This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft File: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft (raw, json) Hash identifier: /g3yjcS7bvBcJyUDaWpE4wIguILRWzX5udI58a4fEQ0= Subject key identifier: DF:5A:0B:09:47:04:E9:03:4B:7F:51:52:75:3D:5E:7A:EC:5C:9C:43 Authority key identifier: 43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84 Certificate issuer: /CN=43ca7f3f65d2947af94f398bb3c7c9c320019084 Certificate serial: 019B0E93377E92F9B621BB17E189B60D9156 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft Manifest number: 0C54 Signing time: Thu 11 Dec 2025 18:01:27 +0000 Manifest this update: Thu 11 Dec 2025 18:01:27 +0000 Manifest next update: Fri 12 Dec 2025 18:01:27 +0000 Files and hashes: 1: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl (hash: u7g3OYwpPMjzZ0WAKovbDPYsxH8N9Zl42aZaVqbieWc=) 2: n71Z9zO5i6A3MnYNwx7Uxb_OUGA.roa (hash: CVGNrsSAJVnXCFxttiW1g0o49r+f3Le2U2M52m4z4p8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:37:7e:92:f9:b6:21:bb:17:e1:89:b6:0d:91:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43ca7f3f65d2947af94f398bb3c7c9c320019084 Validity Not Before: Dec 11 18:01:27 2025 GMT Not After : Dec 12 18:01:27 2025 GMT Subject: CN=df5a0b094704e9034b7f5152753d5e7aec5c9c43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:be:f2:a7:30:61:f7:b2:15:cf:15:85:15:41: ae:b6:b8:a9:9d:7b:b6:95:d1:31:07:0d:1f:b1:62: f5:30:31:b7:71:b1:ba:c4:a6:65:d2:f2:00:9e:5d: 2d:54:4c:6b:bc:63:b8:74:25:4c:18:f7:1c:ff:ea: b4:ab:f1:a0:d2:80:3c:4d:a4:65:51:ea:d2:d7:f1: 99:db:a7:c6:1f:25:02:c5:54:f7:8f:5f:e0:31:5b: f4:2a:90:d4:f3:2b:8b:0e:55:02:b4:5b:ff:72:a7: e0:4b:cf:d2:d9:36:97:7c:56:e8:e1:00:9e:db:23: 42:56:e6:e5:f8:59:26:f4:b4:eb:10:de:2a:d6:80: 58:41:92:ed:a8:7a:78:d3:a0:f1:e5:43:00:42:cf: f6:23:f7:27:97:06:bf:01:20:8f:b1:e8:bd:b8:a7: 66:7c:f6:4e:3f:c2:ff:12:b4:56:bf:03:83:80:33: 62:cf:c8:e8:f6:ed:59:86:44:6d:8c:2e:d3:99:61: 79:db:16:a2:df:ba:79:da:db:06:33:37:48:dc:ac: 8a:4e:29:bc:78:d2:2b:8c:5b:c1:c0:8f:8e:ef:e7: fd:94:b9:31:0c:88:60:ce:94:77:50:03:ee:73:2c: 61:3c:2d:18:bb:3a:a8:fb:aa:2c:d5:4c:1e:95:cc: 3c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:5A:0B:09:47:04:E9:03:4B:7F:51:52:75:3D:5E:7A:EC:5C:9C:43 X509v3 Authority Key Identifier: keyid:43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:6d:60:a5:52:a8:ed:1f:16:6f:82:ac:f8:4a:ad:81:d8:65: 