This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft File: Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft (raw, json) Hash identifier: NBR6NNRi0Ginnp+aUUZa+OLbbaTEJumelaOyzJ8AWAA= Subject key identifier: C0:39:4D:BA:DA:23:2E:69:B6:4D:C1:EC:5E:B2:BD:BC:B1:D3:A0:13 Authority key identifier: 43:B9:2E:C2:B0:E3:2C:B7:B2:DB:13:E3:76:52:98:D6:D2:E5:85:CD Certificate issuer: /CN=43b92ec2b0e32cb7b2db13e3765298d6d2e585cd Certificate serial: 019B44378AF272C2A94A225B4C13448A4C7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q7kuwrDjLLey2xPjdlKY1tLlhc0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft Manifest number: 07A0 Signing time: Mon 22 Dec 2025 04:00:49 +0000 Manifest this update: Mon 22 Dec 2025 04:00:49 +0000 Manifest next update: Tue 23 Dec 2025 04:00:49 +0000 Files and hashes: 1: Q7kuwrDjLLey2xPjdlKY1tLlhc0.crl (hash: TeqXKZCK6jwfF57rH783UP6rgehGGwtqEmzNYdb3ODI=) 2: VMxe0uGWpSo7MC38AuPyARm4ELw.roa (hash: tdke4bTnyhBCQowtj7hvI4mzPoyXG8N51jhjgyuQaj8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft rsync://rpki.ripe.net/repository/DEFAULT/Q7kuwrDjLLey2xPjdlKY1tLlhc0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:37:8a:f2:72:c2:a9:4a:22:5b:4c:13:44:8a:4c:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43b92ec2b0e32cb7b2db13e3765298d6d2e585cd Validity Not Before: Dec 22 04:00:49 2025 GMT Not After : Dec 23 04:00:49 2025 GMT Subject: CN=c0394dbada232e69b64dc1ec5eb2bdbcb1d3a013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:24:25:d0:7f:35:06:1c:5a:e2:68:8b:3b:fd: be:f1:7b:ba:c2:75:62:3d:ba:5e:b2:95:87:a5:0a: 5d:81:69:6a:ca:c8:8e:8d:19:b7:86:4b:55:2c:b6: b6:35:6b:68:a9:b7:85:48:ee:cf:6b:40:f3:c4:15: 8b:88:c2:01:dd:aa:89:f3:8f:4a:fc:c2:be:e0:96: 56:dd:17:03:64:6a:f0:b8:93:08:32:bf:8a:70:09: e1:50:13:8f:dc:5c:b2:09:83:bc:51:1d:63:82:77: 20:1e:23:1f:c4:d6:66:72:7c:04:1a:fe:12:ea:66: 8f:31:9c:75:2d:7b:e0:b5:5a:22:aa:b8:fe:eb:9f: da:0d:1f:e3:22:56:42:b1:2b:07:69:11:38:02:36: 67:78:f6:5d:8b:99:43:51:c0:ff:29:95:dc:86:18: 23:9e:d2:16:10:bd:67:99:6f:26:8e:4d:b2:97:29: 3a:98:db:d0:fe:d6:9e:54:2b:72:e2:f2:c9:8a:d3: c8:40:df:fb:34:ca:e0:17:34:56:29:25:d3:a4:b9: fa:80:c1:f2:4b:02:76:73:5c:0e:71:9f:4a:a2:f3: fa:6a:12:49:70:a0:51:67:ad:3e:27:33:37:c6:f7: 77:9d:a4:0a:b4:86:63:d6:2c:7e:69:18:25:a9:a5: ce:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:39:4D:BA:DA:23:2E:69:B6:4D:C1:EC:5E:B2:BD:BC:B1:D3:A0:13 X509v3 Authority Key Identifier: