This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft File: Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft (raw, json) Hash identifier: h+xebYvW7CN6X6O5CVZBUvBogCRAo79+Qt3EzhpM6wo= Subject key identifier: 1A:F6:3F:03:88:04:D0:3A:38:72:73:1E:6D:68:2F:E6:1B:3C:6D:92 Authority key identifier: 43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08 Certificate issuer: /CN=43a8e2899693fca00bd8041ba8801f2d88869108 Certificate serial: 019B3BA24A4E981E0BE83B02920A2170F254 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft Manifest number: 15D6 Signing time: Sat 20 Dec 2025 12:00:50 +0000 Manifest this update: Sat 20 Dec 2025 12:00:50 +0000 Manifest next update: Sun 21 Dec 2025 12:00:50 +0000 Files and hashes: 1: Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl (hash: eCC7CO8LcYtgGcTdlDHh3Ed2IrkuajVB4Xb6nwHZ7Yg=) 2: cIo_z6M4iUgSv6Rq-GH3zvKNA-E.roa (hash: uuzfvafFMiGynhqFG/8GblYil9CuUOOslH5kMNYMbzY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:4a:4e:98:1e:0b:e8:3b:02:92:0a:21:70:f2:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43a8e2899693fca00bd8041ba8801f2d88869108 Validity Not Before: Dec 20 12:00:50 2025 GMT Not After : Dec 21 12:00:50 2025 GMT Subject: CN=1af63f038804d03a3872731e6d682fe61b3c6d92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:32:07:e9:86:df:0c:b8:78:81:c8:54:5b:e2: 15:ba:b8:26:6a:b5:51:a0:65:04:1e:4b:5f:62:af: ca:92:9c:fa:10:e1:0b:ce:87:e3:74:5c:e7:de:47: 81:d0:7d:28:3b:e1:cd:b7:ab:17:a2:80:f3:ff:01: b4:ea:82:69:03:09:8a:29:ee:ef:dd:40:26:5f:b8: 8c:bc:8f:e1:d8:2c:7d:66:ad:cd:eb:95:2e:eb:41: e8:90:29:16:77:63:27:8d:c4:89:1a:9f:0b:b1:2a: 4d:72:44:30:56:25:cf:e4:84:0b:f7:54:43:cf:67: 9a:dd:6b:ff:c2:39:60:e6:84:f7:e8:59:1e:d0:14: c3:62:d5:f1:b8:bd:d7:45:19:90:e3:14:e7:01:45: 0e:0c:7d:37:05:c7:53:b4:ac:c8:fa:23:83:36:e2: e5:14:28:f9:53:b3:3c:d4:98:d5:a4:c4:3e:af:f8: c8:d0:fe:a2:e8:de:c1:3b:3c:22:3b:99:9e:31:cf: 11:f0:92:fe:91:7e:ef:0a:41:a3:7b:a0:8c:e7:bb: ac:fe:bd:82:60:da:7e:c4:3a:25:35:e3:18:b6:96: 19:cd:c8:34:da:60:e9:41:b9:cf:4d:40:e9:20:2d: e3:c6:d2:0e:09:fa:60:42:4b:66:be:6a:d2:ce:10: 7e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:F6:3F:03:88:04:D0:3A:38:72:73:1E:6D:68:2F:E6:1B:3C:6D:92 X509v3 Authority Key Identifier: keyid:43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:0c:1b:42:9f:d8:2c:c7:8c:0f:83:e5:38:df:61:0e:85:ba: 