This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft File: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft (raw, json) Hash identifier: nGG+1tbuDU7w02uV30Xe8ZC/3rYieChpr0INyaig9Q0= Subject key identifier: 56:B8:E4:C4:AF:8B:27:85:A4:1F:E5:C2:46:A5:21:6D:0F:15:9E:AC Authority key identifier: 43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84 Certificate issuer: /CN=43ca7f3f65d2947af94f398bb3c7c9c320019084 Certificate serial: 019B541907049ADEAA1BD525500877F5C0CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft Manifest number: 0C78 Signing time: Thu 25 Dec 2025 06:01:24 +0000 Manifest this update: Thu 25 Dec 2025 06:01:24 +0000 Manifest next update: Fri 26 Dec 2025 06:01:24 +0000 Files and hashes: 1: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl (hash: tEI3q2cBLCLuN7uOYorGKxXw/DU0N2jWmUbTdWkIwzA=) 2: n71Z9zO5i6A3MnYNwx7Uxb_OUGA.roa (hash: CVGNrsSAJVnXCFxttiW1g0o49r+f3Le2U2M52m4z4p8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:19:07:04:9a:de:aa:1b:d5:25:50:08:77:f5:c0:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43ca7f3f65d2947af94f398bb3c7c9c320019084 Validity Not Before: Dec 25 06:01:24 2025 GMT Not After : Dec 26 06:01:24 2025 GMT Subject: CN=56b8e4c4af8b2785a41fe5c246a5216d0f159eac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f3:54:c0:9b:35:b2:fd:c8:c1:fc:a7:2f:0c: 79:b5:8a:bb:eb:e7:86:16:db:f0:13:7e:13:76:de: 03:a7:b9:0e:15:6a:ab:a1:8a:d2:b6:35:ad:99:a4: 43:bc:4b:e1:be:26:62:9c:14:86:ba:24:b7:0f:1c: ae:72:ad:13:1f:95:57:c3:bd:67:60:10:f1:c8:54: ce:f6:8f:dd:69:f3:c6:33:25:20:0f:a2:f9:bb:b4: 80:99:b7:62:b6:7a:97:06:51:5a:1a:98:9e:dd:6c: 84:8d:c5:03:05:2c:7f:0a:03:57:b0:c8:9f:26:87: 12:23:cf:8e:fa:f4:a6:68:a3:1b:3e:41:17:2e:88: 96:b6:5b:b7:b0:6c:cd:8b:22:80:3e:7a:80:29:cc: a4:8e:2a:be:db:fd:9f:b7:28:28:c9:c3:58:4b:30: bc:94:a5:0c:b5:33:88:4d:06:0a:3c:08:16:7f:64: eb:ec:29:fc:44:bf:ea:0a:60:0f:14:a0:57:a1:0b: d1:55:11:06:9d:e5:c6:54:5d:76:24:2d:9f:45:6b: 18:77:69:36:06:8a:76:91:dc:d3:d5:63:7d:da:7b: b6:b1:58:36:6d:b8:a7:b8:b3:c2:b0:d0:7a:01:04: 92:60:11:73:7d:e9:07:63:0b:f7:69:d1:76:68:6e: 84:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:B8:E4:C4:AF:8B:27:85:A4:1F:E5:C2:46:A5:21:6D:0F:15:9E:AC X509v3 Authority Key Identifier: keyid:43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:6f:1a:55:b8:3d:d2:d3:ca:87:db:6e:31:02:d0:c0:4c:e0: 