This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft File: qMbzkzUMd1mMEhrNPJL3BIV274k.mft (raw, json) Hash identifier: npVQ00VqASGPCHncafsT2AuF0ArheAczQLxJkqjxS64= Subject key identifier: 1B:33:0C:66:48:0E:AB:11:6A:4D:A8:41:A1:7A:55:1D:05:FA:B2:98 Authority key identifier: A8:C6:F3:93:35:0C:77:59:8C:12:1A:CD:3C:92:F7:04:85:76:EF:89 Certificate issuer: /CN=a8c6f393350c77598c121acd3c92f7048576ef89 Certificate serial: 019B3C7DF54403B1378219534256C24363DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qMbzkzUMd1mMEhrNPJL3BIV274k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft Manifest number: 0EBE Signing time: Sat 20 Dec 2025 16:00:46 +0000 Manifest this update: Sat 20 Dec 2025 16:00:46 +0000 Manifest next update: Sun 21 Dec 2025 16:00:46 +0000 Files and hashes: 1: eOh7otVHHrYHGXBG7XugLjFkG3I.roa (hash: jBij6Zpdi8PdzGdFEr+QptijCvWCfUOl+3jki1c2vMs=) 2: lCDqNprGOb5vTF01oJ8hwQqZCRE.roa (hash: mFZkrlVA4mVLiefirb6z2hXCAJmumM9YtxbYwU/yy10=) 3: qMbzkzUMd1mMEhrNPJL3BIV274k.crl (hash: SFN/UmFJfZKChmtGtPEUfBaO0PnBj674E4anTGRKbUc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft rsync://rpki.ripe.net/repository/DEFAULT/qMbzkzUMd1mMEhrNPJL3BIV274k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:f5:44:03:b1:37:82:19:53:42:56:c2:43:63:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8c6f393350c77598c121acd3c92f7048576ef89 Validity Not Before: Dec 20 16:00:46 2025 GMT Not After : Dec 21 16:00:46 2025 GMT Subject: CN=1b330c66480eab116a4da841a17a551d05fab298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:45:93:68:87:e2:39:46:85:79:42:98:1f:12: f2:5d:51:6c:94:61:da:8d:20:76:c9:15:f5:93:86: 43:cc:50:b0:60:ef:ed:39:a6:c7:8f:5a:66:b7:da: ec:3a:85:65:7e:be:f6:ae:db:c0:40:ba:08:6a:9a: e2:db:6e:de:e4:99:3c:88:35:84:42:6d:1b:a9:ce: a9:c1:23:23:f1:c1:b7:f8:21:76:50:ae:fc:b6:cc: 53:3e:0c:e8:cf:72:8b:70:10:e0:e8:6b:f3:77:76: 13:3b:4c:fa:58:b2:ff:ac:d8:29:a0:a3:f8:a5:c2: a2:2d:63:b7:51:ff:d5:9e:87:e6:47:b0:fc:56:c8: b3:c3:94:97:17:9e:ef:e5:b6:8b:21:63:35:81:6c: 5f:77:50:cc:f1:8c:b6:c6:04:f4:06:bd:2b:2a:71: e7:ff:55:66:b6:0b:89:f4:e0:dd:14:05:03:4e:b0: a6:61:dd:4b:c2:20:df:8b:87:e6:0c:3f:03:b1:93: d2:3d:59:a6:e7:64:a6:32:f9:77:c9:ad:79:96:b4: df:b2:83:48:1e:2c:02:62:0c:81:fb:58:5e:d8:33: 10:f3:e1:b5:85:da:50:27:d6:61:d7:03:53:15:96: 74:47:45:22:67:f5:b4:15:66:79:59:ee:7b:ba:38: 8d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:33:0C:66:48:0E:AB:11:6A:4D:A8:41:A1:7A:55:1D:05:FA:B2:98 X509v3 Authority Key Identifier: