This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft File: Q664_1W9RlALJ9uc8d7CVidrK2o.mft (raw, json) Hash identifier: Pd4nlEuqUHwMGdHDjFxBINmzf/Pq3WqvtsAXcih0yTw= Subject key identifier: 8C:79:1E:0A:7C:FE:E4:78:90:E6:D3:5F:E8:C8:74:A7:9A:B5:13:00 Authority key identifier: 43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A Certificate issuer: /CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a Certificate serial: 019B0F3743184D2A352EBBCC9003A40ECF30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft Manifest number: 0464 Signing time: Thu 11 Dec 2025 21:00:38 +0000 Manifest this update: Thu 11 Dec 2025 21:00:38 +0000 Manifest next update: Fri 12 Dec 2025 21:00:38 +0000 Files and hashes: 1: B5665HYy6kSNy90OpMzSYkfYZ78.roa (hash: l3LMbVnBNYo1auwulw02upGn169zVSqtpPpAH0JkHoI=) 2: BhseQy6cfY2KxD85qSiLzXh-5UM.roa (hash: 0YvZXzvsO+BZgmZ0JpcK1I5V3fjP6y+JiPN3ak5ChGQ=) 3: Q664_1W9RlALJ9uc8d7CVidrK2o.crl (hash: tY1s9rR63NsaJPBY5ZryVQOOwmriS0WlGc87zdwGlvg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:43:18:4d:2a:35:2e:bb:cc:90:03:a4:0e:cf:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a Validity Not Before: Dec 11 21:00:38 2025 GMT Not After : Dec 12 21:00:38 2025 GMT Subject: CN=8c791e0a7cfee47890e6d35fe8c874a79ab51300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f7:ab:70:ae:1d:52:35:1b:2a:af:6a:92:db: 91:e8:09:9f:22:d9:21:11:5a:2d:fa:3a:3d:43:21: 8e:b1:84:68:fb:ee:0c:46:09:e5:39:76:a0:0d:8d: 94:c3:eb:aa:db:3b:02:dd:19:c6:91:d7:45:6f:45: 38:23:4a:a9:80:9a:a9:21:28:67:ed:86:c0:e3:58: c9:d0:ff:95:c0:68:b0:d7:30:61:d2:f0:c8:83:97: de:95:3a:c0:7d:88:b1:9f:e8:3b:6b:ad:2f:13:f7: 50:8a:4e:22:95:35:87:81:fc:21:2c:e8:17:a2:0d: 36:23:30:64:3c:9e:bd:b3:ea:d2:77:07:67:17:19: c6:dc:0c:8b:20:98:48:a0:2f:32:d2:dd:f3:7a:44: ff:e9:be:20:09:ee:4a:03:f1:0e:66:2e:d7:62:61: b1:b6:23:0a:a6:54:b4:a6:f6:79:43:5a:02:9b:d9: 6c:31:63:df:77:32:14:96:32:5a:d4:1c:c8:eb:d1: f5:76:d0:ba:f5:4e:ce:31:fc:2e:a9:f9:71:d0:7b: 3f:3d:b2:28:19:67:5b:c9:4a:ee:71:b8:55:ac:34: 7e:67:10:a3:09:fa:08:4d:0b:68:e1:47:43:3c:41: 3f:01:14:a0:cf:50:f1:75:fe:02:60:29:f8:a3:4a: d3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:79:1E:0A:7C:FE:E4:78:90:E6:D3:5F:E8:C8:74:A7:9A:B5:13:00 X509v3 Authority Key Identifier: keyid:43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:b9:6d:f5:55:d0:63:91:80:fe:e5:25:4b:70:30:4f:39:bc: 