keyid:43:B9:2E:C2:B0:E3:2C:B7:B2:DB:13:E3:76:52:98:D6:D2:E5:85:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q7kuwrDjLLey2xPjdlKY1tLlhc0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:3c:3a:25:ba:0f:67:f8:b6:e7:6a:df:31:76:2a:fa:2c:ee: 8b:70:b7:e0:5a:a2:fa:7c:01:d0:4a:78:f2:e4:0f:52:13:92: d4:fb:51:74:36:52:d5:12:5d:d9:cf:6e:45:f2:40:90:11:99: 31:71:56:04:b3:60:e9:90:6a:a7:2f:77:39:65:a0:37:02:bd: b0:83:52:46:e7:e7:28:18:61:89:8a:7d:bd:78:cb:1d:34:9e: d6:e4:c1:6f:b9:75:31:67:74:37:d3:1c:de:94:73:27:a8:90: f3:fc:10:86:0a:c0:6f:ef:a2:f5:e8:a4:44:ab:2c:64:97:b0: 4f:0b:22:0b:8f:ec:bc:c8:2b:7a:bd:38:61:a1:e0:12:48:6e: f5:1a:0a:34:21:92:6f:33:55:76:09:3e:95:e6:b2:2f:61:fa: 69:d4:9d:03:19:30:a0:7f:5d:dc:91:cb:7f:95:21:55:00:5f: bd:03:c3:8f:1c:2b:f6:b2:45:f8:2c:a6:d5:4c:84:8a:2d:20: eb:aa:cc:55:fb:4b:10:ab:7e:03:f3:14:8d:6d:05:92:d4:71: 45:c8:dc:32:dc:91:b9:74:44:ac:92:b4:01:56:2b:d2:74:aa: 66:e3:b0:f4:b7:aa:c5:ca:c3:33:9c:40:8c:01:59:3b:ef:c7: f5:51:00:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEN4rycsKpSiJbTBNEikx+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzYjkyZWMyYjBlMzJjYjdiMmRiMTNlMzc2NTI5OGQ2ZDJl NTg1Y2QwHhcNMjUxMjIyMDQwMDQ5WhcNMjUxMjIzMDQwMDQ5WjAzMTEwLwYDVQQD EyhjMDM5NGRiYWRhMjMyZTY5YjY0ZGMxZWM1ZWIyYmRiY2IxZDNhMDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSQl0H81Bhxa4miLO/2+8Xu6wnVi PbpespWHpQpdgWlqysiOjRm3hktVLLa2NWtoqbeFSO7Pa0DzxBWLiMIB3aqJ849K /MK+4JZW3RcDZGrwuJMIMr+KcAnhUBOP3FyyCYO8UR1jgncgHiMfxNZmcnwEGv4S 6maPMZx1LXvgtVoiqrj+65/aDR/jIlZCsSsHaRE4AjZnePZdi5lDUcD/KZXchhgj ntIWEL1nmW8mjk2ylyk6mNvQ/taeVCty4vLJitPIQN/7NMrgFzRWKSXTpLn6gMHy SwJ2c1wOcZ9KovP6ahJJcKBRZ60+JzM3xvd3naQKtIZj1ix+aRglqaXOOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMA5TbraIy5ptk3B7F6yvbyx06ATMB8GA1UdIwQY MBaAFEO5LsKw4yy3stsT43ZSmNbS5YXNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTdrdXdyRGpMTGV5MnhQamRsS1kxdExsaGMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84OTI4NmYtMGU1OS00NjI2LWE2MTct NjAyMTUxNTIyYTA5LzEvUTdrdXdyRGpMTGV5MnhQamRsS1kxdExsaGMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy84OTI4NmYtMGU1OS00NjI2LWE2MTctNjAyMTUxNTIyYTA5 LzEvUTdrdXdyRGpMTGV5MnhQamRsS1kxdExsaGMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAojw6JboP Z/i252rfMXYq+izui3C34Fqi+nwB0Ep48uQPUhOS1PtRdDZS1RJd2c9uRfJAkBGZ MXFWBLNg6ZBqpy93OWWgNwK9sINSRufnKBhhiYp9vXjLHTSe1uTBb7l1MWd0N9Mc 3pRzJ6iQ8/wQhgrAb++i9eikRKssZJewTwsiC4/svMgrer04YaHgEkhu9RoKNCGS bzNVdgk+leayL2H6adSdAxkwoH9d3JHLf5UhVQBfvQPDjxwr9rJF+Cym1UyEii0g 66rMVftLEKt+A/MUjW0FktRxRcjcMtyRuXRErJK0AVYr0nSqZuOw9LeqxcrDM5xA jAFZO+/H9VEAyQ== -----END CERTIFICATE-----Generated at Mon Dec 22 09:42:22 2025 by rpki-client