This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft File: Q-BF0CHUiuhhoM5n040VoGdlOjE.mft (raw, json) Hash identifier: zOJlvIbXh+DT1V39PhaPwBb49iAZOdn9bCVwqziRaTg= Subject key identifier: F4:41:F9:3D:5F:15:10:75:65:82:CA:20:9F:66:B3:77:A0:A3:D9:03 Authority key identifier: 43:E0:45:D0:21:D4:8A:E8:61:A0:CE:67:D3:8D:15:A0:67:65:3A:31 Certificate issuer: /CN=43e045d021d48ae861a0ce67d38d15a067653a31 Certificate serial: 019B3EA3474571A3EF9C4DCAED82D8C59A9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft Manifest number: 0D77 Signing time: Sun 21 Dec 2025 02:00:46 +0000 Manifest this update: Sun 21 Dec 2025 02:00:46 +0000 Manifest next update: Mon 22 Dec 2025 02:00:46 +0000 Files and hashes: 1: Q-BF0CHUiuhhoM5n040VoGdlOjE.crl (hash: eWtZEetcyN8MzELNES94owastNHXftO5mBx2MyyfMJk=) 2: XNqUza-1RrV34b84oczapxMF-Cs.roa (hash: Cr97r6Z1ePJazya6FJNCZUabXsw1/WFse2z8LJYuBQ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:47:45:71:a3:ef:9c:4d:ca:ed:82:d8:c5:9a:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43e045d021d48ae861a0ce67d38d15a067653a31 Validity Not Before: Dec 21 02:00:46 2025 GMT Not After : Dec 22 02:00:46 2025 GMT Subject: CN=f441f93d5f1510756582ca209f66b377a0a3d903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:08:7d:c2:23:73:3b:3c:ec:08:66:8d:4c:e8: 1b:71:0f:10:97:27:c7:9b:7e:9c:a8:48:1e:8a:35: d9:3d:79:cd:cf:8c:83:25:22:0f:00:92:66:61:2d: ee:4a:98:39:e0:db:f1:80:2d:53:c5:67:ed:83:a5: 6b:51:b9:ee:cc:f8:d7:70:ec:79:3e:6c:22:43:53: 32:6f:c3:d7:73:55:7a:4d:31:e1:13:bc:a5:d7:d1: 81:c5:fe:7c:c5:a1:60:dc:d2:82:a4:3a:17:ac:d7: d3:63:4b:41:9a:36:d0:a4:8c:a6:bc:5b:48:00:69: 65:91:b6:5b:b2:c1:46:40:e3:e3:73:ef:87:69:ad: 75:8e:9e:97:79:0e:4d:84:29:35:b1:ce:cb:ff:40: 97:7f:30:83:e2:bd:6c:28:66:74:a6:3b:27:98:6d: 0e:cf:44:76:83:e2:df:e0:7c:f9:b7:1e:f4:6c:12: 4f:89:10:6b:8c:7d:45:e5:05:b0:b4:4a:12:04:95: 68:15:81:63:0e:41:03:cd:06:a2:dc:94:ed:82:82: 61:55:8b:d0:20:f3:00:d1:54:e6:97:88:23:3f:bd: 33:2a:14:df:d3:a3:eb:a7:5b:1d:88:60:aa:78:0b: 44:92:83:05:93:dc:89:af:01:b4:2f:a1:05:33:4a: 63:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:41:F9:3D:5F:15:10:75:65:82:CA:20:9F:66:B3:77:A0:A3:D9:03 X509v3 Authority Key Identifier: keyid:43:E0:45:D0:21:D4:8A:E8:61:A0:CE:67:D3:8D:15:A0:67:65:3A:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:5d:a1:ed:87:b0:eb:45:20:cd:9e:20:b6:27:7b:bd:bb:f9: 