This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft File: Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft (raw, json) Hash identifier: ny3CfkOlHhLsVO8WT0pHj0XReCC9wLEQ6W2E5uRQa7Y= Subject key identifier: E4:69:0D:CC:E1:DF:8E:48:88:E3:D9:E4:81:AE:1A:60:FB:EC:5D:D0 Authority key identifier: 42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4 Certificate issuer: /CN=4268a4cfb6b1b6447da93833321dd315061193d4 Certificate serial: 019B6FFD8BC8EC9D8B67512412985327E197 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft Manifest number: 0B8D Signing time: Tue 30 Dec 2025 16:00:45 +0000 Manifest this update: Tue 30 Dec 2025 16:00:45 +0000 Manifest next update: Wed 31 Dec 2025 16:00:45 +0000 Files and hashes: 1: 3qRTh1P9OF6YOqHXqOqHDoBD8eg.roa (hash: nQAh302ZIgG0KfyPwfrx+gnhB19jlHvyVNBKKuKcDas=) 2: Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl (hash: 3eEEZ0LUdT/AlFiMwWoP3ctxoN/n104pG6TwvQsS2X4=) 3: ar9bFy5EONuIJfpM6gpX8Ujo7Ug.roa (hash: qSqkt91qWr7MYsAwEDebuK5+OcIZWP3ilBjbrzxA5ck=) 4: qpS5E6zN7Za0_vE5y0g_cgWncv8.roa (hash: pquZUL+QWeP5wqagKXvKjrrNKaLrKYUyFpeUGLpB5cY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 16:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:fd:8b:c8:ec:9d:8b:67:51:24:12:98:53:27:e1:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4268a4cfb6b1b6447da93833321dd315061193d4 Validity Not Before: Dec 30 16:00:45 2025 GMT Not After : Dec 31 16:00:45 2025 GMT Subject: CN=e4690dcce1df8e4888e3d9e481ae1a60fbec5dd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3d:fc:29:0e:8f:d0:8d:06:25:2c:20:94:9b: 03:41:f6:73:dc:c9:61:7b:55:ab:e0:7e:d2:8f:9b: af:cb:23:5b:c2:c3:d6:2f:be:46:8e:0f:71:8c:8e: 0b:c2:f8:e5:4d:15:1c:ac:27:20:0e:de:5d:ef:26: 33:c2:24:de:46:58:d7:6b:72:7f:3b:a1:3d:6c:b0: 74:96:40:74:6e:03:28:5e:53:1f:6e:74:1d:48:20: b9:1f:31:a9:58:d0:62:ee:e1:b0:52:e6:cf:09:c1: c5:86:5d:02:53:c4:0a:be:dc:41:4c:fa:bd:a1:a0: 8f:34:53:25:48:72:65:9d:2e:ab:26:ee:ef:4f:eb: 1a:cb:40:f0:79:00:55:06:9b:44:31:53:43:8c:ae: bd:ae:1b:8e:da:02:66:60:34:21:73:f5:b6:15:3c: 7d:91:46:d8:03:37:02:2a:89:c0:91:36:59:5a:da: 3f:25:c4:d2:d2:85:9d:c1:f2:0c:f1:2d:89:c4:15: 0a:aa:87:f7:c2:53:0f:1e:8c:24:07:e6:ce:38:65: 08:ea:2f:d2:ee:b6:50:25:ac:bd:9b:d4:9d:6f:a0: 00:4b:e4:2d:16:14:d9:22:b0:17:7c:f4:8b:3a:98: 84:ce:36:b8:a3:00:55:ab:13:53:c0:ae:57:a8:25: 0b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:69:0D:CC:E1:DF:8E:48:88:E3:D9:E4:81:AE:1A:60:FB:EC:5D:D0 X509v3 Authority Key Identifier: keyid:42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:5b:d5:b0:83:23:bb:25:da:99:a1:0e:ff:5d:b3:81:a6:a6: f5:da:1c:fc:8b:30:a0:29:b4:50:ee:92:36:23:83:be:b4:cb: 66:77:d5:ce:05:6e:ac:de:da:db:98:ac:67:db:24:f8:cd:d0: 64:3b:40:c1:72:88:20:ef:8f:57:84:e4:aa:54:4a:b1:f4:59: 62:1a:9f:7b:e6:a8:cf:d5:92:36:4d:26:49:fa:36:21:fa:31: 06:a0:bb:eb:8b:03:8c:5f:2d:48:95:fe:5a:39:c3:81:a1:64: 5e:96:6a:00:a2:84:35:f5:de:e0:07:c9:ea:4d:17:f6:1e:68: f2:ae:23:bf:10:61:06:00:a5:93:6e:66:64:20:3f:55:88:17: 55:e7:85:77:d8:9c:15:ea:77:ac:11:0e:83:07:70:c6:d1:61: 29:95:b2:3f:9d:5b:c6:8f:13:fb:c7:09:53:82:4c:df:78:2a: 88:4f:b1:d4:1d:28:e8:cf:94:2a:75:ad:4a:83:d0:4f:ab:67: 7a:98:89:28:05:d7:e2:cc:23:0d:39:58:66:cd:44:a3:a6:2d: 03:cf:3a:aa:9f:04:1e:a2:e1:20:17:0e:1f:01:c1:cd:1a:b2: 51:82:17:e2:ab:8e:3f:ba:68:8a:0d:3e:b3:88:b8:eb:fa:0f: 5c:db:40:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtv/YvI7J2LZ1EkEphTJ+GXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNjhhNGNmYjZiMWI2NDQ3ZGE5MzgzMzMyMWRkMzE1MDYx MTkzZDQwHhcNMjUxMjMwMTYwMDQ1WhcNMjUxMjMxMTYwMDQ1WjAzMTEwLwYDVQQD EyhlNDY5MGRjY2UxZGY4ZTQ4ODhlM2Q5ZTQ4MWFlMWE2MGZiZWM1ZGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApD38KQ6P0I0GJSwglJsDQfZz3Mlh e1Wr4H7Sj5uvyyNbwsPWL75Gjg9xjI4LwvjlTRUcrCcgDt5d7yYzwiTeRljXa3J/ O6E9bLB0lkB0bgMoXlMfbnQdSCC5HzGpWNBi7uGwUubPCcHFhl0CU8QKvtxBTPq9 oaCPNFMlSHJlnS6rJu7vT+say0DweQBVBptEMVNDjK69rhuO2gJmYDQhc/W2FTx9 kUbYAzcCKonAkTZZWto/JcTS0oWdwfIM8S2JxBUKqof3wlMPHowkB+bOOGUI6i/S 7rZQJay9m9Sdb6AAS+QtFhTZIrAXfPSLOpiEzja4owBVqxNTwK5XqCULFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFORpDczh345IiOPZ5IGuGmD77F3QMB8GA1UdIwQY MBaAFEJopM+2sbZEfak4MzId0xUGEZPUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUW1pa3o3YXh0a1I5cVRnek1oM1RGUVlSazlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS83ZDQzYmItYTFjNi00MDU1LThjNTMt MmZlZThiNjMwOWNiLzEvUW1pa3o3YXh0a1I5cVRnek1oM1RGUVlSazlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS83ZDQzYmItYTFjNi00MDU1LThjNTMtMmZlZThiNjMwOWNi LzEvUW1pa3o3YXh0a1I5cVRnek1oM1RGUVlSazlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGVvVsIMj uyXamaEO/12zgaam9doc/IswoCm0UO6SNiODvrTLZnfVzgVurN7a25isZ9sk+M3Q ZDtAwXKIIO+PV4TkqlRKsfRZYhqfe+aoz9WSNk0mSfo2IfoxBqC764sDjF8tSJX+ WjnDgaFkXpZqAKKENfXe4AfJ6k0X9h5o8q4jvxBhBgClk25mZCA/VYgXVeeFd9ic Fep3rBEOgwdwxtFhKZWyP51bxo8T+8cJU4JM33gqiE+x1B0o6M+UKnWtSoPQT6tn epiJKAXX4swjDTlYZs1Eo6YtA886qp8EHqLhIBcOHwHBzRqyUYIX4quOP7poig0+ s4i46/oPXNtAkw== -----END CERTIFICATE-----Generated at Wed Dec 31 02:01:53 2025 by rpki-client