This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft File: Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft (raw, json) Hash identifier: B2C2+4xiS1ydRn/j/gN+zCRHsD57a1ZtEPBoncvpQns= Subject key identifier: 94:EE:26:EC:99:92:9D:A9:6D:2A:26:2F:6D:D7:B2:42:10:2E:77:28 Authority key identifier: 43:E0:A3:64:13:18:41:05:6D:48:B2:D7:88:EA:00:CA:4B:91:DB:56 Certificate issuer: /CN=43e0a364131841056d48b2d788ea00ca4b91db56 Certificate serial: 019B20D0633725A6D40E586C1C9E452D3F8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft Manifest number: 1781 Signing time: Mon 15 Dec 2025 07:01:26 +0000 Manifest this update: Mon 15 Dec 2025 07:01:26 +0000 Manifest next update: Tue 16 Dec 2025 07:01:26 +0000 Files and hashes: 1: Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl (hash: Z0CzkD7aK4YUa6UrZk648ItEBwsKTP8p/Spp8o/vskE=) 2: x5qW2OF7Y5nDoHmpuktuakwR9g4.roa (hash: /rnp35BJUcYCzF7eN3DbK+KO3ZjZC/QVwa6hdcfBad4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 07:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:d0:63:37:25:a6:d4:0e:58:6c:1c:9e:45:2d:3f:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43e0a364131841056d48b2d788ea00ca4b91db56 Validity Not Before: Dec 15 07:01:26 2025 GMT Not After : Dec 16 07:01:26 2025 GMT Subject: CN=94ee26ec99929da96d2a262f6dd7b242102e7728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7a:75:bf:c5:d4:ff:cc:6b:31:a5:a3:bc:3f: 95:94:10:f1:47:bb:49:95:5c:cb:94:84:84:e0:98: 7b:7f:cb:27:23:9a:7c:67:80:f4:eb:c5:4c:21:29: 8b:a8:ca:b1:ae:77:2f:be:df:bd:73:7c:d4:a8:00: b2:13:dd:a7:a3:7b:a5:51:d2:af:8d:60:58:1b:f0: e1:d7:b2:3e:7c:98:28:ba:3e:aa:35:f8:de:9b:a2: f5:da:2f:f9:d3:c3:7f:26:e4:59:35:5e:8e:49:54: fd:c4:a0:a4:7c:74:84:a9:aa:f7:c1:27:cd:f7:c6: d4:59:1d:e5:c0:d6:15:54:57:27:45:aa:19:47:ef: bd:47:b0:b9:55:01:40:a1:17:c4:72:a4:88:ad:30: 8a:48:dd:3d:b2:ca:43:c7:9b:5a:c6:34:8f:1f:b6: c5:f9:f3:6b:f0:df:02:6b:9d:04:8f:37:2e:77:56: 98:21:39:2b:94:83:ef:ac:1e:5f:75:ad:fe:7f:fd: ee:34:20:d9:7c:87:96:4b:58:92:60:3c:e0:2f:a5: 69:e6:dc:83:09:59:cd:b0:00:e2:13:71:a0:22:4a: 47:c1:82:b1:4f:3d:8e:26:71:cf:6f:d8:67:b7:04: 71:1d:ca:f1:ab:c9:a4:f2:ca:38:f7:3a:fe:a9:3f: 49:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:EE:26:EC:99:92:9D:A9:6D:2A:26:2F:6D:D7:B2:42:10:2E:77:28 X509v3 Authority Key Identifier: keyid:43:E0:A3:64:13:18:41:05:6D:48:B2:D7:88:EA:00:CA:4B:91:DB:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:a9:39:71:24:60:97:48:01:ce:6c:b1:73:b6:57:68:65:1e: d4:19:e6:8f:b0:ca:c5:fd:8b:2a:be:de:4c:19:e3:8f:63:b0: ce:34:18:d6:d5:56:74:3e:31:e4:6f:8e:85:a1:c4:b5:e5:7f: 0a:0f:de:73:db:bb:9b:39:89:15:c2:a9:67:69:65:32:85:97: f3:d3:07:8c:f8:b6:c0:7b:48:97:0b:d9:6d:f7:55:f9:0d:9b: d6:b0:a1:e7:b4:d8:55:ad:cc:cb:11:08:b2:d5:ea:71:d0:d9: 93:36:70:ba:81:7e:6d:a5:1c:62:71:a7:f9:17:b2:ea:23:d0: ad:8c:0e:25:4b:f2:62:c3:b7:5a:39:b7:d1:48:8a:1b:ba:1c: fe:37:75:38:e6:71:bb:30:9f:7d:3c:20:fc:3f:5e:2e:c9:87: 15:0e:77:ac:80:4a:e5:72:94:a7:6b:b6:0a:99:20:3e:74:b7: 02:e9:b9:be:64:be:5b:8b:78:bf:c8:e6:28:94:be:dc:3c:04: 84:80:ed:c1:d2:78:91:35:64:99:88:8e:b5:9b:58:e0:6f:2f: 0b:94:f1:80:c5:74:05:69:34:4d:99:1a:a5:aa:83:94:70:b4: a3:96:dd:ee:b9:8a:03:6b:9f:dc:63:4c:bb:37:3a:d7:be:e2: d3:9a:2f:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsg0GM3JabUDlhsHJ5FLT+MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZTBhMzY0MTMxODQxMDU2ZDQ4YjJkNzg4ZWEwMGNhNGI5 MWRiNTYwHhcNMjUxMjE1MDcwMTI2WhcNMjUxMjE2MDcwMTI2WjAzMTEwLwYDVQQD Eyg5NGVlMjZlYzk5OTI5ZGE5NmQyYTI2MmY2ZGQ3YjI0MjEwMmU3NzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnp1v8XU/8xrMaWjvD+VlBDxR7tJ lVzLlISE4Jh7f8snI5p8Z4D068VMISmLqMqxrncvvt+9c3zUqACyE92no3ulUdKv jWBYG/Dh17I+fJgouj6qNfjem6L12i/508N/JuRZNV6OSVT9xKCkfHSEqar3wSfN 98bUWR3lwNYVVFcnRaoZR++9R7C5VQFAoRfEcqSIrTCKSN09sspDx5taxjSPH7bF +fNr8N8Ca50Ejzcud1aYITkrlIPvrB5fda3+f/3uNCDZfIeWS1iSYDzgL6Vp5tyD CVnNsADiE3GgIkpHwYKxTz2OJnHPb9hntwRxHcrxq8mk8so49zr+qT9JvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJTuJuyZkp2pbSomL23XskIQLncoMB8GA1UdIwQY MBaAFEPgo2QTGEEFbUiy14jqAMpLkdtWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUS1DalpCTVlRUVZ0U0xMWGlPb0F5a3VSMjFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi85Y2JiMDYtYjRkYS00Yzk0LWI0MTgt NGIwODFjYzJiMzlhLzEvUS1DalpCTVlRUVZ0U0xMWGlPb0F5a3VSMjFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi85Y2JiMDYtYjRkYS00Yzk0LWI0MTgtNGIwODFjYzJiMzlh LzEvUS1DalpCTVlRUVZ0U0xMWGlPb0F5a3VSMjFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiak5cSRg l0gBzmyxc7ZXaGUe1Bnmj7DKxf2LKr7eTBnjj2OwzjQY1tVWdD4x5G+OhaHEteV/ Cg/ec9u7mzmJFcKpZ2llMoWX89MHjPi2wHtIlwvZbfdV+Q2b1rCh57TYVa3MyxEI stXqcdDZkzZwuoF+baUcYnGn+Rey6iPQrYwOJUvyYsO3Wjm30UiKG7oc/jd1OOZx uzCffTwg/D9eLsmHFQ53rIBK5XKUp2u2CpkgPnS3Aum5vmS+W4t4v8jmKJS+3DwE hIDtwdJ4kTVkmYiOtZtY4G8vC5TxgMV0BWk0TZkapaqDlHC0o5bd7rmKA2uf3GNM uzc6177i05ovtw== -----END CERTIFICATE-----Generated at Mon Dec 15 14:04:50 2025 by rpki-client