This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1ac3a0-4716-4be0-8ba2-fa84f3974990/1/Q7ixP34uSX7Rx7CjQXvd8ZvMYRo.mft File: Q7ixP34uSX7Rx7CjQXvd8ZvMYRo.mft (raw, json) Hash identifier: +jhxE7HCxeNlxgooQVD5JPzdFSbqEtMjU8ooga7eWI0= Subject key identifier: 8E:38:35:3A:E9:D7:7F:55:03:FE:CC:C6:D4:DA:48:5B:0B:21:6B:35 Authority key identifier: 43:B8:B1:3F:7E:2E:49:7E:D1:C7:B0:A3:41:7B:DD:F1:9B:CC:61:1A Certificate issuer: /CN=43b8b13f7e2e497ed1c7b0a3417bddf19bcc611a Certificate serial: 019B5A5200AD2C47D788195B3142CC9961AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q7ixP34uSX7Rx7CjQXvd8ZvMYRo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1ac3a0-4716-4be0-8ba2-fa84f3974990/1/Q7ixP34uSX7Rx7CjQXvd8ZvMYRo.mft Manifest number: 1F Signing time: Fri 26 Dec 2025 11:01:22 +0000 Manifest this update: Fri 26 Dec 2025 11:01:22 +0000 Manifest next update: Sat 27 Dec 2025 11:01:22 +0000 Files and hashes: 1: 06EJyalnsYZndusaE_4AMc563fU.roa (hash: zok3sDaWrSAVanDhqY6piMCfghJFn1OjbeGQ5zbS4cc=) 2: Q7ixP34uSX7Rx7CjQXvd8ZvMYRo.crl (hash: 7REU8z0li4Er2NMUz4LY3Fpj0Y+xbp2OIr6iaQXQ+oQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1ac3a0-4716-4be0-8ba2-fa84f3974990/1/Q7ixP34uSX7Rx7CjQXvd8ZvMYRo.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/1ac3a0-4716-4be0-8ba2-fa84f3974990/1/Q7ixP34uSX7Rx7CjQXvd8ZvMYRo.mft rsync://rpki.ripe.net/repository/DEFAULT/Q7ixP34uSX7Rx7CjQXvd8ZvMYRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:52:00:ad:2c:47:d7:88:19:5b:31:42:cc:99:61:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43b8b13f7e2e497ed1c7b0a3417bddf19bcc611a Validity Not Before: Dec 26 11:01:22 2025 GMT Not After : Dec 27 11:01:22 2025 GMT Subject: CN=8e38353ae9d77f5503feccc6d4da485b0b216b35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:52:67:7c:cb:31:81:c7:29:8c:16:3a:12:a7: bd:7a:55:d1:c6:93:f1:2c:ad:01:4f:e4:b4:33:09: 11:7d:8f:00:57:78:a8:9b:fa:df:42:02:ed:33:dd: 6c:fe:11:c2:96:d4:9d:9c:00:7e:70:d5:ca:f3:a8: 6a:85:df:e4:03:6a:35:67:62:7b:1f:c7:3d:0b:6f: 98:0c:7d:9c:50:fb:1b:dc:f9:c9:9f:26:99:92:e0: 16:f5:28:eb:41:2c:b1:af:65:5a:da:04:1a:73:0f: f0:b1:25:a7:f0:4f:60:b5:92:7a:13:69:56:04:12: aa:3e:1b:31:1a:83:00:a6:70:69:ab:00:cd:26:a8: c2:3d:d1:63:d4:35:36:12:8e:34:8d:2f:a4:8f:fc: 71:b9:3e:c8:88:98:3e:24:4c:2e:31:35:91:1d:cc: b1:8b:8f:83:9b:2c:ae:be:59:c9:e0:f2:97:00:d0: 71:7e:48:16:92:a6:b5:c4:05:96:35:e0:ad:35:a4: c8:e4:47:37:fe:58:8f:cc:d9:65:25:0a:44:b0:34: 74:d1:56:1c:6c:31:cd:ba:fd:9b:b4:c6:03:3d:58: 3b:0b:17:44:83:33:89:f8:cd:9f:5c:34:32:f3:69: fc:68:b6:59:c8:f7:59:02:fb:65:47:70:7b:d3:31: 11:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:38:35:3A:E9:D7:7F:55:03:FE:CC:C6:D4:DA:48:5B:0B:21:6B:35 X509v3 Authority Key Identifier: