:4e:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslvzGt6qOARCcZtfrUzXEdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNTIxMjk1OGQ4ZTFiYWExNDRhODJhODIxZjkzYTg5MGRj YmE0OWEwHhcNMjUxMjE2MDYwMDQ1WhcNMjUxMjE3MDYwMDQ1WjAzMTEwLwYDVQQD EyhmNGUyMGU4YzAyNGYyY2U2YTc3YzQyY2EyZmQyOTI3YTViMmMxNGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6jnFp1no4IuPdb0SBVCMb5Au1DT pPOHqeKY12qwhTq2cC/SM4HAdSKgeFopzCTRHESyNnva/9OLLFrouRYLhfBzbvsW 9nVLPM0O0E/ukVbR/dmcIS4rsvMKUmX7EL+ThJHxDXCf7OPuh2cCGJrTaYkfUeCX X14Ik+rfZ8vPxIa1IzeeBcN3UYnt6mIaQGrOqobtueboaud8rBKAjcosmBpoo/aL yXRw7XY6Z/3mhZJCJUQogwpkki5OetlseF6Rde9ctYjJNbfOV7O/rztazWcSK97Q lYPPYT2sGoCNKYClsGm8NqVk1mp1eMhR8TkvPxOrd35hL9OFDIk8QzQySwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPTiDowCTyzmp3xCyi/SknpbLBSgMB8GA1UdIwQY MBaAFKpSEpWNjhuqFEqCqCH5OokNy6SaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWxJU2xZMk9HNm9VU29Lb0lmazZpUTNMcEpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9kOGU1ZTMtZjg5Ny00ZGEyLTlkZjYt YjQwMWE0YTA0NDkyLzEvcWxJU2xZMk9HNm9VU29Lb0lmazZpUTNMcEpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9kOGU1ZTMtZjg5Ny00ZGEyLTlkZjYtYjQwMWE0YTA0NDky LzEvcWxJU2xZMk9HNm9VU29Lb0lmazZpUTNMcEpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASrnYyZGr wgHFW1xoTAMRYMQ1UieWiUCCZDcYXwowUjd+bRdIE/TfJoHRR16tvAYQIVRVG3er NaCN3HJqRdHcja9i90smX28ocpZB50/G6a5izRHaF10lDUqxa5Zo8T1YUL0XwQZ1 QnGbwRzDQSL+GCt6rnLUXA70q98V1MSVsWI3KGoiobnGrVSSC7Wo1XLXmOnHxI9e TonHgkkA73GnCQeqenaie7P3L8LUVi49p633SXooLbES3aGSme3jN8s5Nls3bh2a K6+B/zC0XtzQ/MGhQRpBadODym35mo9eBqJSSV2J6OM7H8BVpTuWJSnWkQVi+Nj3 LfzzIkTUSNNOjQ== -----END CERTIFICATE-----Generated at Tue Dec 16 11:45:34 2025 by rpki-client