This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft File: Q68umH0rY63apa3BePMekNh2qqc.mft (raw, json) Hash identifier: JKNFQGtn8ORzW182uxBr7N2CArodQrYwzK21z4zzZTU= Subject key identifier: 0E:BD:FF:8F:DF:A8:44:31:09:B7:46:0B:23:ED:92:F5:4D:35:90:F2 Authority key identifier: 43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7 Certificate issuer: /CN=43af2e987d2b63addaa5adc178f31e90d876aaa7 Certificate serial: 019B37C5DF3489E1A670B311EE575061DBB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft Manifest number: 1789 Signing time: Fri 19 Dec 2025 18:01:12 +0000 Manifest this update: Fri 19 Dec 2025 18:01:12 +0000 Manifest next update: Sat 20 Dec 2025 18:01:12 +0000 Files and hashes: 1: 71gvIX06FZhti5C8KqbG-iL3ji8.roa (hash: ixliMnZsbefklIbCdZSQC08KvvVc2/x3CDK+CGl2CBA=) 2: IEgYKG7Z6QdmhTg8jbadzlqUL0A.roa (hash: czHiBi7aC7gYGx6TuroDY+vPvsviuucmLi9+d2nYML8=) 3: N7dkJGPV_ClH0zdsWhUXQhLf-fI.roa (hash: 61rIBj7suoaRe9FEYDOMgKbW4Bfv19fnscul85uRvy8=) 4: Q68umH0rY63apa3BePMekNh2qqc.crl (hash: F/d3bJRVNLDwVNq50zQUuXk/jV5RDd0Wu/uv7SqP41I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:df:34:89:e1:a6:70:b3:11:ee:57:50:61:db:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43af2e987d2b63addaa5adc178f31e90d876aaa7 Validity Not Before: Dec 19 18:01:12 2025 GMT Not After : Dec 20 18:01:12 2025 GMT Subject: CN=0ebdff8fdfa8443109b7460b23ed92f54d3590f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5b:fb:e4:55:97:e5:fc:38:d2:f9:b9:19:7b: 3c:c0:ff:14:56:d1:5c:78:5f:aa:38:df:98:e9:ef: 46:9f:e4:00:b8:93:85:a8:2a:45:7f:79:97:98:7f: 3d:1b:bd:bf:ff:5a:01:e1:48:75:c1:3a:76:b2:f8: aa:ea:df:db:c6:88:14:9a:11:50:81:1a:1c:4c:cb: d5:f4:2d:90:14:04:cd:fa:ba:00:e7:20:e7:b9:9e: d4:e5:2e:15:ee:b9:e9:c6:f1:78:8d:f8:a7:4e:b2: 53:e2:e1:88:ab:de:03:1b:6d:8f:e9:1f:b3:78:ff: 4d:a4:1d:52:e7:80:d2:55:38:cf:44:37:a6:82:94: 5c:85:95:2b:d2:26:8f:09:73:29:52:5a:e4:72:e9: c2:74:ba:3e:3c:ff:8d:8b:4c:03:82:30:17:ce:59: 4f:42:ca:9b:03:76:f2:05:2c:37:01:4a:92:3e:78: 5b:fb:f9:84:ac:b5:07:c5:0b:d2:b1:1d:da:33:be: 4d:46:af:11:8f:a1:b3:bd:a6:d4:b9:c5:92:a2:ea: 7b:79:dd:ed:dc:5f:35:57:80:96:3f:35:6f:39:e3: 0e:f4:51:ef:55:e4:d6:ce:93:2d:03:04:eb:07:ab: bf:87:2d:6c:dc:62:f4:36:a9:3d:9f:89:62:40:14: ff:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:BD:FF:8F:DF:A8:44:31:09:B7:46:0B:23:ED:92:F5:4D:35:90:F2 X509v3 Authority Key Identifier: keyid:43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:27:83:4f:d6:ae:fa:00:74:90:ab:5a:8f:37:a3:b3:29:98: