This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft File: q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft (raw, json) Hash identifier: xEKKAjuX+VZpVxV1Tz7QBLMVPXZD2xsZscr7E+nSBgQ= Subject key identifier: E8:E6:20:BD:95:0E:47:93:22:7E:95:26:40:D6:EC:D6:B9:CA:43:76 Authority key identifier: AB:86:32:67:B5:B7:3D:B0:7C:80:E7:4D:71:5B:67:36:D4:FB:A9:FB Certificate issuer: /CN=ab863267b5b73db07c80e74d715b6736d4fba9fb Certificate serial: 019B59E3873854065022E5CEA9EABFDC37E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft Manifest number: 066D Signing time: Fri 26 Dec 2025 09:00:42 +0000 Manifest this update: Fri 26 Dec 2025 09:00:42 +0000 Manifest next update: Sat 27 Dec 2025 09:00:42 +0000 Files and hashes: 1: auh_CELZVQItOo9vbdk8bNA5drU.roa (hash: lsZhhuWVu0Ccaib1jj0SXulSIcbRTpNBfg+1fElDPKs=) 2: q4YyZ7W3PbB8gOdNcVtnNtT7qfs.crl (hash: EZ8A1Frnv+nIgcHA7d/bz2sy7BvI/w4cVjoDBDJIx78=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft rsync://rpki.ripe.net/repository/DEFAULT/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:87:38:54:06:50:22:e5:ce:a9:ea:bf:dc:37:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab863267b5b73db07c80e74d715b6736d4fba9fb Validity Not Before: Dec 26 09:00:42 2025 GMT Not After : Dec 27 09:00:42 2025 GMT Subject: CN=e8e620bd950e4793227e952640d6ecd6b9ca4376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f3:72:da:41:bf:51:15:33:5f:42:8d:63:77: 45:26:b3:d6:f2:ae:9c:e7:43:89:db:ac:41:2c:0a: c6:66:56:6f:9b:22:34:3a:3f:09:5e:ca:95:05:ef: 66:e5:04:13:00:fe:05:db:99:61:1d:de:ef:53:09: 0c:06:3d:1f:73:7f:31:18:16:36:88:32:17:32:8d: c7:31:e9:f1:5a:3b:34:9b:94:74:57:33:52:b3:e7: 4b:74:6c:9f:60:46:28:96:5a:93:fc:36:13:2d:fa: 0e:b5:b0:d4:12:81:29:0c:f3:e2:04:f5:d7:0d:12: 5b:31:c8:8b:c5:b8:ef:47:d9:db:7e:7b:03:6c:b2: d6:f1:d7:89:4d:57:70:0e:6a:bf:b6:54:52:f8:e5: db:a7:d7:25:90:26:40:9e:ff:20:9b:09:3f:8a:99: b1:37:28:15:bf:92:0f:5b:c8:1c:e5:20:3c:8f:66: c7:6f:8b:57:0c:a4:cd:17:f1:0d:90:16:f6:ba:d9: 7a:2c:99:d9:b7:92:a5:7b:a0:59:ad:08:e1:f6:47: 56:93:7e:94:b4:f5:09:c7:90:dc:c5:85:fe:a2:9b: 0b:56:65:04:23:a7:83:83:be:96:f6:6c:e0:bd:2d: 32:a9:06:b6:d6:4e:ef:4d:c4:96:78:4e:fd:7f:46: 2d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:E6:20:BD:95:0E:47:93:22:7E:95:26:40:D6:EC:D6:B9:CA:43:76 X509v3 Authority Key Identifier: keyid:AB:86:32:67:B5:B7:3D:B0:7C:80:E7:4D:71:5B:67:36:D4:FB:A9:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:d5:02:2e:b7:c2:26:54:ea:ce:da:b1:57:7f:d5:19:5a:d5: