This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft File: Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft (raw, json) Hash identifier: wVURwilwLZRnU3e3TvLo22a0QOJs3RzxijcpoTzSP5w= Subject key identifier: 74:7F:93:F7:1B:CD:33:1B:51:6B:F7:C3:74:71:74:6D:E2:2B:4B:24 Authority key identifier: 43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F Certificate issuer: /CN=43a438813750133e55001bf89670a0db3ae5be1f Certificate serial: 019B3EA3740226D1176191A66A6B3DE044AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 02:00:57 +0000 Manifest this update: Sun 21 Dec 2025 02:00:57 +0000 Manifest next update: Mon 22 Dec 2025 02:00:57 +0000 Files and hashes: 1: Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl (hash: m/GTUb2pdiwFTb+eyS7Idf3JRcmBUrmw/YusifybJpI=) 2: RyUHQEgGXjRJvvBofzPoVBVvJLI.roa (hash: 8LvL1DJ5MAmrFF0fUbGtnSpplfiMkmqva41THaM74ck=) 3: s_oUhLMqLfuuuJ5GAra3RGPGuEo.roa (hash: lMo8tMkOr3gYSijDEd95RyC1UxQ+xYW4gIbbh74Ckwk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:74:02:26:d1:17:61:91:a6:6a:6b:3d:e0:44:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43a438813750133e55001bf89670a0db3ae5be1f Validity Not Before: Dec 21 02:00:57 2025 GMT Not After : Dec 22 02:00:57 2025 GMT Subject: CN=747f93f71bcd331b516bf7c37471746de22b4b24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:be:82:34:f4:b1:9a:f4:e4:37:cb:40:a4:95: b9:ff:1f:1e:7f:42:16:30:44:cb:56:f5:23:6f:8f: f5:87:1f:a1:8e:5d:db:e2:3e:80:5c:59:00:a7:db: 4e:31:c8:fe:67:78:fb:21:a4:37:99:39:c9:ab:b1: 5a:01:c1:1e:17:bd:f8:b8:5e:aa:61:ef:54:f1:66: 73:bc:c2:3e:97:03:ce:5a:41:0c:f5:d5:93:56:de: a6:c7:c8:82:17:cd:69:55:b6:60:92:d0:38:6f:f0: c9:cf:82:01:ee:e5:2b:f1:25:dd:e2:d9:04:0d:3a: 6c:d1:e4:37:da:25:77:ed:3d:91:ce:dd:b9:4f:d1: 4b:b3:b6:c4:fc:6a:ea:56:a3:fc:a2:cf:7a:af:2b: 39:64:ec:53:01:bb:66:b5:34:e1:a3:7f:e0:9c:ff: f5:94:b5:1b:1b:1d:72:7e:b3:e5:21:ce:75:69:38: 22:10:b5:13:8a:ac:26:68:17:1b:86:22:9f:81:f1: 42:62:4d:fd:36:18:d6:d5:db:d1:4f:00:03:8a:25: 3c:b4:68:56:be:2a:66:ba:53:9d:9d:5f:0c:78:b9: 51:f5:1b:29:ff:22:1d:39:09:7e:ac:f0:d3:4e:47: 50:f9:2f:8a:b5:f4:10:9d:91:61:b5:65:3c:89:de: 3b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:7F:93:F7:1B:CD:33:1B:51:6B:F7:C3:74:71:74:6D:E2:2B:4B:24 X509v3 Authority Key Identifier: keyid:43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:8a:7a:c3:d0:a6:7b:6d:14:e8:a5:87:a9:18:8a:d4:fc:16: d2:d5:aa:43:f4:7c:e5:d2:34:1d:a4:00:98:9f:b0:c6:41:95: 79:ea:5b:05:2f:05:2e:4b:34:cb:7d:10:55:a4:77:5d:e6:3d: 9a:ef:b4:1e:f6:a2:85:67:f5:45:f2:79:80:fa:13:10:ad:d4: 26:1c:b4:4d:2b:19:51:c9:ff:b2:fb:b5:ce:fa:b2:dd:b8:2d: fd:84:3e:60:f8:8e:c4:c3:04:05:53:3b:14:73:8d:4f:ec:5d: 95:b6:6a:26:2f:31:c9:72:0a:62:6f:be:a8:e4:31:03:8b:9c: 11:37:98:de:08:b3:13:c4:68:72:25:3c:30:97:e2:c4:29:16: 22:df:16:d2:e5:d7:b9:d6:ba:dc:79:b9:36:e7:64:c8:7e:64: ce:ae:bf:b5:90:b2:a5:e8:e1:03:fb:18:e3:f7:ab:c5:26:73: 5a:91:8e:75:bc:d1:85:66:58:6f:20:df:50:f1:8a:b1:45:9d: 09:6c:69:ce:2a:33:ab:8b:00:d4:f6:a6:4a:2c:82:dd:9c:84: 65:9f:75:ad:6e:58:c3:ae:0a:94:4d:97:f8:52:ae:7c:98:be: 02:02:02:ec:35:55:0e:68:d0:6b:0d:73:25:06:a8:0b:1f:9d: 58:57:2a:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o3QCJtEXYZGmams94ESrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzYTQzODgxMzc1MDEzM2U1NTAwMWJmODk2NzBhMGRiM2Fl NWJlMWYwHhcNMjUxMjIxMDIwMDU3WhcNMjUxMjIyMDIwMDU3WjAzMTEwLwYDVQQD Eyg3NDdmOTNmNzFiY2QzMzFiNTE2YmY3YzM3NDcxNzQ2ZGUyMmI0YjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjr6CNPSxmvTkN8tApJW5/x8ef0IW METLVvUjb4/1hx+hjl3b4j6AXFkAp9tOMcj+Z3j7IaQ3mTnJq7FaAcEeF734uF6q Ye9U8WZzvMI+lwPOWkEM9dWTVt6mx8iCF81pVbZgktA4b/DJz4IB7uUr8SXd4tkE DTps0eQ32iV37T2Rzt25T9FLs7bE/GrqVqP8os96rys5ZOxTAbtmtTTho3/gnP/1 lLUbGx1yfrPlIc51aTgiELUTiqwmaBcbhiKfgfFCYk39NhjW1dvRTwADiiU8tGhW vipmulOdnV8MeLlR9Rsp/yIdOQl+rPDTTkdQ+S+KtfQQnZFhtWU8id47PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHR/k/cbzTMbUWv3w3RxdG3iK0skMB8GA1UdIwQY MBaAFEOkOIE3UBM+VQAb+JZwoNs65b4fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTZRNGdUZFFFejVWQUJ2NGxuQ2cyenJsdmg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81Y2I0NzMtMzVhMS00NzI3LTg3NzMt YTBkNmYwZWViNWMyLzEvUTZRNGdUZFFFejVWQUJ2NGxuQ2cyenJsdmg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC81Y2I0NzMtMzVhMS00NzI3LTg3NzMtYTBkNmYwZWViNWMy LzEvUTZRNGdUZFFFejVWQUJ2NGxuQ2cyenJsdmg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADYp6w9Cm e20U6KWHqRiK1PwW0tWqQ/R85dI0HaQAmJ+wxkGVeepbBS8FLks0y30QVaR3XeY9 mu+0HvaihWf1RfJ5gPoTEK3UJhy0TSsZUcn/svu1zvqy3bgt/YQ+YPiOxMMEBVM7 FHONT+xdlbZqJi8xyXIKYm++qOQxA4ucETeY3gizE8RociU8MJfixCkWIt8W0uXX uda63Hm5NudkyH5kzq6/tZCypejhA/sY4/erxSZzWpGOdbzRhWZYbyDfUPGKsUWd CWxpziozq4sA1PamSiyC3ZyEZZ91rW5Yw64KlE2X+FKufJi+AgIC7DVVDmjQaw1z JQaoCx+dWFcqqQ== -----END CERTIFICATE-----Generated at Sun Dec 21 06:58:54 2025 by rpki-client