This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft File: qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft (raw, json) Hash identifier: z/Hl6W7QhYRaQ+PdhZ3FaiafSmSDeueAWH9ARRIng0E= Subject key identifier: A2:23:23:18:3C:32:F6:9C:A9:54:77:17:7F:4F:D4:21:52:AB:8A:9F Authority key identifier: A8:00:BA:63:9E:65:DB:DC:C6:90:F5:8A:5A:74:06:41:B4:FF:88:D4 Certificate issuer: /CN=a800ba639e65dbdcc690f58a5a740641b4ff88d4 Certificate serial: 019B31FA772B64CEF9FB8BE43759F330383B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qAC6Y55l29zGkPWKWnQGQbT_iNQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft Manifest number: 1744 Signing time: Thu 18 Dec 2025 15:00:56 +0000 Manifest this update: Thu 18 Dec 2025 15:00:56 +0000 Manifest next update: Fri 19 Dec 2025 15:00:56 +0000 Files and hashes: 1: nb55NPYG5futkVsWZo-wVL_ldGY.roa (hash: cu4c/kzKRZLMIS781v1I0bcKBcOwOHj6UQu9CoqV18Q=) 2: pNaiOm8VSjwm_Pu9LpbyEzU38Qk.roa (hash: aJUnjDaTqib7CSeeX7ryyzVGByoqlihHOgf+TQ3wW+k=) 3: qAC6Y55l29zGkPWKWnQGQbT_iNQ.crl (hash: ty+ihIPqFggXvU7VM7L1FyeQo68ZgZOIaam6QK+8BS0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft rsync://rpki.ripe.net/repository/DEFAULT/qAC6Y55l29zGkPWKWnQGQbT_iNQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 15:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:77:2b:64:ce:f9:fb:8b:e4:37:59:f3:30:38:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a800ba639e65dbdcc690f58a5a740641b4ff88d4 Validity Not Before: Dec 18 15:00:56 2025 GMT Not After : Dec 19 15:00:56 2025 GMT Subject: CN=a22323183c32f69ca95477177f4fd42152ab8a9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:fb:56:cd:cc:1b:28:b8:1f:ed:be:9b:c2:79: 25:fb:48:b0:e3:31:55:c8:d0:0a:b0:66:fd:82:c2: ef:1d:e5:e7:b3:97:5e:4f:b5:35:dc:60:d2:c9:a4: e4:b7:35:c3:0e:52:3c:76:13:fc:c6:82:5a:a6:15: 4b:0a:2d:fa:a1:05:eb:b3:84:e4:ac:66:3a:d0:d4: f0:57:94:03:cc:5c:9c:12:e0:21:d2:09:a4:c5:7e: 31:ea:c7:04:c0:9a:0a:21:16:62:50:50:b5:96:74: 00:45:82:45:18:a9:b6:76:50:a9:09:9c:2b:5b:0e: 74:0b:0e:81:86:9b:e8:74:b7:36:d9:55:1c:15:aa: b0:d4:65:6b:e6:33:55:f2:53:32:2e:61:dd:65:cb: f8:71:fb:64:45:e8:ec:1b:0b:fe:f9:c4:cf:87:5d: 0a:73:fc:91:f7:81:9a:30:34:04:db:9a:24:53:97: 1f:ce:f0:d1:ab:78:ac:1e:5d:77:74:9e:f3:41:54: 1b:b6:02:f4:ec:50:9b:67:d6:07:53:15:92:d1:f5: d7:c7:38:8b:d8:30:9c:df:21:34:a9:36:4b:b8:2c: 49:f6:ec:9b:7e:17:2b:7b:e4:78:4e:a1:2d:d9:6c: ec:f8:de:69:4f:1c:71:5e:50:9c:ff:b7:ba:4b:a2: 84:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:23:23:18:3C:32:F6:9C:A9:54:77:17:7F:4F:D4:21:52:AB:8A:9F X509v3 Authority Key Identifier: keyid:A8:00:BA:63:9E:65:DB:DC:C6:90:F5:8A:5A:74:06:41:B4:FF:88:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAC6Y55l29zGkPWKWnQGQbT_iNQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:0b:cc:94:cd:cc:4a:66:d0:3b:a4:42:1e:9d:d1:87:33:75: 54:39:e0:58:4f:7d:9b:4a:d4:28:a7:bd:6a:df:39:c6:22:30: 2a:ea:95:cf:42:4b:bd:61:a1:10:8d:34:76:d4:62:31:ae:3d: 0f:a1:61:8b:2c:cf:16:75:ae:c7:02:7c:c3:29:ce:17:67:52: d8:37:b1:da:af:69:1e:26:78:0c:8f:35:24:49:3e:c5:ce:b5: d4:03:7f:1d:39:a4:c4:39:0d:b9:d5:84:82:98:70:30:bd:92: a0:9c:20:2e:53:73:9d:dc:84:82:b6:bd:34:06:ec:2b:15:c3: a4:f9:5d:4b:1b:85:f3:31:04:e6:d9:45:b6:92:84:a4:45:16: 2d:c8:d1:d6:e6:35:7f:7a:5f:0d:4d:69:6e:01:31:b0:22:6a: 59:62:32:a7:17:d0:53:ca:66:67:4a:90:ae:7b:c3:75:b7:a1: e5:d3:ef:c7:df:50:f3:98:f5:9c:a9:3a:51:34:f5:47:5f:f9: 2c:de:b3:82:c4:dc:cc:d1:de:82:6f:21:fa:12:fa:43:76:a0: ca:aa:32:1a:d1:6e:54:ab:e9:18:dd:6e:c5:86:43:da:ac:ff: c1:8a:39:dd:8d:fd:6e:be:ff:39:57:81:05:38:61:bc:b7:4c: f4:23:a2:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsx+ncrZM75+4vkN1nzMDg7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4MDBiYTYzOWU2NWRiZGNjNjkwZjU4YTVhNzQwNjQxYjRm Zjg4ZDQwHhcNMjUxMjE4MTUwMDU2WhcNMjUxMjE5MTUwMDU2WjAzMTEwLwYDVQQD EyhhMjIzMjMxODNjMzJmNjljYTk1NDc3MTc3ZjRmZDQyMTUyYWI4YTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6/tWzcwbKLgf7b6bwnkl+0iw4zFV yNAKsGb9gsLvHeXns5deT7U13GDSyaTktzXDDlI8dhP8xoJaphVLCi36oQXrs4Tk rGY60NTwV5QDzFycEuAh0gmkxX4x6scEwJoKIRZiUFC1lnQARYJFGKm2dlCpCZwr Ww50Cw6BhpvodLc22VUcFaqw1GVr5jNV8lMyLmHdZcv4cftkRejsGwv++cTPh10K c/yR94GaMDQE25okU5cfzvDRq3isHl13dJ7zQVQbtgL07FCbZ9YHUxWS0fXXxziL 2DCc3yE0qTZLuCxJ9uybfhcre+R4TqEt2Wzs+N5pTxxxXlCc/7e6S6KEFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKIjIxg8MvacqVR3F39P1CFSq4qfMB8GA1UdIwQY MBaAFKgAumOeZdvcxpD1ilp0BkG0/4jUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUFDNlk1NWwyOXpHa1BXS1duUUdRYlRfaU5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9iNjM1MTctM2YxZS00NTFlLTg4NTAt OGRiMGVmYjU2MjBhLzEvcUFDNlk1NWwyOXpHa1BXS1duUUdRYlRfaU5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9iNjM1MTctM2YxZS00NTFlLTg4NTAtOGRiMGVmYjU2MjBh LzEvcUFDNlk1NWwyOXpHa1BXS1duUUdRYlRfaU5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAngvMlM3M SmbQO6RCHp3RhzN1VDngWE99m0rUKKe9at85xiIwKuqVz0JLvWGhEI00dtRiMa49 D6FhiyzPFnWuxwJ8wynOF2dS2Dex2q9pHiZ4DI81JEk+xc611AN/HTmkxDkNudWE gphwML2SoJwgLlNzndyEgra9NAbsKxXDpPldSxuF8zEE5tlFtpKEpEUWLcjR1uY1 f3pfDU1pbgExsCJqWWIypxfQU8pmZ0qQrnvDdbeh5dPvx99Q85j1nKk6UTT1R1/5 LN6zgsTczNHegm8h+hL6Q3agyqoyGtFuVKvpGN1uxYZD2qz/wYo53Y39br7/OVeB BThhvLdM9COiaw== -----END CERTIFICATE-----Generated at Fri Dec 19 01:26:41 2025 by rpki-client