This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft File: Q-ZRNoOGaONd1VLvDCH76avtE5s.mft (raw, json) Hash identifier: B0P4nPo1+r3Za0lSKYznz1xQzU7/tf+EQ+rHYFB1Ao8= Subject key identifier: BB:E8:98:E9:A5:54:20:52:5E:59:23:90:3D:57:20:86:39:67:47:E7 Authority key identifier: 43:E6:51:36:83:86:68:E3:5D:D5:52:EF:0C:21:FB:E9:AB:ED:13:9B Certificate issuer: /CN=43e65136838668e35dd552ef0c21fbe9abed139b Certificate serial: 019B360ED64D4A31D54CC3B95E38DE30427F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q-ZRNoOGaONd1VLvDCH76avtE5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft Manifest number: 035F Signing time: Fri 19 Dec 2025 10:01:40 +0000 Manifest this update: Fri 19 Dec 2025 10:01:40 +0000 Manifest next update: Sat 20 Dec 2025 10:01:40 +0000 Files and hashes: 1: Q-ZRNoOGaONd1VLvDCH76avtE5s.crl (hash: V9VYz/QaDUUZVReMX3JOKNn8Jaf26w7tU+095vuR2rY=) 2: aIJd5q5n1BMhAvDcaHy6hyORixY.roa (hash: g4oLD9R9gouTz6cg2k+J0gSsSi5IKrB+jtKfUgG2zS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.crl rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft rsync://rpki.ripe.net/repository/DEFAULT/Q-ZRNoOGaONd1VLvDCH76avtE5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 10:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:d6:4d:4a:31:d5:4c:c3:b9:5e:38:de:30:42:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43e65136838668e35dd552ef0c21fbe9abed139b Validity Not Before: Dec 19 10:01:40 2025 GMT Not After : Dec 20 10:01:40 2025 GMT Subject: CN=bbe898e9a55420525e5923903d572086396747e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c7:d2:9c:24:43:ae:19:1c:89:3c:cb:c7:b4: f6:98:c6:25:98:2d:53:23:ac:36:d2:8e:43:79:40: cd:d2:3a:9a:ff:1a:d1:0e:3e:03:4c:0e:e0:d2:bf: e3:02:e8:6e:ef:17:e2:62:4c:46:6a:c5:46:85:2a: 7d:23:61:44:e4:1a:a7:60:ac:a7:b2:29:b4:c8:ba: c7:4e:8e:d7:32:39:ce:30:72:3f:fe:de:91:ed:c4: 1f:35:da:bc:9c:56:57:f8:8f:24:7b:04:fe:bc:b4: f2:3c:34:57:15:fd:fd:d5:27:1f:d4:61:16:4e:0b: d5:2c:85:83:68:65:3b:13:93:ba:75:db:98:47:73: b6:d2:59:56:ee:be:b1:64:8e:82:9a:c6:c7:7b:c1: 70:6b:39:82:27:e4:26:84:8f:25:f5:f7:44:16:75: 56:dc:05:8e:88:87:4e:a0:14:26:33:9d:d6:fb:6e: 95:ab:13:20:6e:ee:c3:1c:a5:a7:af:85:ee:47:ee: 66:9b:87:ea:e6:f4:33:0f:07:06:a8:ad:dd:8c:c9: 83:35:88:42:66:4f:fb:1b:2c:e4:be:a9:7a:bf:ab: 41:fc:b7:6f:e8:3a:32:f9:95:13:0b:1b:17:6a:dd: 31:99:0a:ba:ef:22:23:50:94:94:fe:c4:ef:32:9c: 1d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E8:98:E9:A5:54:20:52:5E:59:23:90:3D:57:20:86:39:67:47:E7 X509v3 Authority Key Identifier: keyid:43:E6:51:36:83:86:68:E3:5D:D5:52:EF:0C:21:FB:E9:AB:ED:13:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-ZRNoOGaONd1VLvDCH76avtE5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:e2:ac:f5:44:c4:16:54:64:09:cc:98:99:94:52:f3:2f:5d: 9d:59:0f:f0:60:2e:43:8f:42:0f:fa:57:7c:05:cf:0b:15:43: 81:98:00:91:09:b0:b7:5b:d6:78:bc:d9:d5:55:db:e1:d8:b2: b2:c1:25:4e:7e:a5:5a:1d:e1:51:41:8a:b5:e2:c1:0f:24:08: 1f:d1:32:f6:0f:bd:f4:f3:07:59:12:4a:9e:a0:ab:ef:59:2c: 76:01:43:0c:82:31:d6:46:08:af:1e:88:db:49:81:51:a2:40: d8:f9:70:88:60:99:7d:a2:80:8f:ce:f9:6a:e1:c8:96:d0:98: 8b:0d:7d:b2:ee:14:03:5a:aa:83:57:9a:a2:6b:a1:c8:43:74: 6e:30:c3:cf:74:c7:27:ae:b4:fe:f9:b6:2c:72:02:0a:9e:67: b1:81:f1:37:c1:ae:13:08:dc:9f:6c:1a:70:ca:5f:6c:94:b6: ab:a4:2b:5e:56:c3:87:35:33:68:84:26:40:cc:4c:70:b8:5a: 72:0e:e5:49:f2:9b:be:d3:60:d8:39:1d:de:1b:8f:a1:04:86: fe:68:6c:84:35:48:81:0d:9c:da:f8:27:d9:e0:8f:dd:95:03: 68:d1:68:e9:30:e0:7a:7c:3a:29:21:8f:4d:63:e4:18:7a:fb: 5d:56:ad:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DtZNSjHVTMO5XjjeMEJ/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZTY1MTM2ODM4NjY4ZTM1ZGQ1NTJlZjBjMjFmYmU5YWJl ZDEzOWIwHhcNMjUxMjE5MTAwMTQwWhcNMjUxMjIwMTAwMTQwWjAzMTEwLwYDVQQD EyhiYmU4OThlOWE1NTQyMDUyNWU1OTIzOTAzZDU3MjA4NjM5Njc0N2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8fSnCRDrhkciTzLx7T2mMYlmC1T I6w20o5DeUDN0jqa/xrRDj4DTA7g0r/jAuhu7xfiYkxGasVGhSp9I2FE5BqnYKyn sim0yLrHTo7XMjnOMHI//t6R7cQfNdq8nFZX+I8kewT+vLTyPDRXFf391Scf1GEW TgvVLIWDaGU7E5O6dduYR3O20llW7r6xZI6CmsbHe8FwazmCJ+QmhI8l9fdEFnVW 3AWOiIdOoBQmM53W+26VqxMgbu7DHKWnr4XuR+5mm4fq5vQzDwcGqK3djMmDNYhC Zk/7Gyzkvql6v6tB/Ldv6Doy+ZUTCxsXat0xmQq67yIjUJSU/sTvMpwd6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLvomOmlVCBSXlkjkD1XIIY5Z0fnMB8GA1UdIwQY MBaAFEPmUTaDhmjjXdVS7wwh++mr7RObMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUS1aUk5vT0dhT05kMVZMdkRDSDc2YXZ0RTVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9hMTllN2UtYjViNC00NGY3LWI5Mzct MGRhNmRjMmM3ODJjLzEvUS1aUk5vT0dhT05kMVZMdkRDSDc2YXZ0RTVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9hMTllN2UtYjViNC00NGY3LWI5MzctMGRhNmRjMmM3ODJj LzEvUS1aUk5vT0dhT05kMVZMdkRDSDc2YXZ0RTVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe+Ks9UTE FlRkCcyYmZRS8y9dnVkP8GAuQ49CD/pXfAXPCxVDgZgAkQmwt1vWeLzZ1VXb4diy ssElTn6lWh3hUUGKteLBDyQIH9Ey9g+99PMHWRJKnqCr71ksdgFDDIIx1kYIrx6I 20mBUaJA2PlwiGCZfaKAj875auHIltCYiw19su4UA1qqg1eaomuhyEN0bjDDz3TH J660/vm2LHICCp5nsYHxN8GuEwjcn2wacMpfbJS2q6QrXlbDhzUzaIQmQMxMcLha cg7lSfKbvtNg2Dkd3huPoQSG/mhshDVIgQ2c2vgn2eCP3ZUDaNFo6TDgenw6KSGP TWPkGHr7XVat8w== -----END CERTIFICATE-----Generated at Fri Dec 19 18:51:49 2025 by rpki-client