This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft File: Q34DDURmGkwgHroD3kUrBLjn2eU.mft (raw, json) Hash identifier: QadfzsfYOjyf3mB8veEtgDQ3QaeytjkUppSXKS8O5IM= Subject key identifier: F9:96:4D:64:7D:EA:25:E9:FD:2E:5F:EA:95:5C:BF:7D:FA:61:B1:6C Authority key identifier: 43:7E:03:0D:44:66:1A:4C:20:1E:BA:03:DE:45:2B:04:B8:E7:D9:E5 Certificate issuer: /CN=437e030d44661a4c201eba03de452b04b8e7d9e5 Certificate serial: 019B3DFEBD215D7ECC8E1481100393EB280F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft Manifest number: 16CE Signing time: Sat 20 Dec 2025 23:01:03 +0000 Manifest this update: Sat 20 Dec 2025 23:01:03 +0000 Manifest next update: Sun 21 Dec 2025 23:01:03 +0000 Files and hashes: 1: Q34DDURmGkwgHroD3kUrBLjn2eU.crl (hash: 8pLyNhGxycShF+Wo4A4Rfo8c7eQsOgfJV+jozunMoRk=) 2: aTnDDG7156iJH1B7VtXl45Lxz4c.roa (hash: uqmE7u3SyyyiP9Dvg82dGi927wLVOacs75i5/YZ4Qho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:bd:21:5d:7e:cc:8e:14:81:10:03:93:eb:28:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=437e030d44661a4c201eba03de452b04b8e7d9e5 Validity Not Before: Dec 20 23:01:03 2025 GMT Not After : Dec 21 23:01:03 2025 GMT Subject: CN=f9964d647dea25e9fd2e5fea955cbf7dfa61b16c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:47:84:49:6d:bb:e9:58:02:b8:2c:46:b1:6c: bb:40:8e:85:7f:4c:0c:e5:40:54:14:15:5a:8f:e6: f8:0d:63:b1:c9:7b:b6:eb:89:e7:0e:f3:41:f6:c1: e7:2a:13:f1:78:ed:46:a3:dc:4c:10:6c:31:32:8b: 1f:20:06:f9:36:22:a0:74:94:31:78:a7:0d:cd:86: 6c:5a:87:05:1f:09:48:a4:53:9b:05:87:0c:16:cc: 4e:92:c6:28:15:08:04:fe:a6:b5:6f:a2:e2:27:38: a9:92:7c:87:d0:b5:2b:cd:9a:b1:17:ff:49:bc:c7: f7:4c:8e:18:ab:13:9a:40:a4:02:35:d5:d5:ad:9d: 9e:56:9b:bb:42:5b:e9:ce:d5:52:8f:97:ab:b2:74: 47:7d:5e:13:76:be:7a:a0:20:2f:40:b5:cb:eb:8c: 3d:79:72:dd:c3:fb:9c:11:1b:ec:5e:d8:92:f0:4d: 54:95:39:12:cb:e5:2a:01:9c:cb:dc:a4:ac:1a:db: 78:db:59:43:8b:d3:68:0d:a8:20:29:53:79:00:b1: ce:f0:ac:79:cd:0f:85:98:20:c2:be:5f:12:11:e8: 75:90:71:91:1e:52:97:f6:2b:45:f6:50:47:79:b9: a1:fd:9c:6b:0d:0d:39:24:2b:48:df:71:46:ad:73: 5a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:96:4D:64:7D:EA:25:E9:FD:2E:5F:EA:95:5C:BF:7D:FA:61:B1:6C X509v3 Authority Key Identifier: keyid:43:7E:03:0D:44:66:1A:4C:20:1E:BA:03:DE:45:2B:04:B8:E7:D9:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:9f:56:a8:5d:d6:4e:e7:f8:0b:23:34:5b:08:6c:35:a6:6a: a7:d4:a3:d8:b2:8a:6b:1f:32:5b:13:9b:6f:e0:50:f0:63:88: 83:db:3a:71:d1:c3:19:fa:10:0f:84:6d:8b:1a:db:74:e7:46: 3c:04:ab:1f:40:58:14:03:98:93:9d:cb:5c:a1:b0:e2:e5:b5: f7:a5:9f:c7:2f:b1:4f:93:d9:34:1f:ac:ec:28:15:91:1c:64: b4:f9:17:e3:23:97:b4:67:6a:43:2e:f6:b6:22:6c:30:0c:93: 22:84:69:f2:ae:2f:2e:fa:2c:46:2d:a0:fb:33:a4:5a:97:ac: 24:17:87:9c:75:2f:fd:96:89:f7:34:b2:b1:1c:75:92:ea:c6: 11:1a:cb:07:fa:48:40:1a:06:e8:eb:9c:7a:cc:4a:ba:d9:ea: 4e:94:91:19:93:44:99:e4:cb:02:c7:89:2a:22:4a:51:c7:dd: 88:30:a8:bf:42:f6:fa:d5:4a:9d:dc:b5:18:1b:d3:78:6d:1b: 54:10:35:1c:21:5c:d4:08:fa:33:9b:9d:ea:29:36:7b:ab:5b: ba:99:7a:66:94:7d:d4:af:30:d9:40:c4:c6:60:e9:af:29:d6: f1:98:ce:2f:4d:ba:85:b7:de:9e:0a:3a:9b:68:33:51:32:81: 1f:99:67:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/r0hXX7MjhSBEAOT6ygPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzN2UwMzBkNDQ2NjFhNGMyMDFlYmEwM2RlNDUyYjA0Yjhl N2Q5ZTUwHhcNMjUxMjIwMjMwMTAzWhcNMjUxMjIxMjMwMTAzWjAzMTEwLwYDVQQD EyhmOTk2NGQ2NDdkZWEyNWU5ZmQyZTVmZWE5NTVjYmY3ZGZhNjFiMTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEeESW276VgCuCxGsWy7QI6Ff0wM 5UBUFBVaj+b4DWOxyXu264nnDvNB9sHnKhPxeO1Go9xMEGwxMosfIAb5NiKgdJQx eKcNzYZsWocFHwlIpFObBYcMFsxOksYoFQgE/qa1b6LiJzipknyH0LUrzZqxF/9J vMf3TI4YqxOaQKQCNdXVrZ2eVpu7QlvpztVSj5ersnRHfV4Tdr56oCAvQLXL64w9 eXLdw/ucERvsXtiS8E1UlTkSy+UqAZzL3KSsGtt421lDi9NoDaggKVN5ALHO8Kx5 zQ+FmCDCvl8SEeh1kHGRHlKX9itF9lBHebmh/ZxrDQ05JCtI33FGrXNa0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPmWTWR96iXp/S5f6pVcv336YbFsMB8GA1UdIwQY MBaAFEN+Aw1EZhpMIB66A95FKwS459nlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTM0RERVUm1Ha3dnSHJvRDNrVXJCTGpuMmVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS80YmUyNTktYmU5Ni00MGZhLTg4MGUt YmJkMjEwNmYzMzcwLzEvUTM0RERVUm1Ha3dnSHJvRDNrVXJCTGpuMmVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS80YmUyNTktYmU5Ni00MGZhLTg4MGUtYmJkMjEwNmYzMzcw LzEvUTM0RERVUm1Ha3dnSHJvRDNrVXJCTGpuMmVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjJ9WqF3W Tuf4CyM0WwhsNaZqp9Sj2LKKax8yWxObb+BQ8GOIg9s6cdHDGfoQD4RtixrbdOdG PASrH0BYFAOYk53LXKGw4uW196Wfxy+xT5PZNB+s7CgVkRxktPkX4yOXtGdqQy72 tiJsMAyTIoRp8q4vLvosRi2g+zOkWpesJBeHnHUv/ZaJ9zSysRx1kurGERrLB/pI QBoG6OucesxKutnqTpSRGZNEmeTLAseJKiJKUcfdiDCov0L2+tVKndy1GBvTeG0b VBA1HCFc1Aj6M5ud6ik2e6tbupl6ZpR91K8w2UDExmDprynW8ZjOL026hbfengo6 m2gzUTKBH5lnwQ== -----END CERTIFICATE-----Generated at Sun Dec 21 04:10:51 2025 by rpki-client