This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft File: Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft (raw, json) Hash identifier: H+1jScrna0km2VQCeufO9Cpqp+a1+EaMfXVkfBp/004= Subject key identifier: FB:8D:E3:A6:5E:92:F1:3C:CD:F2:7F:F8:9B:25:F9:7A:F4:74:97:D2 Authority key identifier: 43:AC:C2:F2:BE:1A:36:B0:89:21:65:44:D2:3C:95:AC:E2:32:E1:43 Certificate issuer: /CN=43acc2f2be1a36b089216544d23c95ace232e143 Certificate serial: 019B631E636A0AC3DE37515A7D428B131857 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft Manifest number: 0AF0 Signing time: Sun 28 Dec 2025 04:01:34 +0000 Manifest this update: Sun 28 Dec 2025 04:01:34 +0000 Manifest next update: Mon 29 Dec 2025 04:01:34 +0000 Files and hashes: 1: KKb3movEaRK5uooL7CLlRng9BxI.roa (hash: QF2heUsD9ZCfGN4fGvk2RN46irWE6FgEYevma5ik6/E=) 2: Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl (hash: /0pcMEVpcLomXLSJLcIclqHdRWXZSC6SPazczrk2vLM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1e:63:6a:0a:c3:de:37:51:5a:7d:42:8b:13:18:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43acc2f2be1a36b089216544d23c95ace232e143 Validity Not Before: Dec 28 04:01:34 2025 GMT Not After : Dec 29 04:01:34 2025 GMT Subject: CN=fb8de3a65e92f13ccdf27ff89b25f97af47497d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e9:72:62:d4:1f:57:4d:94:3f:f9:1c:40:e1: fb:d5:56:5b:89:5a:8a:a4:69:22:20:db:75:e5:47: 43:bb:37:97:8d:b4:6e:4f:09:e2:b8:a9:7c:e6:68: e9:be:b6:af:e7:a9:33:4d:08:f8:aa:2a:d0:1e:81: 98:dd:a1:1d:3a:01:99:e4:1e:52:de:0a:c2:9d:ae: 37:40:97:79:f0:d8:fc:8c:b9:1c:5f:21:53:c4:21: 18:15:5b:27:a0:2b:e6:6e:d1:8b:28:58:9b:2b:c0: c8:de:c3:e4:44:46:45:01:7c:07:b3:8e:09:28:83: a5:74:9e:2e:6f:57:cf:a4:85:1c:e6:79:fb:34:c9: 49:c9:d7:28:fa:e6:45:21:8c:6b:fd:2e:f3:fe:3c: fb:27:a5:07:30:3b:6b:ef:3b:9e:80:74:8a:ce:42: c7:7a:38:54:bf:19:85:1f:bb:1c:0e:84:f1:c2:30: 92:78:6b:32:2b:ab:3c:8b:80:20:05:02:55:22:68: c8:59:64:bd:a9:e1:76:25:07:b3:a0:bc:cd:5c:43: 42:26:78:ec:44:ac:55:2b:26:05:6c:01:27:c5:98: 46:3a:23:bb:25:d8:2d:29:9a:61:9f:5a:da:de:7c: 47:d1:42:c8:8c:ee:21:1b:07:b6:c5:25:3e:18:f1: 39:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:8D:E3:A6:5E:92:F1:3C:CD:F2:7F:F8:9B:25:F9:7A:F4:74:97:D2 X509v3 Authority Key Identifier: keyid:43:AC:C2:F2:BE:1A:36:B0:89:21:65:44:D2:3C:95:AC:E2:32:E1:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:f2:a0:c6:c5:46:10:a3:61:f8:61:bd:11:3a:59:23:a0:11: 