keyid:A8:C6:F3:93:35:0C:77:59:8C:12:1A:CD:3C:92:F7:04:85:76:EF:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qMbzkzUMd1mMEhrNPJL3BIV274k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:76:3b:9f:97:39:5f:0f:54:3c:76:51:e2:34:8b:10:28:42: e3:7e:f5:ea:88:c5:43:ac:cb:33:48:db:66:8c:b7:4e:9e:5c: bc:a1:49:0e:ea:9f:bf:00:85:7b:aa:30:82:08:56:b2:5f:f6: 72:88:de:7f:32:b4:ae:7e:5a:73:52:4d:0b:cf:a2:a8:42:ab: 8a:21:c7:b5:6c:73:d1:3b:59:08:44:59:3c:28:a7:41:5d:4d: bb:86:a4:3b:5c:ca:16:f1:e4:d3:22:aa:ca:e9:28:a5:b5:5e: df:7f:9a:19:8e:12:1c:aa:dd:28:0c:4c:0f:02:78:89:81:54: c3:95:4c:3f:80:f6:5e:08:dc:31:4b:67:c6:8b:57:7d:8f:43: 72:16:68:e3:66:02:28:63:95:7a:89:cb:0a:b1:16:84:b3:07: af:3f:1c:94:3e:6f:c0:7b:19:ad:d1:ac:08:d8:33:d7:7f:51: 26:e6:37:3c:86:7b:4f:28:62:75:cf:60:c3:03:9a:89:4a:71: 2d:cd:dc:0c:dc:f2:3b:60:e9:6d:8d:f9:d0:9c:32:5c:a2:d3: 12:47:ea:f7:a4:7d:ae:0f:37:e2:89:71:63:af:70:e1:a5:fd: d2:2a:48:bf:a9:52:69:30:e1:81:75:72:ec:40:c5:51:f2:ea: d6:bf:a6:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8ffVEA7E3ghlTQlbCQ2PcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4YzZmMzkzMzUwYzc3NTk4YzEyMWFjZDNjOTJmNzA0ODU3 NmVmODkwHhcNMjUxMjIwMTYwMDQ2WhcNMjUxMjIxMTYwMDQ2WjAzMTEwLwYDVQQD EygxYjMzMGM2NjQ4MGVhYjExNmE0ZGE4NDFhMTdhNTUxZDA1ZmFiMjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUWTaIfiOUaFeUKYHxLyXVFslGHa jSB2yRX1k4ZDzFCwYO/tOabHj1pmt9rsOoVlfr72rtvAQLoIapri227e5Jk8iDWE Qm0bqc6pwSMj8cG3+CF2UK78tsxTPgzoz3KLcBDg6Gvzd3YTO0z6WLL/rNgpoKP4 pcKiLWO3Uf/VnofmR7D8Vsizw5SXF57v5baLIWM1gWxfd1DM8Yy2xgT0Br0rKnHn /1VmtguJ9ODdFAUDTrCmYd1LwiDfi4fmDD8DsZPSPVmm52SmMvl3ya15lrTfsoNI HiwCYgyB+1he2DMQ8+G1hdpQJ9Zh1wNTFZZ0R0UiZ/W0FWZ5We57ujiNsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBszDGZIDqsRak2oQaF6VR0F+rKYMB8GA1UdIwQY MBaAFKjG85M1DHdZjBIazTyS9wSFdu+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcU1iemt6VU1kMW1NRWhyTlBKTDNCSVYyNzRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS83MDllMDctNDdkNS00NzIwLWI3Nzct YzZiY2EwMWIyZmY4LzEvcU1iemt6VU1kMW1NRWhyTlBKTDNCSVYyNzRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS83MDllMDctNDdkNS00NzIwLWI3NzctYzZiY2EwMWIyZmY4 LzEvcU1iemt6VU1kMW1NRWhyTlBKTDNCSVYyNzRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL3Y7n5c5 Xw9UPHZR4jSLEChC43716ojFQ6zLM0jbZoy3Tp5cvKFJDuqfvwCFe6owgghWsl/2 cojefzK0rn5ac1JNC8+iqEKriiHHtWxz0TtZCERZPCinQV1Nu4akO1zKFvHk0yKq yukopbVe33+aGY4SHKrdKAxMDwJ4iYFUw5VMP4D2XgjcMUtnxotXfY9DchZo42YC KGOVeonLCrEWhLMHrz8clD5vwHsZrdGsCNgz139RJuY3PIZ7Tyhidc9gwwOaiUpx Lc3cDNzyO2DpbY350JwyXKLTEkfq96R9rg834olxY69w4aX90ipIv6lSaTDhgXVy 7EDFUfLq1r+mVA== -----END CERTIFICATE-----Generated at Sat Dec 20 23:07:40 2025 by rpki-client