keyid:43:B8:B1:3F:7E:2E:49:7E:D1:C7:B0:A3:41:7B:DD:F1:9B:CC:61:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q7ixP34uSX7Rx7CjQXvd8ZvMYRo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1ac3a0-4716-4be0-8ba2-fa84f3974990/1/Q7ixP34uSX7Rx7CjQXvd8ZvMYRo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1ac3a0-4716-4be0-8ba2-fa84f3974990/1/Q7ixP34uSX7Rx7CjQXvd8ZvMYRo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:8d:43:db:db:19:ff:1b:58:8f:4f:9d:c1:e2:45:67:4f:12: f6:44:dc:16:4b:81:64:9d:b9:bc:5f:26:db:27:98:30:67:46: 50:ba:4b:a7:d8:2c:03:82:a8:af:cc:68:17:c7:4a:ef:47:f6: 32:87:0e:d6:19:03:3a:1c:d7:5f:53:72:87:84:c0:37:ac:fd: 30:c7:c5:b0:ac:09:72:b7:cc:ed:e8:e6:88:e8:23:53:a7:c2: 74:0f:35:9f:18:ed:3f:1c:86:b6:63:a7:72:c3:7f:ae:81:24: 77:a2:c4:10:7b:61:67:b0:6f:f4:01:18:19:97:a8:67:97:f6: 18:22:f7:7e:cd:f4:26:82:08:a7:77:df:2c:ed:67:3f:92:77: 22:3b:01:27:99:01:c7:93:ca:f9:82:d3:19:b8:29:32:21:ea: 6e:de:0e:b4:cf:e6:d4:27:6c:3d:e6:41:d9:86:f3:43:fe:3d: 80:d4:58:f3:e5:cb:01:c3:dc:94:03:b2:6b:8a:32:7a:e7:ea: 00:ea:c4:0d:f8:d6:92:2d:cc:04:46:19:7c:4f:33:7a:e5:fa: 8d:7d:fa:09:77:25:d3:f0:29:09:ca:e8:c9:f6:db:89:ac:cb: 73:cf:0e:ae:c0:9f:92:7a:c6:f9:d5:07:27:e9:db:77:8d:6e: fd:8a:b9:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUgCtLEfXiBlbMULMmWGqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzYjhiMTNmN2UyZTQ5N2VkMWM3YjBhMzQxN2JkZGYxOWJj YzYxMWEwHhcNMjUxMjI2MTEwMTIyWhcNMjUxMjI3MTEwMTIyWjAzMTEwLwYDVQQD Eyg4ZTM4MzUzYWU5ZDc3ZjU1MDNmZWNjYzZkNGRhNDg1YjBiMjE2YjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7FJnfMsxgccpjBY6Eqe9elXRxpPx LK0BT+S0MwkRfY8AV3iom/rfQgLtM91s/hHCltSdnAB+cNXK86hqhd/kA2o1Z2J7 H8c9C2+YDH2cUPsb3PnJnyaZkuAW9SjrQSyxr2Va2gQacw/wsSWn8E9gtZJ6E2lW BBKqPhsxGoMApnBpqwDNJqjCPdFj1DU2Eo40jS+kj/xxuT7IiJg+JEwuMTWRHcyx i4+DmyyuvlnJ4PKXANBxfkgWkqa1xAWWNeCtNaTI5Ec3/liPzNllJQpEsDR00VYc bDHNuv2btMYDPVg7CxdEgzOJ+M2fXDQy82n8aLZZyPdZAvtlR3B70zER5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI44NTrp139VA/7MxtTaSFsLIWs1MB8GA1UdIwQY MBaAFEO4sT9+Lkl+0cewo0F73fGbzGEaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTdpeFAzNHVTWDdSeDdDalFYdmQ4WnZNWVJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8xYWMzYTAtNDcxNi00YmUwLThiYTIt ZmE4NGYzOTc0OTkwLzEvUTdpeFAzNHVTWDdSeDdDalFYdmQ4WnZNWVJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8xYWMzYTAtNDcxNi00YmUwLThiYTItZmE4NGYzOTc0OTkw LzEvUTdpeFAzNHVTWDdSeDdDalFYdmQ4WnZNWVJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQY1D29sZ /xtYj0+dweJFZ08S9kTcFkuBZJ25vF8m2yeYMGdGULpLp9gsA4Kor8xoF8dK70f2 MocO1hkDOhzXX1Nyh4TAN6z9MMfFsKwJcrfM7ejmiOgjU6fCdA81nxjtPxyGtmOn csN/roEkd6LEEHthZ7Bv9AEYGZeoZ5f2GCL3fs30JoIIp3ffLO1nP5J3IjsBJ5kB x5PK+YLTGbgpMiHqbt4OtM/m1CdsPeZB2YbzQ/49gNRY8+XLAcPclAOya4oyeufq AOrEDfjWki3MBEYZfE8zeuX6jX36CXcl0/ApCcroyfbbiazLc88OrsCfknrG+dUH J+nbd41u/Yq5TA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:16 2025 by rpki-client