This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft File: 0xQt8vZwlAzPWksnoNDJh-zIhlY.mft (raw, json) Hash identifier: BIMKNHxtUQj0VW8Fnk3zuWN7lC6jk3IQnw9OtdIScxA= Subject key identifier: B0:84:3B:C4:7A:63:3D:69:B9:9C:44:8B:8A:C0:4C:3C:1A:52:DF:22 Authority key identifier: D3:14:2D:F2:F6:70:94:0C:CF:5A:4B:27:A0:D0:C9:87:EC:C8:86:56 Certificate issuer: /CN=d3142df2f670940ccf5a4b27a0d0c987ecc88656 Certificate serial: 019B337B3C2E9BDDA9719F805B17D4A0F227 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft Manifest number: 0494 Signing time: Thu 18 Dec 2025 22:01:12 +0000 Manifest this update: Thu 18 Dec 2025 22:01:12 +0000 Manifest next update: Fri 19 Dec 2025 22:01:12 +0000 Files and hashes: 1: 0xQt8vZwlAzPWksnoNDJh-zIhlY.crl (hash: /a2KzKnPDXyMD15rlNDPIWPD9f10+sNfvzkHmZ7GYDs=) 2: DxWkaJkNeo1GnfX8PTB6m_7NDo8.roa (hash: 1C13Qsc+uAlJmXy/kak788lVFXMyWIaA+AZiv7RcjGk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.crl rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:3c:2e:9b:dd:a9:71:9f:80:5b:17:d4:a0:f2:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3142df2f670940ccf5a4b27a0d0c987ecc88656 Validity Not Before: Dec 18 22:01:12 2025 GMT Not After : Dec 19 22:01:12 2025 GMT Subject: CN=b0843bc47a633d69b99c448b8ac04c3c1a52df22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a4:f6:8d:58:06:92:28:bb:5b:dc:5e:28:c2: 07:6b:b8:14:9d:b3:84:6d:61:53:3f:b3:7b:d6:aa: 3c:80:8b:6b:42:db:a7:bb:d5:8d:e1:72:57:d3:98: af:dc:b3:37:5b:81:f0:dc:5b:cd:d7:bc:f1:d4:bb: 52:b4:87:48:64:68:d5:0f:c9:c4:d4:a9:f5:10:3f: a4:05:ee:67:57:da:22:d5:0b:32:5a:70:fe:1f:02: 32:5a:8d:5d:17:24:ae:d3:0c:b2:1e:0b:c2:f7:f9: 33:2c:9b:54:bf:e4:32:66:41:02:4d:ea:06:a3:0c: 00:6f:f3:e7:5f:17:e4:85:24:b6:52:4b:c6:3c:d1: d2:28:b2:60:50:e5:63:ae:4c:7f:75:7b:47:e6:cc: cd:43:cd:8a:cb:ec:28:1b:f0:69:fa:05:f9:87:88: c4:f1:9e:28:2e:75:78:4c:df:16:ac:c8:fd:f9:1f: a5:04:c5:3d:63:33:93:6a:3f:a5:eb:c7:3b:c2:2e: 69:98:fb:d6:b7:f1:c7:51:2d:78:67:7b:da:d5:6e: a1:b0:bb:72:f6:cb:bc:6e:78:9c:36:b4:96:7f:d0: 00:a4:62:b4:5c:5c:31:50:5e:d5:77:ec:64:ad:c2: 32:ad:38:8f:1e:86:d8:34:e4:63:86:8c:69:c4:bb: 04:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:84:3B:C4:7A:63:3D:69:B9:9C:44:8B:8A:C0:4C:3C:1A:52:DF:22 X509v3 Authority Key Identifier: keyid:D3:14:2D:F2:F6:70:94:0C:CF:5A:4B:27:A0:D0:C9:87:EC:C8:86:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:50:a8:b3:6b:89:a8:ef:f7:fd:4a:4d:72:fd:28:54:0d:f9: 