This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft File: Q6XKFbwjwyXxNB6YidhYuO12104.mft (raw, json) Hash identifier: FojrwMIK96Juq0z7Oziohx1FzRJ5UrJoKIo9hCNfvI0= Subject key identifier: 95:BC:7C:1D:2A:B6:D7:8B:42:2D:B9:5D:BB:0E:D0:12:17:D5:C0:B6 Authority key identifier: 43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E Certificate issuer: /CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e Certificate serial: 019B3CEC7AC86CD6EDCB62285F5984CC3267 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft Manifest number: 03ED Signing time: Sat 20 Dec 2025 18:01:29 +0000 Manifest this update: Sat 20 Dec 2025 18:01:29 +0000 Manifest next update: Sun 21 Dec 2025 18:01:29 +0000 Files and hashes: 1: Q6XKFbwjwyXxNB6YidhYuO12104.crl (hash: X0RHHNCfHJcNBRxNIQA3FhVrdujpbw0P/GBbAmU0FnQ=) 2: nNbHw-B9ovJEjkk8hXq6L72QjEA.roa (hash: gipZmwcUyYZU1rfrC2SjuA4uq7CTXt+ZJKoz6Ec8OnA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:7a:c8:6c:d6:ed:cb:62:28:5f:59:84:cc:32:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e Validity Not Before: Dec 20 18:01:29 2025 GMT Not After : Dec 21 18:01:29 2025 GMT Subject: CN=95bc7c1d2ab6d78b422db95dbb0ed01217d5c0b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:bb:c9:19:e5:6f:94:a2:f4:d2:ef:19:31:b9: 1b:f8:06:e7:3d:3a:7c:ed:02:80:fd:76:d8:3a:71: 50:d1:78:b4:13:fa:27:72:69:4c:b2:4d:ae:f3:a8: 49:ef:52:ff:c0:06:ac:15:0f:03:cd:df:75:f7:ed: cc:37:87:bc:1b:25:89:4f:89:02:f6:f2:53:12:67: 76:1c:af:5d:4c:51:d4:1f:f3:b3:08:7e:65:3d:b2: 2d:59:8a:80:a0:48:f9:13:bc:0b:0f:e8:72:3b:f8: 17:d6:c5:90:ac:13:8d:02:21:f9:a9:93:30:3a:96: 7e:bb:99:2a:5b:7e:2f:57:b4:49:05:2c:91:95:b9: 13:6a:95:88:e9:23:33:d2:9b:10:75:f4:80:21:66: 91:5b:9a:11:a3:e4:81:7b:e6:2a:43:e3:24:cc:74: 78:73:6b:76:be:a4:79:f8:b0:1e:61:db:df:64:b5: 14:bc:1f:4c:d1:da:31:a7:00:b4:0a:8b:87:3f:55: 7e:bf:54:d7:e0:d9:03:86:88:bd:42:e0:b7:50:8d: b5:7c:a2:d5:fc:72:a7:3c:a0:7b:b9:39:62:fd:60: 6d:d1:93:34:32:51:00:85:6c:9e:6c:0d:26:14:5c: 38:82:35:27:18:c0:09:23:3a:cd:19:e4:76:83:cc: 2d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:BC:7C:1D:2A:B6:D7:8B:42:2D:B9:5D:BB:0E:D0:12:17:D5:C0:B6 X509v3 Authority Key Identifier: keyid:43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:a7:2d:bb:ce:86:e8:26:10:d8:4b:3e:d4:58:6a:a6:29:f8: 41:a4:7c:29:d2:ae:5e:07:53:36:80:e2:14:ec:89:e7:5d:ca: 