This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft File: Q664_1W9RlALJ9uc8d7CVidrK2o.mft (raw, json) Hash identifier: qW6H0ZIB7VhO34UetvMpE+PZ5c4b1YG/ePIUj6xESlA= Subject key identifier: 9C:34:18:57:3F:A2:A8:0C:63:DB:2E:8A:CB:27:43:8F:69:3A:1C:D2 Authority key identifier: 43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A Certificate issuer: /CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a Certificate serial: 019B3BA202CB938CCF688F23EAB7FE5C1537 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft Manifest number: 047B Signing time: Sat 20 Dec 2025 12:00:31 +0000 Manifest this update: Sat 20 Dec 2025 12:00:31 +0000 Manifest next update: Sun 21 Dec 2025 12:00:31 +0000 Files and hashes: 1: B5665HYy6kSNy90OpMzSYkfYZ78.roa (hash: l3LMbVnBNYo1auwulw02upGn169zVSqtpPpAH0JkHoI=) 2: BhseQy6cfY2KxD85qSiLzXh-5UM.roa (hash: 0YvZXzvsO+BZgmZ0JpcK1I5V3fjP6y+JiPN3ak5ChGQ=) 3: Q664_1W9RlALJ9uc8d7CVidrK2o.crl (hash: jaXbc5ew0OaS/3fzqzKULl2P813pEDYt5uAFvoLBRWw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 12:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:02:cb:93:8c:cf:68:8f:23:ea:b7:fe:5c:15:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a Validity Not Before: Dec 20 12:00:31 2025 GMT Not After : Dec 21 12:00:31 2025 GMT Subject: CN=9c3418573fa2a80c63db2e8acb27438f693a1cd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a8:a0:2a:a1:79:f6:12:7c:ec:dd:08:d7:22: db:e2:3b:78:06:06:e8:62:cb:e9:53:16:4e:9e:9c: 20:bf:39:77:72:10:0e:a2:21:13:71:de:50:c1:f0: 8c:85:ff:14:84:1e:a2:4e:dd:00:c3:69:a1:7f:3d: 22:42:73:e2:fc:f9:8a:da:a6:ca:82:f2:b8:0d:9b: 03:5f:92:40:89:84:f1:78:ab:11:43:85:ad:fb:9e: 18:8f:80:05:ac:ff:2f:df:c8:3e:88:c9:0e:e4:16: 24:e7:4a:2a:f1:c4:8c:d5:84:70:39:f0:0b:e2:51: 2e:89:8b:80:e1:5d:e0:cf:bb:7a:cd:34:3e:4c:dd: 5e:81:46:10:b9:a3:a4:ef:aa:ee:a2:af:e4:be:7e: ff:71:da:14:e4:36:f9:20:ca:7e:7d:05:3e:61:96: 33:45:82:46:5e:85:51:15:0f:58:24:a0:73:35:f1: e8:25:cb:40:49:ec:91:78:c3:93:7f:69:9b:6e:ce: 66:8b:68:68:67:e6:ce:17:38:2e:7d:4c:63:48:fc: e2:67:6d:c9:82:ae:35:98:19:d5:20:96:be:84:b8: a1:0b:bb:d9:c5:d3:a2:d8:3c:2c:b5:64:cb:9b:b8: ea:09:46:31:1d:34:14:72:3d:6b:fe:c7:41:1f:0a: 27:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:34:18:57:3F:A2:A8:0C:63:DB:2E:8A:CB:27:43:8F:69:3A:1C:D2 X509v3 Authority Key Identifier: keyid:43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:34:22:9e:72:3a:b3:58:f0:b4:8c:c7:0c:52:00:c4:7d:fb: 