This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft File: q6gfB6STo-ZDdS5mvYFG9Xca34g.mft (raw, json) Hash identifier: 8kMEjLHKU6CvuOEgnCwUuzyY8Ehqz9aDHT/Ogsh0QuU= Subject key identifier: 1B:CC:F4:B8:DE:6E:C3:BF:5A:A2:7A:1E:46:A9:18:6E:50:C5:4C:54 Authority key identifier: AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88 Certificate issuer: /CN=aba81f07a493a3e643752e66bd8146f5771adf88 Certificate serial: 019B4A399593AC62CABE4332B31B2089C1A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft Manifest number: 176A Signing time: Tue 23 Dec 2025 08:00:46 +0000 Manifest this update: Tue 23 Dec 2025 08:00:46 +0000 Manifest next update: Wed 24 Dec 2025 08:00:46 +0000 Files and hashes: 1: _7nFqf5lz5tcDACtAr9RF1OczjU.roa (hash: +++HO383AAZs8DTGnKyEbL2DY3xsbwwnVwL8cUM+bTU=) 2: dABSJLRi0TLcB4OYtofXt8vc5mI.roa (hash: LxLgAjIFySbpl2HK3ef4vXYPLVBckR21OqAdcEmHAdI=) 3: q6gfB6STo-ZDdS5mvYFG9Xca34g.crl (hash: 6K3f4zJYNdCUMplxgpT6b9mi/JgXsY6SrC1eu1zrOGU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 08:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:39:95:93:ac:62:ca:be:43:32:b3:1b:20:89:c1:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aba81f07a493a3e643752e66bd8146f5771adf88 Validity Not Before: Dec 23 08:00:46 2025 GMT Not After : Dec 24 08:00:46 2025 GMT Subject: CN=1bccf4b8de6ec3bf5aa27a1e46a9186e50c54c54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:8b:09:f1:c8:0e:34:85:de:5c:52:f5:3d:d8: 13:bf:9b:ae:d2:01:de:d5:ab:4e:ea:bc:e1:d8:62: e4:b5:df:03:6c:9b:3e:94:f5:d9:39:6a:b4:78:1c: 10:cd:b7:1a:c3:d6:32:0d:a0:8a:79:99:ea:be:34: 12:dc:47:b1:ac:19:7b:09:59:25:bb:6e:11:84:ff: 3b:f5:9e:a3:38:7e:54:f1:80:4a:a5:a0:c8:a9:bd: f2:e1:f5:ae:b1:fd:e9:ab:96:52:fd:90:69:59:fc: e1:06:66:82:89:02:f8:89:a4:08:56:93:12:bc:c1: 77:52:23:3b:47:ab:ec:c0:29:79:04:9d:46:23:4c: f0:a3:a8:e7:40:99:6b:b9:c0:c4:d5:c6:4c:0c:25: 1a:1d:a7:61:85:c0:38:c6:cb:04:2f:2f:57:4d:2d: ae:6c:3e:da:52:f2:1b:8f:29:ae:41:f6:0c:62:ee: 05:d0:f8:20:7a:5b:a1:0f:95:69:90:6a:7b:c0:37: 5f:96:59:e5:17:94:d4:a6:35:c8:39:e9:25:8f:05: aa:b3:b3:3c:47:40:da:30:a6:45:bc:1e:0b:b4:72: f3:31:10:0c:97:10:e9:88:81:a9:7e:b4:79:d5:50: 00:d6:90:c0:8c:4a:99:b4:de:42:96:e4:77:ea:bc: db:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:CC:F4:B8:DE:6E:C3:BF:5A:A2:7A:1E:46:A9:18:6E:50:C5:4C:54 X509v3 Authority Key Identifier: keyid:AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:14:8e:8e:8c:e7:2b:ab:d5:8d:d1:c3:ce:92:18:1a:32:7c: e0:4a:fe:c6:eb:c0:66:30:f5:cb:ad:45:79:d7:d2:17:21:ed: f5:23:e1:4b:a8:a5:75:19:b7:88:e3:bd:a3:b7:20:ad:d3:2a: 34:77:89:43:86:03:04:c6:85:31:14:49:6e:c5:75:0a:f5:ed: ca:16:2c:d0:27:8a:82:80:d1:70:18:90:e7:62:ba:f7:40:37: e3:31:ae:b5:82:62:58:d1:7e:f9:f7:55:22:f4:a8:aa:83:ad: a7:a9:a4:1e:e8:d6:d5:74:53:de:db:14:66:34:03:4f:90:97: 4e:8b:e2:bd:0e:44:e0:ac:6d:28:d2:22:0e:32:1f:5c:59:a6: 16:31:07:1e:f1:05:31:76:17:75:b8:ff:4e:0f:04:dc:7c:e4: d6:82:71:63:68:9e:1d:cc:56:83:58:94:22:ba:3e:60:5c:4a: 56:8a:e7:91:53:e3:13:61:78:70:8d:ce:25:47:c6:12:66:35: dc:61:61:b0:d2:90:23:bf:3a:26:25:78:4f:05:5a:f3:61:ac: d7:27:35:6c:2a:1f:13:31:91:c1:62:b2:40:65:a5:eb:02:d1: 2b:30:6f:38:88:75:f7:3a:c0:c1:6c:99:e3:17:57:db:91:1f: 96:c5:a7:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKOZWTrGLKvkMysxsgicGhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYTgxZjA3YTQ5M2EzZTY0Mzc1MmU2NmJkODE0NmY1Nzcx YWRmODgwHhcNMjUxMjIzMDgwMDQ2WhcNMjUxMjI0MDgwMDQ2WjAzMTEwLwYDVQQD EygxYmNjZjRiOGRlNmVjM2JmNWFhMjdhMWU0NmE5MTg2ZTUwYzU0YzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIsJ8cgONIXeXFL1PdgTv5uu0gHe 1atO6rzh2GLktd8DbJs+lPXZOWq0eBwQzbcaw9YyDaCKeZnqvjQS3EexrBl7CVkl u24RhP879Z6jOH5U8YBKpaDIqb3y4fWusf3pq5ZS/ZBpWfzhBmaCiQL4iaQIVpMS vMF3UiM7R6vswCl5BJ1GI0zwo6jnQJlrucDE1cZMDCUaHadhhcA4xssELy9XTS2u bD7aUvIbjymuQfYMYu4F0PggeluhD5VpkGp7wDdfllnlF5TUpjXIOekljwWqs7M8 R0DaMKZFvB4LtHLzMRAMlxDpiIGpfrR51VAA1pDAjEqZtN5CluR36rzbYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBvM9LjebsO/WqJ6HkapGG5QxUxUMB8GA1UdIwQY MBaAFKuoHwekk6PmQ3UuZr2BRvV3Gt+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTZnZkI2U1RvLVpEZFM1bXZZRkc5WGNhMzRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC84NGUyY2UtMWVhYy00ZTEyLWFjNTgt NTFjM2NjY2U3MmRmLzEvcTZnZkI2U1RvLVpEZFM1bXZZRkc5WGNhMzRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC84NGUyY2UtMWVhYy00ZTEyLWFjNTgtNTFjM2NjY2U3MmRm LzEvcTZnZkI2U1RvLVpEZFM1bXZZRkc5WGNhMzRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvRSOjozn K6vVjdHDzpIYGjJ84Er+xuvAZjD1y61FedfSFyHt9SPhS6ildRm3iOO9o7cgrdMq NHeJQ4YDBMaFMRRJbsV1CvXtyhYs0CeKgoDRcBiQ52K690A34zGutYJiWNF++fdV IvSoqoOtp6mkHujW1XRT3tsUZjQDT5CXTovivQ5E4KxtKNIiDjIfXFmmFjEHHvEF MXYXdbj/Tg8E3Hzk1oJxY2ieHcxWg1iUIro+YFxKVornkVPjE2F4cI3OJUfGEmY1 3GFhsNKQI786JiV4TwVa82Gs1yc1bCofEzGRwWKyQGWl6wLRKzBvOIh19zrAwWyZ 4xdX25EflsWnTQ== -----END CERTIFICATE-----Generated at Tue Dec 23 15:21:26 2025 by rpki-client