This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft File: Q0llhOXPObVodN6Nx3qjpv-eih4.mft (raw, json) Hash identifier: hYDaQ7J2vfUVNhnY7hH3SvB7p3Jx6wG68qNR15fM9Rc= Subject key identifier: B4:3C:CE:5A:53:64:25:50:A2:6B:1A:66:09:F8:8E:91:A0:E6:8E:57 Authority key identifier: 43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E Certificate issuer: /CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e Certificate serial: 019B3B6B257C0FE658FAC2725849758C8689 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft Manifest number: 1426 Signing time: Sat 20 Dec 2025 11:00:36 +0000 Manifest this update: Sat 20 Dec 2025 11:00:36 +0000 Manifest next update: Sun 21 Dec 2025 11:00:36 +0000 Files and hashes: 1: Q0llhOXPObVodN6Nx3qjpv-eih4.crl (hash: YDm+y2U8UtqZ+EX6WJN8BpGSqSY3LsWip4tcbF3NEiw=) 2: mF8H3prBEeFw8vv0-wYmE8_MtFk.roa (hash: k6q/MJjxt2Tjd0EikWZoheIRBqYjVQryjlZ0eCvLYRU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:25:7c:0f:e6:58:fa:c2:72:58:49:75:8c:86:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e Validity Not Before: Dec 20 11:00:36 2025 GMT Not After : Dec 21 11:00:36 2025 GMT Subject: CN=b43cce5a53642550a26b1a6609f88e91a0e68e57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ed:66:c1:00:5b:aa:a6:bb:d0:23:2d:d4:de: d9:5d:73:31:39:1b:e9:66:fe:6a:db:ed:3e:09:5f: 00:d6:81:b8:64:43:39:ce:e9:19:1a:e5:b8:c2:fb: 35:7c:5f:1b:18:54:79:df:4c:e3:04:72:ea:b6:d1: a2:0d:f8:67:4d:13:71:03:7b:65:55:be:b4:be:5a: 82:f3:db:68:7f:54:8f:10:1d:21:a9:50:f2:d0:46: 37:54:2f:20:8e:b2:50:3e:45:47:24:82:95:09:58: 93:ee:ee:d2:e5:7b:2a:8a:4f:68:ac:ba:28:7b:10: c9:84:c9:f9:25:2e:7e:0c:72:ce:ab:55:08:9c:bb: 8d:74:d4:5c:cb:72:cd:49:59:7d:5d:b1:de:d9:a1: 43:31:49:1e:07:97:44:ea:ec:19:d3:e7:51:b1:06: 31:c9:c4:67:d1:9f:41:2a:78:56:48:08:8c:14:41: e7:0e:67:55:b6:b8:a0:9f:dd:75:a8:8a:b0:c0:ef: 40:a8:e8:42:ed:ee:f7:be:84:d5:2b:4c:59:63:9b: 52:95:f1:49:7d:b5:da:79:44:a7:b4:06:3f:33:32: 37:ed:ec:59:aa:32:b3:99:f2:45:80:78:02:3f:14: 47:53:33:bb:27:ee:59:b0:3b:2c:0d:ba:76:35:d9: e2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:3C:CE:5A:53:64:25:50:A2:6B:1A:66:09:F8:8E:91:A0:E6:8E:57 X509v3 Authority Key Identifier: keyid:43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:94:dd:4e:93:11:94:8d:9d:37:53:04:ee:5b:57:01:9e:f8: 6e:e1:82:c4:62:2c:d8:95:61:75:c6:22:f0:a7:30:9b:d9:0e: 