3f:45:95:5c:fc:12:d5:a5:0e:ce:dc:81:db:6a:ba:5d:eb:1c: fe:32:66:38:ef:e8:f9:1e:89:90:8e:09:00:6d:4e:51:c0:b1: 07:bb:0b:e1:82:6f:28:db:de:b1:d6:af:a8:fd:a2:b0:77:0d: 7f:29:39:39:1b:9c:ce:2b:48:47:12:ab:80:97:c4:d8:95:5a: c4:94:aa:84:4b:7d:49:67:12:34:84:c8:52:90:1c:6e:11:e1: ad:dd:fe:b3:1a:8a:ca:0e:9c:42:21:c7:38:76:0b:6e:fd:22: dc:a6:0a:cc:8d:16:66:ee:5f:6d:23:8d:0c:95:a0:08:13:c1: 96:af:55:4a:37:91:57:0d:3f:64:05:93:c7:f1:39:fe:ff:43: e0:8f:f6:52:ec:d1:a5:e2:09:f8:73:d3:ae:f2:ff:f2:b0:cb: 80:a2:64:a4:55:c7:7e:75:e5:f9:f6:db:05:3c:8c:da:23:bd: 55:c1:dc:c4:52:c2:a2:4c:86:48:93:ba:58:de:af:b3:7f:7e: e8:8f:c3:92:ea:cb:0b:1c:ee:96:b9:bb:00:ce:87:fb:2d:e8: 1d:af:5d:f7:05:5f:dc:8c:e6:47:3e:1a:28:f8:21:82:17:ac: 40:b7:9c:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o0dFcaPvnE3K7YLYxZqdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZTA0NWQwMjFkNDhhZTg2MWEwY2U2N2QzOGQxNWEwNjc2 NTNhMzEwHhcNMjUxMjIxMDIwMDQ2WhcNMjUxMjIyMDIwMDQ2WjAzMTEwLwYDVQQD EyhmNDQxZjkzZDVmMTUxMDc1NjU4MmNhMjA5ZjY2YjM3N2EwYTNkOTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ah9wiNzOzzsCGaNTOgbcQ8QlyfH m36cqEgeijXZPXnNz4yDJSIPAJJmYS3uSpg54NvxgC1TxWftg6VrUbnuzPjXcOx5 PmwiQ1Myb8PXc1V6TTHhE7yl19GBxf58xaFg3NKCpDoXrNfTY0tBmjbQpIymvFtI AGllkbZbssFGQOPjc++Haa11jp6XeQ5NhCk1sc7L/0CXfzCD4r1sKGZ0pjsnmG0O z0R2g+Lf4Hz5tx70bBJPiRBrjH1F5QWwtEoSBJVoFYFjDkEDzQai3JTtgoJhVYvQ IPMA0VTml4gjP70zKhTf06Prp1sdiGCqeAtEkoMFk9yJrwG0L6EFM0pjBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPRB+T1fFRB1ZYLKIJ9ms3ego9kDMB8GA1UdIwQY MBaAFEPgRdAh1IroYaDOZ9ONFaBnZToxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUS1CRjBDSFVpdWhob001bjA0MFZvR2RsT2pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi84ZjU3M2ItZGM4ZC00ODc2LWJjYTIt M2IwMmM5OWM3MzNiLzEvUS1CRjBDSFVpdWhob001bjA0MFZvR2RsT2pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi84ZjU3M2ItZGM4ZC00ODc2LWJjYTItM2IwMmM5OWM3MzNi LzEvUS1CRjBDSFVpdWhob001bjA0MFZvR2RsT2pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH12h7Yew 60UgzZ4gtid7vbv5P0WVXPwS1aUOztyB22q6Xesc/jJmOO/o+R6JkI4JAG1OUcCx B7sL4YJvKNvesdavqP2isHcNfyk5ORuczitIRxKrgJfE2JVaxJSqhEt9SWcSNITI UpAcbhHhrd3+sxqKyg6cQiHHOHYLbv0i3KYKzI0WZu5fbSONDJWgCBPBlq9VSjeR Vw0/ZAWTx/E5/v9D4I/2UuzRpeIJ+HPTrvL/8rDLgKJkpFXHfnXl+fbbBTyM2iO9 VcHcxFLCokyGSJO6WN6vs39+6I/DkurLCxzulrm7AM6H+y3oHa9d9wVf3IzmRz4a KPghghesQLecPA== -----END CERTIFICATE-----Generated at Sun Dec 21 08:58:37 2025 by rpki-client