This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft File: Q7iP8e37ZyBmAwJncaquyEuLHrg.mft (raw, json) Hash identifier: VNjAIFVQocPoY3XcriZuy1soWL4Xs1JLR+34ZLQbcFk= Subject key identifier: E1:3B:52:93:4A:77:DD:53:E1:97:83:B1:49:0D:E5:16:B2:93:6F:81 Authority key identifier: 43:B8:8F:F1:ED:FB:67:20:66:03:02:67:71:AA:AE:C8:4B:8B:1E:B8 Certificate issuer: /CN=43b88ff1edfb67206603026771aaaec84b8b1eb8 Certificate serial: 019B4ADF40D80CB8D82DC9176340E5529FCF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q7iP8e37ZyBmAwJncaquyEuLHrg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft Manifest number: 0F3F Signing time: Tue 23 Dec 2025 11:01:43 +0000 Manifest this update: Tue 23 Dec 2025 11:01:43 +0000 Manifest next update: Wed 24 Dec 2025 11:01:43 +0000 Files and hashes: 1: Q7iP8e37ZyBmAwJncaquyEuLHrg.crl (hash: BHKXrin4llhqurj+ZANlYChT6ZuVivb/jEtQvYIiLqY=) 2: gg-emnwJIGdBmpEHYh5OFvjnfmc.roa (hash: f0YF0XqFky78qYjbpn5730w15nHy84AldxyEdZxgOEY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft rsync://rpki.ripe.net/repository/DEFAULT/Q7iP8e37ZyBmAwJncaquyEuLHrg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 11:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:df:40:d8:0c:b8:d8:2d:c9:17:63:40:e5:52:9f:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43b88ff1edfb67206603026771aaaec84b8b1eb8 Validity Not Before: Dec 23 11:01:43 2025 GMT Not After : Dec 24 11:01:43 2025 GMT Subject: CN=e13b52934a77dd53e19783b1490de516b2936f81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:16:5f:02:c0:62:67:b3:7d:c6:98:09:fa:00: da:1e:d3:89:3c:5f:5e:b8:93:24:3a:f4:98:90:11: b6:70:f9:f2:53:bd:1d:47:50:f5:35:07:d9:81:ac: 7b:8c:83:ad:4f:c4:32:05:e5:b1:b8:d1:ec:6a:ef: 09:2d:a4:a0:2a:32:44:d6:f7:4d:83:42:b8:c3:71: 67:bc:76:b5:56:4c:61:d9:12:22:42:b1:6e:9c:58: 17:f0:cb:85:e6:6a:b5:1a:dc:ec:3c:cc:a4:ce:c9: 9c:31:f3:bd:43:fc:c6:b1:b4:af:9b:bc:ab:9f:86: 8c:1d:10:87:c5:18:ce:af:df:9e:85:d7:58:6d:c6: 9a:09:2f:9c:64:63:90:40:1f:be:04:44:f2:0d:32: 1d:6b:03:cd:88:79:b8:a3:d9:08:47:5b:71:62:63: 7e:67:e7:14:c2:f9:b7:91:86:6a:ed:16:54:9e:f6: 0a:bc:b6:85:f4:0b:cf:e8:93:d0:69:4f:d4:db:86: 44:a8:6b:69:34:df:a6:d0:be:89:98:b3:c0:a7:0b: 7c:18:9b:7d:e5:69:11:2d:72:f1:76:94:6c:1a:2e: c6:b0:59:ef:96:0b:16:3a:f6:24:68:fa:e1:bb:99: 2b:43:b1:67:33:5f:04:08:f0:09:8a:e3:f5:d4:77: 28:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:3B:52:93:4A:77:DD:53:E1:97:83:B1:49:0D:E5:16:B2:93:6F:81 X509v3 Authority Key Identifier: