This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft File: Q68umH0rY63apa3BePMekNh2qqc.mft (raw, json) Hash identifier: TAtqjhCmgFIHLsSCq5QosmB7Yk+asSzZSqeVKEti7r4= Subject key identifier: 51:B8:0E:7D:1D:25:D6:E8:FD:9E:81:D5:4F:9E:0C:E2:35:33:52:43 Authority key identifier: 43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7 Certificate issuer: /CN=43af2e987d2b63addaa5adc178f31e90d876aaa7 Certificate serial: 019B39B43B51F5F017ECA283F593ED49C43E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 03:01:11 +0000 Manifest this update: Sat 20 Dec 2025 03:01:11 +0000 Manifest next update: Sun 21 Dec 2025 03:01:11 +0000 Files and hashes: 1: 71gvIX06FZhti5C8KqbG-iL3ji8.roa (hash: ixliMnZsbefklIbCdZSQC08KvvVc2/x3CDK+CGl2CBA=) 2: IEgYKG7Z6QdmhTg8jbadzlqUL0A.roa (hash: czHiBi7aC7gYGx6TuroDY+vPvsviuucmLi9+d2nYML8=) 3: N7dkJGPV_ClH0zdsWhUXQhLf-fI.roa (hash: 61rIBj7suoaRe9FEYDOMgKbW4Bfv19fnscul85uRvy8=) 4: Q68umH0rY63apa3BePMekNh2qqc.crl (hash: ZkeMjuB1o9gIVMSJHVftJrkj1pA3m2f7whvQ5biLLdQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 03:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:3b:51:f5:f0:17:ec:a2:83:f5:93:ed:49:c4:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43af2e987d2b63addaa5adc178f31e90d876aaa7 Validity Not Before: Dec 20 03:01:11 2025 GMT Not After : Dec 21 03:01:11 2025 GMT Subject: CN=51b80e7d1d25d6e8fd9e81d54f9e0ce235335243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:36:3f:75:3d:9b:e4:3a:4d:bb:24:bc:16:ae: b9:db:17:97:ea:2b:90:02:6b:1d:3e:08:c0:d3:7a: 63:40:db:aa:3b:a8:47:a3:52:03:15:6a:a6:7f:05: 7f:fa:83:de:69:a8:e4:b2:89:5e:e3:7c:12:e3:74: ce:64:3a:2a:10:33:4f:db:18:fb:e4:42:91:fe:04: aa:63:0c:82:b3:a1:df:d0:76:b2:a4:e4:d4:91:ff: 6a:e9:81:3e:7a:8e:81:8b:8f:3c:a1:bf:7d:57:6b: f4:6a:1f:c3:8a:75:8c:dc:77:cb:52:37:43:da:6b: e1:10:16:fb:c3:d7:3f:85:99:04:65:8e:74:e0:29: e7:7e:a9:74:43:e4:0d:68:95:e8:f1:d9:8f:b3:4b: cc:3c:5d:4c:2b:2d:c6:3a:6d:60:40:4c:4e:eb:31: 2e:d2:f5:04:a1:a2:ba:4e:8a:93:15:36:62:f3:8d: 6a:71:5a:94:ee:84:ee:ee:02:3e:05:d4:09:a7:ad: eb:df:d5:b4:78:98:c3:e9:67:29:3d:20:9c:66:e9: a2:5d:f5:37:69:9d:87:d6:4d:9f:60:58:78:31:5f: e5:69:c3:f4:10:f4:98:81:2e:ea:35:86:6b:6c:7d: 2e:95:a8:ad:1f:9c:bd:c2:6e:11:37:1b:89:75:bc: 5d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:B8:0E:7D:1D:25:D6:E8:FD:9E:81:D5:4F:9E:0C:E2:35:33:52:43 X509v3 Authority Key Identifier: keyid:43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:74:93:5e:e9:d6:34:52:0a:90:88:6b:f1:d1:14:4e:f7:0c: 