This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.mft File: q6-0Li5v0JBX_KIbmQhNrDt68tA.mft (raw, json) Hash identifier: t/r5mba85R2TkhqDCIhpPd+Nt8zkDfCXdhZC7z9X5Ko= Subject key identifier: 48:0A:08:95:FE:26:0A:F7:EA:EF:A9:4C:4F:27:70:75:B5:EB:06:A6 Authority key identifier: AB:AF:B4:2E:2E:6F:D0:90:57:FC:A2:1B:99:08:4D:AC:3B:7A:F2:D0 Certificate issuer: /CN=abafb42e2e6fd09057fca21b99084dac3b7af2d0 Certificate serial: 019B48F07BB25A335CD167B3C77E078527AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6-0Li5v0JBX_KIbmQhNrDt68tA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.mft Manifest number: 178D Signing time: Tue 23 Dec 2025 02:01:18 +0000 Manifest this update: Tue 23 Dec 2025 02:01:18 +0000 Manifest next update: Wed 24 Dec 2025 02:01:18 +0000 Files and hashes: 1: m33s4sgep6-q8UmRmhXl2lkYj9Y.roa (hash: SAyf+MEL6W5SBqvzjsdQj/Xgc4QN6O97LJUm4XtKLGM=) 2: q6-0Li5v0JBX_KIbmQhNrDt68tA.crl (hash: sqMbs46JfSQnpWdwkNcHeGGq5s0lNg0+3L+Gn4qmsy0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.mft rsync://rpki.ripe.net/repository/DEFAULT/q6-0Li5v0JBX_KIbmQhNrDt68tA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:f0:7b:b2:5a:33:5c:d1:67:b3:c7:7e:07:85:27:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abafb42e2e6fd09057fca21b99084dac3b7af2d0 Validity Not Before: Dec 23 02:01:18 2025 GMT Not After : Dec 24 02:01:18 2025 GMT Subject: CN=480a0895fe260af7eaefa94c4f277075b5eb06a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8c:14:f8:62:7e:f2:da:5f:69:e3:51:ce:ce: da:f8:7f:4c:2b:f6:fe:3f:f3:00:6d:38:e0:61:d1: f0:3b:0d:d0:56:16:6a:8b:c1:6e:bd:75:22:c5:47: a7:93:bb:a3:0c:ab:63:d8:57:9d:28:a9:ef:ea:ef: b7:ac:7c:8c:be:a5:5a:75:11:1c:9b:53:7e:0b:48: bb:38:32:b5:f5:21:c2:70:fd:3f:1a:6b:13:bf:fc: 8f:e0:6d:ae:e2:e3:69:2c:ef:8d:d1:24:4f:bf:06: 0b:77:9f:83:4d:58:b2:53:1e:9a:d4:e5:41:08:ac: 81:cb:77:63:33:bd:aa:6d:47:ce:54:18:23:35:1c: 78:54:85:d7:73:99:94:02:05:e9:6a:f5:e4:25:dc: 2e:90:5c:d7:51:26:4d:47:04:d5:37:ab:94:55:c1: 85:ef:18:03:d4:3a:65:cc:69:5c:2b:2e:2b:00:b6: a7:48:d5:04:66:ff:92:20:77:ce:d1:5b:32:ac:a1: 64:4c:0b:02:2d:94:67:24:d6:b8:d1:c3:77:c0:ec: 88:ef:36:19:83:d3:2c:6e:38:b1:98:8c:e2:66:28: 20:00:da:ed:a3:5b:ad:72:6a:1a:3f:fc:d5:48:24: d3:9e:89:45:8d:e8:cb:2a:ac:45:b1:47:c2:16:26: cc:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:0A:08:95:FE:26:0A:F7:EA:EF:A9:4C:4F:27:70:75:B5:EB:06:A6 X509v3 Authority Key Identifier: keyid:AB:AF:B4:2E:2E:6F:D0:90:57:FC:A2:1B:99:08:4D:AC:3B:7A:F2:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6-0Li5v0JBX_KIbmQhNrDt68tA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:bb:85:f5:45:be:1f:dc:6b:af:9c:2f:da:6e:f4:44:60:9a: 8e:8f:69:e6:4c:6e:90:61:e8:0e:33:4b:f5:21:79:2b:6e:37: b9:5c:7a:45:41:53:76:00:49:1b:02:a7:f1:b8:59:7f:c0:ab: 06:c2:5a:5b:e8:5c:3f:ee:b0:7b:d6:7e:94:c9:b5:ce:16:ca: bd:36:7b:b9:6f:a1:94:97:ed:87:8c:66:83:ca:6e:87:4d:ac: a3:eb:6d:fd:3c:9d:20:72:0c:e9:ed:0a:0a:1b:7a:ce:c2:a4: c0:84:ea:05:f4:6b:6e:c4:b6:23:b0:41:f0:78:49:f0:03:ce: 33:70:e2:6c:e6:8e:5c:bb:42:12:01:0c:f6:68:bf:73:7a:42: 5f:4d:61:f4:98:c2:8f:df:b0:b6:52:3d:0e:08:8f:ed:11:64: 85:45:08:65:c5:a4:65:15:5a:71:44:2f:af:d1:07:74:bb:51: db:86:4d:1c:56:2b:55:38:da:6a:c4:05:77:f6:6e:79:52:ab: 51:24:23:41:3e:4c:77:02:8c:f4:45:4f:0e:1a:91:c3:96:58: b8:30:3f:45:38:91:43:22:65:90:9c:17:2a:28:61:53:17:e4: 79:3d:f4:61:53:8d:72:d6:fd:e5:d1:11:72:86:0c:eb:6c:a7: 03:2f:2c:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtI8HuyWjNc0Wezx34HhSesMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYWZiNDJlMmU2ZmQwOTA1N2ZjYTIxYjk5MDg0ZGFjM2I3 YWYyZDAwHhcNMjUxMjIzMDIwMTE4WhcNMjUxMjI0MDIwMTE4WjAzMTEwLwYDVQQD Eyg0ODBhMDg5NWZlMjYwYWY3ZWFlZmE5NGM0ZjI3NzA3NWI1ZWIwNmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYwU+GJ+8tpfaeNRzs7a+H9MK/b+ P/MAbTjgYdHwOw3QVhZqi8FuvXUixUenk7ujDKtj2FedKKnv6u+3rHyMvqVadREc m1N+C0i7ODK19SHCcP0/GmsTv/yP4G2u4uNpLO+N0SRPvwYLd5+DTViyUx6a1OVB CKyBy3djM72qbUfOVBgjNRx4VIXXc5mUAgXpavXkJdwukFzXUSZNRwTVN6uUVcGF 7xgD1DplzGlcKy4rALanSNUEZv+SIHfO0VsyrKFkTAsCLZRnJNa40cN3wOyI7zYZ g9MsbjixmIziZiggANrto1utcmoaP/zVSCTTnolFjejLKqxFsUfCFibMQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEgKCJX+Jgr36u+pTE8ncHW16wamMB8GA1UdIwQY MBaAFKuvtC4ub9CQV/yiG5kITaw7evLQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTYtMExpNXYwSkJYX0tJYm1RaE5yRHQ2OHRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi84OTg3NTQtZTQ0Ni00YjUxLTk5YTkt ZTU5YmQ0ZjRmNzQwLzEvcTYtMExpNXYwSkJYX0tJYm1RaE5yRHQ2OHRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi84OTg3NTQtZTQ0Ni00YjUxLTk5YTktZTU5YmQ0ZjRmNzQw LzEvcTYtMExpNXYwSkJYX0tJYm1RaE5yRHQ2OHRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq7uF9UW+ H9xrr5wv2m70RGCajo9p5kxukGHoDjNL9SF5K243uVx6RUFTdgBJGwKn8bhZf8Cr BsJaW+hcP+6we9Z+lMm1zhbKvTZ7uW+hlJfth4xmg8puh02so+tt/TydIHIM6e0K Cht6zsKkwITqBfRrbsS2I7BB8HhJ8APOM3DibOaOXLtCEgEM9mi/c3pCX01h9JjC j9+wtlI9DgiP7RFkhUUIZcWkZRVacUQvr9EHdLtR24ZNHFYrVTjaasQFd/ZueVKr USQjQT5MdwKM9EVPDhqRw5ZYuDA/RTiRQyJlkJwXKihhUxfkeT30YVONctb95dER coYM62ynAy8siQ== -----END CERTIFICATE-----Generated at Tue Dec 23 03:51:00 2025 by rpki-client