This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft File: qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft (raw, json) Hash identifier: Ip6pxeg3f81ueOditKo2mM74iK4xUWYrZb6R2Si3VBU= Subject key identifier: 6D:53:C3:D9:26:D2:C2:E3:03:9A:74:CD:07:98:3E:8E:58:68:6E:8D Authority key identifier: A8:6E:25:7C:32:D9:DB:B8:19:D5:17:D5:50:54:F7:67:D7:16:1D:2C Certificate issuer: /CN=a86e257c32d9dbb819d517d55054f767d7161d2c Certificate serial: 019B3E6CBF3712E27E41A8F88DE650DE57DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 01:01:12 +0000 Manifest this update: Sun 21 Dec 2025 01:01:12 +0000 Manifest next update: Mon 22 Dec 2025 01:01:12 +0000 Files and hashes: 1: Uebp0JIuP3hxZnZ2gSrGEbFlcC4.roa (hash: ioWjN07GA9Wdsf4jPQTmSsjSBf+lcaQHQxBmquaB1Tg=) 2: qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.crl (hash: 8rizgCEQcIrb+VEeiymWqXZiUzuPTuKjlkuYERxOkSw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft rsync://rpki.ripe.net/repository/DEFAULT/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:bf:37:12:e2:7e:41:a8:f8:8d:e6:50:de:57:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a86e257c32d9dbb819d517d55054f767d7161d2c Validity Not Before: Dec 21 01:01:12 2025 GMT Not After : Dec 22 01:01:12 2025 GMT Subject: CN=6d53c3d926d2c2e3039a74cd07983e8e58686e8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:61:06:f3:ce:cb:28:99:27:47:55:bf:7a:56: b1:a0:43:3b:26:9a:38:f5:9d:de:4b:80:32:1e:d7: e4:ae:47:0f:74:1d:0c:8c:e3:32:06:02:bb:72:3d: 52:66:52:47:ab:fd:12:7c:d9:7a:17:7d:65:71:cf: 2a:e0:fd:73:f8:0e:cc:5d:c5:8a:eb:f6:44:7a:0e: 1f:92:b0:fc:5a:b4:15:18:9c:43:32:7f:c5:6b:eb: c7:54:cf:cd:bd:20:22:63:01:c1:2f:99:73:4b:ef: fb:9a:62:7a:21:c5:60:b4:1a:ed:d5:b5:5d:47:15: 34:64:50:48:cd:9c:95:65:d5:1c:f8:ed:a4:ae:ef: 5d:95:38:30:0c:1e:cc:4c:52:13:aa:b7:42:8d:c8: 39:83:ac:89:7a:38:42:2e:cf:23:9b:3a:53:10:81: 29:d9:81:0f:dd:15:a5:a6:c6:1d:da:da:cd:cf:51: cd:0d:c3:4a:80:62:a2:3d:ea:f7:ec:bc:9e:65:ef: aa:06:f8:32:7e:40:33:e1:04:25:3f:23:e2:74:aa: 17:4a:1a:8e:1a:a7:bc:2e:88:90:2e:f1:6c:95:cd: 92:df:98:c6:d1:12:75:87:2f:fa:df:b9:2f:ed:91: 46:59:f6:7d:94:88:b4:70:f9:02:20:bb:10:b7:aa: b6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:53:C3:D9:26:D2:C2:E3:03:9A:74:CD:07:98:3E:8E:58:68:6E:8D X509v3 Authority Key Identifier: keyid:A8:6E:25:7C:32:D9:DB:B8:19:D5:17:D5:50:54:F7:67:D7:16:1D:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:c3:52:5a:d0:02:18:aa:57:eb:7b:0e:07:77:5c:5b:f0:f5: 