This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft File: Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft (raw, json) Hash identifier: w5gPQwDJcwHt98rZIQV8Dyw5ukkUazD+gml1kkl14b8= Subject key identifier: 4E:80:E3:5F:DA:E0:73:84:9D:FE:FD:16:85:DD:AD:7A:41:9E:7D:F0 Authority key identifier: 43:72:4E:61:E3:BA:2F:94:66:59:17:33:9E:6D:AC:2B:68:0A:18:CF Certificate issuer: /CN=43724e61e3ba2f94665917339e6dac2b680a18cf Certificate serial: 019B3E6D1C79D91AFB2DFB4AF229216FA378 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft Manifest number: 01B9 Signing time: Sun 21 Dec 2025 01:01:36 +0000 Manifest this update: Sun 21 Dec 2025 01:01:36 +0000 Manifest next update: Mon 22 Dec 2025 01:01:36 +0000 Files and hashes: 1: FxDzr4dkx7gP7-0QN9qS1QSuAFE.roa (hash: 2+R/DqRWvZVRETti21Zc43TNJBFDVQNiLw4+AXiQO7g=) 2: Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl (hash: B/E75fFL4ycfmiKuAsfHyB+003H/mDrOlBaviVMYCHs=) 3: aSbzflu2ueBH4HFc6DoptPDX5Rc.roa (hash: Ps8MiI9EyDzRjGBlJSLfyNG1HvPUvesSrz/Go0N5kKw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:1c:79:d9:1a:fb:2d:fb:4a:f2:29:21:6f:a3:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43724e61e3ba2f94665917339e6dac2b680a18cf Validity Not Before: Dec 21 01:01:36 2025 GMT Not After : Dec 22 01:01:36 2025 GMT Subject: CN=4e80e35fdae073849dfefd1685ddad7a419e7df0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:93:a2:0e:0f:44:a0:f0:7a:99:11:f3:64:5f: 36:08:ad:b6:35:08:4b:59:9f:54:68:82:fa:01:d7: bd:02:ce:23:1b:7e:7e:11:1d:6f:96:e8:58:b5:66: bd:80:ca:05:7d:a7:92:4c:8f:99:50:73:0c:d9:42: f1:f6:28:77:6e:fd:2e:2e:a9:f5:ab:99:b4:29:83: 0a:f7:45:8a:43:75:07:eb:ee:3b:95:f3:af:08:e4: 40:aa:10:fb:67:c3:85:96:46:90:7f:88:29:86:b9: bc:89:f8:d7:a8:79:61:2c:c7:63:ae:d7:80:6e:70: d6:28:e4:08:c2:33:e5:6a:3b:96:4e:87:25:09:56: d4:25:6f:58:e5:12:cd:e7:76:f5:fd:85:07:97:15: ed:dc:62:ed:33:ae:ed:ee:69:67:20:f0:c2:17:e4: 87:89:9a:c7:b0:c1:b1:a8:88:21:3d:54:a0:66:42: ae:0f:45:06:c1:37:b9:8e:5a:b2:73:bf:32:bf:16: e6:db:ac:91:82:e9:af:9a:13:64:66:75:25:8d:03: 9d:f7:29:da:6e:ec:f0:2b:c7:e9:50:6c:2e:d3:a2: 1b:ec:38:ff:c1:b5:b9:f2:2e:45:70:91:28:d7:f6: 62:1b:90:7c:f1:d7:40:bb:c2:88:ef:4c:2d:46:de: e8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:80:E3:5F:DA:E0:73:84:9D:FE:FD:16:85:DD:AD:7A:41:9E:7D:F0 X509v3 Authority Key Identifier: keyid:43:72:4E:61:E3:BA:2F:94:66:59:17:33:9E:6D:AC:2B:68:0A:18:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:5c:1c:7d:16:f5:6b:45:20:41:85:13:f3:b1:dd:fb:58:c5: 