This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft File: _Q7wQPukW857BxY0lc316FB3kZ0.mft (raw, json) Hash identifier: gxFW71GjwEMIZtGsrYm4PrU/0AeN072QSO7XVaazRpY= Subject key identifier: 2F:66:26:36:05:AA:0F:80:D5:1C:49:C4:86:99:9F:22:0B:6C:13:57 Authority key identifier: FD:0E:F0:40:FB:A4:5B:CE:7B:07:16:34:95:CD:F5:E8:50:77:91:9D Certificate issuer: /CN=fd0ef040fba45bce7b07163495cdf5e85077919d Certificate serial: 019B07EBE93026CEB51433969CA4B22F99C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft Manifest number: 0E03 Signing time: Wed 10 Dec 2025 11:00:59 +0000 Manifest this update: Wed 10 Dec 2025 11:00:59 +0000 Manifest next update: Thu 11 Dec 2025 11:00:59 +0000 Files and hashes: 1: BrNhX11GN3gzWV-434wlzWriATQ.roa (hash: e/gkiYTr4M+ZdV4GBEAw4FBFr5Cgb0NfH0gUAD5dMJY=) 2: _Q7wQPukW857BxY0lc316FB3kZ0.crl (hash: REf2e4vVU9fpiNbFjvQhQlOAYKO8Vs7T9D7FA+dlGOA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:eb:e9:30:26:ce:b5:14:33:96:9c:a4:b2:2f:99:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd0ef040fba45bce7b07163495cdf5e85077919d Validity Not Before: Dec 10 11:00:59 2025 GMT Not After : Dec 11 11:00:59 2025 GMT Subject: CN=2f66263605aa0f80d51c49c486999f220b6c1357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1e:35:9d:a2:b2:f3:e7:c9:38:bf:a9:34:be: 0a:25:8f:27:2c:11:59:96:e3:40:e4:5d:94:93:2a: c2:62:73:91:31:a0:eb:8e:07:d3:91:0f:b7:7c:55: cb:e2:4a:b2:95:65:a2:4a:b4:de:1f:5f:6e:e8:5f: 73:9a:a6:d1:6d:94:de:8c:db:17:98:c8:87:33:12: bc:12:c8:31:c8:71:f9:d9:b1:ae:e9:7a:1d:58:8d: 93:f6:42:80:97:22:84:7f:a3:c5:03:39:c8:b3:77: 50:27:2f:91:13:11:44:87:f1:3f:cb:47:ec:f4:44: 08:9f:6f:49:a6:c5:9c:fb:a5:c5:b3:c6:a3:7c:f2: c6:57:8a:b0:46:66:65:f4:6a:7d:b4:2b:c1:7a:49: e2:cc:5e:36:17:84:86:a3:28:bc:55:15:31:66:86: 34:53:69:fe:0a:99:07:92:64:61:be:34:df:fb:49: 35:f2:97:73:e4:2f:b9:26:fe:d2:f8:6a:d4:51:ef: 6c:d3:b5:e5:ef:ca:b7:cf:e3:a2:4b:12:88:bd:7c: 9f:a8:a9:8a:11:05:42:0b:bb:0d:56:80:ec:3d:f5: 87:19:1b:9e:5a:72:28:9c:c0:d4:0a:2d:71:12:07: 9b:78:4a:f9:13:27:af:8e:96:a8:77:e4:ba:44:05: 89:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:66:26:36:05:AA:0F:80:D5:1C:49:C4:86:99:9F:22:0B:6C:13:57 X509v3 Authority Key Identifier: keyid:FD:0E:F0:40:FB:A4:5B:CE:7B:07:16:34:95:CD:F5:E8:50:77:91:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:a3:a7:a6:ac:75:dc:c2:1c:02:1c:dd:2d:56:e6:b6:7a:10: