This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft File: Q0llhOXPObVodN6Nx3qjpv-eih4.mft (raw, json) Hash identifier: vSxSm9KKeGaSBdYRZDR21pC5UrbLnvYvmw8t+U370uA= Subject key identifier: C4:8B:D9:19:8D:B9:2E:29:57:6B:ED:52:0D:07:CF:57:D6:85:57:CA Authority key identifier: 43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E Certificate issuer: /CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e Certificate serial: 019AAC826ECB0AD91F28AE01C574E6ABFCF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft Manifest number: 13DC Signing time: Sat 22 Nov 2025 17:00:20 +0000 Manifest this update: Sat 22 Nov 2025 17:00:20 +0000 Manifest next update: Sun 23 Nov 2025 17:00:20 +0000 Files and hashes: 1: Q0llhOXPObVodN6Nx3qjpv-eih4.crl (hash: op3XWZzAQBNwWWvd4whD5yV9F/RlK7lJDZ6T8Nj5G80=) 2: mF8H3prBEeFw8vv0-wYmE8_MtFk.roa (hash: k6q/MJjxt2Tjd0EikWZoheIRBqYjVQryjlZ0eCvLYRU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:82:6e:cb:0a:d9:1f:28:ae:01:c5:74:e6:ab:fc:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e Validity Not Before: Nov 22 17:00:20 2025 GMT Not After : Nov 23 17:00:20 2025 GMT Subject: CN=c48bd9198db92e29576bed520d07cf57d68557ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:4e:08:81:67:5c:1b:8d:57:2f:e6:7f:7b:44: bb:06:97:e9:bb:2b:6e:43:56:56:03:49:c5:22:91: b0:49:3e:44:a7:47:b0:1c:9e:fc:04:e6:11:ec:38: 62:05:b3:32:b7:3d:2e:d5:7a:fe:9d:78:52:f6:d5: b4:33:c8:a8:79:ce:b9:ee:9e:2e:76:ba:13:34:f1: 1b:84:ce:6c:40:7a:7a:ae:5c:1f:5b:46:d4:b9:b7: f5:7e:5c:c1:90:a9:b4:46:ac:e4:4b:8b:5a:df:12: 30:b9:ec:2a:8e:7b:77:e8:8f:8d:00:6f:ea:f4:7d: 54:1d:0c:59:16:49:44:d7:42:36:f5:70:7c:fe:7c: d3:da:df:6e:35:87:a2:5a:ce:2b:de:fa:0a:ae:96: 01:63:5b:f8:00:8b:b9:f7:78:96:0c:e2:2b:7c:1d: 73:74:13:af:5f:c4:fd:6a:e5:3b:d1:1a:58:a4:e5: b5:df:d4:2d:77:4a:0b:f5:d0:4b:90:e2:31:5c:e3: bc:87:a6:5d:0c:38:38:bb:7e:14:5a:0f:bf:3a:f6: 41:83:84:f8:85:50:03:2e:70:72:0c:23:ee:29:59: c4:53:63:f5:7e:ed:d4:b6:fa:41:7d:18:6e:3c:92: f5:3f:8a:94:94:39:c1:27:2e:90:8f:d7:7c:a0:c7: e0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:8B:D9:19:8D:B9:2E:29:57:6B:ED:52:0D:07:CF:57:D6:85:57:CA X509v3 Authority Key Identifier: keyid:43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:f3:e7:8a:0b:f6:3c:ee:11:d6:6a:bf:94:21:33:1c:95:4a: ad:4b:53:bd:0d:d3:9a:c2:23:ef:6f:2d:06:8f:fb:7a:87:fe: 