4a:c9:3e:55:28:9e:bc:8c:92:a4:49:13:fc:3a:ac:c8:9a:37: 36:f5:d6:85:48:a7:b1:16:f6:4e:5c:77:d7:8f:7f:1c:10:67: c7:38:43:71:7f:d3:82:a0:f1:29:36:8f:df:bb:3f:e8:46:af: 2b:19:28:27:4f:e0:81:1f:30:f9:c5:f7:fb:58:89:7d:f8:46: b1:1f:ec:55:57:1b:95:1b:6a:a2:77:59:44:6f:68:5a:1b:5f: a1:17:6b:dc:7d:55:62:b3:08:8b:53:f0:91:10:9d:9a:29:03: e6:2c:7e:e5:59:46:3f:cb:39:b4:13:82:8f:96:1e:c8:1d:be: b8:65:60:a5:7e:09:d8:7d:87:2f:3e:ca:a0:ef:1e:12:89:f4: 98:ee:5a:6e:d9:a6:31:b1:56:b3:6a:4b:08:5a:ab:aa:5c:03: d8:08:ec:06:ba:9d:76:a0:96:a6:98:56:9a:4f:7e:2c:f0:2d: fa:97:f7:12:93:54:4c:2e:80:06:e2:b5:0c:4b:8e:74:a9:3f: 62:3c:02:7d:c0:51:18:2d:df:83:a5:82:57:60:98:6e:77:31: 63:1c:b3:b0:1a:71:98:b5:6a:a6:f6:e8:9d:6d:e7:2b:89:54: ae:fd:b6:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5tDtR9fAX7KKD9ZPtScQ+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzYWYyZTk4N2QyYjYzYWRkYWE1YWRjMTc4ZjMxZTkwZDg3 NmFhYTcwHhcNMjUxMjIwMDMwMTExWhcNMjUxMjIxMDMwMTExWjAzMTEwLwYDVQQD Eyg1MWI4MGU3ZDFkMjVkNmU4ZmQ5ZTgxZDU0ZjllMGNlMjM1MzM1MjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzY/dT2b5DpNuyS8Fq652xeX6iuQ AmsdPgjA03pjQNuqO6hHo1IDFWqmfwV/+oPeaajksole43wS43TOZDoqEDNP2xj7 5EKR/gSqYwyCs6Hf0HaypOTUkf9q6YE+eo6Bi488ob99V2v0ah/DinWM3HfLUjdD 2mvhEBb7w9c/hZkEZY504Cnnfql0Q+QNaJXo8dmPs0vMPF1MKy3GOm1gQExO6zEu 0vUEoaK6ToqTFTZi841qcVqU7oTu7gI+BdQJp63r39W0eJjD6WcpPSCcZumiXfU3 aZ2H1k2fYFh4MV/lacP0EPSYgS7qNYZrbH0ulaitH5y9wm4RNxuJdbxdlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFG4Dn0dJdbo/Z6B1U+eDOI1M1JDMB8GA1UdIwQY MBaAFEOvLph9K2Ot2qWtwXjzHpDYdqqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTY4dW1IMHJZNjNhcGEzQmVQTWVrTmgycXFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82Njg0MzctOTdjMi00OGMyLWI3Yzgt Y2M3NzQ2NzE5NDA2LzEvUTY4dW1IMHJZNjNhcGEzQmVQTWVrTmgycXFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi82Njg0MzctOTdjMi00OGMyLWI3YzgtY2M3NzQ2NzE5NDA2 LzEvUTY4dW1IMHJZNjNhcGEzQmVQTWVrTmgycXFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbHSTXunW NFIKkIhr8dEUTvcMSsk+VSievIySpEkT/DqsyJo3NvXWhUinsRb2Tlx3149/HBBn xzhDcX/TgqDxKTaP37s/6EavKxkoJ0/ggR8w+cX3+1iJffhGsR/sVVcblRtqondZ RG9oWhtfoRdr3H1VYrMIi1PwkRCdmikD5ix+5VlGP8s5tBOCj5YeyB2+uGVgpX4J 2H2HLz7KoO8eEon0mO5abtmmMbFWs2pLCFqrqlwD2AjsBrqddqCWpphWmk9+LPAt +pf3EpNUTC6ABuK1DEuOdKk/YjwCfcBRGC3fg6WCV2CYbncxYxyzsBpxmLVqpvbo nW3nK4lUrv22UA== -----END CERTIFICATE-----Generated at Sat Dec 20 11:40:56 2025 by rpki-client