6e:44:d5:7f:3d:ec:b3:a3:7b:d3:d9:43:01:bc:fc:d9:00:3c: 05:1c:ab:3f:ef:be:9e:b8:75:e5:e0:9a:30:dc:e4:27:66:b0: 04:ae:5f:b3:f0:8b:50:ca:f3:3e:5d:b8:40:13:15:6a:25:7d: 7d:21:69:bb:0a:fe:d2:5e:ca:9a:63:4a:9e:56:63:27:13:7f: 35:0b:ce:8a:d0:ea:d5:84:94:bc:db:3a:a6:60:0c:9f:bf:31: 6c:b5:4b:ed:d5:2b:31:c0:2a:da:7b:b3:cb:a3:8a:47:db:38: 8d:2e:ca:81:23:bd:04:b3:42:8e:91:a3:1b:08:d7:6a:37:42: 7c:c7:8d:93:c6:02:6f:e4:7c:7e:54:11:a0:3b:86:b0:e5:af: 88:15:67:ec:35:53:b9:0b:c9:27:d9:3a:01:73:8e:f0:9f:7f: 1f:80:10:36:a2:5c:4f:fa:0d:52:56:af:5b:52:70:7b:b0:5a: 4c:96:58:40:8c:36:59:6f:47:b2:8d:de:85:07:90:5a:9b:a3: 88:26:df:4e:81:fc:75:3e:86:70:2c:76:1a:92:09:60:d3:a1: 42:c1:b6:e9:c1:a5:a7:af:bb:9d:38:98:d0:b9:c0:bd:e6:ac: 89:6e:3f:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkzd+kvm2IbsX4Ym2DZFWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzY2E3ZjNmNjVkMjk0N2FmOTRmMzk4YmIzYzdjOWMzMjAw MTkwODQwHhcNMjUxMjExMTgwMTI3WhcNMjUxMjEyMTgwMTI3WjAzMTEwLwYDVQQD EyhkZjVhMGIwOTQ3MDRlOTAzNGI3ZjUxNTI3NTNkNWU3YWVjNWM5YzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA277ypzBh97IVzxWFFUGutripnXu2 ldExBw0fsWL1MDG3cbG6xKZl0vIAnl0tVExrvGO4dCVMGPcc/+q0q/Gg0oA8TaRl UerS1/GZ26fGHyUCxVT3j1/gMVv0KpDU8yuLDlUCtFv/cqfgS8/S2TaXfFbo4QCe 2yNCVubl+Fkm9LTrEN4q1oBYQZLtqHp406Dx5UMAQs/2I/cnlwa/ASCPsei9uKdm fPZOP8L/ErRWvwODgDNiz8jo9u1ZhkRtjC7TmWF52xai37p52tsGMzdI3KyKTim8 eNIrjFvBwI+O7+f9lLkxDIhgzpR3UAPucyxhPC0Yuzqo+6os1Uwelcw8sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN9aCwlHBOkDS39RUnU9XnrsXJxDMB8GA1UdIwQY MBaAFEPKfz9l0pR6+U85i7PHycMgAZCEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUThwX1AyWFNsSHI1VHptTHM4Zkp3eUFCa0lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9mNmNmNDQtNjZkMy00ZjBiLTgxMzIt ZDUzODExZmJkN2IwLzEvUThwX1AyWFNsSHI1VHptTHM4Zkp3eUFCa0lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9mNmNmNDQtNjZkMy00ZjBiLTgxMzItZDUzODExZmJkN2Iw LzEvUThwX1AyWFNsSHI1VHptTHM4Zkp3eUFCa0lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKW1gpVKo 7R8Wb4Ks+EqtgdhlbkTVfz3ss6N709lDAbz82QA8BRyrP+++nrh15eCaMNzkJ2aw BK5fs/CLUMrzPl24QBMVaiV9fSFpuwr+0l7KmmNKnlZjJxN/NQvOitDq1YSUvNs6 pmAMn78xbLVL7dUrMcAq2nuzy6OKR9s4jS7KgSO9BLNCjpGjGwjXajdCfMeNk8YC b+R8flQRoDuGsOWviBVn7DVTuQvJJ9k6AXOO8J9/H4AQNqJcT/oNUlavW1Jwe7Ba TJZYQIw2WW9Hso3ehQeQWpujiCbfToH8dT6GcCx2GpIJYNOhQsG26cGlp6+7nTiY 0LnAveasiW4/4w== -----END CERTIFICATE-----Generated at Fri Dec 12 02:36:40 2025 by rpki-client