7f:24:a6:94:7f:e3:42:b9:1b:4a:c8:89:e1:2c:86:3e:ea:b1: bb:a3:9d:8f:6d:05:bb:e3:67:43:2a:c0:fc:3a:0b:89:0c:92: e5:d2:ca:d3:6d:74:2a:61:68:0e:1d:b2:ad:f2:37:0b:d5:ef: fc:d9:c7:07:81:87:52:8f:af:5f:59:73:2f:02:af:0c:b9:a5: c7:b2:b1:db:00:33:c8:ed:2f:62:42:01:27:60:61:fb:2a:1f: 49:d1:d6:e5:ab:f0:aa:44:9d:ec:69:6f:ec:ad:bd:f2:f6:1c: 11:fc:86:8a:2f:9d:ea:55:27:75:fa:6e:5b:e0:5e:74:39:a4: 83:38:7e:67:8f:ce:f6:f5:56:1a:46:04:42:ec:e8:a0:4e:ff: 00:24:13:39:7f:ff:56:93:ba:cd:8a:3e:34:dd:19:15:c3:ce: bf:ca:d2:7b:13:b1:be:e4:6c:fb:55:8b:33:6d:ad:13:71:84: 59:b6:d7:99:d2:56:b7:91:16:cf:7f:0a:41:69:cd:b8:49:c9: 46:27:6a:c2:73:fe:e9:0e:fc:74:27:ee:0b:e9:5f:94:d2:40: 39:94:d3:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ayV8D+ZY+sJyWEl1jIaJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzNDk2NTg0ZTVjZjM5YjU2ODc0ZGU4ZGM3N2FhM2E2ZmY5 ZThhMWUwHhcNMjUxMjIwMTEwMDM2WhcNMjUxMjIxMTEwMDM2WjAzMTEwLwYDVQQD EyhiNDNjY2U1YTUzNjQyNTUwYTI2YjFhNjYwOWY4OGU5MWEwZTY4ZTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+1mwQBbqqa70CMt1N7ZXXMxORvp Zv5q2+0+CV8A1oG4ZEM5zukZGuW4wvs1fF8bGFR530zjBHLqttGiDfhnTRNxA3tl Vb60vlqC89tof1SPEB0hqVDy0EY3VC8gjrJQPkVHJIKVCViT7u7S5Xsqik9orLoo exDJhMn5JS5+DHLOq1UInLuNdNRcy3LNSVl9XbHe2aFDMUkeB5dE6uwZ0+dRsQYx ycRn0Z9BKnhWSAiMFEHnDmdVtrign911qIqwwO9AqOhC7e73voTVK0xZY5tSlfFJ fbXaeUSntAY/MzI37exZqjKzmfJFgHgCPxRHUzO7J+5ZsDssDbp2NdniLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLQ8zlpTZCVQomsaZgn4jpGg5o5XMB8GA1UdIwQY MBaAFENJZYTlzzm1aHTejcd6o6b/nooeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTBsbGhPWFBPYlZvZE42TngzcWpwdi1laWg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9mYmMzYTktMDU2NC00YTJjLWFiMTEt ZTJjOTIyOGFhYzUzLzEvUTBsbGhPWFBPYlZvZE42TngzcWpwdi1laWg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9mYmMzYTktMDU2NC00YTJjLWFiMTEtZTJjOTIyOGFhYzUz LzEvUTBsbGhPWFBPYlZvZE42TngzcWpwdi1laWg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk5TdTpMR lI2dN1ME7ltXAZ74buGCxGIs2JVhdcYi8Kcwm9kOfySmlH/jQrkbSsiJ4SyGPuqx u6Odj20Fu+NnQyrA/DoLiQyS5dLK0210KmFoDh2yrfI3C9Xv/NnHB4GHUo+vX1lz LwKvDLmlx7Kx2wAzyO0vYkIBJ2Bh+yofSdHW5avwqkSd7Glv7K298vYcEfyGii+d 6lUndfpuW+BedDmkgzh+Z4/O9vVWGkYEQuzooE7/ACQTOX//VpO6zYo+NN0ZFcPO v8rSexOxvuRs+1WLM22tE3GEWbbXmdJWt5EWz38KQWnNuEnJRidqwnP+6Q78dCfu C+lflNJAOZTTKw== -----END CERTIFICATE-----Generated at Sat Dec 20 14:07:29 2025 by rpki-client