This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft File: QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft (raw, json) Hash identifier: G1E+ZlCCaeVfnPnEwqfjG2VoSzn+WhRdcEAVdWZFBHk= Subject key identifier: 06:09:74:12:97:90:8E:7B:E7:10:0F:1D:0C:AE:50:8C:DB:45:3B:0E Authority key identifier: 42:43:2A:31:9F:54:B0:58:37:2F:D3:25:28:EA:E5:1F:C9:0C:15:B2 Certificate issuer: /CN=42432a319f54b058372fd32528eae51fc90c15b2 Certificate serial: 019B3A8FBFE3B9E948868048E26335C220BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft Manifest number: 0435 Signing time: Sat 20 Dec 2025 07:00:57 +0000 Manifest this update: Sat 20 Dec 2025 07:00:57 +0000 Manifest next update: Sun 21 Dec 2025 07:00:57 +0000 Files and hashes: 1: Fg4gfGthOyzcFXfxEYyjwrss7as.roa (hash: mWUv12QovIjIHXpuDNAMlgedx6+BQ3vMWaiHrsA7+3A=) 2: Q5e6g1WUMRG4cL4aNZtJqqD_-yo.roa (hash: T3aZ91YVxRUkDJ96e4vMqo7oCynEMTZ2Xb8h0pZbGMo=) 3: QkMqMZ9UsFg3L9MlKOrlH8kMFbI.crl (hash: VLfpZ324pfUftkRhm8ra0H/BJdE1WigoFQUpb0GZdGQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:bf:e3:b9:e9:48:86:80:48:e2:63:35:c2:20:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42432a319f54b058372fd32528eae51fc90c15b2 Validity Not Before: Dec 20 07:00:57 2025 GMT Not After : Dec 21 07:00:57 2025 GMT Subject: CN=0609741297908e7be7100f1d0cae508cdb453b0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4b:3e:3c:f3:3a:02:16:98:15:e6:78:c2:20: de:a5:58:ac:cb:9c:11:46:8a:bb:5e:f3:96:c6:7f: 9d:60:e7:e7:61:b2:14:60:b5:0f:82:25:ba:48:22: 3d:99:c4:c3:f6:fa:21:42:cd:85:06:ec:0d:7b:8e: b9:ef:9c:6e:f3:53:03:84:50:3f:8e:ca:45:b2:75: da:d9:f0:ba:6a:95:d7:e7:3f:b2:81:93:4c:9f:d9: 42:49:ed:b0:dc:36:2d:f8:5f:30:6e:d1:b9:23:8b: 12:00:47:15:ad:ec:52:27:62:ea:5d:34:8e:f6:05: 9d:5d:29:c7:59:d8:1d:6c:38:dd:b6:1d:e1:a8:24: 6b:cd:45:b0:b7:30:46:5c:0a:10:dc:b7:d3:97:c1: c9:87:e6:a4:3a:c0:c5:e0:76:94:ca:f6:59:d9:bc: 3b:34:72:fd:dc:43:55:3b:4e:4c:b9:51:ff:b2:eb: 11:12:e7:31:17:3c:f8:72:a8:9b:b0:31:d3:31:fc: d7:34:ac:d7:85:5e:33:18:f3:78:96:ee:27:57:c5: f6:3b:2f:7d:fe:88:25:82:53:01:03:fd:1c:27:0a: b2:b9:19:63:c3:e2:ef:a7:c1:45:17:25:c1:e4:29: 9f:04:ff:0a:73:74:16:01:f4:0c:1e:23:b0:98:b5: ae:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:09:74:12:97:90:8E:7B:E7:10:0F:1D:0C:AE:50:8C:DB:45:3B:0E X509v3 Authority Key Identifier: keyid:42:43:2A:31:9F:54:B0:58:37:2F:D3:25:28:EA:E5:1F:C9:0C:15:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:87:66:02:5b:02:d4:00:36:a0:e9:fa:72:12:d6:b8:36:e3: 