59:13:4d:5d:dc:74:f1:b9:64:ac:10:27:ce:6b:ec:23:df:bb: fb:e1:81:b7:86:9f:ff:8a:6c:38:ad:da:08:e6:d9:22:73:e2: b7:ad:ac:e8:10:5c:c6:22:d7:e3:dc:23:b9:2f:b2:57:28:4a: 9b:dd:52:fe:78:96:f7:fb:e1:d1:a9:3a:07:d5:3a:d5:2e:bb: 6d:98:9f:b3:ed:7b:9f:65:7f:b5:b1:48:2c:80:64:95:b9:18: 66:68:77:d1:ac:55:cf:3e:94:6a:5d:b7:9e:d8:0a:bf:1e:9f: ae:ef:5d:35:0d:a8:88:93:4e:35:01:da:c4:ad:46:75:e0:44: 1e:ef:79:24:7d:7f:c9:52:91:d6:2a:e3:c0:a9:08:14:86:dd: b5:8c:25:f9:e1:f0:01:6a:cd:13:67:14:9c:08:94:8b:b4:4d: a0:1a:cb:83:4c:ae:9f:5f:14:8a:e6:eb:4b:f5:18:d2:2f:a2: d3:49:24:55:2e:53:dc:8c:fc:8e:20:77:39:dc:a6:a6:8f:78: 00:42:ce:75:3c:96:ef:e6:2c:fd:87:c5:43:a1:7a:8c:1e:9b: 2a:4f:03:87:72:57:0c:0a:a3:87:8c:d2:d0:90:41:e7:81:6d: b3:b4:70:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7okpOmB4L6DsCkgohcPJUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzYThlMjg5OTY5M2ZjYTAwYmQ4MDQxYmE4ODAxZjJkODg4 NjkxMDgwHhcNMjUxMjIwMTIwMDUwWhcNMjUxMjIxMTIwMDUwWjAzMTEwLwYDVQQD EygxYWY2M2YwMzg4MDRkMDNhMzg3MjczMWU2ZDY4MmZlNjFiM2M2ZDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDIH6YbfDLh4gchUW+IVurgmarVR oGUEHktfYq/Kkpz6EOELzofjdFzn3keB0H0oO+HNt6sXooDz/wG06oJpAwmKKe7v 3UAmX7iMvI/h2Cx9Zq3N65Uu60HokCkWd2MnjcSJGp8LsSpNckQwViXP5IQL91RD z2ea3Wv/wjlg5oT36Fke0BTDYtXxuL3XRRmQ4xTnAUUODH03BcdTtKzI+iODNuLl FCj5U7M81JjVpMQ+r/jI0P6i6N7BOzwiO5meMc8R8JL+kX7vCkGje6CM57us/r2C YNp+xDolNeMYtpYZzcg02mDpQbnPTUDpIC3jxtIOCfpgQktmvmrSzhB+AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBr2PwOIBNA6OHJzHm1oL+YbPG2SMB8GA1UdIwQY MBaAFEOo4omWk/ygC9gEG6iAHy2IhpEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTZqaWlaYVRfS0FMMkFRYnFJQWZMWWlHa1FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xNGUwOTEtOTc5YS00ZWQ1LTlkNWUt NDk1NDI3MGUyNTA3LzEvUTZqaWlaYVRfS0FMMkFRYnFJQWZMWWlHa1FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8xNGUwOTEtOTc5YS00ZWQ1LTlkNWUtNDk1NDI3MGUyNTA3 LzEvUTZqaWlaYVRfS0FMMkFRYnFJQWZMWWlHa1FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHQwbQp/Y LMeMD4PlON9hDoW6WRNNXdx08blkrBAnzmvsI9+7++GBt4af/4psOK3aCObZInPi t62s6BBcxiLX49wjuS+yVyhKm91S/niW9/vh0ak6B9U61S67bZifs+17n2V/tbFI LIBklbkYZmh30axVzz6Ual23ntgKvx6fru9dNQ2oiJNONQHaxK1GdeBEHu95JH1/ yVKR1irjwKkIFIbdtYwl+eHwAWrNE2cUnAiUi7RNoBrLg0yun18UiubrS/UY0i+i 00kkVS5T3Iz8jiB3Odympo94AELOdTyW7+Ys/YfFQ6F6jB6bKk8Dh3JXDAqjh4zS 0JBB54Fts7Rwnw== -----END CERTIFICATE-----Generated at Sat Dec 20 16:21:13 2025 by rpki-client