This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft File: Q57sdw36ZitOpkoCLus46D2q4ig.mft (raw, json) Hash identifier: rO4zjpnmP5MGtH8xtqz6ldicvGnO4CW3YAurqqqqUcQ= Subject key identifier: E8:0E:AF:1A:68:2F:1D:DE:49:AD:F7:72:E8:C0:13:C0:1E:CC:35:87 Authority key identifier: 43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28 Certificate issuer: /CN=439eec770dfa662b4ea64a022eeb38e83daae228 Certificate serial: 019B0E5BD203E0CA0A2E3BAC883E78AF0A3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft Manifest number: 0906 Signing time: Thu 11 Dec 2025 17:00:56 +0000 Manifest this update: Thu 11 Dec 2025 17:00:56 +0000 Manifest next update: Fri 12 Dec 2025 17:00:56 +0000 Files and hashes: 1: Q57sdw36ZitOpkoCLus46D2q4ig.crl (hash: ZPEWGAm8SrUwM79RPEamoAjWS/QOUp5dhLH29+AeLng=) 2: s-6iu0euq8mwctWc84gynbP4Gz8.roa (hash: ix817uYIHKTbd4XoAS5Yf6A1NltjL0SfzgZQTYUowKc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 17:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5b:d2:03:e0:ca:0a:2e:3b:ac:88:3e:78:af:0a:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439eec770dfa662b4ea64a022eeb38e83daae228 Validity Not Before: Dec 11 17:00:56 2025 GMT Not After : Dec 12 17:00:56 2025 GMT Subject: CN=e80eaf1a682f1dde49adf772e8c013c01ecc3587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:08:8f:6e:f8:1a:da:a0:9a:e6:f6:0d:ab:d1: 5c:f4:32:b5:6f:46:0a:ba:8b:a7:ef:e5:b2:bf:4b: b6:c5:2c:ce:72:b6:3e:78:a4:59:62:23:3b:3c:54: de:16:b3:36:13:ce:f3:24:ca:32:a8:c6:bd:dd:94: 80:90:2c:4e:54:7f:d3:f7:ba:e5:8a:5f:3c:a7:73: 00:b7:dc:70:ff:c2:88:ce:c2:b4:1d:e4:7f:ac:46: b2:34:90:59:0a:43:7e:89:65:f0:72:08:a9:47:19: 74:14:a0:11:5a:a1:4c:7d:d7:6a:30:b3:94:68:64: 1c:2d:b1:58:dd:ae:75:3f:4c:e3:2e:cc:c6:b9:00: 97:5c:0e:0a:1d:13:b1:19:2b:83:38:39:52:ee:25: b1:1c:a8:e8:f8:00:f1:bb:c1:ff:a3:1c:5b:d5:f9: 97:ee:53:57:05:5d:66:51:a0:81:ed:c7:a6:a3:bc: c4:ca:a4:7f:aa:c7:99:3d:13:5e:f7:03:16:85:bd: 6d:1f:b5:d2:cd:33:d2:f6:00:0a:0a:a7:c5:11:ce: 81:bb:41:b5:ac:fe:0f:ee:9d:7e:73:25:53:41:27: 72:94:b2:ef:56:f5:61:0c:fb:1c:19:39:da:f9:26: d7:7a:1d:7e:7d:7c:7c:dd:9d:5a:6f:3a:fe:fa:f0: e5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:0E:AF:1A:68:2F:1D:DE:49:AD:F7:72:E8:C0:13:C0:1E:CC:35:87 X509v3 Authority Key Identifier: keyid:43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:22:d5:0c:6e:db:af:50:6e:a1:22:3b:d0:13:3b:d0:66:19: 