This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft File: QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft (raw, json) Hash identifier: sY0ChRI7JcuopN+DqAKdzquKdedrm+0UdBo+KPfk7ss= Subject key identifier: D0:6E:BA:D5:A2:48:BA:E8:36:9D:00:12:68:9A:3F:50:A2:6B:55:18 Authority key identifier: 40:6E:90:6F:82:B3:D5:15:56:59:DA:E4:D0:86:76:9E:F1:2A:82:14 Certificate issuer: /CN=406e906f82b3d5155659dae4d086769ef12a8214 Certificate serial: 019B47A6CEF08C1AF2CD5509952BDF737D7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft Manifest number: 1263 Signing time: Mon 22 Dec 2025 20:01:12 +0000 Manifest this update: Mon 22 Dec 2025 20:01:12 +0000 Manifest next update: Tue 23 Dec 2025 20:01:12 +0000 Files and hashes: 1: QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl (hash: KnMuYH0DgOqbfOaSJ3hDjINy8Uwep9vmgFyRbcTwRNs=) 2: WhWQtaasnXhce4uUgLMkfia6_fo.roa (hash: D7trmdSCq7r/k8TYb50IMju8s2o1usQc52do6qxrWBY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 20:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:a6:ce:f0:8c:1a:f2:cd:55:09:95:2b:df:73:7d:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=406e906f82b3d5155659dae4d086769ef12a8214 Validity Not Before: Dec 22 20:01:12 2025 GMT Not After : Dec 23 20:01:12 2025 GMT Subject: CN=d06ebad5a248bae8369d0012689a3f50a26b5518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f8:2e:fa:c3:ff:73:3d:91:94:cb:ed:1c:3b: 27:36:c5:b5:1b:9e:7d:0b:0d:60:ec:0a:be:43:b3: a8:90:82:1a:cb:77:7c:d9:a7:7f:6f:26:f5:f2:17: 6d:85:37:cc:f4:e4:9d:80:e4:73:60:16:99:fe:cf: d9:be:ae:d1:29:4d:4a:4a:b5:25:fd:17:ff:d9:9c: 1b:f0:d2:f1:79:96:68:71:57:0c:bd:39:73:e3:63: 50:8b:a3:54:ee:bf:c0:e1:6a:25:e9:17:0d:30:4c: d3:5d:ed:af:27:01:17:f0:33:b5:90:64:7c:ab:f1: e6:12:0e:78:6c:2c:e3:bc:21:09:90:c8:93:6c:e2: ea:23:c0:ee:58:90:41:ae:84:02:4a:42:34:b6:4d: 8c:21:ba:60:a1:58:9d:bd:63:0a:0d:45:95:ce:56: af:d4:18:a9:2b:d2:35:05:a7:d1:57:c0:c6:2b:f5: 90:da:cd:0b:9b:25:24:6f:f8:c0:63:8e:d9:64:c3: 0f:a4:64:59:4c:2e:cc:43:8b:2e:d2:5a:7d:1d:df: cc:ee:91:b7:2c:0e:07:88:51:a4:fd:49:f3:3b:8a: e8:23:76:49:07:8a:1e:05:2f:39:f2:7d:48:68:4f: bd:e8:b7:4e:c7:53:c5:4a:52:79:f7:1b:53:85:64: 2d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:6E:BA:D5:A2:48:BA:E8:36:9D:00:12:68:9A:3F:50:A2:6B:55:18 X509v3 Authority Key Identifier: keyid:40:6E:90:6F:82:B3:D5:15:56:59:DA:E4:D0:86:76:9E:F1:2A:82:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:c4:a0:b4:3f:2d:40:dd:48:d3:91:cb:9e:c6:c0:48:88:34: a4:76:7c:66:d2:c5:d1:bf:1e:8c:a5:93:fd:00:b6:96:1e:09: ff:96:b6:07:93:a5:1f:ba:5b:5a:43:ed:a7:ed:f3:84:41:4e: 0a:ff:94:62:11:f4:ed:ce:da:9e:37:45:b1:2b:d1:a5:19:bf: 95:d6:46:ca:cf:be:2b:87:5e:81:df:e9:17:c5:a3:91:9e:e0: 18:1a:bc:5a:a2:e5:07:f4:97:c6:d2:66:c9:6f:ae:1e:e3:b0: de:9f:1b:86:3b:74:62:e5:9c:bf:de:ef:15:18:8b:3e:df:a8: f4:c4:a9:2a:c3:21:94:7a:ca:32:8e:9a:0f:d1:39:53:e4:51: b1:24:b7:fe:5e:79:0f:15:5f:6f:11:14:4b:28:b2:8d:49:53: be:19:89:81:1b:89:40:00:5a:84:13:01:c5:9a:79:d5:81:dc: b0:91:72:9d:56:e6:b7:6b:4e:3d:0d:22:c6:37:8d:15:62:95: 08:83:fc:88:fd:8b:b5:23:3b:0e:29:04:b6:d3:03:e0:d9:ba: 95:ab:38:7d:c1:fd:f7:11:b7:86:30:31:a0:ad:0e:f2:d5:69: 33:41:4b:3e:62:f3:ae:58:a7:76:33:a4:9d:71:61:21:c2:05: 04:2f:45:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHps7wjBryzVUJlSvfc319MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwNmU5MDZmODJiM2Q1MTU1NjU5ZGFlNGQwODY3NjllZjEy YTgyMTQwHhcNMjUxMjIyMjAwMTEyWhcNMjUxMjIzMjAwMTEyWjAzMTEwLwYDVQQD EyhkMDZlYmFkNWEyNDhiYWU4MzY5ZDAwMTI2ODlhM2Y1MGEyNmI1NTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/gu+sP/cz2RlMvtHDsnNsW1G559 Cw1g7Aq+Q7OokIIay3d82ad/byb18hdthTfM9OSdgORzYBaZ/s/Zvq7RKU1KSrUl /Rf/2Zwb8NLxeZZocVcMvTlz42NQi6NU7r/A4Wol6RcNMEzTXe2vJwEX8DO1kGR8 q/HmEg54bCzjvCEJkMiTbOLqI8DuWJBBroQCSkI0tk2MIbpgoVidvWMKDUWVzlav 1BipK9I1BafRV8DGK/WQ2s0LmyUkb/jAY47ZZMMPpGRZTC7MQ4su0lp9Hd/M7pG3 LA4HiFGk/UnzO4roI3ZJB4oeBS858n1IaE+96LdOx1PFSlJ59xtThWQtCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNBuutWiSLroNp0AEmiaP1Cia1UYMB8GA1UdIwQY MBaAFEBukG+Cs9UVVlna5NCGdp7xKoIUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUc2UWI0S3oxUlZXV2RyazBJWjJudkVxZ2hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9hYzEyNGMtNWJkMy00YjE1LWIwODgt YTE4YTA1MTI3NzZjLzEvUUc2UWI0S3oxUlZXV2RyazBJWjJudkVxZ2hRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9hYzEyNGMtNWJkMy00YjE1LWIwODgtYTE4YTA1MTI3NzZj LzEvUUc2UWI0S3oxUlZXV2RyazBJWjJudkVxZ2hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWMSgtD8t QN1I05HLnsbASIg0pHZ8ZtLF0b8ejKWT/QC2lh4J/5a2B5OlH7pbWkPtp+3zhEFO Cv+UYhH07c7anjdFsSvRpRm/ldZGys++K4degd/pF8WjkZ7gGBq8WqLlB/SXxtJm yW+uHuOw3p8bhjt0YuWcv97vFRiLPt+o9MSpKsMhlHrKMo6aD9E5U+RRsSS3/l55 DxVfbxEUSyiyjUlTvhmJgRuJQABahBMBxZp51YHcsJFynVbmt2tOPQ0ixjeNFWKV CIP8iP2LtSM7DikEttMD4Nm6las4fcH99xG3hjAxoK0O8tVpM0FLPmLzrlindjOk nXFhIcIFBC9F4g== -----END CERTIFICATE-----Generated at Tue Dec 23 04:28:19 2025 by rpki-client