This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft File: q4gs1tGWrh-WhyrK54MhvnqSuOs.mft (raw, json) Hash identifier: SHWIg2Al1GRSRyxdCHG17daJOh3MRaC6ioh0qdXXuQk= Subject key identifier: BC:3E:C5:D2:21:40:BB:EE:E2:34:6B:A8:9D:BC:8D:71:10:31:C7:18 Authority key identifier: AB:88:2C:D6:D1:96:AE:1F:96:87:2A:CA:E7:83:21:BE:7A:92:B8:EB Certificate issuer: /CN=ab882cd6d196ae1f96872acae78321be7a92b8eb Certificate serial: 019B3BD9C921104A3347496C7B6950EDD0B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 13:01:27 +0000 Manifest this update: Sat 20 Dec 2025 13:01:27 +0000 Manifest next update: Sun 21 Dec 2025 13:01:27 +0000 Files and hashes: 1: F9AhQNt9Udb849dXCdScX4FqhCA.roa (hash: px1gv2xGNlwFH8D+WdL+fioWoJ0lDCB6LorhXUTwMrQ=) 2: LVdTUXxiMF9XJQST5UOIEXtOCYY.roa (hash: 1JvKiaaOoOhGqXZ9Dq7CyaK8VVJ8p+cu5cPkQb+6aUs=) 3: q4gs1tGWrh-WhyrK54MhvnqSuOs.crl (hash: FbwAF+EozttCjkJwbnFJp8VJaLM5+2S9cxMDS65JYqA=) 4: skwwLakYgia163942_1PcvI2KGM.roa (hash: RjC50vXYyJh6b6nwgCbvXjKOTFm1vHWVMG4k+WUjU5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:c9:21:10:4a:33:47:49:6c:7b:69:50:ed:d0:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab882cd6d196ae1f96872acae78321be7a92b8eb Validity Not Before: Dec 20 13:01:27 2025 GMT Not After : Dec 21 13:01:27 2025 GMT Subject: CN=bc3ec5d22140bbeee2346ba89dbc8d711031c718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6c:f2:d2:c9:3f:49:6d:ab:06:0c:c9:f1:de: 86:be:9a:fc:d9:51:dd:25:d2:1c:e3:46:a9:30:7d: b5:6b:c5:16:67:f8:35:fd:e5:69:3a:53:ae:92:86: 04:27:86:8c:5b:22:4b:08:61:1b:cc:9b:86:13:6f: f1:b3:84:bb:a4:fc:3f:03:ea:29:93:03:75:cf:3c: 2d:b2:12:89:6a:b9:aa:e4:6a:4f:e5:3a:5c:fb:67: 3d:31:0e:b6:d3:24:49:7b:ee:e3:2e:61:5e:4c:3d: dd:63:14:7a:58:14:90:39:8f:47:2e:37:a7:46:4f: bc:66:61:fb:f9:bb:ee:88:bd:49:58:c7:46:70:0a: bb:42:0c:e0:e8:a0:33:d0:ee:cf:9e:eb:28:bc:a1: b5:92:72:df:e9:0a:ee:9e:4f:e1:2a:6c:47:4b:cd: 4a:e3:d5:1d:c3:eb:12:2e:65:54:6e:17:9a:03:ad: 38:9c:37:65:7a:bd:89:d3:c4:8f:8a:a6:48:a7:5f: 25:61:49:14:96:00:76:63:47:93:01:aa:c2:12:2e: 67:20:74:2d:1e:2a:73:e2:07:45:5f:82:d0:56:32: a3:95:2a:56:9a:41:8f:2c:6d:03:1d:00:7b:0f:94: 1f:46:92:c3:99:c6:c4:fb:c6:d7:a3:75:37:ae:75: 5e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:3E:C5:D2:21:40:BB:EE:E2:34:6B:A8:9D:BC:8D:71:10:31:C7:18 X509v3 Authority Key Identifier: keyid:AB:88:2C:D6:D1:96:AE:1F:96:87:2A:CA:E7:83:21:BE:7A:92:B8:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:71:d1:06:97:63:a3:b8:2c:2a:25:3c:60:9d:fd:44:52:39: 