This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft File: _QxrK9KdMWhIfJ7F_eTD_ELZz74.mft (raw, json) Hash identifier: D74qI/Hav/3wvsSaJISIDDYly9TAwg1Xq7chr6o/Gx4= Subject key identifier: B2:A1:26:0B:E0:C6:CA:29:64:53:F5:F6:A3:21:FC:26:90:48:87:32 Authority key identifier: FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE Certificate issuer: /CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe Certificate serial: 019B5A51744C65BC1F5648603730D1B44EEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft Manifest number: 12C6 Signing time: Fri 26 Dec 2025 11:00:46 +0000 Manifest this update: Fri 26 Dec 2025 11:00:46 +0000 Manifest next update: Sat 27 Dec 2025 11:00:46 +0000 Files and hashes: 1: 1-Ofv8tDBMWs_4Hbhr7lMN_HF2TI.roa (hash: uH/td80fED56QPX1k1oOVphRVZ11UL29yzqyURnsYnc=) 2: _QxrK9KdMWhIfJ7F_eTD_ELZz74.crl (hash: HbGnhSHwAQiVnsB3yGiFHA5udIc5AT3gHRx4AsmhOOU=) 3: ptc21Pv_RMZdbmNfwt1t43MswfA.roa (hash: mrzhJeNsIe6my5EK8oo2DkozZxDWWdzOh94g4W2m17U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:74:4c:65:bc:1f:56:48:60:37:30:d1:b4:4e:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe Validity Not Before: Dec 26 11:00:46 2025 GMT Not After : Dec 27 11:00:46 2025 GMT Subject: CN=b2a1260be0c6ca296453f5f6a321fc2690488732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:51:69:3c:3a:4d:58:8e:19:6e:ea:03:4e:34: 04:c5:60:66:7d:44:40:5b:f5:54:5a:e5:05:51:b8: 97:02:8e:4c:fe:b9:09:1b:cf:03:c7:c4:ee:eb:5d: ee:f9:4f:29:8d:0a:16:85:5c:86:2b:d9:06:cc:1b: 2e:29:01:fd:7e:e3:6b:86:78:fd:42:bf:49:47:9b: f4:d9:c2:97:b7:8e:fa:6c:b6:20:3e:f3:55:d9:97: fd:51:50:0e:47:2b:65:1d:85:dc:2b:25:ac:b1:ae: f5:3e:3c:83:42:c5:73:a2:f5:a8:92:4b:8f:bd:f2: 9d:43:9d:69:9e:8a:51:32:66:8e:ee:c0:ce:64:b5: 36:f5:ab:58:84:4b:59:6e:f4:52:1e:60:39:50:80: d1:35:46:db:59:d5:c5:bf:52:91:48:ab:be:7c:72: ad:52:8e:0a:11:52:13:d7:68:58:a0:7b:19:f6:72: 0a:dd:fd:3b:9a:19:a4:29:d8:bd:01:f3:db:fd:97: d8:52:07:f8:98:20:d5:be:00:a1:9c:39:a4:53:f8: b8:6d:75:2c:d3:a5:d4:c1:a3:4c:5b:ad:b5:a6:99: e0:53:20:04:99:36:74:53:46:9e:5c:36:ef:b4:07: 08:02:a5:1f:67:67:ea:e9:0c:f8:ef:94:da:40:2c: bf:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A1:26:0B:E0:C6:CA:29:64:53:F5:F6:A3:21:FC:26:90:48:87:32 X509v3 Authority Key Identifier: keyid:FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:51:b5:6f:bd:5c:78:fd:0b:84:07:f8:dd:40:e8:bb:cd:64: 