This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft File: q3ukNXZmdmStbymmZicOM1eDbxo.mft (raw, json) Hash identifier: AwvCa9X6a1bv1aAINJd/Zrz4YH+9oA9z2aJUAsDP2Vs= Subject key identifier: E2:E2:21:7D:01:25:F2:32:8E:00:9D:2D:96:B4:EC:6B:93:0E:C8:07 Authority key identifier: AB:7B:A4:35:76:66:76:64:AD:6F:29:A6:66:27:0E:33:57:83:6F:1A Certificate issuer: /CN=ab7ba43576667664ad6f29a666270e3357836f1a Certificate serial: 019B529867452E345A45444745D77297C349 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft Manifest number: 1796 Signing time: Wed 24 Dec 2025 23:01:18 +0000 Manifest this update: Wed 24 Dec 2025 23:01:18 +0000 Manifest next update: Thu 25 Dec 2025 23:01:18 +0000 Files and hashes: 1: q3ukNXZmdmStbymmZicOM1eDbxo.crl (hash: /GydiG66/vV8w8dRmMKIngY9aSwfopOH0DqHbBYtVgE=) 2: rFtQ52vnm-Gf2JN4L6yb0DTiUgw.roa (hash: U6PLdhl9fIkfcENijAv37MSFDTY2VRfS2bCNJb0dRIc=) 3: z4h6VOta7nlktuKCkK1-Zw-1S8Q.roa (hash: XA8aL+R7cIm6KIZ8pt2+mp6cPL138KkhjyZFmjM+7SU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.crl rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:98:67:45:2e:34:5a:45:44:47:45:d7:72:97:c3:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab7ba43576667664ad6f29a666270e3357836f1a Validity Not Before: Dec 24 23:01:18 2025 GMT Not After : Dec 25 23:01:18 2025 GMT Subject: CN=e2e2217d0125f2328e009d2d96b4ec6b930ec807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9a:64:dd:6c:39:e2:a5:76:77:fc:d5:b1:1c: de:72:9b:7f:37:7d:9c:b1:21:82:ec:2e:0d:15:7d: d0:ac:02:84:a2:99:41:09:36:e0:35:37:7f:e5:fe: cc:9f:00:54:f3:d4:53:8d:e6:ef:87:47:68:dd:c7: a7:be:54:3e:d7:7a:fd:22:a8:6d:1d:8b:59:84:a3: 31:fc:ae:89:e9:7f:36:25:6e:28:f0:c8:05:4e:38: ee:be:08:f7:e1:f5:ad:80:91:c5:4b:f8:c6:58:c3: be:6c:a7:9b:e0:f2:fa:95:40:39:7c:f9:b1:ac:84: b2:2e:52:79:ed:a5:a3:54:54:2c:ef:6e:da:ea:42: ca:91:3c:9c:99:a8:c2:ec:48:de:57:36:77:8e:3a: 0b:75:d8:ec:09:8a:bc:b9:fd:5c:9b:60:0a:42:35: 7c:fe:a7:a5:17:42:29:dc:af:39:22:74:74:9c:ef: 2c:16:4c:33:ba:27:1d:60:c1:60:ae:47:7f:d9:d0: 56:f7:d9:d1:09:0c:dd:99:6b:c9:44:8c:16:d6:d4: 73:74:a9:2e:62:c2:ea:b3:8a:7e:19:fc:8d:72:16: 22:d6:1b:74:5f:e1:c6:e4:d3:ba:38:70:23:0f:ac: 57:52:eb:55:45:42:0f:b0:62:35:7a:c3:46:c7:13: 35:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E2:21:7D:01:25:F2:32:8E:00:9D:2D:96:B4:EC:6B:93:0E:C8:07 X509v3 Authority Key Identifier: keyid:AB:7B:A4:35:76:66:76:64:AD:6F:29:A6:66:27:0E:33:57:83:6F:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:c0:bb:9d:c9:9c:26:ce:1c:be:0e:00:49:58:9d:90:cf:6a: