This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft File: Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft (raw, json) Hash identifier: jeE1dLKFn9aUk7zzOB7z27+MRDiGLasHfsSfOt/4dsc= Subject key identifier: E1:76:0F:6E:90:55:E3:AF:D5:FB:ED:37:90:56:88:18:E7:97:F8:EC Authority key identifier: 43:1F:14:80:65:1F:1B:33:8B:E2:63:41:E2:DB:3A:0A:A3:B3:44:EB Certificate issuer: /CN=431f1480651f1b338be26341e2db3a0aa3b344eb Certificate serial: 019B50A9AEA59FC50B34A721BDE4A474E935 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft Manifest number: 0673 Signing time: Wed 24 Dec 2025 14:00:56 +0000 Manifest this update: Wed 24 Dec 2025 14:00:56 +0000 Manifest next update: Thu 25 Dec 2025 14:00:56 +0000 Files and hashes: 1: 3ZVx610sqQi3jR1aN5jm4CubkNI.roa (hash: ailedL7i/J97fdockeVNWVcnZPHz5O3htVX32ZMAjHU=) 2: Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl (hash: AhcDgfSQTOcH+3X2dJPaoQHtcxjrgEnX3E1KJi1bVJ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:a9:ae:a5:9f:c5:0b:34:a7:21:bd:e4:a4:74:e9:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=431f1480651f1b338be26341e2db3a0aa3b344eb Validity Not Before: Dec 24 14:00:56 2025 GMT Not After : Dec 25 14:00:56 2025 GMT Subject: CN=e1760f6e9055e3afd5fbed3790568818e797f8ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:68:76:8e:1a:36:54:b6:7c:e5:6c:3a:4c:52: f7:bc:c2:3f:69:bf:55:84:5d:25:e0:c3:c7:68:96: 5b:6c:f2:4c:06:28:5b:0d:82:fa:72:e1:b3:c6:50: 6c:b4:63:d2:ac:ba:a5:c2:ef:53:8b:fb:cc:33:fd: 6d:c4:6e:88:62:70:b5:72:06:b3:d2:ac:cb:6c:bf: cc:77:98:bf:14:ad:14:b2:eb:f4:ed:35:c0:33:bb: cf:63:4b:23:fb:5c:79:3f:1e:ef:38:6e:f6:83:cd: 97:f1:c3:9a:54:1c:60:2a:54:af:84:50:20:1e:28: 2f:4f:36:f3:78:91:e9:d6:0e:3a:10:f0:d9:93:ae: 4f:01:4d:7d:1b:ab:52:cf:98:25:58:2a:f2:cc:c5: 20:30:50:b1:d7:c7:c9:5f:59:40:6f:a9:a6:2a:36: 14:1e:77:8d:11:0d:d9:24:52:04:ee:37:92:e6:cb: 2e:01:30:e9:e6:02:71:13:46:5a:b8:20:f0:f5:7a: f5:f3:f2:1a:7d:e8:1f:9c:8f:4a:2d:84:01:3b:f0: ae:3c:70:35:2e:35:64:50:21:d3:ca:e9:f6:c9:ae: 7a:66:90:fb:c8:68:78:44:2a:55:b9:1f:88:ce:9c: 16:3d:cd:33:0b:c1:3b:c2:2f:5b:b0:14:2a:a6:ef: b4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:76:0F:6E:90:55:E3:AF:D5:FB:ED:37:90:56:88:18:E7:97:F8:EC X509v3 Authority Key Identifier: keyid:43:1F:14:80:65:1F:1B:33:8B:E2:63:41:E2:DB:3A:0A:A3:B3:44:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:d6:49:c9:f0:89:13:2a:7e:55:1a:7c:d9:01:ff:6c:05:a4: 