This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft File: Q1lOVdyWy5uYClKqY35IqNhzicA.mft (raw, json) Hash identifier: yThzY0BcVZe00/ZNGaWr+TCo9dARrNLW7Jde/bZGWaI= Subject key identifier: FC:A4:3D:2D:82:F0:E5:EC:A8:2B:97:4A:BE:7E:64:38:9D:4C:86:0E Authority key identifier: 43:59:4E:55:DC:96:CB:9B:98:0A:52:AA:63:7E:48:A8:D8:73:89:C0 Certificate issuer: /CN=43594e55dc96cb9b980a52aa637e48a8d87389c0 Certificate serial: 019B5FAF9E6D8DDD455181FC96869DA453CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1lOVdyWy5uYClKqY35IqNhzicA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft Manifest number: 179C Signing time: Sat 27 Dec 2025 12:01:43 +0000 Manifest this update: Sat 27 Dec 2025 12:01:43 +0000 Manifest next update: Sun 28 Dec 2025 12:01:43 +0000 Files and hashes: 1: Hw_YSikfvPxyjT0Axd5BlNhcASU.roa (hash: r5NiDKMzZzkd/HZAp6j3JOaexr/ITFnq6zXIPbUaL0k=) 2: Q1lOVdyWy5uYClKqY35IqNhzicA.crl (hash: M5pPGhmA+7uj5RCvWvBKqcxF0+a3wXdxa7l4WsVhXY0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft rsync://rpki.ripe.net/repository/DEFAULT/Q1lOVdyWy5uYClKqY35IqNhzicA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:af:9e:6d:8d:dd:45:51:81:fc:96:86:9d:a4:53:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43594e55dc96cb9b980a52aa637e48a8d87389c0 Validity Not Before: Dec 27 12:01:43 2025 GMT Not After : Dec 28 12:01:43 2025 GMT Subject: CN=fca43d2d82f0e5eca82b974abe7e64389d4c860e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:35:8b:a5:28:c0:85:97:de:e8:47:04:42:d1: a3:59:49:e7:39:5f:ee:ec:72:84:2c:9d:58:71:68: 16:6e:be:c6:08:e2:dd:57:a6:6b:69:51:84:3e:a7: d3:02:13:af:53:2c:b0:af:56:13:64:d0:95:0c:35: 7c:34:55:30:5d:01:bd:76:ca:ca:93:0e:4d:84:87: c2:48:b8:d6:32:42:86:42:d8:9b:ad:67:a5:93:a3: 6f:b4:3d:4d:ba:fd:b5:e9:b4:f0:b5:b4:e0:70:54: 31:da:41:1c:bd:4c:75:00:aa:5b:0f:6f:3b:34:23: 9f:f4:5b:be:3b:0e:6a:23:00:8e:64:4f:d1:39:d8: 79:63:d3:c3:ff:6d:75:2f:07:49:d8:cf:43:4d:75: 4b:24:b2:f4:54:1e:2c:7e:1a:a1:75:5a:4c:97:a1: 6f:7e:69:31:62:81:82:f5:3f:63:7e:ee:00:73:ae: a0:c7:db:ff:f4:c1:0f:16:e2:74:bc:9e:dc:66:4c: a5:0a:97:63:08:53:4a:f3:26:32:33:2d:7f:50:90: 80:1b:8a:aa:7d:bf:43:0c:3b:5a:e4:3c:27:b8:f0: 98:f8:2e:62:a8:d7:d4:93:f5:ee:29:5f:90:e0:68: 0a:3b:6c:3a:03:6a:cf:3b:35:22:46:f2:eb:ee:f5: cc:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:A4:3D:2D:82:F0:E5:EC:A8:2B:97:4A:BE:7E:64:38:9D:4C:86:0E X509v3 Authority Key Identifier: keyid:43:59:4E:55:DC:96:CB:9B:98:0A:52:AA:63:7E:48:A8:D8:73:89:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1lOVdyWy5uYClKqY35IqNhzicA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:61:28:36:62:66:7b:a9:f5:27:68:87:d2:b6:ab:fc:c5:57: 08:87:58:dd:bb:e5:db:3e:df:27:35:79:3f:b2:26:b4:61:27: a0:b2:25:a9:cd:11:ab:d8:60:ee:c1:e8:43:cc:b3:c1:e1:72: 9e:5a:8b:7e:f7:e3:50:36:a7:4e:af:6b:a1:15:73:bb:03:8e: 66:d7:a0:c0:fb:c9:3f:8d:78:12:fc:ab:02:0d:67:b4:44:09: 6f:10:58:5b:31:84:84:83:39:56:0c:19:d0:52:da:1d:c0:ff: e7:15:68:b3:0e:69:2f:c1:9d:8d:fe:3a:47:94:aa:35:33:4d: 1b:33:0e:c5:cb:51:cd:2b:b6:28:c4:25:a8:a6:15:75:7e:5f: b4:e7:3c:b4:6d:fc:53:04:64:11:2b:19:e9:f1:5b:aa:60:75: 26:95:95:dd:f4:24:79:aa:b4:56:b8:fe:32:f9:b3:9c:e1:0d: 42:57:d4:2e:8d:c4:71:f1:fb:b5:55:6e:64:84:95:06:c5:37: d7:6c:3b:8b:d8:94:dd:54:d8:79:66:ac:1c:41:4e:80:94:e5: e1:cf:f0:40:c8:7b:1f:8f:11:82:a1:5b:d8:f5:cf:cd:ba:0c: fd:40:07:d1:f4:9a:61:83:33:86:9b:ea:35:24:70:b2:cc:62: 34:a2:80:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfr55tjd1FUYH8loadpFPOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzNTk0ZTU1ZGM5NmNiOWI5ODBhNTJhYTYzN2U0OGE4ZDg3 Mzg5YzAwHhcNMjUxMjI3MTIwMTQzWhcNMjUxMjI4MTIwMTQzWjAzMTEwLwYDVQQD EyhmY2E0M2QyZDgyZjBlNWVjYTgyYjk3NGFiZTdlNjQzODlkNGM4NjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8jWLpSjAhZfe6EcEQtGjWUnnOV/u 7HKELJ1YcWgWbr7GCOLdV6ZraVGEPqfTAhOvUyywr1YTZNCVDDV8NFUwXQG9dsrK kw5NhIfCSLjWMkKGQtibrWelk6NvtD1Nuv216bTwtbTgcFQx2kEcvUx1AKpbD287 NCOf9Fu+Ow5qIwCOZE/ROdh5Y9PD/211LwdJ2M9DTXVLJLL0VB4sfhqhdVpMl6Fv fmkxYoGC9T9jfu4Ac66gx9v/9MEPFuJ0vJ7cZkylCpdjCFNK8yYyMy1/UJCAG4qq fb9DDDta5DwnuPCY+C5iqNfUk/XuKV+Q4GgKO2w6A2rPOzUiRvLr7vXM1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPykPS2C8OXsqCuXSr5+ZDidTIYOMB8GA1UdIwQY MBaAFENZTlXclsubmApSqmN+SKjYc4nAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTFsT1ZkeVd5NXVZQ2xLcVkzNUlxTmh6aWNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84NWUxMjUtODVkNi00M2YwLTk4YmYt ZDhmYTBlZGEzYWJlLzEvUTFsT1ZkeVd5NXVZQ2xLcVkzNUlxTmh6aWNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS84NWUxMjUtODVkNi00M2YwLTk4YmYtZDhmYTBlZGEzYWJl LzEvUTFsT1ZkeVd5NXVZQ2xLcVkzNUlxTmh6aWNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmmEoNmJm e6n1J2iH0rar/MVXCIdY3bvl2z7fJzV5P7ImtGEnoLIlqc0Rq9hg7sHoQ8yzweFy nlqLfvfjUDanTq9roRVzuwOOZtegwPvJP414EvyrAg1ntEQJbxBYWzGEhIM5VgwZ 0FLaHcD/5xVosw5pL8Gdjf46R5SqNTNNGzMOxctRzSu2KMQlqKYVdX5ftOc8tG38 UwRkESsZ6fFbqmB1JpWV3fQkeaq0Vrj+MvmznOENQlfULo3EcfH7tVVuZISVBsU3 12w7i9iU3VTYeWasHEFOgJTl4c/wQMh7H48RgqFb2PXPzboM/UAH0fSaYYMzhpvq NSRwssxiNKKAgA== -----END CERTIFICATE-----Generated at Sat Dec 27 17:50:45 2025 by rpki-client