b0:5a:df:0b:fc:f8:61:05:67:1c:8c:83:59:de:ab:52:6c:b6: e5:f1:be:a6:1b:ca:82:e4:d5:ba:33:f7:e7:9b:52:b9:38:14: ba:ef:81:6b:5d:16:5b:85:f7:03:65:d1:00:ec:81:c9:23:7f: a8:c3:17:21:ae:65:fd:de:34:2a:98:59:c5:fe:29:2f:6a:b7: 4f:53:ff:9f:ee:e1:1a:cb:77:c6:c5:b0:7f:62:63:ca:18:1e: d5:1c:2f:ad:7b:fa:d5:6a:06:b8:07:38:4d:9a:04:8f:b6:0a: bd:75:69:86:82:2b:15:04:ad:59:da:01:37:97:96:2c:cc:f4: 9d:ad:8f:0d:67:0a:6b:8d:56:50:d0:c8:54:80:7c:22:53:15: 5a:b6:56:27:43:41:7d:99:42:12:2a:a6:2b:75:64:b0:5d:aa: 9a:ce:80:24:f0:a8:93:73:ae:cf:41:c4:4f:25:f9:6b:20:67: f6:87:e2:2d:74:44:69:47:32:b6:70:1b:c7:0d:4d:e9:21:03: de:de:e6:9d:71:99:03:07:f3:f7:02:b6:67:56:52:73:3a:fd: b6:6d:18:2e:41:93:82:8b:9a:36:af:9d:3c:59:8f:d3:a9:a6: fa:bf:ab:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ44c4VAZQIuXOqeq/3DfkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiODYzMjY3YjViNzNkYjA3YzgwZTc0ZDcxNWI2NzM2ZDRm YmE5ZmIwHhcNMjUxMjI2MDkwMDQyWhcNMjUxMjI3MDkwMDQyWjAzMTEwLwYDVQQD EyhlOGU2MjBiZDk1MGU0NzkzMjI3ZTk1MjY0MGQ2ZWNkNmI5Y2E0Mzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPNy2kG/URUzX0KNY3dFJrPW8q6c 50OJ26xBLArGZlZvmyI0Oj8JXsqVBe9m5QQTAP4F25lhHd7vUwkMBj0fc38xGBY2 iDIXMo3HMenxWjs0m5R0VzNSs+dLdGyfYEYollqT/DYTLfoOtbDUEoEpDPPiBPXX DRJbMciLxbjvR9nbfnsDbLLW8deJTVdwDmq/tlRS+OXbp9clkCZAnv8gmwk/ipmx NygVv5IPW8gc5SA8j2bHb4tXDKTNF/ENkBb2utl6LJnZt5Kle6BZrQjh9kdWk36U tPUJx5DcxYX+opsLVmUEI6eDg76W9mzgvS0yqQa21k7vTcSWeE79f0YtswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOjmIL2VDkeTIn6VJkDW7Na5ykN2MB8GA1UdIwQY MBaAFKuGMme1tz2wfIDnTXFbZzbU+6n7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTRZeVo3VzNQYkI4Z09kTmNWdG5OdFQ3cWZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9jNWJiNjEtYTYxNy00MTRhLWEzNGMt YTVlNDM1YzE5MGUzLzEvcTRZeVo3VzNQYkI4Z09kTmNWdG5OdFQ3cWZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9jNWJiNjEtYTYxNy00MTRhLWEzNGMtYTVlNDM1YzE5MGUz LzEvcTRZeVo3VzNQYkI4Z09kTmNWdG5OdFQ3cWZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkdUCLrfC JlTqztqxV3/VGVrVsFrfC/z4YQVnHIyDWd6rUmy25fG+phvKguTVujP355tSuTgU uu+Ba10WW4X3A2XRAOyBySN/qMMXIa5l/d40KphZxf4pL2q3T1P/n+7hGst3xsWw f2Jjyhge1RwvrXv61WoGuAc4TZoEj7YKvXVphoIrFQStWdoBN5eWLMz0na2PDWcK a41WUNDIVIB8IlMVWrZWJ0NBfZlCEiqmK3VksF2qms6AJPCok3Ouz0HETyX5ayBn 9ofiLXREaUcytnAbxw1N6SED3t7mnXGZAwfz9wK2Z1ZSczr9tm0YLkGTgouaNq+d PFmP06mm+r+rAw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:01:05 2025 by rpki-client