This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft File: Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft (raw, json) Hash identifier: cZCkqRQfZNOeEvUt0uLHvvHvg9N6EYMv8A3vLysMV9A= Subject key identifier: 77:7A:9F:5B:6A:FB:88:8A:4D:E9:4B:D9:EB:10:B7:C7:95:7F:67:24 Authority key identifier: 43:77:2B:99:99:3B:06:08:D2:78:2A:F4:5A:22:EB:93:C7:FD:A6:3B Certificate issuer: /CN=43772b99993b0608d2782af45a22eb93c7fda63b Certificate serial: 019B1E73F2A0DA78FE798BA5BAD0C6F7B608 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3crmZk7BgjSeCr0WiLrk8f9pjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft Manifest number: 144B Signing time: Sun 14 Dec 2025 20:01:13 +0000 Manifest this update: Sun 14 Dec 2025 20:01:13 +0000 Manifest next update: Mon 15 Dec 2025 20:01:13 +0000 Files and hashes: 1: Jz6Plky4nRwLQTJJcOF7jGNXrSw.roa (hash: /BEPfzyhvzI281lagKYoLrBP/3LTnv9Sk0+qZpDUYPQ=) 2: Q3crmZk7BgjSeCr0WiLrk8f9pjs.crl (hash: j+p/gE1f1BoFmSI5IblmeYJOaa/rmzf3iNaLlz2Gnaw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.crl rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft rsync://rpki.ripe.net/repository/DEFAULT/Q3crmZk7BgjSeCr0WiLrk8f9pjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 20:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:73:f2:a0:da:78:fe:79:8b:a5:ba:d0:c6:f7:b6:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43772b99993b0608d2782af45a22eb93c7fda63b Validity Not Before: Dec 14 20:01:13 2025 GMT Not After : Dec 15 20:01:13 2025 GMT Subject: CN=777a9f5b6afb888a4de94bd9eb10b7c7957f6724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f7:29:e9:a8:7c:75:b7:0b:9a:fe:54:78:dc: 6c:75:7e:62:b1:57:b7:6c:d7:4b:3a:5f:c7:9c:51: 28:59:4b:8e:26:f1:ba:eb:f7:59:b3:e4:84:be:4e: bb:98:6e:2a:c3:e2:d0:77:d5:4a:9c:e8:7f:6f:2b: b6:ee:36:17:d5:58:05:f8:ff:9c:78:48:ba:a1:40: 32:14:41:8f:52:29:86:91:47:80:76:87:30:e4:a5: bc:fb:89:46:10:7e:0b:61:db:11:85:ff:aa:bc:0d: a8:80:1b:8a:16:b3:07:77:dc:68:65:93:40:9c:64: 0e:c4:cd:42:71:89:2b:8c:d8:ae:62:40:0b:d5:fa: 46:36:ba:ac:1c:66:66:b0:ef:64:8a:05:59:71:8d: b7:ab:f8:0e:59:87:fe:9e:9c:bf:7c:22:ec:b4:df: 10:33:80:b6:d4:d7:d6:ab:2c:22:a2:4b:78:91:09: 14:80:95:ae:95:66:0d:f8:45:3c:1c:d1:98:42:55: 9d:dd:2e:f9:9a:70:fc:ac:39:90:89:b6:88:d8:4a: 64:5f:00:3e:f1:b2:e3:cc:63:74:90:ac:fe:86:a5: 91:0e:85:b5:04:b3:eb:11:4e:0f:f8:20:ea:3f:d4: dd:1b:e9:87:99:84:ba:28:4e:e3:98:db:ae:9b:68: 82:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:7A:9F:5B:6A:FB:88:8A:4D:E9:4B:D9:EB:10:B7:C7:95:7F:67:24 X509v3 Authority Key Identifier: keyid:43:77:2B:99:99:3B:06:08:D2:78:2A:F4:5A:22:EB:93:C7:FD:A6:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3crmZk7BgjSeCr0WiLrk8f9pjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:54:78:ec:1e:89:d2:8c:fa:e8:df:f3:f6:7f:9c:5e:28:31: a9:d8:54:1a:38:aa:d8:ad:3d:64:06:ad:29:6b:24:ba:9c:02: d6:79:65:8b:c4:1a:23:fb:64:fa:d1:67:81:d2:f7:23:81:8e: 1b:e9:e9:f7:c0:60:21:a4:dc:c4:48:8b:ef:61:75:ac:09:b9: 7e:43:40:d5:67:8f:ef:84:3f:c3:f6:54:86:73:04:60:ea:14: aa:58:eb:7c:51:43:0f:a7:5a:cc:36:34:b1:9a:97:f8:bf:63: 34:dd:0f:7a:c1:38:11:e0:58:4d:f4:6b:0c:60:dd:26:88:47: 02:ae:4b:ee:e8:38:4a:36:8b:28:3e:e3:43:88:04:bd:0a:4c: dc:28:73:c0:d5:81:19:70:4a:f2:0a:93:8f:d1:4d:0f:6a:56: bf:cc:8a:68:30:b5:69:0a:32:33:f8:37:48:9a:da:ec:bb:30: 2e:58:a9:5b:05:16:84:1e:fd:7a:0b:64:3b:21:da:5d:78:ec: 53:d5:85:b6:5f:85:a7:ea:43:64:d4:19:49:e3:16:d1:4b:ad: 0f:dd:eb:a7:69:81:6a:1d:30:b9:37:a8:cc:e6:7d:73:6f:2a: 71:4c:8c:ca:ae:05:2a:c1:2f:a4:cf:88:ee:04:69:89:5d:42: 7a:e8:be:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsec/Kg2nj+eYulutDG97YIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzNzcyYjk5OTkzYjA2MDhkMjc4MmFmNDVhMjJlYjkzYzdm ZGE2M2IwHhcNMjUxMjE0MjAwMTEzWhcNMjUxMjE1MjAwMTEzWjAzMTEwLwYDVQQD Eyg3NzdhOWY1YjZhZmI4ODhhNGRlOTRiZDllYjEwYjdjNzk1N2Y2NzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/cp6ah8dbcLmv5UeNxsdX5isVe3 bNdLOl/HnFEoWUuOJvG66/dZs+SEvk67mG4qw+LQd9VKnOh/byu27jYX1VgF+P+c eEi6oUAyFEGPUimGkUeAdocw5KW8+4lGEH4LYdsRhf+qvA2ogBuKFrMHd9xoZZNA nGQOxM1CcYkrjNiuYkAL1fpGNrqsHGZmsO9kigVZcY23q/gOWYf+npy/fCLstN8Q M4C21NfWqywiokt4kQkUgJWulWYN+EU8HNGYQlWd3S75mnD8rDmQibaI2EpkXwA+ 8bLjzGN0kKz+hqWRDoW1BLPrEU4P+CDqP9TdG+mHmYS6KE7jmNuum2iC6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHd6n1tq+4iKTelL2esQt8eVf2ckMB8GA1UdIwQY MBaAFEN3K5mZOwYI0ngq9Foi65PH/aY7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTNjcm1aazdCZ2pTZUNyMFdpTHJrOGY5cGpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi80ZmJlYTgtNWU3OS00NmEyLWJhNWMt YTE2ZDk3YWZhNjQzLzEvUTNjcm1aazdCZ2pTZUNyMFdpTHJrOGY5cGpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi80ZmJlYTgtNWU3OS00NmEyLWJhNWMtYTE2ZDk3YWZhNjQz LzEvUTNjcm1aazdCZ2pTZUNyMFdpTHJrOGY5cGpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHFR47B6J 0oz66N/z9n+cXigxqdhUGjiq2K09ZAatKWskupwC1nlli8QaI/tk+tFngdL3I4GO G+np98BgIaTcxEiL72F1rAm5fkNA1WeP74Q/w/ZUhnMEYOoUqljrfFFDD6dazDY0 sZqX+L9jNN0PesE4EeBYTfRrDGDdJohHAq5L7ug4SjaLKD7jQ4gEvQpM3ChzwNWB GXBK8gqTj9FND2pWv8yKaDC1aQoyM/g3SJra7LswLlipWwUWhB79egtkOyHaXXjs U9WFtl+Fp+pDZNQZSeMW0UutD93rp2mBah0wuTeozOZ9c28qcUyMyq4FKsEvpM+I 7gRpiV1Ceui+AA== -----END CERTIFICATE-----Generated at Mon Dec 15 04:57:42 2025 by rpki-client