This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.mft File: Q_2TYug7hS8_0zEbCQlvYommoPg.mft (raw, json) Hash identifier: ePx/pwfwtbz8vSwaLzoVAqSagitz+cGcw6egchNhTHE= Subject key identifier: 8D:67:C1:45:26:F0:C4:BA:6E:E3:67:06:EF:C1:73:01:50:F0:D4:0F Authority key identifier: 43:FD:93:62:E8:3B:85:2F:3F:D3:31:1B:09:09:6F:62:89:A6:A0:F8 Certificate issuer: /CN=43fd9362e83b852f3fd3311b09096f6289a6a0f8 Certificate serial: 019B69FB7BC8CADBA9EB79E84B9645F1D94A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q_2TYug7hS8_0zEbCQlvYommoPg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.mft Manifest number: 1074 Signing time: Mon 29 Dec 2025 12:00:47 +0000 Manifest this update: Mon 29 Dec 2025 12:00:47 +0000 Manifest next update: Tue 30 Dec 2025 12:00:47 +0000 Files and hashes: 1: Fy-RDVpoQYqhk9YIhC0_OXJ7Ngw.roa (hash: MSpbkpTae0BKWb0wW1Z5MLxX2eex/b1uULBuB1GrJoU=) 2: Q_2TYug7hS8_0zEbCQlvYommoPg.crl (hash: eDMUFE/PtjnmeMpWuOTgYvBlWCesik+iIsvq6EbpwYk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.mft rsync://rpki.ripe.net/repository/DEFAULT/Q_2TYug7hS8_0zEbCQlvYommoPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 12:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:fb:7b:c8:ca:db:a9:eb:79:e8:4b:96:45:f1:d9:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43fd9362e83b852f3fd3311b09096f6289a6a0f8 Validity Not Before: Dec 29 12:00:47 2025 GMT Not After : Dec 30 12:00:47 2025 GMT Subject: CN=8d67c14526f0c4ba6ee36706efc1730150f0d40f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:82:54:4b:df:22:98:b2:e6:fa:2b:f0:f1:16: 94:0c:fa:a7:e0:64:d7:a5:d1:3f:26:73:7f:be:8d: 8b:fd:14:54:7e:e0:f1:70:fc:7d:e9:5a:34:b0:02: a7:ee:99:14:d2:b4:22:fd:10:36:b8:b7:86:ae:42: aa:c3:29:90:20:26:e1:94:02:5f:6e:3c:ec:72:03: fb:73:53:ca:be:d3:6f:f3:b8:e3:2e:89:c4:fe:a4: 55:3b:a2:59:8f:a2:42:a8:05:87:3e:b5:18:68:bb: 5a:ee:cd:db:73:1e:80:cd:1b:2b:c8:4b:84:aa:06: 4f:84:7e:12:fc:75:47:f6:e9:71:7d:83:fc:3d:63: 2c:be:83:f6:7c:96:f9:a8:3f:e8:9f:2d:3c:87:a3: 3a:67:14:f0:e3:91:ef:2a:c1:bb:26:9c:6d:08:7a: 46:36:86:12:39:39:61:89:17:d7:00:30:1c:25:b6: dc:b8:c9:b0:38:bf:e6:af:60:0d:ab:c9:28:ca:eb: 3d:b3:b9:7e:ae:fb:0f:e5:c6:5f:85:fe:6d:41:fb: 5c:ba:d4:69:53:8f:a1:ad:0b:b4:f7:d2:4e:c1:27: 28:5e:bd:a2:a5:19:c6:ff:0b:bc:be:f8:b5:bf:73: de:ed:d3:4e:d9:69:b3:a9:76:9b:02:9f:14:66:d2: 39:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:67:C1:45:26:F0:C4:BA:6E:E3:67:06:EF:C1:73:01:50:F0:D4:0F X509v3 Authority Key Identifier: keyid:43:FD:93:62:E8:3B:85:2F:3F:D3:31:1B:09:09:6F:62:89:A6:A0:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_2TYug7hS8_0zEbCQlvYommoPg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:8d:ec:c1:74:0d:0a:9e:02:8e:06:24:f4:79:6c:48:89:a5: b7:9c:12:b8:8f:d9:8f:89:45:6c:77:bb:9f:73:97:56:cf:10: 17:34:21:fb:51:46:e8:16:ad:bc:aa:0f:93:89:b7:33:77:2c: a4:c6:91:05:b8:6c:c0:4e:dc:dc:f1:f0:d9:f2:66:8d:79:ae: 08:d1:99:94:12:36:45:db:b6:66:0e:a4:74:45:66:21:f4:0e: da:8a:4f:47:86:17:a1:9c:0d:72:87:e6:13:b6:9f:39:3a:37: 74:32:5a:86:c5:7e:52:29:44:d3:c4:a0:96:21:28:a4:84:0e: 3e:23:78:84:ab:4e:d6:36:7e:e3:85:57:75:1b:34:45:9d:0b: 19:fa:3c:73:76:59:07:16:33:e6:5e:73:cc:fc:75:da:26:44: cf:b6:c7:1a:f9:8c:db:cd:2a:0e:55:66:fa:da:20:68:3a:5a: 68:46:10:a2:7e:ef:c9:c5:62:ca:91:30:58:e9:50:bb:0d:99: d9:98:30:e9:2b:e4:63:4b:93:55:39:98:b4:1c:23:9e:18:00: 41:3f:e2:1e:ab:6d:c2:97:10:ad:7c:c6:3b:0e:20:ee:0d:2f: bd:54:d6:bd:a7:0b:f6:82:1e:3e:65:a7:43:5a:74:0f:0c:71: b0:c1:72:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtp+3vIytup63noS5ZF8dlKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZmQ5MzYyZTgzYjg1MmYzZmQzMzExYjA5MDk2ZjYyODlh NmEwZjgwHhcNMjUxMjI5MTIwMDQ3WhcNMjUxMjMwMTIwMDQ3WjAzMTEwLwYDVQQD Eyg4ZDY3YzE0NTI2ZjBjNGJhNmVlMzY3MDZlZmMxNzMwMTUwZjBkNDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YJUS98imLLm+ivw8RaUDPqn4GTX pdE/JnN/vo2L/RRUfuDxcPx96Vo0sAKn7pkU0rQi/RA2uLeGrkKqwymQICbhlAJf bjzscgP7c1PKvtNv87jjLonE/qRVO6JZj6JCqAWHPrUYaLta7s3bcx6AzRsryEuE qgZPhH4S/HVH9ulxfYP8PWMsvoP2fJb5qD/ony08h6M6ZxTw45HvKsG7JpxtCHpG NoYSOTlhiRfXADAcJbbcuMmwOL/mr2ANq8koyus9s7l+rvsP5cZfhf5tQftcutRp U4+hrQu099JOwScoXr2ipRnG/wu8vvi1v3Pe7dNO2WmzqXabAp8UZtI5JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI1nwUUm8MS6buNnBu/BcwFQ8NQPMB8GA1UdIwQY MBaAFEP9k2LoO4UvP9MxGwkJb2KJpqD4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUV8yVFl1ZzdoUzhfMHpFYkNRbHZZb21tb1BnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xZDNjMTUtMzQxNi00NGFkLTlhODkt NjU0N2JiMWI4MGMyLzEvUV8yVFl1ZzdoUzhfMHpFYkNRbHZZb21tb1BnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8xZDNjMTUtMzQxNi00NGFkLTlhODktNjU0N2JiMWI4MGMy LzEvUV8yVFl1ZzdoUzhfMHpFYkNRbHZZb21tb1BnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkI3swXQN Cp4CjgYk9HlsSImlt5wSuI/Zj4lFbHe7n3OXVs8QFzQh+1FG6BatvKoPk4m3M3cs pMaRBbhswE7c3PHw2fJmjXmuCNGZlBI2Rdu2Zg6kdEVmIfQO2opPR4YXoZwNcofm E7afOTo3dDJahsV+UilE08SgliEopIQOPiN4hKtO1jZ+44VXdRs0RZ0LGfo8c3ZZ BxYz5l5zzPx12iZEz7bHGvmM280qDlVm+togaDpaaEYQon7vycViypEwWOlQuw2Z 2Zgw6SvkY0uTVTmYtBwjnhgAQT/iHqttwpcQrXzGOw4g7g0vvVTWvacL9oIePmWn Q1p0DwxxsMFyFA== -----END CERTIFICATE-----Generated at Mon Dec 29 18:00:29 2025 by rpki-client