This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft File: q4gs1tGWrh-WhyrK54MhvnqSuOs.mft (raw, json) Hash identifier: wZ7MmA9nHSCGEIGym6AtoGIw1eCm/1boNtc8Q3zzaZw= Subject key identifier: 0F:4B:1B:D0:A0:F8:57:30:1D:3B:F8:C0:33:83:E8:9C:30:0A:CF:8F Authority key identifier: AB:88:2C:D6:D1:96:AE:1F:96:87:2A:CA:E7:83:21:BE:7A:92:B8:EB Certificate issuer: /CN=ab882cd6d196ae1f96872acae78321be7a92b8eb Certificate serial: 019B115D4DA308D09CD92884EF93444CD1E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft Manifest number: 1774 Signing time: Fri 12 Dec 2025 07:01:25 +0000 Manifest this update: Fri 12 Dec 2025 07:01:25 +0000 Manifest next update: Sat 13 Dec 2025 07:01:25 +0000 Files and hashes: 1: F9AhQNt9Udb849dXCdScX4FqhCA.roa (hash: px1gv2xGNlwFH8D+WdL+fioWoJ0lDCB6LorhXUTwMrQ=) 2: LVdTUXxiMF9XJQST5UOIEXtOCYY.roa (hash: 1JvKiaaOoOhGqXZ9Dq7CyaK8VVJ8p+cu5cPkQb+6aUs=) 3: q4gs1tGWrh-WhyrK54MhvnqSuOs.crl (hash: +8odKyiC/TThPl3WeZ4MWZrvCCrM9WDBpTNAOUthc+A=) 4: skwwLakYgia163942_1PcvI2KGM.roa (hash: RjC50vXYyJh6b6nwgCbvXjKOTFm1vHWVMG4k+WUjU5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 07:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:5d:4d:a3:08:d0:9c:d9:28:84:ef:93:44:4c:d1:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab882cd6d196ae1f96872acae78321be7a92b8eb Validity Not Before: Dec 12 07:01:25 2025 GMT Not After : Dec 13 07:01:25 2025 GMT Subject: CN=0f4b1bd0a0f857301d3bf8c03383e89c300acf8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f7:89:c0:fb:b9:b8:9a:e6:ab:0b:69:53:a3: 89:92:49:44:0a:e0:72:a6:45:38:8e:10:27:f7:50: 76:d3:41:c5:d1:2d:27:be:e5:6d:36:7c:06:80:58: 85:56:dc:e5:3a:7a:d9:0f:ea:b2:23:37:46:27:5e: 7c:7d:4b:30:e9:75:fc:c8:b4:56:41:c4:b7:d0:f7: 02:6c:3b:62:a2:b6:47:13:57:69:90:d9:73:1f:2f: 0d:ed:68:0b:0f:d1:1b:cc:e0:32:75:33:f8:78:5f: 95:d3:5e:4b:a4:a1:2e:85:05:fe:50:9c:1d:56:96: 6c:af:ab:63:70:94:4b:4d:03:41:33:70:e7:86:62: a7:06:2a:b6:c9:50:0b:6a:27:78:ef:b8:c2:75:a4: 94:1b:71:d0:14:18:41:f3:95:71:0d:c0:18:1f:39: 55:ca:6e:4b:e0:f4:6c:c3:fc:38:cb:d0:91:f0:42: 8e:6d:9b:21:20:90:4e:09:18:8a:ae:3f:3f:b7:10: 62:e5:1e:50:e5:27:b2:b3:26:93:d2:5e:68:94:de: ab:2f:e3:11:48:a8:37:59:37:c8:f3:c0:1a:a2:81: 44:49:cf:63:89:b2:36:d8:9c:59:b3:f5:e8:a4:48: 06:31:9b:4c:83:fe:11:a4:81:e6:d9:d0:92:4b:fa: c2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:4B:1B:D0:A0:F8:57:30:1D:3B:F8:C0:33:83:E8:9C:30:0A:CF:8F X509v3 Authority Key Identifier: keyid:AB:88:2C:D6:D1:96:AE:1F:96:87:2A:CA:E7:83:21:BE:7A:92:B8:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:96:a6:b0:e9:04:a9:95:19:e5:03:8c:fd:11:58:30:52:f9: e0:6b:04:cd:e5:f4:07:b8:1d:67:59:d2:47:a7:ab:9a:d4:39: 14:76:00:70:df:15:3c:b8:26:17:40:d9:bc:ef:8b:9b:23:5f: 8d:a4:ee:08:f4:82:0d:47:be:2f:e2:76:22:80:66:cf:e3:7e: d7:72:56:6e:68:34:d3:74:b3:78:9c:c9:e2:2e:95:54:0d:96: d0:f5:26:d3:18:f4:b4:9f:96:cd:e5:00:83:93:1f:28:ed:e5: 00:7a:26:4f:b8:be:be:5b:99:4c:fe:ed:7c:69:b6:b3:1f:50: da:9e:a3:b8:0a:16:82:9c:6a:f5:9c:5a:f1:80:af:1f:e8:6c: bd:6d:9a:28:a4:63:ac:2e:48:4b:3b:2e:61:0f:84:d4:2c:47: da:e8:17:c0:64:34:b7:5f:d3:91:d9:6b:4f:9c:bb:a7:76:c7: 80:c6:26:3b:e1:bb:89:2a:16:f2:9d:20:e4:e0:bf:17:3b:49: da:52:66:f6:ca:e7:d7:a8:f0:98:23:49:b5:05:86:39:f4:72: 08:0f:99:e4:b4:4b:1a:de:eb:9f:73:ec:24:d2:61:40:e2:f7: 18:29:16:7a:5a:0a:82:24:36:6e:fe:65:c6:9e:9e:5e:c4:22: 9e:bb:78:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRXU2jCNCc2SiE75NETNHnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiODgyY2Q2ZDE5NmFlMWY5Njg3MmFjYWU3ODMyMWJlN2E5 MmI4ZWIwHhcNMjUxMjEyMDcwMTI1WhcNMjUxMjEzMDcwMTI1WjAzMTEwLwYDVQQD EygwZjRiMWJkMGEwZjg1NzMwMWQzYmY4YzAzMzgzZTg5YzMwMGFjZjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPeJwPu5uJrmqwtpU6OJkklECuBy pkU4jhAn91B200HF0S0nvuVtNnwGgFiFVtzlOnrZD+qyIzdGJ158fUsw6XX8yLRW QcS30PcCbDtiorZHE1dpkNlzHy8N7WgLD9EbzOAydTP4eF+V015LpKEuhQX+UJwd VpZsr6tjcJRLTQNBM3DnhmKnBiq2yVALaid477jCdaSUG3HQFBhB85VxDcAYHzlV ym5L4PRsw/w4y9CR8EKObZshIJBOCRiKrj8/txBi5R5Q5SeysyaT0l5olN6rL+MR SKg3WTfI88AaooFESc9jibI22JxZs/XopEgGMZtMg/4RpIHm2dCSS/rCbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA9LG9Cg+FcwHTv4wDOD6JwwCs+PMB8GA1UdIwQY MBaAFKuILNbRlq4flocqyueDIb56krjrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTRnczF0R1dyaC1XaHlySzU0TWh2bnFTdU9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80YjZjYzktMDlkMy00Njc4LWIwYTct OTUwYzE4MDU5NmQwLzEvcTRnczF0R1dyaC1XaHlySzU0TWh2bnFTdU9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS80YjZjYzktMDlkMy00Njc4LWIwYTctOTUwYzE4MDU5NmQw LzEvcTRnczF0R1dyaC1XaHlySzU0TWh2bnFTdU9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmJamsOkE qZUZ5QOM/RFYMFL54GsEzeX0B7gdZ1nSR6ermtQ5FHYAcN8VPLgmF0DZvO+LmyNf jaTuCPSCDUe+L+J2IoBmz+N+13JWbmg003SzeJzJ4i6VVA2W0PUm0xj0tJ+WzeUA g5MfKO3lAHomT7i+vluZTP7tfGm2sx9Q2p6juAoWgpxq9Zxa8YCvH+hsvW2aKKRj rC5ISzsuYQ+E1CxH2ugXwGQ0t1/TkdlrT5y7p3bHgMYmO+G7iSoW8p0g5OC/FztJ 2lJm9srn16jwmCNJtQWGOfRyCA+Z5LRLGt7rn3PsJNJhQOL3GCkWeloKgiQ2bv5l xp6eXsQinrt4HA== -----END CERTIFICATE-----Generated at Fri Dec 12 15:34:52 2025 by rpki-client