This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft File: 1-QN586_ZTA8mtn__o01ulGwp1iQ.mft (raw, json) Hash identifier: bDwkx/5DQsVVfiV4OD1FgOwMFoyeQFEccCxecBQDoYY= Subject key identifier: 51:81:17:88:EB:59:45:6D:79:C2:95:EA:07:85:DD:3E:D3:5D:C6:41 Authority key identifier: F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24 Certificate issuer: /CN=f90379f3afd94c0f26b67fffa34d6e946c29d624 Certificate serial: 019B3CB4A4A9A7663CF5B185D4D36179C48B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft Manifest number: 14B7 Signing time: Sat 20 Dec 2025 17:00:30 +0000 Manifest this update: Sat 20 Dec 2025 17:00:30 +0000 Manifest next update: Sun 21 Dec 2025 17:00:30 +0000 Files and hashes: 1: 1-QN586_ZTA8mtn__o01ulGwp1iQ.crl (hash: tTe1QmlFlrvAmd+pjfAVw6GwM5kspbnGLtMYzx2+Ss8=) 2: B9xdpXPKaKD7kATBDRUYPDrfJHM.roa (hash: xUpn/6yW+QKWLSXqnG2abjnoqVCxULjYMRU+slTa5PQ=) 3: YYzrkPDEMpFz0VlMFyfkPlvrIPc.roa (hash: ZTbSueGcUA5J+8KJD8a0DCRWPR/FrTGgSZg4efTERpc=) 4: z0hWnzSRmHLyAYMYl1nKCZOWbgw.roa (hash: GQY4W56WRkuweljajSL0/DPkbwKgksUsLIAtILepWM0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 17:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:a4:a9:a7:66:3c:f5:b1:85:d4:d3:61:79:c4:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f90379f3afd94c0f26b67fffa34d6e946c29d624 Validity Not Before: Dec 20 17:00:30 2025 GMT Not After : Dec 21 17:00:30 2025 GMT Subject: CN=51811788eb59456d79c295ea0785dd3ed35dc641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:09:2c:c3:ce:e7:52:8c:95:e4:33:87:6f:3d: a1:de:98:c5:7e:3a:c8:29:6a:a0:b0:6c:88:63:6d: a0:5f:b7:f7:ee:3f:26:05:ee:46:6c:6b:1d:84:cb: ab:fe:46:23:4e:0c:71:31:1e:ed:94:d1:5e:57:a5: b5:48:49:10:e4:f1:50:28:6c:82:15:33:cb:ca:78: 8c:0d:c6:b2:fc:17:d0:93:1c:ae:ce:64:34:f1:b2: aa:eb:cf:9b:3f:f1:cc:7e:43:c3:88:33:e5:7c:f6: a4:4c:13:ae:52:d4:4b:a6:f5:1d:bc:b5:96:fc:0e: 02:31:6c:db:1f:36:64:67:15:53:00:78:30:04:7d: e7:87:df:62:db:5c:c9:70:e4:96:fa:94:ab:e3:aa: 1f:b7:53:73:6f:f9:1c:6b:30:dd:be:03:ed:ab:b0: da:dd:c1:9b:b5:87:9d:d7:77:72:ab:19:58:6d:e5: 81:40:74:71:01:0f:d1:22:6f:5c:3e:96:b8:27:09: 04:2d:2c:2e:5d:ba:73:4a:f2:85:cb:3c:26:ae:af: 7f:ef:8e:95:0b:c4:19:ee:9c:36:ba:d1:1a:17:86: d3:9d:68:a3:cf:3f:82:a3:97:ec:11:df:78:55:4a: cf:a1:ff:21:61:3e:ca:ca:c9:06:a6:62:66:94:13: 71:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:81:17:88:EB:59:45:6D:79:C2:95:EA:07:85:DD:3E:D3:5D:C6:41 X509v3 Authority Key Identifier: keyid:F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:c8:0e:74:09:69:4e:fa:65:5e:6f:6f:68:fe:29:a8:de:7a: ed:02:ab:d9:55:4f:9a:0e:a3:5e:f8:2a:66:47:3a:30:5d:7d: fb:b4:9c:60:c6:59:48:c2:25:b8:42:63:6e:a7:3a:78:8d:cd: a7:31:56:9a:06:bf:b3:9e:fd:5c:01:a3:07:19:19:2f:d0:93: d2:6a:17:05:7a:a9:da:31:1b:5f:df:cc:b9:83:4a:c8:2e:85: 11:ff:27:37:b3:4f:ca:a0:70:b9:10:82:ba:9c:2d:0d:fd:d7: b9:84:6a:f6:fa:32:62:23:db:30:5c:8d:2d:a1:91:06:7f:e1: 68:67:76:47:f4:d3:d3:4e:37:0a:ac:f4:10:df:f9:f1:1c:30: fa:ad:4d:d5:0a:df:cf:0b:37:a5:d3:d7:9c:1f:a2:a1:b9:94: 5f:c7:8f:0c:66:c4:30:8a:7e:58:fa:7c:0f:77:a3:3c:f1:e6: 13:44:91:ff:5b:14:b4:4f:8f:be:77:9f:58:2a:8d:10:71:ef: c0:13:c0:b0:72:00:cb:05:04:de:2f:87:7d:2e:51:2a:71:2b: 5c:dd:b3:56:b9:5f:1c:1c:22:af:cc:71:6d:bf:81:31:d4:0f: a8:cf:e4:db:7d:93:31:2e:50:70:d2:8e:17:c6:ce:5d:09:de: 5b:cd:ee:17 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs8tKSpp2Y89bGF1NNhecSLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5MDM3OWYzYWZkOTRjMGYyNmI2N2ZmZmEzNGQ2ZTk0NmMy OWQ2MjQwHhcNMjUxMjIwMTcwMDMwWhcNMjUxMjIxMTcwMDMwWjAzMTEwLwYDVQQD Eyg1MTgxMTc4OGViNTk0NTZkNzljMjk1ZWEwNzg1ZGQzZWQzNWRjNjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQksw87nUoyV5DOHbz2h3pjFfjrI KWqgsGyIY22gX7f37j8mBe5GbGsdhMur/kYjTgxxMR7tlNFeV6W1SEkQ5PFQKGyC FTPLyniMDcay/BfQkxyuzmQ08bKq68+bP/HMfkPDiDPlfPakTBOuUtRLpvUdvLWW /A4CMWzbHzZkZxVTAHgwBH3nh99i21zJcOSW+pSr46oft1Nzb/kcazDdvgPtq7Da 3cGbtYed13dyqxlYbeWBQHRxAQ/RIm9cPpa4JwkELSwuXbpzSvKFyzwmrq9/746V C8QZ7pw2utEaF4bTnWijzz+Co5fsEd94VUrPof8hYT7KyskGpmJmlBNx1QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFFGBF4jrWUVtecKV6geF3T7TXcZBMB8GA1UdIwQY MBaAFPkDefOv2UwPJrZ//6NNbpRsKdYkMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1RTjU4Nl9aVEE4bXRuX19vMDF1bEd3cDFpUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDYvZGU3ZWY2LWJkYWUtNDcxNy1iMDYx LTZmMjA3OTUxYzRiMi8xLzEtUU41ODZfWlRBOG10bl9fbzAxdWxHd3AxaVEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQ2L2RlN2VmNi1iZGFlLTQ3MTctYjA2MS02ZjIwNzk1MWM0 YjIvMS8xLVFONTg2X1pUQThtdG5fX28wMXVsR3dwMWlRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe8gO dAlpTvplXm9vaP4pqN567QKr2VVPmg6jXvgqZkc6MF19+7ScYMZZSMIluEJjbqc6 eI3NpzFWmga/s579XAGjBxkZL9CT0moXBXqp2jEbX9/MuYNKyC6FEf8nN7NPyqBw uRCCupwtDf3XuYRq9voyYiPbMFyNLaGRBn/haGd2R/TT0043Cqz0EN/58Rww+q1N 1Qrfzws3pdPXnB+iobmUX8ePDGbEMIp+WPp8D3ejPPHmE0SR/1sUtE+PvnefWCqN EHHvwBPAsHIAywUE3i+HfS5RKnErXN2zVrlfHBwir8xxbb+BMdQPqM/k232TMS5Q cNKOF8bOXQneW83uFw== -----END CERTIFICATE-----Generated at Sun Dec 21 03:01:15 2025 by rpki-client