This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft File: Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft (raw, json) Hash identifier: GveI7fCPjuQpRpPvB86NENatFj7ljW9+p6FaeTbX4gI= Subject key identifier: AD:71:F5:0E:75:5B:09:3B:FA:87:E0:B8:5A:B3:F8:53:52:25:C3:41 Authority key identifier: 43:FA:D7:95:48:AF:C5:C8:3E:59:BB:FE:38:8C:64:49:2C:B5:50:13 Certificate issuer: /CN=43fad79548afc5c83e59bbfe388c64492cb55013 Certificate serial: 019B3BD9170678F719DD19C7514D5DA64A74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 13:00:41 +0000 Manifest this update: Sat 20 Dec 2025 13:00:41 +0000 Manifest next update: Sun 21 Dec 2025 13:00:41 +0000 Files and hashes: 1: 2cU_Yyosgv72VzuSZ-lEPM4bEA0.roa (hash: rOVsbZQ+258/yYvznSDjCoRvmCP4xDAfS/95mmV0VJ8=) 2: KhZxCrijEh6I5tUjdOiH08SDAlU.roa (hash: d7J/i0PvapKbq1ZXNQfO7tB9y3eyZqeGbgRInR/S46w=) 3: Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl (hash: 29gaKx5ODUXH09yHdKIePTGCtevhZuA+K1+CBGSHUSg=) 4: sG_rr6I8pDA92eA5vBpgqLHPlcc.roa (hash: VBbgkzxs+YQuemItqSI61ff6E1GX47Q0q9j9ZQDjYJM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:17:06:78:f7:19:dd:19:c7:51:4d:5d:a6:4a:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43fad79548afc5c83e59bbfe388c64492cb55013 Validity Not Before: Dec 20 13:00:41 2025 GMT Not After : Dec 21 13:00:41 2025 GMT Subject: CN=ad71f50e755b093bfa87e0b85ab3f8535225c341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b0:c6:31:00:58:df:4c:d3:08:04:10:f3:e3: 79:32:d3:7a:30:48:cb:f6:f3:fe:25:c7:8d:22:6b: 56:1b:d2:ae:f4:3c:18:6f:3f:14:25:5e:92:51:b6: fb:bc:b7:ba:0f:52:58:28:2c:14:cc:9c:0a:80:7c: f1:d2:69:fc:f6:25:e3:23:59:18:5d:08:be:fc:35: a5:a7:94:80:ca:89:0f:30:ef:5b:7b:f0:49:10:17: f9:1e:5f:92:81:ad:79:ae:49:40:28:08:77:6e:2f: 41:84:e5:9e:5d:36:c5:e8:68:1b:fe:5a:8f:06:1c: f9:01:1b:11:e2:10:e5:d2:8c:e6:1a:92:0b:15:a1: 88:04:c3:eb:42:2d:dc:71:51:9b:32:eb:7f:b2:1f: 51:62:c9:31:44:24:71:0b:94:35:72:5a:38:d7:bd: 14:61:0d:b7:0b:12:c9:be:d7:67:04:fe:d4:41:fa: ca:ff:64:87:14:46:96:c5:2c:9c:b9:7f:bd:d8:e6: a7:fa:65:31:c9:8b:c6:8e:1c:5b:f3:8d:ad:27:ba: d3:b0:45:4e:b8:fa:7f:0e:47:17:b2:f8:8e:57:71: 4a:05:68:72:8e:0a:70:ea:bc:26:2b:e2:d8:db:fe: 7e:2f:3b:32:6b:17:c3:7c:89:83:a6:4f:74:e1:bf: 5f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:71:F5:0E:75:5B:09:3B:FA:87:E0:B8:5A:B3:F8:53:52:25:C3:41 X509v3 Authority Key Identifier: keyid:43:FA:D7:95:48:AF:C5:C8:3E:59:BB:FE:38:8C:64:49:2C:B5:50:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:6f:5a:95:64:73:94:03:f4:fe:3b:ed:9a:d6:d6:ef:9f:28: be:54:bc:e7:c6:3e:a8:d7:c8:93:09:f7:e4:fe:be:5a:47:d5: 1e:75:76:dd:67:a3:cf:d3:ef:90:23:ef:47:fe:a9:df:79:62: 45:74:5b:a1:fa:84:02:48:6c:e2:5f:b0:d3:19:cb:be:da:e2: 26:e5:33:32:9f:75:43:45:28:ef:cd:c3:c7:85:1d:07:37:fe: 36:7a:cb:76:0c:ba:18:fe:72:bb:1b:0d:56:58:9a:5a:c8:75: 60:bd:05:4f:f5:89:e0:fb:46:e9:ff:f1:be:e4:2e:a6:b4:fb: ed:04:91:1f:0b:eb:7f:64:a6:b9:47:2a:f7:c8:0c:31:d8:b0: 4c:cc:09:1c:c8:eb:90:14:83:1a:be:f4:61:f4:fe:1a:b3:93: 61:76:c9:95:56:24:d7:f1:8c:12:48:16:30:0c:03:85:b7:95: 3e:c3:b0:91:9c:19:f0:52:b1:87:62:16:bf:be:e1:db:e4:be: 3f:37:12:24:51:d2:47:85:b7:3c:55:df:7e:c3:7b:46:37:56: 18:f1:7a:52:2f:1c:60:19:7a:57:8f:72:f5:ba:50:02:7c:5d: 8b:a8:c8:36:1b:40:3e:63:7f:0f:5a:5a:37:09:c6:50:be:85: 89:91:99:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72RcGePcZ3RnHUU1dpkp0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZmFkNzk1NDhhZmM1YzgzZTU5YmJmZTM4OGM2NDQ5MmNi NTUwMTMwHhcNMjUxMjIwMTMwMDQxWhcNMjUxMjIxMTMwMDQxWjAzMTEwLwYDVQQD EyhhZDcxZjUwZTc1NWIwOTNiZmE4N2UwYjg1YWIzZjg1MzUyMjVjMzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybDGMQBY30zTCAQQ8+N5MtN6MEjL 9vP+JceNImtWG9Ku9DwYbz8UJV6SUbb7vLe6D1JYKCwUzJwKgHzx0mn89iXjI1kY XQi+/DWlp5SAyokPMO9be/BJEBf5Hl+Sga15rklAKAh3bi9BhOWeXTbF6Ggb/lqP Bhz5ARsR4hDl0ozmGpILFaGIBMPrQi3ccVGbMut/sh9RYskxRCRxC5Q1clo4170U YQ23CxLJvtdnBP7UQfrK/2SHFEaWxSycuX+92Oan+mUxyYvGjhxb842tJ7rTsEVO uPp/DkcXsviOV3FKBWhyjgpw6rwmK+LY2/5+LzsyaxfDfImDpk904b9fJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK1x9Q51Wwk7+ofguFqz+FNSJcNBMB8GA1UdIwQY MBaAFEP615VIr8XIPlm7/jiMZEkstVATMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUV9yWGxVaXZ4Y2ctV2J2LU9JeGtTU3kxVUJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8yY2YyYzEtMTk2Mi00YjcwLTllNWIt ZmU4NTVkYWJiNzVlLzEvUV9yWGxVaXZ4Y2ctV2J2LU9JeGtTU3kxVUJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8yY2YyYzEtMTk2Mi00YjcwLTllNWItZmU4NTVkYWJiNzVl LzEvUV9yWGxVaXZ4Y2ctV2J2LU9JeGtTU3kxVUJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVW9alWRz lAP0/jvtmtbW758ovlS858Y+qNfIkwn35P6+WkfVHnV23Wejz9PvkCPvR/6p33li RXRbofqEAkhs4l+w0xnLvtriJuUzMp91Q0Uo783Dx4UdBzf+NnrLdgy6GP5yuxsN VliaWsh1YL0FT/WJ4PtG6f/xvuQuprT77QSRHwvrf2SmuUcq98gMMdiwTMwJHMjr kBSDGr70YfT+GrOTYXbJlVYk1/GMEkgWMAwDhbeVPsOwkZwZ8FKxh2IWv77h2+S+ PzcSJFHSR4W3PFXffsN7RjdWGPF6Ui8cYBl6V49y9bpQAnxdi6jINhtAPmN/D1pa NwnGUL6FiZGZPA== -----END CERTIFICATE-----Generated at Sat Dec 20 16:02:53 2025 by rpki-client