2c:fa:f4:37:5b:51:b3:10:06:cc:07:f4:a3:55:ce:a8:4d:2b: 92:e1:f8:b2:3c:18:65:44:9b:61:99:92:0b:dd:a5:2c:b4:d3: c7:21:45:97:21:9f:e4:fe:a6:52:f4:5b:01:b0:1a:aa:c0:40: bb:ef:d1:bf:ca:89:4b:5e:28:ec:f4:68:38:0c:26:55:7a:b8: 61:a9:0e:a1:9b:96:9e:66:b7:2c:25:dd:9e:05:12:aa:e9:65: 3f:03:7f:c6:66:8a:74:8b:70:18:7e:67:e0:e5:f0:24:b2:de: da:32:bf:3e:34:33:20:a2:a2:ea:68:ef:4f:2f:17:a0:a2:b1: 13:9f:6b:8d:9f:df:6a:ab:ea:a9:97:bd:31:9d:99:1e:dc:8e: 5c:3f:10:52:4b:63:74:84:2d:df:aa:94:5b:c9:f0:cc:ac:73: 98:3a:9a:1a:a3:2e:f9:36:63:ff:4e:11:59:80:58:91:c6:48: 4c:c9:a2:c2:a1:85:52:88:4f:13:9a:aa:9c:d0:b4:77:a2:44: 12:a6:ce:a2:de:c9:02:1b:e0:b2:a3:37:8f:68:52:51:10:f3: 96:bd:cb:7b:68:86:df:e5:25:e6:ec:f0:36:4e:ab:ff:f9:39: 15:91:5e:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUGQcEmt6qG9UlUAh39cDNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzY2E3ZjNmNjVkMjk0N2FmOTRmMzk4YmIzYzdjOWMzMjAw MTkwODQwHhcNMjUxMjI1MDYwMTI0WhcNMjUxMjI2MDYwMTI0WjAzMTEwLwYDVQQD Eyg1NmI4ZTRjNGFmOGIyNzg1YTQxZmU1YzI0NmE1MjE2ZDBmMTU5ZWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/NUwJs1sv3IwfynLwx5tYq76+eG FtvwE34Tdt4Dp7kOFWqroYrStjWtmaRDvEvhviZinBSGuiS3Dxyucq0TH5VXw71n YBDxyFTO9o/dafPGMyUgD6L5u7SAmbditnqXBlFaGpie3WyEjcUDBSx/CgNXsMif JocSI8+O+vSmaKMbPkEXLoiWtlu3sGzNiyKAPnqAKcykjiq+2/2ftygoycNYSzC8 lKUMtTOITQYKPAgWf2Tr7Cn8RL/qCmAPFKBXoQvRVREGneXGVF12JC2fRWsYd2k2 Bop2kdzT1WN92nu2sVg2bbinuLPCsNB6AQSSYBFzfekHYwv3adF2aG6EaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFa45MSviyeFpB/lwkalIW0PFZ6sMB8GA1UdIwQY MBaAFEPKfz9l0pR6+U85i7PHycMgAZCEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUThwX1AyWFNsSHI1VHptTHM4Zkp3eUFCa0lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9mNmNmNDQtNjZkMy00ZjBiLTgxMzIt ZDUzODExZmJkN2IwLzEvUThwX1AyWFNsSHI1VHptTHM4Zkp3eUFCa0lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9mNmNmNDQtNjZkMy00ZjBiLTgxMzItZDUzODExZmJkN2Iw LzEvUThwX1AyWFNsSHI1VHptTHM4Zkp3eUFCa0lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN28aVbg9 0tPKh9tuMQLQwEzgLPr0N1tRsxAGzAf0o1XOqE0rkuH4sjwYZUSbYZmSC92lLLTT xyFFlyGf5P6mUvRbAbAaqsBAu+/Rv8qJS14o7PRoOAwmVXq4YakOoZuWnma3LCXd ngUSqullPwN/xmaKdItwGH5n4OXwJLLe2jK/PjQzIKKi6mjvTy8XoKKxE59rjZ/f aqvqqZe9MZ2ZHtyOXD8QUktjdIQt36qUW8nwzKxzmDqaGqMu+TZj/04RWYBYkcZI TMmiwqGFUohPE5qqnNC0d6JEEqbOot7JAhvgsqM3j2hSURDzlr3Le2iG3+Ul5uzw Nk6r//k5FZFeIw== -----END CERTIFICATE-----Generated at Thu Dec 25 07:12:04 2025 by rpki-client