0e:b4:41:d9:fe:c5:aa:43:b9:69:93:4f:4d:32:95:17:9a:8c: 97:6e:09:63:d9:9a:38:5c:c5:4e:9f:21:c9:eb:47:c0:ff:dd: 1f:46:fa:d5:57:50:5c:36:98:cd:be:f6:3b:8a:4e:e2:1c:1a: 55:0b:36:50:05:6a:1b:ef:96:fc:d3:6c:15:ce:8e:ee:9e:53: af:a9:4f:cb:6b:c5:75:a2:8a:c8:50:f5:0e:63:5a:d3:72:ae: 82:e5:53:f5:dc:3c:d6:7a:d7:46:5c:a7:52:f5:92:ce:71:0c: 25:20:d3:2c:52:cc:eb:f8:ca:30:3a:56:ed:33:b2:d6:c7:ce: 7d:27:6f:77:08:18:fd:d2:82:76:cb:ea:f9:0f:0d:b0:b2:d2: df:d6:68:9b:59:83:8f:5e:ce:30:4e:86:3e:de:11:a0:e1:1d: 72:9e:f8:dc:81:19:68:36:ed:34:05:e4:c5:d9:80:c3:76:5c: ed:1d:4b:10:4e:e5:96:f2:2c:a6:6b:ab:8e:bc:f9:0a:42:6e: aa:5f:52:b5:78:d9:48:22:db:c3:63:e8:25:08:0c:2c:16:bc: 6c:f6:cb:13:81:9d:5a:14:33:30:99:cc:3f:e1:75:c9:bb:62: 0d:5a:af:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bL83EuJ+Qaj4jeZQ3lfbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NmUyNTdjMzJkOWRiYjgxOWQ1MTdkNTUwNTRmNzY3ZDcx NjFkMmMwHhcNMjUxMjIxMDEwMTEyWhcNMjUxMjIyMDEwMTEyWjAzMTEwLwYDVQQD Eyg2ZDUzYzNkOTI2ZDJjMmUzMDM5YTc0Y2QwNzk4M2U4ZTU4Njg2ZThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmEG887LKJknR1W/elaxoEM7Jpo4 9Z3eS4AyHtfkrkcPdB0MjOMyBgK7cj1SZlJHq/0SfNl6F31lcc8q4P1z+A7MXcWK 6/ZEeg4fkrD8WrQVGJxDMn/Fa+vHVM/NvSAiYwHBL5lzS+/7mmJ6IcVgtBrt1bVd RxU0ZFBIzZyVZdUc+O2kru9dlTgwDB7MTFITqrdCjcg5g6yJejhCLs8jmzpTEIEp 2YEP3RWlpsYd2trNz1HNDcNKgGKiPer37LyeZe+qBvgyfkAz4QQlPyPidKoXShqO Gqe8LoiQLvFslc2S35jG0RJ1hy/637kv7ZFGWfZ9lIi0cPkCILsQt6q2bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG1Tw9km0sLjA5p0zQeYPo5YaG6NMB8GA1UdIwQY MBaAFKhuJXwy2du4GdUX1VBU92fXFh0sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUc0bGZETFoyN2daMVJmVlVGVDNaOWNXSFN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81OTZmZDUtNmU0NC00ODZlLTgyYzIt NDg3ZjAzNGM0NzI3LzEvcUc0bGZETFoyN2daMVJmVlVGVDNaOWNXSFN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC81OTZmZDUtNmU0NC00ODZlLTgyYzItNDg3ZjAzNGM0NzI3 LzEvcUc0bGZETFoyN2daMVJmVlVGVDNaOWNXSFN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp8NSWtAC GKpX63sOB3dcW/D1DrRB2f7FqkO5aZNPTTKVF5qMl24JY9maOFzFTp8hyetHwP/d H0b61VdQXDaYzb72O4pO4hwaVQs2UAVqG++W/NNsFc6O7p5Tr6lPy2vFdaKKyFD1 DmNa03KuguVT9dw81nrXRlynUvWSznEMJSDTLFLM6/jKMDpW7TOy1sfOfSdvdwgY /dKCdsvq+Q8NsLLS39Zom1mDj17OME6GPt4RoOEdcp743IEZaDbtNAXkxdmAw3Zc 7R1LEE7llvIspmurjrz5CkJuql9StXjZSCLbw2PoJQgMLBa8bPbLE4GdWhQzMJnM P+F1ybtiDVqvlg== -----END CERTIFICATE-----Generated at Sun Dec 21 08:59:56 2025 by rpki-client