7a:dd:e5:7e:5a:6e:c7:be:5a:09:21:78:4d:6c:68:51:df:26: d8:1e:3d:31:69:6f:19:33:2b:43:e0:6d:48:17:6e:66:02:10: 59:c3:79:32:57:f6:d9:fb:d7:1c:37:cf:04:b9:64:78:92:76: a4:a2:5c:2e:67:0e:0f:42:d7:d7:1e:c1:86:38:a8:c6:a3:3a: 1d:98:d7:bb:73:98:c8:e3:4f:c4:17:bd:5c:56:da:f9:12:32: 9a:02:ea:6a:c5:82:da:8d:31:11:94:ad:20:cc:c6:c1:ec:27: 8e:ba:f9:fb:8b:b6:00:06:23:da:b4:2b:dc:60:77:30:f5:69: 69:67:27:60:c3:f4:42:26:d7:6d:3e:d4:a2:98:a0:c1:7d:32: 3d:36:1e:7d:8b:b3:f6:32:20:f1:58:29:8c:98:83:49:24:d5: 17:f7:26:54:1e:75:64:89:11:5f:7b:b0:9c:12:94:a9:0e:3a: 82:a6:59:1a:1e:77:52:42:72:b6:98:34:57:a2:58:d2:0d:2c: 91:9f:7a:d1:5f:07:ce:a2:b6:b2:49:86:73:40:c4:66:27:4d: bf:67:bf:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsgm7LCtkfKK4BxXTmq/zxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzNDk2NTg0ZTVjZjM5YjU2ODc0ZGU4ZGM3N2FhM2E2ZmY5 ZThhMWUwHhcNMjUxMTIyMTcwMDIwWhcNMjUxMTIzMTcwMDIwWjAzMTEwLwYDVQQD EyhjNDhiZDkxOThkYjkyZTI5NTc2YmVkNTIwZDA3Y2Y1N2Q2ODU1N2NhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5k4IgWdcG41XL+Z/e0S7Bpfpuytu Q1ZWA0nFIpGwST5Ep0ewHJ78BOYR7DhiBbMytz0u1Xr+nXhS9tW0M8ioec657p4u droTNPEbhM5sQHp6rlwfW0bUubf1flzBkKm0RqzkS4ta3xIwuewqjnt36I+NAG/q 9H1UHQxZFklE10I29XB8/nzT2t9uNYeiWs4r3voKrpYBY1v4AIu593iWDOIrfB1z dBOvX8T9auU70RpYpOW139Qtd0oL9dBLkOIxXOO8h6ZdDDg4u34UWg+/OvZBg4T4 hVADLnByDCPuKVnEU2P1fu3UtvpBfRhuPJL1P4qUlDnBJy6Qj9d8oMfgCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMSL2RmNuS4pV2vtUg0Hz1fWhVfKMB8GA1UdIwQY MBaAFENJZYTlzzm1aHTejcd6o6b/nooeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTBsbGhPWFBPYlZvZE42TngzcWpwdi1laWg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9mYmMzYTktMDU2NC00YTJjLWFiMTEt ZTJjOTIyOGFhYzUzLzEvUTBsbGhPWFBPYlZvZE42TngzcWpwdi1laWg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9mYmMzYTktMDU2NC00YTJjLWFiMTEtZTJjOTIyOGFhYzUz LzEvUTBsbGhPWFBPYlZvZE42TngzcWpwdi1laWg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmPPnigv2 PO4R1mq/lCEzHJVKrUtTvQ3TmsIj728tBo/7eof+et3lflpux75aCSF4TWxoUd8m 2B49MWlvGTMrQ+BtSBduZgIQWcN5Mlf22fvXHDfPBLlkeJJ2pKJcLmcOD0LX1x7B hjioxqM6HZjXu3OYyONPxBe9XFba+RIymgLqasWC2o0xEZStIMzGwewnjrr5+4u2 AAYj2rQr3GB3MPVpaWcnYMP0QibXbT7UopigwX0yPTYefYuz9jIg8VgpjJiDSSTV F/cmVB51ZIkRX3uwnBKUqQ46gqZZGh53UkJytpg0V6JY0g0skZ960V8HzqK2skmG c0DEZidNv2e/vA== -----END CERTIFICATE-----Generated at Sat Nov 22 21:49:23 2025 by rpki-client