f0:15:7b:2b:80:e4:17:e3:65:e2:55:a0:2e:93:8a:ae:e8:d0: 56:8e:d2:af:a9:c2:c4:b9:9c:96:a1:b9:83:d2:60:8c:e8:99: fd:82:6c:e0:73:e5:d5:de:5a:a4:24:4f:fb:f6:24:62:d9:c9: 19:2e:88:70:42:76:f3:0b:52:7a:d8:3c:fe:3a:ee:91:45:2a: 1d:66:c4:ff:6c:41:f6:94:22:5e:38:3f:9b:8c:93:77:c1:5e: 0f:d0:e6:ac:de:e5:ef:f7:0a:ba:b7:67:d2:53:83:e9:62:54: 8a:5c:3f:12:8d:ca:f1:fd:16:e6:30:e6:b5:ce:e6:1b:b3:22: 60:67:8a:99:22:9f:2a:31:e5:ff:bf:3e:b4:97:ce:fc:58:d3: 80:1a:06:43:b3:2e:74:7f:64:db:ad:d6:b6:67:0a:83:1c:6a: bb:2e:c0:8a:84:20:0c:85:98:d7:02:33:5f:a5:ec:92:2f:b9: 00:b4:33:bc:a9:20:ef:3a:d2:38:90:6e:5b:21:d4:6d:a1:b3: 25:be:eb:25:16:d0:a7:59:c1:47:13:bf:3b:2e:b6:1e:d6:8b: df:01:b2:08:97:a8:83:27:19:3f:27:3d:03:4b:4c:60:e7:b1: 7c:52:2c:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSmGdFLjRaRURHRddyl8NJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiN2JhNDM1NzY2Njc2NjRhZDZmMjlhNjY2MjcwZTMzNTc4 MzZmMWEwHhcNMjUxMjI0MjMwMTE4WhcNMjUxMjI1MjMwMTE4WjAzMTEwLwYDVQQD EyhlMmUyMjE3ZDAxMjVmMjMyOGUwMDlkMmQ5NmI0ZWM2YjkzMGVjODA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJpk3Ww54qV2d/zVsRzecpt/N32c sSGC7C4NFX3QrAKEoplBCTbgNTd/5f7MnwBU89RTjebvh0do3cenvlQ+13r9Iqht HYtZhKMx/K6J6X82JW4o8MgFTjjuvgj34fWtgJHFS/jGWMO+bKeb4PL6lUA5fPmx rISyLlJ57aWjVFQs727a6kLKkTycmajC7EjeVzZ3jjoLddjsCYq8uf1cm2AKQjV8 /qelF0Ip3K85InR0nO8sFkwzuicdYMFgrkd/2dBW99nRCQzdmWvJRIwW1tRzdKku YsLqs4p+GfyNchYi1ht0X+HG5NO6OHAjD6xXUutVRUIPsGI1esNGxxM1nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOLiIX0BJfIyjgCdLZa07GuTDsgHMB8GA1UdIwQY MBaAFKt7pDV2ZnZkrW8ppmYnDjNXg28aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTN1a05YWm1kbVN0YnltbVppY09NMWVEYnhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8wZTFmOTEtYzNlZC00MzVkLWE0NWYt MjNhYzc1ODA0OGVjLzEvcTN1a05YWm1kbVN0YnltbVppY09NMWVEYnhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8wZTFmOTEtYzNlZC00MzVkLWE0NWYtMjNhYzc1ODA0OGVj LzEvcTN1a05YWm1kbVN0YnltbVppY09NMWVEYnhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAMC7ncmc Js4cvg4ASVidkM9q8BV7K4DkF+Nl4lWgLpOKrujQVo7Sr6nCxLmclqG5g9JgjOiZ /YJs4HPl1d5apCRP+/YkYtnJGS6IcEJ28wtSetg8/jrukUUqHWbE/2xB9pQiXjg/ m4yTd8FeD9DmrN7l7/cKurdn0lOD6WJUilw/Eo3K8f0W5jDmtc7mG7MiYGeKmSKf KjHl/78+tJfO/FjTgBoGQ7MudH9k263WtmcKgxxquy7AioQgDIWY1wIzX6Xski+5 ALQzvKkg7zrSOJBuWyHUbaGzJb7rJRbQp1nBRxO/Oy62HtaL3wGyCJeogycZPyc9 A0tMYOexfFIsSg== -----END CERTIFICATE-----Generated at Thu Dec 25 01:03:01 2025 by rpki-client