This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.mft File: Q1w_GpeQPnlikqKsenjUGxwh24U.mft (raw, json) Hash identifier: ID6CtQpf8Xrb2HTwk2eX2GPnEr+WXsptHkbR7uCdkfc= Subject key identifier: F4:48:F3:08:9C:D2:50:82:F6:4D:AE:44:5F:D1:37:B4:2A:13:F6:29 Authority key identifier: 43:5C:3F:1A:97:90:3E:79:62:92:A2:AC:7A:78:D4:1B:1C:21:DB:85 Certificate issuer: /CN=435c3f1a97903e796292a2ac7a78d41b1c21db85 Certificate serial: 019B3BD92DD274C127BF624818F7AACF61C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1w_GpeQPnlikqKsenjUGxwh24U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.mft Manifest number: 10B0 Signing time: Sat 20 Dec 2025 13:00:47 +0000 Manifest this update: Sat 20 Dec 2025 13:00:47 +0000 Manifest next update: Sun 21 Dec 2025 13:00:47 +0000 Files and hashes: 1: IB6At0eMkw1jy1fdpcIgarxWKQ4.roa (hash: rOQggKg6yCYoTFHyozZzxf3+Jia2rL6WXiIW/P0HCuo=) 2: Q1w_GpeQPnlikqKsenjUGxwh24U.crl (hash: x0RzJ06x8OcCcPQWUOxVcDwuaTFbA8mD6q9r9M/a4Us=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.crl rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.mft rsync://rpki.ripe.net/repository/DEFAULT/Q1w_GpeQPnlikqKsenjUGxwh24U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:2d:d2:74:c1:27:bf:62:48:18:f7:aa:cf:61:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=435c3f1a97903e796292a2ac7a78d41b1c21db85 Validity Not Before: Dec 20 13:00:47 2025 GMT Not After : Dec 21 13:00:47 2025 GMT Subject: CN=f448f3089cd25082f64dae445fd137b42a13f629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:17:af:bf:cb:f1:49:c5:dd:5e:a4:15:97:4c: 88:ba:51:1d:62:63:65:3a:3a:e1:ea:97:90:1a:df: 3f:47:7d:b8:36:e5:95:30:f6:47:2b:5b:5a:42:61: 4b:84:33:3c:6d:b8:2c:9c:a8:f0:6f:05:a8:8d:28: 48:b0:b0:47:d7:fd:fd:75:1b:b5:4c:2d:92:3a:f4: 8d:60:4e:75:db:03:8f:84:90:cb:56:0f:ff:70:df: 6a:4f:d8:7b:9e:89:2e:9d:c7:61:94:97:d4:5e:b3: 64:e6:65:49:26:4f:80:b5:50:41:7b:22:be:14:59: b4:df:9e:09:ba:10:cc:f6:97:4f:61:af:bb:72:51: 8a:5d:bd:1c:8b:b8:04:6e:f3:bd:79:74:09:be:f9: 37:bf:27:75:c0:41:3d:77:bd:01:11:61:57:f4:30: e4:04:b9:67:99:b4:9a:65:e7:ff:9b:7e:7d:f3:69: 7b:05:46:76:f2:42:55:55:6f:af:6c:c3:7a:a8:5a: 4b:73:0e:59:0e:28:62:f7:33:5d:2a:44:44:d1:86: e3:23:e4:8e:84:ce:a5:e7:cb:ea:4f:88:57:46:c3: 4d:ff:bd:07:c7:35:ae:1a:29:b3:7e:43:33:e3:4c: 03:8e:ba:db:23:4a:5a:d7:c9:ea:ba:ee:55:72:8a: 4f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:48:F3:08:9C:D2:50:82:F6:4D:AE:44:5F:D1:37:B4:2A:13:F6:29 X509v3 Authority Key Identifier: keyid:43:5C:3F:1A:97:90:3E:79:62:92:A2:AC:7A:78:D4:1B:1C:21:DB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1w_GpeQPnlikqKsenjUGxwh24U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:3c:bb:dd:65:c9:ca:ea:5f:26:31:c8:e2:31:3f:d5:68:29: de:64:5e:67:86:51:ea:bd:90:fb:7b:34:73:10:65:4d:87:2c: ea:e8:f6:eb:4a:96:d2:32:9f:59:67:f7:a2:54:8f:d5:4f:9d: 20:4d:e5:66:b8:11:f4:6b:6e:1b:99:68:d1:d7:e7:a6:2a:35: 1d:70:c7:ea:30:ad:33:c1:07:aa:0f:10:26:5c:3f:30:74:68: 18:3e:a2:94:89:ff:76:c9:6e:50:49:87:36:9b:6e:9e:bc:0a: 44:a1:13:1d:e9:3e:e2:cd:cf:2f:ae:89:93:99:f9:84:08:e0: 1a:a7:a5:17:de:4c:1f:20:3f:6d:29:3c:dc:b7:84:3f:9b:c3: 41:62:ee:e2:de:0d:78:38:81:c7:a8:95:96:16:4b:e1:5c:36: 48:50:70:8a:ec:34:b0:b3:73:2b:db:a1:1c:d5:78:8f:82:b5: 02:41:96:98:75:81:3f:07:72:54:01:52:37:7f:ef:06:3f:c6: 4b:ee:8b:7f:96:24:41:9f:84:06:a6:8e:08:3b:ce:1b:e6:8c: c0:6e:44:e9:0e:a8:38:e7:fb:51:af:63:56:7d:2b:33:dd:45: cf:6e:9c:47:ca:d0:83:25:d3:4f:98:a2:56:f3:7c:53:5f:dd: 90:c9:d7:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72S3SdMEnv2JIGPeqz2HDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzNWMzZjFhOTc5MDNlNzk2MjkyYTJhYzdhNzhkNDFiMWMy MWRiODUwHhcNMjUxMjIwMTMwMDQ3WhcNMjUxMjIxMTMwMDQ3WjAzMTEwLwYDVQQD EyhmNDQ4ZjMwODljZDI1MDgyZjY0ZGFlNDQ1ZmQxMzdiNDJhMTNmNjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hevv8vxScXdXqQVl0yIulEdYmNl Ojrh6peQGt8/R324NuWVMPZHK1taQmFLhDM8bbgsnKjwbwWojShIsLBH1/39dRu1 TC2SOvSNYE512wOPhJDLVg//cN9qT9h7nokuncdhlJfUXrNk5mVJJk+AtVBBeyK+ FFm0354JuhDM9pdPYa+7clGKXb0ci7gEbvO9eXQJvvk3vyd1wEE9d70BEWFX9DDk BLlnmbSaZef/m35982l7BUZ28kJVVW+vbMN6qFpLcw5ZDihi9zNdKkRE0YbjI+SO hM6l58vqT4hXRsNN/70HxzWuGimzfkMz40wDjrrbI0pa18nquu5VcopPxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPRI8wic0lCC9k2uRF/RN7QqE/YpMB8GA1UdIwQY MBaAFENcPxqXkD55YpKirHp41BscIduFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTF3X0dwZVFQbmxpa3FLc2VualVHeHdoMjRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9kOGFkYmUtZGNiZS00YzI3LTk2NzEt ZGJkZWIzZDUzNjBiLzEvUTF3X0dwZVFQbmxpa3FLc2VualVHeHdoMjRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9kOGFkYmUtZGNiZS00YzI3LTk2NzEtZGJkZWIzZDUzNjBi LzEvUTF3X0dwZVFQbmxpa3FLc2VualVHeHdoMjRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMDy73WXJ yupfJjHI4jE/1Wgp3mReZ4ZR6r2Q+3s0cxBlTYcs6uj260qW0jKfWWf3olSP1U+d IE3lZrgR9GtuG5lo0dfnpio1HXDH6jCtM8EHqg8QJlw/MHRoGD6ilIn/dsluUEmH NptunrwKRKETHek+4s3PL66Jk5n5hAjgGqelF95MHyA/bSk83LeEP5vDQWLu4t4N eDiBx6iVlhZL4Vw2SFBwiuw0sLNzK9uhHNV4j4K1AkGWmHWBPwdyVAFSN3/vBj/G S+6Lf5YkQZ+EBqaOCDvOG+aMwG5E6Q6oOOf7Ua9jVn0rM91Fz26cR8rQgyXTT5ii VvN8U1/dkMnXAg== -----END CERTIFICATE-----Generated at Sat Dec 20 22:43:14 2025 by rpki-client