This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft File: Q57sdw36ZitOpkoCLus46D2q4ig.mft (raw, json) Hash identifier: WwIcCBXZ8WMb/sJ+nvAoGIVZJRUz95yVX11GO2pB+5Q= Subject key identifier: A2:56:66:B1:E1:8E:D7:33:50:B9:72:3F:28:6B:9E:2C:8F:11:CE:B5 Authority key identifier: 43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28 Certificate issuer: /CN=439eec770dfa662b4ea64a022eeb38e83daae228 Certificate serial: 019B3AC67E9F43B038AEB35DCCDC3DC5F5E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft Manifest number: 091D Signing time: Sat 20 Dec 2025 08:00:45 +0000 Manifest this update: Sat 20 Dec 2025 08:00:45 +0000 Manifest next update: Sun 21 Dec 2025 08:00:45 +0000 Files and hashes: 1: Q57sdw36ZitOpkoCLus46D2q4ig.crl (hash: DDTrCahuSHDqEAkbVTYXmcAwydpA2wMsxQq7k1KpiJI=) 2: s-6iu0euq8mwctWc84gynbP4Gz8.roa (hash: ix817uYIHKTbd4XoAS5Yf6A1NltjL0SfzgZQTYUowKc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:7e:9f:43:b0:38:ae:b3:5d:cc:dc:3d:c5:f5:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439eec770dfa662b4ea64a022eeb38e83daae228 Validity Not Before: Dec 20 08:00:45 2025 GMT Not After : Dec 21 08:00:45 2025 GMT Subject: CN=a25666b1e18ed73350b9723f286b9e2c8f11ceb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:03:ac:d9:15:c9:e4:99:a3:76:12:98:ad:29: 0d:49:15:7a:90:42:a0:a4:d3:89:b7:16:83:06:99: 35:eb:95:53:86:7f:a6:d2:5a:08:20:d1:a1:dc:73: 96:5a:e8:ca:72:6f:b8:5f:a6:cd:9f:16:65:1a:86: a8:25:99:b5:2d:03:0b:c1:5a:e3:04:57:37:90:06: 23:81:e6:5d:e7:40:ef:43:e6:81:87:4d:38:21:ff: 46:d6:02:fb:91:43:4b:ac:17:01:97:ff:53:62:37: 30:f8:06:00:3c:81:25:9f:96:41:88:00:1f:0b:38: f1:30:fd:f1:39:cc:5d:11:61:13:9d:66:03:65:62: 56:e5:1d:e6:1f:9d:39:d0:35:02:44:a5:2c:cb:45: d1:d3:54:5f:32:8c:d7:a8:8a:c3:d6:88:6b:ab:da: 5d:37:4d:fa:f1:75:ac:38:23:29:0b:e5:f2:9c:cc: ef:2b:e6:a3:cf:c8:ec:1a:65:0c:f3:7f:70:e0:ab: fc:d6:c8:26:68:fd:d9:db:c6:da:71:64:0a:e0:6d: 19:8c:61:80:1b:e8:ed:ff:92:a5:4b:16:44:69:11: 58:e6:a5:48:ae:fd:6d:70:c6:86:86:a6:21:da:d5: 68:bc:39:0a:47:e9:1c:ca:a4:1c:1f:0a:55:b6:f2: ac:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:56:66:B1:E1:8E:D7:33:50:B9:72:3F:28:6B:9E:2C:8F:11:CE:B5 X509v3 Authority Key Identifier: keyid:43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:45:85:90:c2:50:74:91:d0:d2:9b:3b:d5:62:df:cb:f0:30: 63:59:0f:bb:53:b1:2d:b1:27:61:9a:12:58:1e:fa:00:6b:2b: fb:34:91:85:b8:c4:75:1b:e2:9c:9d:e0:08:a6:a9:9b:b6:8e: a3:72:c1:69:9c:00:30:60:4d:97:cf:9e:5a:3b:5f:c7:78:3e: d7:ce:06:83:d4:44:ef:43:4b:3f:01:4c:3e:b7:35:46:42:c0: 56:d8:a3:94:09:8b:99:33:19:e2:1c:fa:c7:fd:7d:e7:54:8d: a1:ce:2b:dc:41:7e:2c:40:bb:cd:a1:c9:f4:32:c1:25:84:4e: 29:78:22:96:c6:1d:10:7c:d3:3f:de:c3:e6:27:80:4d:bc:97: e7:b4:78:59:2a:29:d4:12:78:a2:ef:9f:33:19:08:01:90:5f: 1d:11:51:b8:03:07:6f:c0:6e:b9:00:f0:5f:0e:24:4f:e7:df: 67:3d:43:50:3f:40:6b:eb:94:2a:b1:1e:de:d2:9b:3d:9c:e4: b6:c8:89:b7:7b:41:58:cd:e2:cf:17:c6:67:50:11:0b:6b:63: 66:f3:c2:1e:cc:74:f6:4e:8e:ae:15:b9:6c:14:40:fd:e5:e8: bb:21:45:5f:6f:75:03:5d:f6:d6:ff:64:43:c3:a2:73:e9:7e: 37:91:23:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xn6fQ7A4rrNdzNw9xfXgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzOWVlYzc3MGRmYTY2MmI0ZWE2NGEwMjJlZWIzOGU4M2Rh YWUyMjgwHhcNMjUxMjIwMDgwMDQ1WhcNMjUxMjIxMDgwMDQ1WjAzMTEwLwYDVQQD EyhhMjU2NjZiMWUxOGVkNzMzNTBiOTcyM2YyODZiOWUyYzhmMTFjZWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQOs2RXJ5JmjdhKYrSkNSRV6kEKg pNOJtxaDBpk165VThn+m0loIINGh3HOWWujKcm+4X6bNnxZlGoaoJZm1LQMLwVrj BFc3kAYjgeZd50DvQ+aBh004If9G1gL7kUNLrBcBl/9TYjcw+AYAPIEln5ZBiAAf CzjxMP3xOcxdEWETnWYDZWJW5R3mH5050DUCRKUsy0XR01RfMozXqIrD1ohrq9pd N0368XWsOCMpC+XynMzvK+ajz8jsGmUM839w4Kv81sgmaP3Z28bacWQK4G0ZjGGA G+jt/5KlSxZEaRFY5qVIrv1tcMaGhqYh2tVovDkKR+kcyqQcHwpVtvKsnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKJWZrHhjtczULlyPyhrniyPEc61MB8GA1UdIwQY MBaAFEOe7HcN+mYrTqZKAi7rOOg9quIoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTU3c2R3MzZaaXRPcGtvQ0x1czQ2RDJxNGlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi82Yjg0MzQtZjQ1NC00MWM3LTkyYjkt MzUyZjdjYTAxMWFlLzEvUTU3c2R3MzZaaXRPcGtvQ0x1czQ2RDJxNGlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi82Yjg0MzQtZjQ1NC00MWM3LTkyYjktMzUyZjdjYTAxMWFl LzEvUTU3c2R3MzZaaXRPcGtvQ0x1czQ2RDJxNGlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ0WFkMJQ dJHQ0ps71WLfy/AwY1kPu1OxLbEnYZoSWB76AGsr+zSRhbjEdRvinJ3gCKapm7aO o3LBaZwAMGBNl8+eWjtfx3g+184Gg9RE70NLPwFMPrc1RkLAVtijlAmLmTMZ4hz6 x/1951SNoc4r3EF+LEC7zaHJ9DLBJYROKXgilsYdEHzTP97D5ieATbyX57R4WSop 1BJ4ou+fMxkIAZBfHRFRuAMHb8BuuQDwXw4kT+ffZz1DUD9Aa+uUKrEe3tKbPZzk tsiJt3tBWM3izxfGZ1ARC2tjZvPCHsx09k6OrhW5bBRA/eXouyFFX291A1321v9k Q8Oic+l+N5EjOw== -----END CERTIFICATE-----Generated at Sat Dec 20 17:00:20 2025 by rpki-client