96:67:7e:53:e0:88:cb:b3:6d:9d:4f:98:ef:46:a8:85:54:46: 62:a3:03:47:8b:36:58:5f:23:43:30:47:c7:a0:4a:c5:00:e5: b0:21:ba:22:9c:f4:0b:a8:c1:5a:d6:7f:f7:56:e6:b2:00:54: 06:6a:c3:c9:9e:5d:98:f4:53:11:1c:21:3e:38:b2:3e:d4:e8: 55:18:1e:f0:57:16:4e:a5:d8:7f:53:8f:74:a9:46:17:0c:e4: 47:de:cf:b6:13:e0:86:7b:6d:00:ae:15:1f:79:3f:b5:36:29: af:9f:96:47:c9:b7:26:56:ed:1a:52:63:5a:74:58:45:54:9b: 6e:6c:30:54:c2:bb:9a:43:8d:38:2c:b1:e6:f7:08:a6:6a:06: 38:43:da:2b:70:7b:79:7f:0e:e6:08:a2:68:37:d5:57:da:10: 91:e0:a8:31:b0:a9:39:a2:ac:58:0c:3e:a3:4d:1e:c0:b4:6e: b5:b2:21:ae:d9:6f:22:83:2b:02:a8:4b:e3:f5:67:56:3b:3c: b6:64:67:d3:94:d6:e8:6d:6d:e6:63:2a:a8:16:d2:d9:37:88: 23:61:4b:86:22:c2:e8:4a:97:02:7d:6c:b9:87:c4:e0:b0:59: 9c:67:1a:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ogLLk4zPaI8j6rf+XBU3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzYWViOGZmNTViZDQ2NTAwYjI3ZGI5Y2YxZGVjMjU2Mjc2 YjJiNmEwHhcNMjUxMjIwMTIwMDMxWhcNMjUxMjIxMTIwMDMxWjAzMTEwLwYDVQQD Eyg5YzM0MTg1NzNmYTJhODBjNjNkYjJlOGFjYjI3NDM4ZjY5M2ExY2QyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaigKqF59hJ87N0I1yLb4jt4Bgbo YsvpUxZOnpwgvzl3chAOoiETcd5QwfCMhf8UhB6iTt0Aw2mhfz0iQnPi/PmK2qbK gvK4DZsDX5JAiYTxeKsRQ4Wt+54Yj4AFrP8v38g+iMkO5BYk50oq8cSM1YRwOfAL 4lEuiYuA4V3gz7t6zTQ+TN1egUYQuaOk76ruoq/kvn7/cdoU5Db5IMp+fQU+YZYz RYJGXoVRFQ9YJKBzNfHoJctASeyReMOTf2mbbs5mi2hoZ+bOFzgufUxjSPziZ23J gq41mBnVIJa+hLihC7vZxdOi2DwstWTLm7jqCUYxHTQUcj1r/sdBHwontQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJw0GFc/oqgMY9suissnQ49pOhzSMB8GA1UdIwQY MBaAFEOuuP9VvUZQCyfbnPHewlYnaytqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTY2NF8xVzlSbEFMSjl1YzhkN0NWaWRySzJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8zYjZmYjQtNTJlOC00NGUyLWFiZTgt MmMyZmJhZDJmMDExLzEvUTY2NF8xVzlSbEFMSjl1YzhkN0NWaWRySzJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8zYjZmYjQtNTJlOC00NGUyLWFiZTgtMmMyZmJhZDJmMDEx LzEvUTY2NF8xVzlSbEFMSjl1YzhkN0NWaWRySzJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMTQinnI6 s1jwtIzHDFIAxH37lmd+U+CIy7NtnU+Y70aohVRGYqMDR4s2WF8jQzBHx6BKxQDl sCG6Ipz0C6jBWtZ/91bmsgBUBmrDyZ5dmPRTERwhPjiyPtToVRge8FcWTqXYf1OP dKlGFwzkR97PthPghnttAK4VH3k/tTYpr5+WR8m3JlbtGlJjWnRYRVSbbmwwVMK7 mkONOCyx5vcIpmoGOEPaK3B7eX8O5giiaDfVV9oQkeCoMbCpOaKsWAw+o00ewLRu tbIhrtlvIoMrAqhL4/VnVjs8tmRn05TW6G1t5mMqqBbS2TeII2FLhiLC6EqXAn1s uYfE4LBZnGcadw== -----END CERTIFICATE-----Generated at Sat Dec 20 21:15:54 2025 by rpki-client