6b:01:17:47:67:61:cf:5d:b0:03:08:ce:f1:34:50:b7:db:58: db:92:7b:01:34:2e:11:16:5d:f2:84:f8:e8:d0:af:c9:65:84: 63:54:1b:17:c0:67:1c:24:b7:c6:1c:dd:c5:c3:57:b1:8e:1c: 60:bb:26:df:89:c7:ae:5e:1c:ed:49:8f:24:25:ac:4a:1a:d7: 04:49:95:24:95:8e:37:18:3a:c7:fc:b2:ec:0c:81:cd:d1:63: 72:71:a8:c1:dd:ce:e4:67:92:da:3b:0d:e0:18:a9:a3:13:0c: de:e0:96:11:58:44:04:74:12:43:86:aa:16:b4:d1:bd:f5:75: 64:e8:1a:a5:03:85:7b:3b:7a:ab:7b:28:c4:dd:95:2b:59:68: 90:3b:5a:72:59:3b:ba:8f:04:8d:09:8d:8c:78:44:57:a5:94: 4c:d9:86:67:5f:6c:c2:8a:3d:b7:1c:54:3b:a5:13:bc:f2:c5: e3:db:84:4a:0d:f4:bf:54:81:b2:01:ac:41:66:64:70:c8:5c: d8:dc:86:a9:9e:94:22:70:05:9c:a9:4d:ca:75:98:48:d6:1c: 2d:27:00:0b:b3:96:f5:83:e2:4a:8b:9f:4c:4c:23:98:09:b3: 89:f5:58:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszezwum92pcZ+AWxfUoPInMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzMTQyZGYyZjY3MDk0MGNjZjVhNGIyN2EwZDBjOTg3ZWNj ODg2NTYwHhcNMjUxMjE4MjIwMTEyWhcNMjUxMjE5MjIwMTEyWjAzMTEwLwYDVQQD EyhiMDg0M2JjNDdhNjMzZDY5Yjk5YzQ0OGI4YWMwNGMzYzFhNTJkZjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqT2jVgGkii7W9xeKMIHa7gUnbOE bWFTP7N71qo8gItrQtunu9WN4XJX05iv3LM3W4Hw3FvN17zx1LtStIdIZGjVD8nE 1Kn1ED+kBe5nV9oi1QsyWnD+HwIyWo1dFySu0wyyHgvC9/kzLJtUv+QyZkECTeoG owwAb/PnXxfkhSS2UkvGPNHSKLJgUOVjrkx/dXtH5szNQ82Ky+woG/Bp+gX5h4jE 8Z4oLnV4TN8WrMj9+R+lBMU9YzOTaj+l68c7wi5pmPvWt/HHUS14Z3va1W6hsLty 9su8bnicNrSWf9AApGK0XFwxUF7Vd+xkrcIyrTiPHobYNORjhoxpxLsEuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLCEO8R6Yz1puZxEi4rATDwaUt8iMB8GA1UdIwQY MBaAFNMULfL2cJQMz1pLJ6DQyYfsyIZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHhRdDh2WndsQXpQV2tzbm9OREpoLXpJaGxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9lYzM5YmUtZTIyNy00YTJkLWI0YjIt NjMyY2FlZWY0NTg0LzEvMHhRdDh2WndsQXpQV2tzbm9OREpoLXpJaGxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9lYzM5YmUtZTIyNy00YTJkLWI0YjItNjMyY2FlZWY0NTg0 LzEvMHhRdDh2WndsQXpQV2tzbm9OREpoLXpJaGxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAolCos2uJ qO/3/UpNcv0oVA35awEXR2dhz12wAwjO8TRQt9tY25J7ATQuERZd8oT46NCvyWWE Y1QbF8BnHCS3xhzdxcNXsY4cYLsm34nHrl4c7UmPJCWsShrXBEmVJJWONxg6x/yy 7AyBzdFjcnGowd3O5GeS2jsN4BipoxMM3uCWEVhEBHQSQ4aqFrTRvfV1ZOgapQOF ezt6q3soxN2VK1lokDtaclk7uo8EjQmNjHhEV6WUTNmGZ19swoo9txxUO6UTvPLF 49uESg30v1SBsgGsQWZkcMhc2NyGqZ6UInAFnKlNynWYSNYcLScAC7OW9YPiSouf TEwjmAmzifVYEA== -----END CERTIFICATE-----Generated at Fri Dec 19 00:51:32 2025 by rpki-client