19:e3:7f:e4:fb:b0:e4:fd:2d:15:0a:a0:f8:42:82:6c:73:ea: 5f:c7:3e:59:2e:e7:0b:fe:8b:c5:67:51:a9:ac:a0:1a:dd:0d: 54:a6:49:34:a0:4f:40:22:ca:79:9c:cc:5f:ba:bb:16:90:5c: 2d:ab:77:84:d8:00:a5:d0:bc:b7:5e:0f:63:48:56:05:f5:a3: ce:1c:64:92:b8:c9:12:e6:ed:b5:f8:06:e0:66:64:25:c7:9a: 4f:5f:7b:a9:72:d1:d6:b7:96:ae:ee:5f:2d:c5:7d:fa:34:c1: ec:6b:fc:05:e6:21:f5:56:3f:a9:78:d1:e0:e3:40:43:2f:28: a8:db:62:df:a5:9c:7f:53:77:67:08:8c:30:7f:8a:13:7a:a5: eb:e7:55:74:53:a3:09:35:22:f3:7b:06:1b:46:65:90:b7:99: fc:0e:dc:23:4f:85:42:75:5b:3c:e4:93:7c:b1:c5:17:84:a2: dd:1d:48:60:a5:bf:54:5c:57:19:c1:b3:94:de:3b:55:f8:64: 78:86:49:41:06:4b:1f:3e:47:90:24:76:61:31:9f:1c:52:f3: 4b:12:5a:34:e5:7b:29:a1:05:70:94:37:6d:ba:91:2b:19:06: 1b:1e:a4:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOW9ID4MoKLjusiD54rwo6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzOWVlYzc3MGRmYTY2MmI0ZWE2NGEwMjJlZWIzOGU4M2Rh YWUyMjgwHhcNMjUxMjExMTcwMDU2WhcNMjUxMjEyMTcwMDU2WjAzMTEwLwYDVQQD EyhlODBlYWYxYTY4MmYxZGRlNDlhZGY3NzJlOGMwMTNjMDFlY2MzNTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQiPbvga2qCa5vYNq9Fc9DK1b0YK uoun7+Wyv0u2xSzOcrY+eKRZYiM7PFTeFrM2E87zJMoyqMa93ZSAkCxOVH/T97rl il88p3MAt9xw/8KIzsK0HeR/rEayNJBZCkN+iWXwcgipRxl0FKARWqFMfddqMLOU aGQcLbFY3a51P0zjLszGuQCXXA4KHROxGSuDODlS7iWxHKjo+ADxu8H/oxxb1fmX 7lNXBV1mUaCB7cemo7zEyqR/qseZPRNe9wMWhb1tH7XSzTPS9gAKCqfFEc6Bu0G1 rP4P7p1+cyVTQSdylLLvVvVhDPscGTna+SbXeh1+fXx83Z1abzr++vDlAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOgOrxpoLx3eSa33cujAE8AezDWHMB8GA1UdIwQY MBaAFEOe7HcN+mYrTqZKAi7rOOg9quIoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTU3c2R3MzZaaXRPcGtvQ0x1czQ2RDJxNGlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi82Yjg0MzQtZjQ1NC00MWM3LTkyYjkt MzUyZjdjYTAxMWFlLzEvUTU3c2R3MzZaaXRPcGtvQ0x1czQ2RDJxNGlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi82Yjg0MzQtZjQ1NC00MWM3LTkyYjktMzUyZjdjYTAxMWFl LzEvUTU3c2R3MzZaaXRPcGtvQ0x1czQ2RDJxNGlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkCLVDG7b r1BuoSI70BM70GYZGeN/5Puw5P0tFQqg+EKCbHPqX8c+WS7nC/6LxWdRqaygGt0N VKZJNKBPQCLKeZzMX7q7FpBcLat3hNgApdC8t14PY0hWBfWjzhxkkrjJEubttfgG 4GZkJceaT197qXLR1reWru5fLcV9+jTB7Gv8BeYh9VY/qXjR4ONAQy8oqNti36Wc f1N3ZwiMMH+KE3ql6+dVdFOjCTUi83sGG0ZlkLeZ/A7cI0+FQnVbPOSTfLHFF4Si 3R1IYKW/VFxXGcGzlN47VfhkeIZJQQZLHz5HkCR2YTGfHFLzSxJaNOV7KaEFcJQ3 bbqRKxkGGx6kOg== -----END CERTIFICATE-----Generated at Fri Dec 12 01:34:14 2025 by rpki-client