9c:8d:2a:8c:07:a2:29:34:c0:06:3e:06:f7:e7:c3:28:5a:e1: 79:5a:58:b0:29:58:23:9b:56:69:61:cb:df:06:90:b2:8e:9c: 3d:95:fb:55:22:c1:94:13:e7:f7:21:10:77:a3:5b:1b:59:9d: f9:f3:1c:43:c4:73:1d:a2:33:38:0e:87:da:38:df:9b:c2:b3: 08:0d:92:72:8c:c9:17:6f:0d:38:c2:44:5f:13:9b:9f:e4:53: 59:e4:3d:8e:fe:1c:31:0f:8d:ce:cd:41:4a:74:d0:2b:4e:69: 75:41:29:07:96:b7:ef:dd:d7:10:b8:0d:b4:90:61:fd:94:b9: 44:33:86:38:1a:3b:2f:f0:6f:b9:63:d0:3e:1c:2e:05:db:3d: 34:28:88:2e:c5:f0:1c:36:59:02:9d:ca:bd:7d:d4:82:fc:68: 44:f3:0e:ef:f2:03:b3:f6:4b:53:e5:c0:ac:82:46:b9:3c:f4: e8:31:64:2d:38:8d:34:12:55:3b:16:25:57:52:78:1f:d5:b9: 8d:86:9f:c2:68:b4:4b:37:82:25:8e:cd:e6:89:b5:15:2a:13: 38:3d:8c:7e:03:da:75:75:3b:dc:23:94:45:33:f3:b8:57:0f: ae:8e:e6:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72ckhEEozR0lse2lQ7dCyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiODgyY2Q2ZDE5NmFlMWY5Njg3MmFjYWU3ODMyMWJlN2E5 MmI4ZWIwHhcNMjUxMjIwMTMwMTI3WhcNMjUxMjIxMTMwMTI3WjAzMTEwLwYDVQQD EyhiYzNlYzVkMjIxNDBiYmVlZTIzNDZiYTg5ZGJjOGQ3MTEwMzFjNzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGzy0sk/SW2rBgzJ8d6Gvpr82VHd JdIc40apMH21a8UWZ/g1/eVpOlOukoYEJ4aMWyJLCGEbzJuGE2/xs4S7pPw/A+op kwN1zzwtshKJarmq5GpP5Tpc+2c9MQ620yRJe+7jLmFeTD3dYxR6WBSQOY9HLjen Rk+8ZmH7+bvuiL1JWMdGcAq7Qgzg6KAz0O7PnusovKG1knLf6Qrunk/hKmxHS81K 49Udw+sSLmVUbheaA604nDdler2J08SPiqZIp18lYUkUlgB2Y0eTAarCEi5nIHQt Hipz4gdFX4LQVjKjlSpWmkGPLG0DHQB7D5QfRpLDmcbE+8bXo3U3rnVe8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLw+xdIhQLvu4jRrqJ28jXEQMccYMB8GA1UdIwQY MBaAFKuILNbRlq4flocqyueDIb56krjrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTRnczF0R1dyaC1XaHlySzU0TWh2bnFTdU9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80YjZjYzktMDlkMy00Njc4LWIwYTct OTUwYzE4MDU5NmQwLzEvcTRnczF0R1dyaC1XaHlySzU0TWh2bnFTdU9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS80YjZjYzktMDlkMy00Njc4LWIwYTctOTUwYzE4MDU5NmQw LzEvcTRnczF0R1dyaC1XaHlySzU0TWh2bnFTdU9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMnHRBpdj o7gsKiU8YJ39RFI5nI0qjAeiKTTABj4G9+fDKFrheVpYsClYI5tWaWHL3waQso6c PZX7VSLBlBPn9yEQd6NbG1md+fMcQ8RzHaIzOA6H2jjfm8KzCA2ScozJF28NOMJE XxObn+RTWeQ9jv4cMQ+Nzs1BSnTQK05pdUEpB5a3793XELgNtJBh/ZS5RDOGOBo7 L/BvuWPQPhwuBds9NCiILsXwHDZZAp3KvX3UgvxoRPMO7/IDs/ZLU+XArIJGuTz0 6DFkLTiNNBJVOxYlV1J4H9W5jYafwmi0SzeCJY7N5om1FSoTOD2MfgPadXU73COU RTPzuFcPro7mjg== -----END CERTIFICATE-----Generated at Sat Dec 20 18:46:10 2025 by rpki-client