4e:4b:8e:e3:db:b5:38:f0:b2:e1:e9:ab:5e:c0:f2:42:ae:0d: 20:5e:37:30:8c:4d:61:ab:f9:0b:ac:e3:6f:13:b2:73:8a:2e: de:c0:6e:f2:2c:6b:d6:ff:e6:1e:ca:26:62:1e:15:ec:fb:83: 49:21:35:63:7d:5a:b4:56:e7:71:91:fb:f5:ca:20:58:e1:88: af:33:63:af:34:42:c2:65:92:ae:96:e4:47:1b:79:45:0a:fe: cd:f5:40:56:7e:ba:87:06:0d:2f:8d:a1:75:0f:69:5f:9b:50: 9b:f5:dd:ee:26:d5:31:68:2c:f9:60:02:35:73:13:3d:e4:b0: 10:00:b8:f2:4e:db:e6:71:de:81:c2:fc:3d:c6:82:96:b5:5d: 25:16:9d:ab:67:d3:39:48:04:3e:02:5b:62:bb:a1:8e:24:61: a7:1a:32:1e:87:cc:03:a6:ae:c7:42:fc:22:a7:67:ae:91:70: f2:c6:f6:b4:d5:aa:98:58:77:06:56:5e:fe:0e:4d:6c:45:65: 77:e6:0c:de:60:98:24:7e:ac:c9:5a:1f:20:6c:af:62:bb:c7: 67:a0:d7:01:be:55:0b:39:75:8d:0c:f6:92:3b:76:5c:aa:ab: 12:7d:c3:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN0MYTSo1LrvMkAOkDs8wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzYWViOGZmNTViZDQ2NTAwYjI3ZGI5Y2YxZGVjMjU2Mjc2 YjJiNmEwHhcNMjUxMjExMjEwMDM4WhcNMjUxMjEyMjEwMDM4WjAzMTEwLwYDVQQD Eyg4Yzc5MWUwYTdjZmVlNDc4OTBlNmQzNWZlOGM4NzRhNzlhYjUxMzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/ercK4dUjUbKq9qktuR6AmfItkh EVot+jo9QyGOsYRo++4MRgnlOXagDY2Uw+uq2zsC3RnGkddFb0U4I0qpgJqpIShn 7YbA41jJ0P+VwGiw1zBh0vDIg5felTrAfYixn+g7a60vE/dQik4ilTWHgfwhLOgX og02IzBkPJ69s+rSdwdnFxnG3AyLIJhIoC8y0t3zekT/6b4gCe5KA/EOZi7XYmGx tiMKplS0pvZ5Q1oCm9lsMWPfdzIUljJa1BzI69H1dtC69U7OMfwuqflx0Hs/PbIo GWdbyUrucbhVrDR+ZxCjCfoITQto4UdDPEE/ARSgz1Dxdf4CYCn4o0rT5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIx5Hgp8/uR4kObTX+jIdKeatRMAMB8GA1UdIwQY MBaAFEOuuP9VvUZQCyfbnPHewlYnaytqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTY2NF8xVzlSbEFMSjl1YzhkN0NWaWRySzJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8zYjZmYjQtNTJlOC00NGUyLWFiZTgt MmMyZmJhZDJmMDExLzEvUTY2NF8xVzlSbEFMSjl1YzhkN0NWaWRySzJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8zYjZmYjQtNTJlOC00NGUyLWFiZTgtMmMyZmJhZDJmMDEx LzEvUTY2NF8xVzlSbEFMSjl1YzhkN0NWaWRySzJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUblt9VXQ Y5GA/uUlS3AwTzm8TkuO49u1OPCy4emrXsDyQq4NIF43MIxNYav5C6zjbxOyc4ou 3sBu8ixr1v/mHsomYh4V7PuDSSE1Y31atFbncZH79cogWOGIrzNjrzRCwmWSrpbk Rxt5RQr+zfVAVn66hwYNL42hdQ9pX5tQm/Xd7ibVMWgs+WACNXMTPeSwEAC48k7b 5nHegcL8PcaClrVdJRadq2fTOUgEPgJbYruhjiRhpxoyHofMA6aux0L8IqdnrpFw 8sb2tNWqmFh3BlZe/g5NbEVld+YM3mCYJH6syVofIGyvYrvHZ6DXAb5VCzl1jQz2 kjt2XKqrEn3DNg== -----END CERTIFICATE-----Generated at Fri Dec 12 00:57:41 2025 by rpki-client