be:50:cb:2a:20:3f:a4:4d:84:2e:cc:1f:9e:65:27:f8:0c:60: 45:5d:8d:66:b5:2c:50:96:d5:03:31:cf:2b:76:1f:5e:71:e3: ba:66:a2:90:46:7e:cf:6c:74:1b:ef:d7:33:bc:ff:b0:94:88: 01:8d:5d:f0:7d:65:80:a3:bc:e0:95:14:42:9a:e7:b9:21:6e: 93:33:e3:4b:7b:7d:96:70:06:9b:bb:42:57:0b:1f:51:8e:85: 22:b8:af:5c:01:e7:45:a8:8b:60:f9:90:50:66:3c:98:cb:a4: 9e:4f:81:6b:22:ec:70:ef:98:cd:10:16:ac:5f:54:b1:bf:c9: 07:0a:97:71:6c:70:10:8f:c6:83:3e:cf:0c:59:ec:cd:33:cc: 32:a6:30:91:41:e2:6f:92:14:ef:1a:51:7a:50:73:16:33:dd: f2:85:93:68:e1:1a:0e:08:90:14:56:df:98:41:d9:62:65:12: 6f:9d:70:cb:7d:d2:4f:a0:5b:1e:2c:d2:d5:7a:6f:1e:db:53: 7c:8e:bd:05:22:df:31:ed:a4:0f:4e:2e:56:93:a0:a4:49:84: cd:b9:b9:24:3d:72:29:6d:e3:a6:8e:96:1a:75:b0:bf:3f:ad: ec:ef:f5:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsH6+kwJs61FDOWnKSyL5nIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMGVmMDQwZmJhNDViY2U3YjA3MTYzNDk1Y2RmNWU4NTA3 NzkxOWQwHhcNMjUxMjEwMTEwMDU5WhcNMjUxMjExMTEwMDU5WjAzMTEwLwYDVQQD EygyZjY2MjYzNjA1YWEwZjgwZDUxYzQ5YzQ4Njk5OWYyMjBiNmMxMzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzB41naKy8+fJOL+pNL4KJY8nLBFZ luNA5F2UkyrCYnORMaDrjgfTkQ+3fFXL4kqylWWiSrTeH19u6F9zmqbRbZTejNsX mMiHMxK8EsgxyHH52bGu6XodWI2T9kKAlyKEf6PFAznIs3dQJy+RExFEh/E/y0fs 9EQIn29JpsWc+6XFs8ajfPLGV4qwRmZl9Gp9tCvBeknizF42F4SGoyi8VRUxZoY0 U2n+CpkHkmRhvjTf+0k18pdz5C+5Jv7S+GrUUe9s07Xl78q3z+OiSxKIvXyfqKmK EQVCC7sNVoDsPfWHGRueWnIonMDUCi1xEgebeEr5Eyevjpaod+S6RAWJvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC9mJjYFqg+A1RxJxIaZnyILbBNXMB8GA1UdIwQY MBaAFP0O8ED7pFvOewcWNJXN9ehQd5GdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1E3d1FQdWtXODU3QnhZMGxjMzE2RkIza1owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9kNzcxNjgtMTMzZi00NTUzLWIxOWQt NTZjOTRmMzI2ZGMyLzEvX1E3d1FQdWtXODU3QnhZMGxjMzE2RkIza1owLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9kNzcxNjgtMTMzZi00NTUzLWIxOWQtNTZjOTRmMzI2ZGMy LzEvX1E3d1FQdWtXODU3QnhZMGxjMzE2RkIza1owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANqOnpqx1 3MIcAhzdLVbmtnoQvlDLKiA/pE2ELswfnmUn+AxgRV2NZrUsUJbVAzHPK3YfXnHj umaikEZ+z2x0G+/XM7z/sJSIAY1d8H1lgKO84JUUQprnuSFukzPjS3t9lnAGm7tC VwsfUY6FIrivXAHnRaiLYPmQUGY8mMuknk+BayLscO+YzRAWrF9Usb/JBwqXcWxw EI/Ggz7PDFnszTPMMqYwkUHib5IU7xpRelBzFjPd8oWTaOEaDgiQFFbfmEHZYmUS b51wy33ST6BbHizS1XpvHttTfI69BSLfMe2kD04uVpOgpEmEzbm5JD1yKW3jpo6W GnWwvz+t7O/19w== -----END CERTIFICATE-----Generated at Wed Dec 10 19:27:58 2025 by rpki-client