This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d7d583-2d4a-4abd-923e-23a58f3d61d7/1/WQu-q0iEKkGvrEkh0TV4OLb-bIc.mft File: WQu-q0iEKkGvrEkh0TV4OLb-bIc.mft (raw, json) Hash identifier: WKDrH0C/yyEC3a4X/m8csUtqmIm/7ETtynwzUF9mTtM= Subject key identifier: 6F:1C:BF:76:0F:1D:D6:0D:52:6E:7B:96:07:C5:BC:BC:98:43:BC:1E Authority key identifier: 59:0B:BE:AB:48:84:2A:41:AF:AC:49:21:D1:35:78:38:B6:FE:6C:87 Certificate issuer: /CN=590bbeab48842a41afac4921d1357838b6fe6c87 Certificate serial: 019B5977081E99B9C0F590AF4172F0BDBCF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQu-q0iEKkGvrEkh0TV4OLb-bIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d7d583-2d4a-4abd-923e-23a58f3d61d7/1/WQu-q0iEKkGvrEkh0TV4OLb-bIc.mft Manifest number: 8C Signing time: Fri 26 Dec 2025 07:02:11 +0000 Manifest this update: Fri 26 Dec 2025 07:02:11 +0000 Manifest next update: Sat 27 Dec 2025 07:02:11 +0000 Files and hashes: 1: TFbaF5iKEXoV94om-cXBI8K88Gw.roa (hash: Rapi4XUSpgRm7jm1pFAQz6RjmBJRmhTABSFDVzeD42Y=) 2: WQu-q0iEKkGvrEkh0TV4OLb-bIc.crl (hash: +mF0C34PhaDKrCrloAO0UaqG8958IQWKI1781oiBr9Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d7d583-2d4a-4abd-923e-23a58f3d61d7/1/WQu-q0iEKkGvrEkh0TV4OLb-bIc.crl rsync://rpki.ripe.net/repository/DEFAULT/11/d7d583-2d4a-4abd-923e-23a58f3d61d7/1/WQu-q0iEKkGvrEkh0TV4OLb-bIc.mft rsync://rpki.ripe.net/repository/DEFAULT/WQu-q0iEKkGvrEkh0TV4OLb-bIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:08:1e:99:b9:c0:f5:90:af:41:72:f0:bd:bc:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590bbeab48842a41afac4921d1357838b6fe6c87 Validity Not Before: Dec 26 07:02:11 2025 GMT Not After : Dec 27 07:02:11 2025 GMT Subject: CN=6f1cbf760f1dd60d526e7b9607c5bcbc9843bc1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:75:7e:3f:6f:a5:39:04:65:5a:8f:a0:9d:01: 72:48:7a:ae:35:7d:87:4b:a5:e1:1c:bf:45:32:31: de:b4:8c:23:4e:0f:85:68:25:1e:41:5c:55:e0:54: 6e:4d:47:a2:4b:74:1c:c6:ec:75:59:a7:c9:42:55: 77:89:94:15:3c:94:b0:62:ce:df:3a:ab:8d:03:a3: e0:17:eb:6f:09:60:38:2e:7e:85:17:65:16:53:d4: 45:03:3f:bd:bc:46:6b:1f:2e:5b:9c:75:b6:a7:f0: 07:98:eb:66:05:76:3e:0d:7d:8e:77:e2:77:48:7d: 08:e8:f3:2c:8f:70:59:06:4d:f6:24:3d:6f:c0:7e: 38:86:ed:59:82:a5:af:ed:07:b1:85:7c:ed:16:18: 5e:9b:21:bf:c4:e7:a6:3c:27:fb:7e:f0:a6:46:56: 23:ae:68:22:8b:09:4c:7d:fa:0d:8f:50:3a:d3:8a: ea:31:25:ec:f5:b5:41:83:ff:6b:a9:25:67:f0:d5: 92:38:7c:5f:da:08:cf:41:40:be:50:31:f0:c0:5f: d6:08:9f:bb:c1:9c:ef:12:15:a6:fd:a1:e1:66:c7: fa:29:1b:43:9e:5d:77:22:f9:1f:e0:df:2e:53:57: 77:92:25:e8:36:fd:57:03:b7:c5:d9:de:93:23:44: 77:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:1C:BF:76:0F:1D:D6:0D:52:6E:7B:96:07:C5:BC:BC:98:43:BC:1E X509v3 Authority Key Identifier: keyid:59:0B:BE:AB:48:84:2A:41:AF:AC:49:21:D1:35:78:38:B6:FE:6C:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQu-q0iEKkGvrEkh0TV4OLb-bIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d7d583-2d4a-4abd-923e-23a58f3d61d7/1/WQu-q0iEKkGvrEkh0TV4OLb-bIc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d7d583-2d4a-4abd-923e-23a58f3d61d7/1/WQu-q0iEKkGvrEkh0TV4OLb-bIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:f7:3b:44:7d:22:2d:be:fb:3b:c4:08:a3:b4:7a:01:fa:5b: 91:c6:f2:a7:f1:2f:3f:88:16:54:95:d3:68:53:ef:61:95:63: ad:c8:8a:58:20:33:ad:5c:76:e9:ad:5e:cb:40:fa:09:26:0c: 0e:c3:e0:db:d5:80:d6:19:1a:52:66:d1:37:65:11:e4:89:cd: 58:63:01:4f:f1:c1:6f:3f:0a:22:07:9c:27:3e:80:a5:8d:14: 47:76:1f:42:cc:9c:d0:53:ef:79:bc:8c:a4:a9:44:70:a4:bc: 31:55:8a:ea:d0:6b:01:b2:f6:1c:51:99:a8:42:fd:c4:cf:15: 1b:b6:61:4d:35:eb:7f:77:3e:c5:0f:9a:6a:46:cf:16:9d:d7: 34:ae:6b:ea:43:77:33:d0:1f:fa:32:23:b2:e3:5f:ee:b6:8c: 7b:fd:46:77:98:76:d3:56:b8:ec:db:6d:16:2f:e8:58:d2:53: ad:ca:d5:9d:8f:18:6c:42:5c:79:a5:5f:41:46:51:12:31:02: 19:63:b6:92:78:d6:03:1f:af:e9:02:f4:f9:8e:c2:66:2f:3b: 52:9e:26:c9:76:db:51:c1:18:de:dc:c4:8d:c3:7b:ff:38:c2: ca:14:5b:47:9f:bb:61:43:d5:dc:83:b9:e4:ec:bc:41:46:d6: 20:c5:f8:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdwgembnA9ZCvQXLwvbz0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5MGJiZWFiNDg4NDJhNDFhZmFjNDkyMWQxMzU3ODM4YjZm ZTZjODcwHhcNMjUxMjI2MDcwMjExWhcNMjUxMjI3MDcwMjExWjAzMTEwLwYDVQQD Eyg2ZjFjYmY3NjBmMWRkNjBkNTI2ZTdiOTYwN2M1YmNiYzk4NDNiYzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XV+P2+lOQRlWo+gnQFySHquNX2H S6XhHL9FMjHetIwjTg+FaCUeQVxV4FRuTUeiS3Qcxux1WafJQlV3iZQVPJSwYs7f OquNA6PgF+tvCWA4Ln6FF2UWU9RFAz+9vEZrHy5bnHW2p/AHmOtmBXY+DX2Od+J3 SH0I6PMsj3BZBk32JD1vwH44hu1ZgqWv7QexhXztFhhemyG/xOemPCf7fvCmRlYj rmgiiwlMffoNj1A604rqMSXs9bVBg/9rqSVn8NWSOHxf2gjPQUC+UDHwwF/WCJ+7 wZzvEhWm/aHhZsf6KRtDnl13Ivkf4N8uU1d3kiXoNv1XA7fF2d6TI0R30wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG8cv3YPHdYNUm57lgfFvLyYQ7weMB8GA1UdIwQY MBaAFFkLvqtIhCpBr6xJIdE1eDi2/myHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1F1LXEwaUVLa0d2ckVraDBUVjRPTGItYkljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kN2Q1ODMtMmQ0YS00YWJkLTkyM2Ut MjNhNThmM2Q2MWQ3LzEvV1F1LXEwaUVLa0d2ckVraDBUVjRPTGItYkljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9kN2Q1ODMtMmQ0YS00YWJkLTkyM2UtMjNhNThmM2Q2MWQ3 LzEvV1F1LXEwaUVLa0d2ckVraDBUVjRPTGItYkljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdfc7RH0i Lb77O8QIo7R6Afpbkcbyp/EvP4gWVJXTaFPvYZVjrciKWCAzrVx26a1ey0D6CSYM DsPg29WA1hkaUmbRN2UR5InNWGMBT/HBbz8KIgecJz6ApY0UR3YfQsyc0FPvebyM pKlEcKS8MVWK6tBrAbL2HFGZqEL9xM8VG7ZhTTXrf3c+xQ+aakbPFp3XNK5r6kN3 M9Af+jIjsuNf7raMe/1Gd5h201a47NttFi/oWNJTrcrVnY8YbEJceaVfQUZREjEC GWO2knjWAx+v6QL0+Y7CZi87Up4myXbbUcEY3tzEjcN7/zjCyhRbR5+7YUPV3IO5 5Oy8QUbWIMX4Kw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:39 2025 by rpki-client