This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
File: Q8FllZZq-wus8deTfyRdagUiIaM.mft (raw, json)
Hash identifier: 2nJbj08T9QSHbbA+C6qdLF/YYddGfE5plwEVw3t0QcM=
Subject key identifier: 78:1D:F4:9C:24:59:98:42:C0:29:12:94:84:3F:10:21:D0:8F:88:17
Authority key identifier: 43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3
Certificate issuer: /CN=43c16595966afb0bacf1d7937f245d6a052221a3
Certificate serial: 019B378E8FD72476BBE2E854F1F91681979A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
Manifest number: 1788
Signing time: Fri 19 Dec 2025 17:00:48 +0000
Manifest this update: Fri 19 Dec 2025 17:00:48 +0000
Manifest next update: Sat 20 Dec 2025 17:00:48 +0000
Files and hashes: 1: 52v68hN6UT4PPJjjqq1uuE_KUSs.roa (hash: /ZapQrg7UEXSt0NcWwZ+kj+0zgSiaiRBd7g+qhPDHBg=)
2: 8S9ibO6esCTeLY2sD14WhmMZOvI.roa (hash: bmTNDF41Sq+c7Se/EWf8YA8iGIHNg20TI2zfC/lGrO0=)
3: Q8FllZZq-wus8deTfyRdagUiIaM.crl (hash: X2ci4s+zHEiUKU4ydi81ZOOXl8IQ2Jbz2vSucOTWF10=)
4: WvCj9VbsFj7fqJOx6tk2wit_WpE.roa (hash: /cLe2CDT0v+6sDR4E14KbBpNPCZZWPI/9CgtItdZn+0=)
5: a5Civ4TQY8vU2rue9PuRjdGc5Mc.roa (hash: QP4yk7Jx/AL7wrs9Y5ybfTghTEkjk/U3Nsn5OFbBsqk=)
6: gqvKWohVcj0Z7jlOtSMQwdCwp3g.roa (hash: hvyUYeos7vf6+TZ2NgvLPFstgzyNO3xqXZO7/gB/Dow=)
7: i6WUIDE1FurqyNNZ1EYEHsIVqvc.roa (hash: n8PwD1+DrWnTVld/M9MqGCrSY8HTEouEds18pHnIKJc=)
8: wcgpIPyLYXjF-mxVtLsqKcIhJUw.roa (hash: fPxLKa63iRiB09wOZmOOW+AEuYUUjId9x8Px9btJcDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:37:8e:8f:d7:24:76:bb:e2:e8:54:f1:f9:16:81:97:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43c16595966afb0bacf1d7937f245d6a052221a3
Validity
Not Before: Dec 19 17:00:48 2025 GMT
Not After : Dec 20 17:00:48 2025 GMT
Subject: CN=781df49c24599842c0291294843f1021d08f8817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0c:e4:b6:9f:c3:b8:bb:f8:2a:c2:af:dd:eb:
82:a2:86:38:64:7d:c3:a0:8d:28:22:1c:7d:50:49:
ad:29:6f:70:a4:c6:69:38:9a:ea:85:91:95:77:9f:
5c:36:a7:8e:89:89:70:99:3f:36:91:21:4e:fc:8b:
ed:69:ba:74:c0:d4:8c:5d:24:1e:6d:c6:28:c8:18:
d4:6f:41:eb:91:5a:30:59:0e:78:03:02:df:98:47:
e7:18:3f:a9:5b:bb:99:f4:8c:b8:7e:fb:99:fd:fd:
11:6a:b6:b2:e3:a8:87:7d:ad:86:f2:76:1c:ac:a4:
c0:6a:23:83:b1:9b:17:88:e2:2b:7a:7a:b8:4a:36:
ad:93:f3:1c:93:45:97:8c:45:47:da:48:f8:78:e7:
a9:72:57:0e:18:fe:e8:e5:80:b1:e3:8b:20:1f:03:
26:3c:74:a5:15:6a:7a:f7:d0:47:92:f0:11:bb:15:
86:ed:e5:46:25:06:e9:18:55:c4:66:92:00:bc:f6:
0b:db:e5:b5:10:14:a6:7e:31:ac:49:1c:94:d3:de:
7f:ad:cf:fa:21:6d:23:69:cb:d3:20:42:64:ae:b6:
2a:5f:bb:02:02:30:35:4b:c5:7f:5e:d6:17:04:f2:
4b:3b:87:86:cc:79:e5:0c:55:3d:09:7c:b2:7a:86:
0d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:1D:F4:9C:24:59:98:42:C0:29:12:94:84:3F:10:21:D0:8F:88:17
X509v3 Authority Key Identifier:
keyid:43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:d9:41:f0:a7:e5:7a:b0:a3:63:89:71:3a:6a:24:d0:a3:a6:
5f:c2:b1:fd:7a:90:1e:0b:f2:db:1c:c3:71:60:08:38:50:51:
af:26:39:70:67:c7:be:34:ba:ac:4a:a4:f7:e0:59:44:e5:7c:
31:2b:07:81:9e:96:8c:cf:50:81:1b:16:f0:2f:15:09:a3:46:
80:38:43:92:4e:29:d1:9d:fb:27:d5:5b:28:4a:44:1d:24:94:
6a:43:6e:ee:7d:00:e6:66:55:0f:b2:47:47:f5:4e:94:f5:8a:
15:6c:dc:b0:7b:1f:71:21:a3:c8:e8:bb:f0:4f:94:20:71:7d:
50:82:ad:ac:f2:42:cd:d9:f4:58:c8:73:6c:f7:ac:df:90:29:
62:d3:5d:f6:c8:ef:89:b5:42:85:ed:a4:44:95:1c:76:1a:62:
22:69:88:8a:dd:94:29:72:02:92:20:25:6b:b1:3c:56:40:53:
51:e8:6e:fb:76:36:f9:35:e8:bb:2f:3d:d3:1c:bf:0e:b3:31:
54:1b:f1:52:73:13:36:69:4b:f5:40:62:52:96:1a:ed:13:af:
1e:7b:98:34:54:30:44:27:fb:ce:80:80:31:6f:9f:3c:48:5c:
f5:25:8f:14:3d:1c:b2:66:6d:bc:c2:65:62:53:4e:6a:16:c8:
1b:93:4a:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs3jo/XJHa74uhU8fkWgZeaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYzE2NTk1OTY2YWZiMGJhY2YxZDc5MzdmMjQ1ZDZhMDUy
MjIxYTMwHhcNMjUxMjE5MTcwMDQ4WhcNMjUxMjIwMTcwMDQ4WjAzMTEwLwYDVQQD
Eyg3ODFkZjQ5YzI0NTk5ODQyYzAyOTEyOTQ4NDNmMTAyMWQwOGY4ODE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wzktp/DuLv4KsKv3euCooY4ZH3D
oI0oIhx9UEmtKW9wpMZpOJrqhZGVd59cNqeOiYlwmT82kSFO/Ivtabp0wNSMXSQe
bcYoyBjUb0HrkVowWQ54AwLfmEfnGD+pW7uZ9Iy4fvuZ/f0Raray46iHfa2G8nYc
rKTAaiODsZsXiOIrenq4Sjatk/Mck0WXjEVH2kj4eOepclcOGP7o5YCx44sgHwMm
PHSlFWp699BHkvARuxWG7eVGJQbpGFXEZpIAvPYL2+W1EBSmfjGsSRyU095/rc/6
IW0jacvTIEJkrrYqX7sCAjA1S8V/XtYXBPJLO4eGzHnlDFU9CXyyeoYNWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHgd9JwkWZhCwCkSlIQ/ECHQj4gXMB8GA1UdIwQY
MBaAFEPBZZWWavsLrPHXk38kXWoFIiGjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUThGbGxaWnEtd3VzOGRlVGZ5UmRhZ1VpSWFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9kOTI5MTktOTYyYi00NDhkLTk4ZGIt
NTk5MGVhNThlMDMwLzEvUThGbGxaWnEtd3VzOGRlVGZ5UmRhZ1VpSWFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9kOTI5MTktOTYyYi00NDhkLTk4ZGItNTk5MGVhNThlMDMw
LzEvUThGbGxaWnEtd3VzOGRlVGZ5UmRhZ1VpSWFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAydlB8Kfl
erCjY4lxOmok0KOmX8Kx/XqQHgvy2xzDcWAIOFBRryY5cGfHvjS6rEqk9+BZROV8
MSsHgZ6WjM9QgRsW8C8VCaNGgDhDkk4p0Z37J9VbKEpEHSSUakNu7n0A5mZVD7JH
R/VOlPWKFWzcsHsfcSGjyOi78E+UIHF9UIKtrPJCzdn0WMhzbPes35ApYtNd9sjv
ibVChe2kRJUcdhpiImmIit2UKXICkiAla7E8VkBTUehu+3Y2+TXouy890xy/DrMx
VBvxUnMTNmlL9UBiUpYa7ROvHnuYNFQwRCf7zoCAMW+fPEhc9SWPFD0csmZtvMJl
YlNOahbIG5NKCw==
-----END CERTIFICATE-----
Generated at Sat Dec 20 03:00:44 2025 by rpki-client