55:59:6f:28:f0:98:60:f8:e4:80:00:50:b6:d1:1d:32:12:42: 43:23:a4:71:7d:40:01:df:bc:6d:a0:54:a8:24:72:d9:23:95: bb:ca:dd:3d:2c:2d:a1:47:2c:68:4d:22:c9:25:ce:5b:ae:3b: 3e:33:be:64:74:80:aa:26:74:f5:03:7d:8d:79:56:25:75:f7: 88:a7:0a:09:d0:82:6d:0c:e4:e2:12:d8:ca:c9:cd:01:a6:7a: cd:4a:13:9d:2c:e3:6b:8f:29:28:cf:45:b3:1e:5f:3f:31:ca: 93:40:8d:56:02:84:bd:55:bc:8c:32:5e:52:bc:1e:be:e4:8a: 58:3d:21:a9:38:87:a2:17:80:b4:20:88:a8:50:69:60:f4:4f: 8e:b5:57:cb:7d:e3:64:d8:0b:94:a1:9a:71:7d:0d:e5:15:fd: 91:1d:95:be:6e:26:da:37:a3:9f:27:d0:86:84:fa:11:3f:a3: 44:5b:b1:35:d1:86:4f:82:1b:e9:ba:57:07:a7:94:9e:d4:ec: 7e:3b:1d:04:de:de:ec:aa:83:a8:98:6f:dc:ea:46:63:f7:2c: aa:7c:3d:a1:9f:68:65:e4:cb:1f:96:04:ed:83:19:8f:e6:1e: eb:de:24:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjHmNqCsPeN1FafUKLExhXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzYWNjMmYyYmUxYTM2YjA4OTIxNjU0NGQyM2M5NWFjZTIz MmUxNDMwHhcNMjUxMjI4MDQwMTM0WhcNMjUxMjI5MDQwMTM0WjAzMTEwLwYDVQQD EyhmYjhkZTNhNjVlOTJmMTNjY2RmMjdmZjg5YjI1Zjk3YWY0NzQ5N2QyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApulyYtQfV02UP/kcQOH71VZbiVqK pGkiINt15UdDuzeXjbRuTwniuKl85mjpvrav56kzTQj4qirQHoGY3aEdOgGZ5B5S 3grCna43QJd58Nj8jLkcXyFTxCEYFVsnoCvmbtGLKFibK8DI3sPkREZFAXwHs44J KIOldJ4ub1fPpIUc5nn7NMlJydco+uZFIYxr/S7z/jz7J6UHMDtr7zuegHSKzkLH ejhUvxmFH7scDoTxwjCSeGsyK6s8i4AgBQJVImjIWWS9qeF2JQezoLzNXENCJnjs RKxVKyYFbAEnxZhGOiO7JdgtKZphn1ra3nxH0ULIjO4hGwe2xSU+GPE52QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPuN46ZekvE8zfJ/+Jsl+Xr0dJfSMB8GA1UdIwQY MBaAFEOswvK+GjawiSFlRNI8laziMuFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTZ6QzhyNGFOckNKSVdWRTBqeVZyT0l5NFVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9lYWNkNDgtNzZlYS00ZWM3LWExNDEt ZjUyMDE2NThmYTE0LzEvUTZ6QzhyNGFOckNKSVdWRTBqeVZyT0l5NFVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9lYWNkNDgtNzZlYS00ZWM3LWExNDEtZjUyMDE2NThmYTE0 LzEvUTZ6QzhyNGFOckNKSVdWRTBqeVZyT0l5NFVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAePKgxsVG EKNh+GG9ETpZI6ARVVlvKPCYYPjkgABQttEdMhJCQyOkcX1AAd+8baBUqCRy2SOV u8rdPSwtoUcsaE0iySXOW647PjO+ZHSAqiZ09QN9jXlWJXX3iKcKCdCCbQzk4hLY ysnNAaZ6zUoTnSzja48pKM9Fsx5fPzHKk0CNVgKEvVW8jDJeUrwevuSKWD0hqTiH oheAtCCIqFBpYPRPjrVXy33jZNgLlKGacX0N5RX9kR2Vvm4m2jejnyfQhoT6ET+j RFuxNdGGT4Ib6bpXB6eUntTsfjsdBN7e7KqDqJhv3OpGY/csqnw9oZ9oZeTLH5YE 7YMZj+Ye694kmQ== -----END CERTIFICATE-----Generated at Sun Dec 28 10:51:14 2025 by rpki-client