2a:dd:16:3a:08:d7:a2:f3:11:86:e4:f7:b5:4d:87:ce:38:c2: 4e:33:99:cc:0f:30:ed:b8:b9:27:86:e5:09:17:56:3e:a8:cd: 42:9a:d1:5f:5e:23:53:06:eb:a0:2b:75:f4:22:06:04:0e:3f: 33:9a:1c:7b:5f:0a:34:c6:0a:69:5b:7a:a6:a1:cc:cb:15:38: 74:19:31:c1:7a:80:dc:86:52:50:79:3b:f7:77:c4:bf:0b:7f: 14:39:31:65:31:0e:f9:75:3f:70:80:40:a4:77:e6:56:bb:5f: 28:6b:17:06:a2:35:9b:8f:55:c1:2b:9d:2b:0a:fc:dd:d6:8e: 0e:0a:4f:c1:37:1e:22:ed:00:08:3d:ac:e5:8b:84:7f:5f:bd: ab:0c:b1:3c:9a:4f:6b:a1:6e:29:82:4c:2d:92:ef:da:87:9e: c5:74:1c:c3:5a:80:9b:1c:bb:e1:b9:3c:31:d6:fa:bf:8e:56: b0:da:13:d8:3d:7f:40:bf:2c:98:19:01:ba:f5:76:1d:44:dd: a6:03:5d:4a:98:a5:0c:47:12:f0:bf:74:51:09:23:c8:67:b9: 1d:16:55:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87HrIbNbty2IoX1mEzDJnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzYTVjYTE1YmMyM2MzMjVmMTM0MWU5ODg5ZDg1OGI4ZWQ3 NmQ3NGUwHhcNMjUxMjIwMTgwMTI5WhcNMjUxMjIxMTgwMTI5WjAzMTEwLwYDVQQD Eyg5NWJjN2MxZDJhYjZkNzhiNDIyZGI5NWRiYjBlZDAxMjE3ZDVjMGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bvJGeVvlKL00u8ZMbkb+AbnPTp8 7QKA/XbYOnFQ0Xi0E/oncmlMsk2u86hJ71L/wAasFQ8Dzd919+3MN4e8GyWJT4kC 9vJTEmd2HK9dTFHUH/OzCH5lPbItWYqAoEj5E7wLD+hyO/gX1sWQrBONAiH5qZMw OpZ+u5kqW34vV7RJBSyRlbkTapWI6SMz0psQdfSAIWaRW5oRo+SBe+YqQ+MkzHR4 c2t2vqR5+LAeYdvfZLUUvB9M0doxpwC0CouHP1V+v1TX4NkDhoi9QuC3UI21fKLV /HKnPKB7uTli/WBt0ZM0MlEAhWyebA0mFFw4gjUnGMAJIzrNGeR2g8wtvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJW8fB0qtteLQi25XbsO0BIX1cC2MB8GA1UdIwQY MBaAFEOlyhW8I8Ml8TQemInYWLjtdtdOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTZYS0Zid2p3eVh4TkI2WWlkaFl1TzEyMTA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi84NzRiZWUtZTcyYS00YmViLTkxZTgt YTk2ZTI2MTAzY2VlLzEvUTZYS0Zid2p3eVh4TkI2WWlkaFl1TzEyMTA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi84NzRiZWUtZTcyYS00YmViLTkxZTgtYTk2ZTI2MTAzY2Vl LzEvUTZYS0Zid2p3eVh4TkI2WWlkaFl1TzEyMTA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfKctu86G 6CYQ2Es+1Fhqpin4QaR8KdKuXgdTNoDiFOyJ513KKt0WOgjXovMRhuT3tU2HzjjC TjOZzA8w7bi5J4blCRdWPqjNQprRX14jUwbroCt19CIGBA4/M5oce18KNMYKaVt6 pqHMyxU4dBkxwXqA3IZSUHk793fEvwt/FDkxZTEO+XU/cIBApHfmVrtfKGsXBqI1 m49VwSudKwr83daODgpPwTceIu0ACD2s5YuEf1+9qwyxPJpPa6FuKYJMLZLv2oee xXQcw1qAmxy74bk8Mdb6v45WsNoT2D1/QL8smBkBuvV2HUTdpgNdSpilDEcS8L90 UQkjyGe5HRZVQg== -----END CERTIFICATE-----Generated at Sat Dec 20 20:36:14 2025 by rpki-client