f9:f8:63:6f:89:b7:3e:4a:16:f3:a5:5f:f5:4f:a4:6a:a8:8b: 2a:69:f9:9e:f7:d8:90:14:f5:95:0f:0f:4e:d7:d8:ea:37:16: 97:18:91:91:54:b4:25:e6:ed:bb:7c:fc:f8:44:ad:54:af:7b: 47:ae:b2:52:6a:ae:27:64:d4:a8:a5:31:67:d0:86:0e:43:bd: a5:68:fd:d5:51:b7:48:9c:78:bf:76:26:cd:7a:c4:b9:5d:71: b4:a4:f3:95:4d:a9:70:4a:84:f9:0e:e5:44:1b:c6:1f:07:6f: f9:57:a9:17:7b:cb:ac:e5:b6:3c:63:2e:ab:ef:f9:7a:73:d5: bb:ea:fe:3a:7c:f2:e8:17:10:84:33:07:3a:9b:d3:e8:f0:57: 08:4f:a4:d5:1e:61:18:f9:5e:27:d1:94:3e:04:b2:61:81:8a: f2:da:8e:62:f1:98:c8:81:63:f6:6a:3a:dc:5e:00:c1:c4:8d: 28:83:6b:ad:7b:13:91:29:64:98:d7:3a:62:04:a6:41:93:8c: 23:af:4d:d1:b5:8b:c3:c0:a2:38:98:24:2f:81:8a:1c:09:43: e0:1d:d4:a0:c8:a2:19:12:34:84:e0:85:75:11:e5:f8:46:6c: a1:66:6a:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xd80ieGmcLMR7ldQYdu2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzYWYyZTk4N2QyYjYzYWRkYWE1YWRjMTc4ZjMxZTkwZDg3 NmFhYTcwHhcNMjUxMjE5MTgwMTEyWhcNMjUxMjIwMTgwMTEyWjAzMTEwLwYDVQQD EygwZWJkZmY4ZmRmYTg0NDMxMDliNzQ2MGIyM2VkOTJmNTRkMzU5MGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1v75FWX5fw40vm5GXs8wP8UVtFc eF+qON+Y6e9Gn+QAuJOFqCpFf3mXmH89G72//1oB4Uh1wTp2sviq6t/bxogUmhFQ gRocTMvV9C2QFATN+roA5yDnuZ7U5S4V7rnpxvF4jfinTrJT4uGIq94DG22P6R+z eP9NpB1S54DSVTjPRDemgpRchZUr0iaPCXMpUlrkcunCdLo+PP+Ni0wDgjAXzllP QsqbA3byBSw3AUqSPnhb+/mErLUHxQvSsR3aM75NRq8Rj6GzvabUucWSoup7ed3t 3F81V4CWPzVvOeMO9FHvVeTWzpMtAwTrB6u/hy1s3GL0Nqk9n4liQBT/cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA69/4/fqEQxCbdGCyPtkvVNNZDyMB8GA1UdIwQY MBaAFEOvLph9K2Ot2qWtwXjzHpDYdqqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTY4dW1IMHJZNjNhcGEzQmVQTWVrTmgycXFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82Njg0MzctOTdjMi00OGMyLWI3Yzgt Y2M3NzQ2NzE5NDA2LzEvUTY4dW1IMHJZNjNhcGEzQmVQTWVrTmgycXFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi82Njg0MzctOTdjMi00OGMyLWI3YzgtY2M3NzQ2NzE5NDA2 LzEvUTY4dW1IMHJZNjNhcGEzQmVQTWVrTmgycXFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWSeDT9au +gB0kKtajzejsymY+fhjb4m3PkoW86Vf9U+kaqiLKmn5nvfYkBT1lQ8PTtfY6jcW lxiRkVS0Jebtu3z8+EStVK97R66yUmquJ2TUqKUxZ9CGDkO9pWj91VG3SJx4v3Ym zXrEuV1xtKTzlU2pcEqE+Q7lRBvGHwdv+VepF3vLrOW2PGMuq+/5enPVu+r+Onzy 6BcQhDMHOpvT6PBXCE+k1R5hGPleJ9GUPgSyYYGK8tqOYvGYyIFj9mo63F4AwcSN KINrrXsTkSlkmNc6YgSmQZOMI69N0bWLw8CiOJgkL4GKHAlD4B3UoMiiGRI0hOCF dRHl+EZsoWZqrA== -----END CERTIFICATE-----Generated at Sat Dec 20 02:58:13 2025 by rpki-client