84:10:24:ae:75:66:e9:44:87:d9:74:74:80:bd:af:38:0e:6c: 70:a1:4b:5b:a8:e7:f8:3b:3a:e0:2b:72:d8:6f:4b:49:8e:03: 41:1c:30:4a:04:c9:56:13:8c:1b:6a:8f:ea:26:b5:bf:d6:06: 1c:48:3f:14:1c:d4:61:61:6f:97:f0:a7:56:d3:e2:bb:4f:18: 38:c3:47:da:56:57:12:cb:89:b3:c4:03:ef:23:2f:ac:fd:11: 63:7a:b6:13:81:ab:1a:06:1e:70:9b:59:74:42:7e:ba:27:a0: 5d:23:f4:07:d9:4d:ab:c8:6b:0a:5f:13:59:72:de:19:ea:1c: ee:d2:1f:14:32:c4:c9:9f:fb:c1:58:95:10:4a:97:e4:0a:7c: 61:c7:9c:93:6e:07:a7:f6:3c:d9:58:49:3c:c2:ee:35:37:45: b2:a0:f0:51:54:44:6b:c2:96:35:18:49:ec:0f:0d:1e:1a:63: d0:78:31:4c:3d:a6:df:9d:b9:e5:29:67:df:2a:47:ae:23:e1: 63:20:67:11:26:d3:50:35:6c:47:8d:f3:84:58:eb:81:3c:b5: 52:b5:3d:6b:73:7e:72:a1:d3:8d:cf:68:52:d7:00:e5:e8:47: 54:6c:cf:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j7/juelIhoBI4mM1wiC/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNDMyYTMxOWY1NGIwNTgzNzJmZDMyNTI4ZWFlNTFmYzkw YzE1YjIwHhcNMjUxMjIwMDcwMDU3WhcNMjUxMjIxMDcwMDU3WjAzMTEwLwYDVQQD EygwNjA5NzQxMjk3OTA4ZTdiZTcxMDBmMWQwY2FlNTA4Y2RiNDUzYjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUs+PPM6AhaYFeZ4wiDepVisy5wR Roq7XvOWxn+dYOfnYbIUYLUPgiW6SCI9mcTD9vohQs2FBuwNe46575xu81MDhFA/ jspFsnXa2fC6apXX5z+ygZNMn9lCSe2w3DYt+F8wbtG5I4sSAEcVrexSJ2LqXTSO 9gWdXSnHWdgdbDjdth3hqCRrzUWwtzBGXAoQ3LfTl8HJh+akOsDF4HaUyvZZ2bw7 NHL93ENVO05MuVH/susREucxFzz4cqibsDHTMfzXNKzXhV4zGPN4lu4nV8X2Oy99 /oglglMBA/0cJwqyuRljw+Lvp8FFFyXB5CmfBP8Kc3QWAfQMHiOwmLWuawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAYJdBKXkI575xAPHQyuUIzbRTsOMB8GA1UdIwQY MBaAFEJDKjGfVLBYNy/TJSjq5R/JDBWyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWtNcU1aOVVzRmczTDlNbEtPcmxIOGtNRmJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS83YWI3OWMtOWRmZi00YTVkLWFlODMt MTMxZGMyYmEyZWM4LzEvUWtNcU1aOVVzRmczTDlNbEtPcmxIOGtNRmJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS83YWI3OWMtOWRmZi00YTVkLWFlODMtMTMxZGMyYmEyZWM4 LzEvUWtNcU1aOVVzRmczTDlNbEtPcmxIOGtNRmJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlYdmAlsC 1AA2oOn6chLWuDbjhBAkrnVm6USH2XR0gL2vOA5scKFLW6jn+Ds64Cty2G9LSY4D QRwwSgTJVhOMG2qP6ia1v9YGHEg/FBzUYWFvl/CnVtPiu08YOMNH2lZXEsuJs8QD 7yMvrP0RY3q2E4GrGgYecJtZdEJ+uiegXSP0B9lNq8hrCl8TWXLeGeoc7tIfFDLE yZ/7wViVEEqX5Ap8Yceck24Hp/Y82VhJPMLuNTdFsqDwUVREa8KWNRhJ7A8NHhpj 0HgxTD2m35255Sln3ypHriPhYyBnESbTUDVsR43zhFjrgTy1UrU9a3N+cqHTjc9o UtcA5ehHVGzP0w== -----END CERTIFICATE-----Generated at Sat Dec 20 11:42:39 2025 by rpki-client