91:18:24:43:4f:04:4e:bb:e3:2c:4d:bf:55:9c:26:ae:ec:52: e1:71:3c:72:59:45:14:26:a8:bf:b4:a9:51:37:32:2a:eb:0b: b5:a7:65:78:62:9c:1a:4e:e7:3f:c4:87:00:01:5a:85:5f:e0: ff:2c:c8:c9:cf:45:85:7a:a8:3c:a2:ad:fb:82:d4:ff:3d:db: 9d:d5:c2:50:fa:e9:bb:40:4a:a6:51:02:a3:7e:87:86:a1:80: 00:3e:79:61:82:8b:39:3a:05:9b:d7:f6:04:6f:cc:f2:2f:92: 1f:7e:5c:fa:68:aa:b1:eb:57:88:fb:f7:8c:a8:a7:47:3f:e8: ca:c6:c4:bd:8f:e1:03:94:3e:3b:a2:01:e6:7f:04:10:3e:01: 2c:1d:c1:e9:4b:78:46:b6:7f:a8:42:e4:1f:9b:bb:42:5f:cd: 83:ff:9e:34:93:a1:fb:88:5e:f4:67:4c:2d:25:52:42:09:6e: 30:5a:78:14:6f:04:23:98:92:f4:6e:ee:49:1b:47:64:0a:42: 05:db:93:c5:b5:73:f0:71:d6:1f:08:08:48:a0:ea:61:78:ee: a8:43:e9:57:0b:f4:04:f8:df:0e:57:31:cb:18:a0:5a:3b:3c: d5:4a:75:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUXRMZbwfVkhgNzDRtE7rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMGM2YjJiZDI5ZDMxNjg0ODdjOWVjNWZkZTRjM2ZjNDJk OWNmYmUwHhcNMjUxMjI2MTEwMDQ2WhcNMjUxMjI3MTEwMDQ2WjAzMTEwLwYDVQQD EyhiMmExMjYwYmUwYzZjYTI5NjQ1M2Y1ZjZhMzIxZmMyNjkwNDg4NzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FFpPDpNWI4ZbuoDTjQExWBmfURA W/VUWuUFUbiXAo5M/rkJG88Dx8Tu613u+U8pjQoWhVyGK9kGzBsuKQH9fuNrhnj9 Qr9JR5v02cKXt476bLYgPvNV2Zf9UVAORytlHYXcKyWssa71PjyDQsVzovWokkuP vfKdQ51pnopRMmaO7sDOZLU29atYhEtZbvRSHmA5UIDRNUbbWdXFv1KRSKu+fHKt Uo4KEVIT12hYoHsZ9nIK3f07mhmkKdi9AfPb/ZfYUgf4mCDVvgChnDmkU/i4bXUs 06XUwaNMW621ppngUyAEmTZ0U0aeXDbvtAcIAqUfZ2fq6Qz475TaQCy/zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLKhJgvgxsopZFP19qMh/CaQSIcyMB8GA1UdIwQY MBaAFP0MayvSnTFoSHyexf3kw/xC2c++MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1F4cks5S2RNV2hJZko3Rl9lVERfRUxaejc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80MzVkODgtMzcxZS00Zjg2LWE5MGEt Y2ZiYmMxNDY3MWEzLzEvX1F4cks5S2RNV2hJZko3Rl9lVERfRUxaejc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi80MzVkODgtMzcxZS00Zjg2LWE5MGEtY2ZiYmMxNDY3MWEz LzEvX1F4cks5S2RNV2hJZko3Rl9lVERfRUxaejc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADFG1b71c eP0LhAf43UDou81kkRgkQ08ETrvjLE2/VZwmruxS4XE8cllFFCaov7SpUTcyKusL tadleGKcGk7nP8SHAAFahV/g/yzIyc9FhXqoPKKt+4LU/z3bndXCUPrpu0BKplEC o36HhqGAAD55YYKLOToFm9f2BG/M8i+SH35c+miqsetXiPv3jKinRz/oysbEvY/h A5Q+O6IB5n8EED4BLB3B6Ut4RrZ/qELkH5u7Ql/Ng/+eNJOh+4he9GdMLSVSQglu MFp4FG8EI5iS9G7uSRtHZApCBduTxbVz8HHWHwgISKDqYXjuqEPpVwv0BPjfDlcx yxigWjs81Up1xg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:25 2025 by rpki-client