keyid:43:B8:8F:F1:ED:FB:67:20:66:03:02:67:71:AA:AE:C8:4B:8B:1E:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q7iP8e37ZyBmAwJncaquyEuLHrg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:41:fa:d7:ff:29:b1:c3:6a:49:42:9b:3c:a6:7f:2c:54:04: ac:5a:89:18:5b:1a:89:b8:4e:ac:09:ee:20:08:c0:92:62:7e: ec:8b:d1:55:a5:9f:df:f0:63:f4:de:7e:f3:70:87:8f:55:66: 89:e3:ce:df:d9:d1:c0:56:06:62:18:9a:90:25:23:ae:05:98: 14:31:5c:14:59:82:39:f7:a5:64:06:78:5c:b9:dd:62:b4:2c: 93:22:fe:7c:d4:a2:d8:13:2b:17:c9:a4:00:9f:0b:5b:ae:e1: 98:ba:86:82:47:8e:f4:c4:58:65:8d:68:30:84:07:53:96:06: 74:7e:31:67:cf:ed:99:36:08:95:ef:0c:c1:06:17:8e:b1:a7: 11:84:2a:f2:28:bc:5a:0e:00:38:f7:0f:52:ec:37:8e:76:a7: 8b:7d:52:d9:65:d7:31:a2:10:29:68:0b:6c:a1:a0:a1:ce:17: aa:5b:3d:48:ff:a8:e8:c9:cb:59:7b:75:13:e3:61:4c:99:ef: b0:48:f5:e8:b4:81:8c:7c:6f:50:69:62:bd:e8:b8:d2:2e:e8: 05:9f:a7:45:f9:f5:f0:f7:d2:85:00:96:74:09:57:12:0b:ad: c5:42:9d:b7:39:22:01:14:b0:11:0d:1a:e9:26:01:c8:a2:c2: f7:0d:01:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtK30DYDLjYLckXY0DlUp/PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzYjg4ZmYxZWRmYjY3MjA2NjAzMDI2NzcxYWFhZWM4NGI4 YjFlYjgwHhcNMjUxMjIzMTEwMTQzWhcNMjUxMjI0MTEwMTQzWjAzMTEwLwYDVQQD EyhlMTNiNTI5MzRhNzdkZDUzZTE5NzgzYjE0OTBkZTUxNmIyOTM2ZjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hZfAsBiZ7N9xpgJ+gDaHtOJPF9e uJMkOvSYkBG2cPnyU70dR1D1NQfZgax7jIOtT8QyBeWxuNHsau8JLaSgKjJE1vdN g0K4w3FnvHa1Vkxh2RIiQrFunFgX8MuF5mq1GtzsPMykzsmcMfO9Q/zGsbSvm7yr n4aMHRCHxRjOr9+ehddYbcaaCS+cZGOQQB++BETyDTIdawPNiHm4o9kIR1txYmN+ Z+cUwvm3kYZq7RZUnvYKvLaF9AvP6JPQaU/U24ZEqGtpNN+m0L6JmLPApwt8GJt9 5WkRLXLxdpRsGi7GsFnvlgsWOvYkaPrhu5krQ7FnM18ECPAJiuP11HcoGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOE7UpNKd91T4ZeDsUkN5Rayk2+BMB8GA1UdIwQY MBaAFEO4j/Ht+2cgZgMCZ3GqrshLix64MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTdpUDhlMzdaeUJtQXdKbmNhcXV5RXVMSHJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9lNWM3ODMtNDM2ZS00NmU1LWI1MTQt YzFiZTVkYzAxYmJlLzEvUTdpUDhlMzdaeUJtQXdKbmNhcXV5RXVMSHJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9lNWM3ODMtNDM2ZS00NmU1LWI1MTQtYzFiZTVkYzAxYmJl LzEvUTdpUDhlMzdaeUJtQXdKbmNhcXV5RXVMSHJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALEH61/8p scNqSUKbPKZ/LFQErFqJGFsaibhOrAnuIAjAkmJ+7IvRVaWf3/Bj9N5+83CHj1Vm iePO39nRwFYGYhiakCUjrgWYFDFcFFmCOfelZAZ4XLndYrQskyL+fNSi2BMrF8mk AJ8LW67hmLqGgkeO9MRYZY1oMIQHU5YGdH4xZ8/tmTYIle8MwQYXjrGnEYQq8ii8 Wg4AOPcPUuw3jnani31S2WXXMaIQKWgLbKGgoc4Xqls9SP+o6MnLWXt1E+NhTJnv sEj16LSBjHxvUGlivei40i7oBZ+nRfn18PfShQCWdAlXEgutxUKdtzkiARSwEQ0a 6SYByKLC9w0Bxw== -----END CERTIFICATE-----Generated at Tue Dec 23 17:18:58 2025 by rpki-client