4c:a1:6b:9d:2f:fa:6f:27:a8:3d:06:43:b1:64:75:56:de:8d: bc:02:2c:07:7e:4b:72:d0:72:f0:3a:a8:11:bc:fa:a2:ab:a6: ec:0e:7c:71:e5:e3:9a:93:4c:b7:60:d8:f6:be:46:0b:71:41: 58:ec:0f:14:87:f0:af:44:f6:ae:35:e2:a9:94:e8:45:d7:01: 8e:4b:9a:d4:ed:07:af:a1:b7:45:00:2e:86:2c:09:21:00:98: 56:1f:77:d0:7f:28:2c:82:6d:e3:1d:a5:b7:7d:32:8e:61:35: 5a:45:1f:a8:b5:73:4b:d4:6b:32:f4:3b:26:b6:08:fb:48:7d: db:1c:84:20:54:b6:87:70:11:35:fa:4b:42:78:d2:6f:7f:6b: e4:7e:76:43:af:fc:b2:4e:95:04:8f:ac:93:b4:b6:68:11:69: fc:e3:2d:e2:87:2e:0b:50:db:8f:0a:fa:cc:f6:38:57:24:6c: 04:e2:59:ce:9f:65:ab:39:ef:a3:50:0e:e3:38:68:f5:26:68: 48:d2:36:bd:61:91:a2:02:a4:2e:d0:38:84:da:13:c9:10:6c: 1e:b5:76:ec:d3:ac:77:8e:a8:d9:2a:b0:0f:5e:15:98:cd:91: 22:b7:eb:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bRx52Rr7LftK8ikhb6N4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzNzI0ZTYxZTNiYTJmOTQ2NjU5MTczMzllNmRhYzJiNjgw YTE4Y2YwHhcNMjUxMjIxMDEwMTM2WhcNMjUxMjIyMDEwMTM2WjAzMTEwLwYDVQQD Eyg0ZTgwZTM1ZmRhZTA3Mzg0OWRmZWZkMTY4NWRkYWQ3YTQxOWU3ZGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5OiDg9EoPB6mRHzZF82CK22NQhL WZ9UaIL6Ade9As4jG35+ER1vluhYtWa9gMoFfaeSTI+ZUHMM2ULx9ih3bv0uLqn1 q5m0KYMK90WKQ3UH6+47lfOvCORAqhD7Z8OFlkaQf4gphrm8ifjXqHlhLMdjrteA bnDWKOQIwjPlajuWToclCVbUJW9Y5RLN53b1/YUHlxXt3GLtM67t7mlnIPDCF+SH iZrHsMGxqIghPVSgZkKuD0UGwTe5jlqyc78yvxbm26yRgumvmhNkZnUljQOd9yna buzwK8fpUGwu06Ib7Dj/wbW58i5FcJEo1/ZiG5B88ddAu8KI70wtRt7ojwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE6A41/a4HOEnf79FoXdrXpBnn3wMB8GA1UdIwQY MBaAFENyTmHjui+UZlkXM55trCtoChjPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTNKT1llTzZMNVJtV1Jjem5tMnNLMmdLR004LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8wM2FmOGItM2U1OC00OTE2LWE5YjUt NmI4NzcwMzZhYTFhLzEvUTNKT1llTzZMNVJtV1Jjem5tMnNLMmdLR004Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8wM2FmOGItM2U1OC00OTE2LWE5YjUtNmI4NzcwMzZhYTFh LzEvUTNKT1llTzZMNVJtV1Jjem5tMnNLMmdLR004LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnFwcfRb1 a0UgQYUT87Hd+1jFTKFrnS/6byeoPQZDsWR1Vt6NvAIsB35LctBy8DqoEbz6oqum 7A58ceXjmpNMt2DY9r5GC3FBWOwPFIfwr0T2rjXiqZToRdcBjkua1O0Hr6G3RQAu hiwJIQCYVh930H8oLIJt4x2lt30yjmE1WkUfqLVzS9RrMvQ7JrYI+0h92xyEIFS2 h3ARNfpLQnjSb39r5H52Q6/8sk6VBI+sk7S2aBFp/OMt4ocuC1Dbjwr6zPY4VyRs BOJZzp9lqznvo1AO4zho9SZoSNI2vWGRogKkLtA4hNoTyRBsHrV27NOsd46o2Sqw D14VmM2RIrfr/w== -----END CERTIFICATE-----Generated at Sun Dec 21 08:14:37 2025 by rpki-client