This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft File: Q_BsNphySzf-GhcRQX29iOu_CpE.mft (raw, json) Hash identifier: 3XvTAR5peoY747nnMF0TnLeMLKIuhIYeI/2Wk/Fi0do= Subject key identifier: 4D:8A:71:50:B4:ED:1C:55:84:D4:58:4E:9B:DF:C2:07:2F:B8:9F:63 Authority key identifier: 43:F0:6C:36:98:72:4B:37:FE:1A:17:11:41:7D:BD:88:EB:BF:0A:91 Certificate issuer: /CN=43f06c3698724b37fe1a1711417dbd88ebbf0a91 Certificate serial: 019B0E9318DB390D19307A78069DF9432AE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft Manifest number: C4 Signing time: Thu 11 Dec 2025 18:01:19 +0000 Manifest this update: Thu 11 Dec 2025 18:01:19 +0000 Manifest next update: Fri 12 Dec 2025 18:01:19 +0000 Files and hashes: 1: CxgM5umcJQIKAphd4HGRMxjPCiQ.roa (hash: A0nE+ddeI2g2MvTBC556Td71a5D11i+c62doMFlZiC8=) 2: JknyP3Ybin2U1sEXva4KCDR1c1I.roa (hash: O0vUT6Dy38kn7d3i/5/I+631QCA6tRSEMUbIaeBWKKg=) 3: Q_BsNphySzf-GhcRQX29iOu_CpE.crl (hash: RkOXHPJtkDLYSS6cXFWV5pcmuGlpMCgsBU2LB4Lco8Y=) 4: hraQuSPXm_BKduHB1VDVz3ZUcQY.roa (hash: WS2hCjy7E85ll6h/ANkIKpGGT1mve9bfebhKK3l26Xw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.crl rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:18:db:39:0d:19:30:7a:78:06:9d:f9:43:2a:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43f06c3698724b37fe1a1711417dbd88ebbf0a91 Validity Not Before: Dec 11 18:01:19 2025 GMT Not After : Dec 12 18:01:19 2025 GMT Subject: CN=4d8a7150b4ed1c5584d4584e9bdfc2072fb89f63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e1:8d:c9:9f:b8:62:a1:9b:20:37:b4:5c:e0: 44:96:8d:db:e1:83:d6:b1:8e:4b:0f:b0:d0:80:2e: a1:36:14:d8:5e:8d:2e:57:89:8b:24:83:50:65:f1: 46:4a:95:aa:e5:a4:cb:44:97:0d:40:8d:2c:e5:db: 42:df:34:0e:eb:42:5c:98:8a:ab:88:18:84:d6:df: 2b:78:f4:30:bb:dc:6c:6b:c5:ee:60:1e:24:ba:4b: 15:06:5a:bc:56:18:3b:50:d9:32:4b:0b:36:f5:f1: 31:0d:e8:9f:d9:69:bf:1f:06:4d:f8:7a:1a:3f:d9: 3b:c0:5d:b4:4e:47:26:22:03:05:33:1c:68:31:71: d8:a4:eb:cc:55:a5:5b:2b:90:ee:35:33:8e:2f:3c: 1a:b9:4e:ac:96:f7:29:28:27:93:f6:fe:c1:ca:40: a6:4d:ff:45:7e:34:5f:38:42:5f:5b:38:06:bc:4e: de:ef:27:9b:6d:4c:95:ca:01:99:3d:b9:e8:67:44: 90:7f:b8:77:74:39:5a:52:b8:25:91:c9:96:21:af: cc:a0:ae:3c:65:11:16:5d:c1:e0:d2:bc:43:81:c4: 80:d2:16:b8:b1:17:0c:cc:f9:0d:af:4e:dd:0e:24: e2:bc:97:ff:26:e6:b9:98:92:b7:26:9b:93:ee:60: f6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:8A:71:50:B4:ED:1C:55:84:D4:58:4E:9B:DF:C2:07:2F:B8:9F:63 X509v3 Authority Key Identifier: keyid:43:F0:6C:36:98:72:4B:37:FE:1A:17:11:41:7D:BD:88:EB:BF:0A:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:82:b4:6b:97:c0:10:59:ca:82:cb:b4:ac:05:fd:a6:1a:24: 19:5f:5e:00:9d:0c:1f:61:b0:80:3c:f4:b3:22:90:ac:04:79: 22:06:83:59:1a:9d:c2:23:88:47:21:4a:14:00:19:37:63:52: e9:2d:dd:d8:b7:3d:30:a6:c9:95:fc:33:49:58:2f:13:51:d9: ba:f9:2c:48:16:f5:79:f5:d0:f2:88:ef:4c:09:00:8c:6c:08: a7:56:af:6a:07:12:de:7c:b2:c5:d8:dc:3a:9f:cf:c8:73:67: 5d:0f:bc:df:21:ba:e3:93:62:f5:c6:ef:00:e4:08:94:44:51: d8:01:64:c4:1d:30:77:bc:86:37:a1:a8:5b:41:ee:d4:59:9d: 09:18:c4:b2:9e:d9:16:45:b2:82:fb:e0:0d:a5:f8:e1:20:fe: a9:34:40:a0:62:47:9e:df:af:4c:74:0e:c6:3d:83:7c:30:ac: 04:2a:40:33:24:e8:56:70:34:6b:9f:15:b8:41:fa:bd:57:1c: 85:2e:f4:65:32:e6:39:8c:47:f0:79:d4:0a:be:fc:03:3a:0d: c6:f9:60:23:6b:89:05:2e:50:c7:99:ed:97:b2:c1:24:42:85: 27:e5:5a:0b:2c:02:3a:5c:8b:57:a8:0e:1d:44:df:a1:58:e7: f9:17:93:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkxjbOQ0ZMHp4Bp35QyrpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZjA2YzM2OTg3MjRiMzdmZTFhMTcxMTQxN2RiZDg4ZWJi ZjBhOTEwHhcNMjUxMjExMTgwMTE5WhcNMjUxMjEyMTgwMTE5WjAzMTEwLwYDVQQD Eyg0ZDhhNzE1MGI0ZWQxYzU1ODRkNDU4NGU5YmRmYzIwNzJmYjg5ZjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseGNyZ+4YqGbIDe0XOBElo3b4YPW sY5LD7DQgC6hNhTYXo0uV4mLJINQZfFGSpWq5aTLRJcNQI0s5dtC3zQO60JcmIqr iBiE1t8rePQwu9xsa8XuYB4kuksVBlq8Vhg7UNkySws29fExDeif2Wm/HwZN+Hoa P9k7wF20TkcmIgMFMxxoMXHYpOvMVaVbK5DuNTOOLzwauU6slvcpKCeT9v7BykCm Tf9FfjRfOEJfWzgGvE7e7yebbUyVygGZPbnoZ0SQf7h3dDlaUrglkcmWIa/MoK48 ZREWXcHg0rxDgcSA0ha4sRcMzPkNr07dDiTivJf/Jua5mJK3JpuT7mD2lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE2KcVC07RxVhNRYTpvfwgcvuJ9jMB8GA1UdIwQY MBaAFEPwbDaYcks3/hoXEUF9vYjrvwqRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUV9Cc05waHlTemYtR2hjUlFYMjlpT3VfQ3BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83ZGFiNmEtOTQ3Yi00YTEyLThhMjct MGUxZWZkNWEzNzQ2LzEvUV9Cc05waHlTemYtR2hjUlFYMjlpT3VfQ3BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83ZGFiNmEtOTQ3Yi00YTEyLThhMjctMGUxZWZkNWEzNzQ2 LzEvUV9Cc05waHlTemYtR2hjUlFYMjlpT3VfQ3BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALYK0a5fA EFnKgsu0rAX9phokGV9eAJ0MH2GwgDz0syKQrAR5IgaDWRqdwiOIRyFKFAAZN2NS 6S3d2Lc9MKbJlfwzSVgvE1HZuvksSBb1efXQ8ojvTAkAjGwIp1avagcS3nyyxdjc Op/PyHNnXQ+83yG645Ni9cbvAOQIlERR2AFkxB0wd7yGN6GoW0Hu1FmdCRjEsp7Z FkWygvvgDaX44SD+qTRAoGJHnt+vTHQOxj2DfDCsBCpAMyToVnA0a58VuEH6vVcc hS70ZTLmOYxH8HnUCr78AzoNxvlgI2uJBS5Qx5ntl7LBJEKFJ+VaCywCOlyLV6gO HUTfoVjn+ReT5A== -----END CERTIFICATE-----Generated at Fri Dec 12 02:45:36 2025 by rpki-client