This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft File: Q1lOVdyWy5uYClKqY35IqNhzicA.mft (raw, json) Hash identifier: Ak67IjVmD3EO4acjRN6V3l3TYKhwlv0fQbUTsYtMnQk= Subject key identifier: B2:16:08:98:EE:FA:E2:50:EA:92:A5:BA:2A:D8:98:0F:0C:36:3C:CF Authority key identifier: 43:59:4E:55:DC:96:CB:9B:98:0A:52:AA:63:7E:48:A8:D8:73:89:C0 Certificate issuer: /CN=43594e55dc96cb9b980a52aa637e48a8d87389c0 Certificate serial: 019B6F21E165B6D4D424F858AFAB3D53FA56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1lOVdyWy5uYClKqY35IqNhzicA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft Manifest number: 17A4 Signing time: Tue 30 Dec 2025 12:00:49 +0000 Manifest this update: Tue 30 Dec 2025 12:00:49 +0000 Manifest next update: Wed 31 Dec 2025 12:00:49 +0000 Files and hashes: 1: Hw_YSikfvPxyjT0Axd5BlNhcASU.roa (hash: r5NiDKMzZzkd/HZAp6j3JOaexr/ITFnq6zXIPbUaL0k=) 2: Q1lOVdyWy5uYClKqY35IqNhzicA.crl (hash: JtHl67QUETCB1hSXruKt7PRFT93T/BUWnszKdFr7+lE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft rsync://rpki.ripe.net/repository/DEFAULT/Q1lOVdyWy5uYClKqY35IqNhzicA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 12:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:21:e1:65:b6:d4:d4:24:f8:58:af:ab:3d:53:fa:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43594e55dc96cb9b980a52aa637e48a8d87389c0 Validity Not Before: Dec 30 12:00:49 2025 GMT Not After : Dec 31 12:00:49 2025 GMT Subject: CN=b2160898eefae250ea92a5ba2ad8980f0c363ccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fd:8e:c4:c7:27:2e:ed:ac:26:8a:aa:43:3b: 9e:c0:f6:c0:f0:60:09:99:a1:b8:4a:fb:10:67:bc: c0:fa:21:e3:88:fc:7f:12:e3:15:0f:01:0d:42:38: c3:43:f0:1a:30:ee:91:5e:00:dd:8a:c0:d8:db:b6: 05:de:43:d3:4f:bc:80:28:29:a3:8f:5c:b4:62:97: 50:70:c6:86:3e:39:e1:1c:d3:72:81:3a:44:1d:6c: 06:17:3f:9d:2b:20:b0:ef:c3:56:33:86:57:fe:eb: 96:2f:9b:53:1d:c8:44:dc:c5:64:ef:10:f3:ea:36: b4:53:b5:a4:de:b5:49:44:50:1b:12:3d:09:49:8c: da:0f:68:d6:1a:5d:8f:5e:46:71:87:cb:57:a0:b7: cf:d5:72:51:3f:ff:f3:21:92:22:fb:33:14:26:e0: 12:92:5d:6e:46:09:e8:3b:46:b0:ea:32:b8:8c:62: 82:fb:50:53:ec:9d:8d:5a:d1:59:62:92:27:c4:4b: f0:d6:7a:bc:d6:07:f9:0e:a7:e0:20:77:80:ef:be: 1a:2a:69:fa:d5:ac:5c:12:f5:ca:4e:a1:f0:57:25: 91:f3:49:c3:b2:8c:8c:a5:6e:d3:1a:87:5d:3c:69: 89:1b:83:8b:75:9e:f8:1f:8c:c7:6b:00:a6:ba:cf: 46:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:16:08:98:EE:FA:E2:50:EA:92:A5:BA:2A:D8:98:0F:0C:36:3C:CF X509v3 Authority Key Identifier: keyid:43:59:4E:55:DC:96:CB:9B:98:0A:52:AA:63:7E:48:A8:D8:73:89:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1lOVdyWy5uYClKqY35IqNhzicA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:d6:90:77:e8:31:e2:76:ed:df:3b:18:30:04:80:e3:74:d9: a2:63:46:2b:46:03:d4:53:89:69:e3:e7:12:ee:ef:2e:70:73: 8c:6b:ef:ed:a4:43:6c:88:0c:5f:05:7e:be:d1:d9:7b:ce:7b: 81:34:4d:88:bb:84:5e:91:57:82:3a:d9:12:de:64:a7:86:9c: e2:4b:25:a6:74:bd:01:8a:5f:d9:ef:80:f3:3a:d5:04:f4:9d: ec:91:da:60:32:00:f5:c5:0a:28:50:2c:0a:b7:cc:ae:93:13: b3:fa:85:9d:ed:28:07:a6:f1:83:b8:fc:15:21:57:0f:66:b1: d5:29:bd:57:b9:d1:ea:c8:f0:91:d3:55:db:10:c2:00:0a:e0: 6a:86:98:37:90:25:e0:bc:60:45:30:99:03:90:08:25:7f:fa: a5:fd:8c:36:bd:04:7d:5f:da:78:0b:9d:99:c2:66:ef:b7:74: a6:f7:34:7b:7f:64:d6:9e:77:ad:3d:93:c5:2c:67:92:4c:4c: 0c:b2:d7:7b:27:f8:2f:bd:e7:45:b5:5e:dd:a3:fc:9e:82:4b: 44:39:93:56:d3:cf:46:15:55:1f:4b:b0:ee:de:a2:76:12:06: ca:4b:21:ab:df:99:34:75:ec:54:5f:47:a5:b6:88:19:d2:25: 49:95:3d:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtvIeFlttTUJPhYr6s9U/pWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzNTk0ZTU1ZGM5NmNiOWI5ODBhNTJhYTYzN2U0OGE4ZDg3 Mzg5YzAwHhcNMjUxMjMwMTIwMDQ5WhcNMjUxMjMxMTIwMDQ5WjAzMTEwLwYDVQQD EyhiMjE2MDg5OGVlZmFlMjUwZWE5MmE1YmEyYWQ4OTgwZjBjMzYzY2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0v2OxMcnLu2sJoqqQzuewPbA8GAJ maG4SvsQZ7zA+iHjiPx/EuMVDwENQjjDQ/AaMO6RXgDdisDY27YF3kPTT7yAKCmj j1y0YpdQcMaGPjnhHNNygTpEHWwGFz+dKyCw78NWM4ZX/uuWL5tTHchE3MVk7xDz 6ja0U7Wk3rVJRFAbEj0JSYzaD2jWGl2PXkZxh8tXoLfP1XJRP//zIZIi+zMUJuAS kl1uRgnoO0aw6jK4jGKC+1BT7J2NWtFZYpInxEvw1nq81gf5DqfgIHeA774aKmn6 1axcEvXKTqHwVyWR80nDsoyMpW7TGoddPGmJG4OLdZ74H4zHawCmus9GxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLIWCJju+uJQ6pKluirYmA8MNjzPMB8GA1UdIwQY MBaAFENZTlXclsubmApSqmN+SKjYc4nAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTFsT1ZkeVd5NXVZQ2xLcVkzNUlxTmh6aWNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84NWUxMjUtODVkNi00M2YwLTk4YmYt ZDhmYTBlZGEzYWJlLzEvUTFsT1ZkeVd5NXVZQ2xLcVkzNUlxTmh6aWNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS84NWUxMjUtODVkNi00M2YwLTk4YmYtZDhmYTBlZGEzYWJl LzEvUTFsT1ZkeVd5NXVZQ2xLcVkzNUlxTmh6aWNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHtaQd+gx 4nbt3zsYMASA43TZomNGK0YD1FOJaePnEu7vLnBzjGvv7aRDbIgMXwV+vtHZe857 gTRNiLuEXpFXgjrZEt5kp4ac4kslpnS9AYpf2e+A8zrVBPSd7JHaYDIA9cUKKFAs CrfMrpMTs/qFne0oB6bxg7j8FSFXD2ax1Sm9V7nR6sjwkdNV2xDCAArgaoaYN5Al 4LxgRTCZA5AIJX/6pf2MNr0EfV/aeAudmcJm77d0pvc0e39k1p53rT2TxSxnkkxM DLLXeyf4L73nRbVe3aP8noJLRDmTVtPPRhVVH0uw7t6idhIGykshq9+ZNHXsVF9H pbaIGdIlSZU9lQ== -----END CERTIFICATE-----Generated at Tue Dec 30 18:44:33 2025 by rpki-client