This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft File: Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft (raw, json) Hash identifier: aOwGHDruLSX7U1mJFIKprBCwKaJi9NFhwA4AEuGnQxQ= Subject key identifier: CC:86:73:67:00:B3:36:D2:25:D2:8C:1A:C0:98:71:A7:7B:5F:D6:64 Authority key identifier: 42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4 Certificate issuer: /CN=4268a4cfb6b1b6447da93833321dd315061193d4 Certificate serial: 019B3FB5F69E65819EBB43C4E01418E4BC00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft Manifest number: 0B74 Signing time: Sun 21 Dec 2025 07:00:48 +0000 Manifest this update: Sun 21 Dec 2025 07:00:48 +0000 Manifest next update: Mon 22 Dec 2025 07:00:48 +0000 Files and hashes: 1: 3qRTh1P9OF6YOqHXqOqHDoBD8eg.roa (hash: nQAh302ZIgG0KfyPwfrx+gnhB19jlHvyVNBKKuKcDas=) 2: Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl (hash: 3XKA/zBprErFzDJHQCp+qKUUh0mKV5rjk9NAVeA6Rfc=) 3: ar9bFy5EONuIJfpM6gpX8Ujo7Ug.roa (hash: qSqkt91qWr7MYsAwEDebuK5+OcIZWP3ilBjbrzxA5ck=) 4: qpS5E6zN7Za0_vE5y0g_cgWncv8.roa (hash: pquZUL+QWeP5wqagKXvKjrrNKaLrKYUyFpeUGLpB5cY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b5:f6:9e:65:81:9e:bb:43:c4:e0:14:18:e4:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4268a4cfb6b1b6447da93833321dd315061193d4 Validity Not Before: Dec 21 07:00:48 2025 GMT Not After : Dec 22 07:00:48 2025 GMT Subject: CN=cc86736700b336d225d28c1ac09871a77b5fd664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b1:9a:3f:47:32:72:bf:35:ec:4d:12:4b:bb: 96:22:7e:e3:bc:4b:5d:9d:e6:26:97:2b:99:c0:ca: 10:f6:58:1e:e8:bb:66:ba:88:e6:d5:dd:0d:c4:a6: ea:fe:d8:27:a9:77:55:cd:fe:28:c9:e8:aa:90:c3: 85:9f:1a:da:fe:45:cc:d8:37:ec:c8:99:a5:16:7a: 98:54:a6:db:28:61:c6:57:09:fc:e8:dc:4c:b3:81: 0a:47:40:e3:1e:a7:55:9e:01:df:18:ce:e3:af:d2: 66:60:1d:03:02:12:0c:03:76:4f:84:40:04:33:c9: 5f:20:50:2c:d9:cd:06:a0:8c:85:f7:3e:b2:86:f7: 6f:e0:4a:a2:b4:5e:b6:8a:eb:91:a6:31:2c:35:20: af:96:5d:58:7f:6d:28:50:6f:5f:a8:8e:23:cc:f3: 7c:a8:9a:24:7f:18:3f:03:68:ce:db:c5:d2:14:02: ac:30:2f:56:f7:b1:3a:93:e0:93:5c:3d:e4:39:5d: 2a:e6:33:cc:51:17:82:32:6f:5f:bf:9e:ae:d7:44: 29:49:fa:be:15:5c:a0:16:c2:60:c5:55:98:5a:e0: ca:4c:4c:a7:6d:d6:4a:33:18:58:d0:e7:a8:08:e1: 7f:a1:6d:3a:7f:ee:ec:bc:ff:88:ba:9e:b1:a1:e6: 62:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:86:73:67:00:B3:36:D2:25:D2:8C:1A:C0:98:71:A7:7B:5F:D6:64 X509v3 Authority Key Identifier: keyid:42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:4f:b7:c4:2e:e3:d7:00:18:7e:3b:0e:57:08:0f:72:e4:88: 0c:43:00:33:19:fc:09:2c:c7:ca:c7:18:68:9a:d4:1f:6e:51: 86:f7:0d:11:ba:65:55:21:2e:0b:8f:49:6e:e3:80:e0:15:d6: ca:40:9a:15:63:4d:f0:8e:42:a8:f5:ae:2f:3f:7f:e7:c8:13: a0:12:02:be:83:ec:3b:2f:34:ce:39:67:18:f5:b6:85:74:33: b4:95:82:32:e7:17:64:68:6c:1b:02:e8:19:6d:ba:1c:4f:f9: 28:30:65:c4:63:84:74:bd:91:ff:64:22:e8:72:0d:0a:84:63: ab:59:12:bb:ed:75:b4:7f:30:90:9e:26:8b:d0:f5:c3:e3:21: 4f:21:df:0b:85:dd:a2:26:50:10:24:d7:f2:f3:1e:24:d3:bf: bc:d8:4d:54:5c:f8:1f:ed:4b:31:10:6a:37:bf:0e:2c:84:c3: 4b:ad:e6:c8:9e:8d:46:ca:69:b3:d1:bf:a3:e8:f1:28:83:e8: 99:49:2c:99:e7:8c:d8:d5:75:0a:2f:5a:57:dc:d8:43:db:08: c0:b0:58:d6:f0:0f:ed:d4:f3:9a:e0:a2:16:9e:05:c0:72:c8: 80:f6:83:2e:31:c1:c6:96:ec:de:16:74:c0:2b:56:54:0a:5d: 6c:c0:47:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tfaeZYGeu0PE4BQY5LwAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNjhhNGNmYjZiMWI2NDQ3ZGE5MzgzMzMyMWRkMzE1MDYx MTkzZDQwHhcNMjUxMjIxMDcwMDQ4WhcNMjUxMjIyMDcwMDQ4WjAzMTEwLwYDVQQD EyhjYzg2NzM2NzAwYjMzNmQyMjVkMjhjMWFjMDk4NzFhNzdiNWZkNjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrGaP0cycr817E0SS7uWIn7jvEtd neYmlyuZwMoQ9lge6Ltmuojm1d0NxKbq/tgnqXdVzf4oyeiqkMOFnxra/kXM2Dfs yJmlFnqYVKbbKGHGVwn86NxMs4EKR0DjHqdVngHfGM7jr9JmYB0DAhIMA3ZPhEAE M8lfIFAs2c0GoIyF9z6yhvdv4EqitF62iuuRpjEsNSCvll1Yf20oUG9fqI4jzPN8 qJokfxg/A2jO28XSFAKsMC9W97E6k+CTXD3kOV0q5jPMUReCMm9fv56u10QpSfq+ FVygFsJgxVWYWuDKTEynbdZKMxhY0OeoCOF/oW06f+7svP+Iup6xoeZiNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMyGc2cAszbSJdKMGsCYcad7X9ZkMB8GA1UdIwQY MBaAFEJopM+2sbZEfak4MzId0xUGEZPUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUW1pa3o3YXh0a1I5cVRnek1oM1RGUVlSazlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS83ZDQzYmItYTFjNi00MDU1LThjNTMt MmZlZThiNjMwOWNiLzEvUW1pa3o3YXh0a1I5cVRnek1oM1RGUVlSazlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS83ZDQzYmItYTFjNi00MDU1LThjNTMtMmZlZThiNjMwOWNi LzEvUW1pa3o3YXh0a1I5cVRnek1oM1RGUVlSazlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANk+3xC7j 1wAYfjsOVwgPcuSIDEMAMxn8CSzHyscYaJrUH25RhvcNEbplVSEuC49JbuOA4BXW ykCaFWNN8I5CqPWuLz9/58gToBICvoPsOy80zjlnGPW2hXQztJWCMucXZGhsGwLo GW26HE/5KDBlxGOEdL2R/2Qi6HINCoRjq1kSu+11tH8wkJ4mi9D1w+MhTyHfC4Xd oiZQECTX8vMeJNO/vNhNVFz4H+1LMRBqN78OLITDS63myJ6NRspps9G/o+jxKIPo mUksmeeM2NV1Ci9aV9zYQ9sIwLBY1vAP7dTzmuCiFp4FwHLIgPaDLjHBxpbs3hZ0 wCtWVApdbMBHUw== -----END CERTIFICATE-----Generated at Sun Dec 21 13:24:20 2025 by rpki-client