22:8b:9b:ce:fe:82:6c:9d:e6:e3:72:49:a3:a8:50:1c:4e:d6: 7b:57:3b:42:df:b3:8e:7a:a6:ee:c8:6a:0a:87:96:40:6c:ce: de:5a:e0:90:4c:88:cc:9c:1e:17:dd:51:2c:f7:c6:b9:fd:a0: b6:97:d7:d2:46:55:2d:78:4e:fe:91:04:3e:64:87:f0:22:57: 6a:65:1b:d7:ec:4a:cb:fc:fc:51:a7:69:e6:f0:c0:d1:ec:b5: cf:3d:d9:b3:59:32:72:46:1b:95:70:86:8e:5b:7c:6f:e8:90: c8:da:9d:72:ee:33:7b:ad:32:e0:69:28:b3:a7:f2:26:d9:a8: d4:a9:44:b4:82:b5:08:f3:d6:17:0b:fd:10:d4:71:7c:50:a8: b6:f3:fc:d7:47:60:c2:27:8b:f5:30:e6:ec:69:c3:8a:ee:52: dc:3f:ae:66:01:ec:c7:65:2f:c4:fa:18:e3:c5:2c:fd:7f:22: bf:f5:ac:b5:d7:8a:a3:aa:af:df:41:b8:14:e8:86:21:ce:77: 54:4b:29:fa:82:90:ca:2e:b9:ad:95:0e:7c:29:c7:5f:39:62: e9:7f:0e:e4:18:42:ec:65:b6:30:7a:42:64:be:38:17:73:83: ea:ac:82:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQqa6ln8ULNKchveSkdOk1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMWYxNDgwNjUxZjFiMzM4YmUyNjM0MWUyZGIzYTBhYTNi MzQ0ZWIwHhcNMjUxMjI0MTQwMDU2WhcNMjUxMjI1MTQwMDU2WjAzMTEwLwYDVQQD EyhlMTc2MGY2ZTkwNTVlM2FmZDVmYmVkMzc5MDU2ODgxOGU3OTdmOGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmh2jho2VLZ85Ww6TFL3vMI/ab9V hF0l4MPHaJZbbPJMBihbDYL6cuGzxlBstGPSrLqlwu9Ti/vMM/1txG6IYnC1cgaz 0qzLbL/Md5i/FK0Usuv07TXAM7vPY0sj+1x5Px7vOG72g82X8cOaVBxgKlSvhFAg HigvTzbzeJHp1g46EPDZk65PAU19G6tSz5glWCryzMUgMFCx18fJX1lAb6mmKjYU HneNEQ3ZJFIE7jeS5ssuATDp5gJxE0ZauCDw9Xr18/IafegfnI9KLYQBO/CuPHA1 LjVkUCHTyun2ya56ZpD7yGh4RCpVuR+IzpwWPc0zC8E7wi9bsBQqpu+0EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOF2D26QVeOv1fvtN5BWiBjnl/jsMB8GA1UdIwQY MBaAFEMfFIBlHxszi+JjQeLbOgqjs0TrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXg4VWdHVWZHek9MNG1OQjR0czZDcU96Uk9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8wODUzN2MtMDI2Yy00NzZiLTgwNTYt NGUwMDA5NDMxNDlmLzEvUXg4VWdHVWZHek9MNG1OQjR0czZDcU96Uk9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8wODUzN2MtMDI2Yy00NzZiLTgwNTYtNGUwMDA5NDMxNDlm LzEvUXg4VWdHVWZHek9MNG1OQjR0czZDcU96Uk9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADdZJyfCJ Eyp+VRp82QH/bAWkIoubzv6CbJ3m43JJo6hQHE7We1c7Qt+zjnqm7shqCoeWQGzO 3lrgkEyIzJweF91RLPfGuf2gtpfX0kZVLXhO/pEEPmSH8CJXamUb1+xKy/z8Uadp 5vDA0ey1zz3Zs1kyckYblXCGjlt8b+iQyNqdcu4ze60y4Gkos6fyJtmo1KlEtIK1 CPPWFwv9ENRxfFCotvP810dgwieL9TDm7GnDiu5S3D+uZgHsx2UvxPoY48Us/X8i v/WstdeKo6qv30G4FOiGIc53VEsp+oKQyi65rZUOfCnHXzli6X8O5BhC7GW2MHpC ZL44F3OD6qyClQ== -----END CERTIFICATE-----Generated at Wed Dec 24 20:23:55 2025 by rpki-client