This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft File: Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft (raw, json) Hash identifier: 4owH9GJhX7nhS8bSfL1PcbRTrXM1P92XHIc/qMhkBZM= Subject key identifier: FC:BB:D2:65:C6:A2:F7:0A:66:57:5F:6C:31:51:D2:D4:29:5B:05:7E Authority key identifier: 43:9E:43:21:CF:21:8B:92:65:D5:63:B5:BE:A5:1D:BF:17:66:CE:C8 Certificate issuer: /CN=439e4321cf218b9265d563b5bea51dbf1766cec8 Certificate serial: 019B34C570C463B55AB5F584710A14F18387 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft Manifest number: 049C Signing time: Fri 19 Dec 2025 04:01:53 +0000 Manifest this update: Fri 19 Dec 2025 04:01:53 +0000 Manifest next update: Sat 20 Dec 2025 04:01:53 +0000 Files and hashes: 1: Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl (hash: bLct3dhWm++CVPBzNgHmFVYL9WN/K1WzLOzhy9DZ7pU=) 2: nK8r6BW7X2Id54DEAsyFnRHZOsA.roa (hash: ++ZMcQT7NmyLhSBPeMlDbkE+/3o7EgGxMfB7gUiQzt0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:70:c4:63:b5:5a:b5:f5:84:71:0a:14:f1:83:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439e4321cf218b9265d563b5bea51dbf1766cec8 Validity Not Before: Dec 19 04:01:53 2025 GMT Not After : Dec 20 04:01:53 2025 GMT Subject: CN=fcbbd265c6a2f70a66575f6c3151d2d4295b057e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:43:02:c5:51:ba:e5:69:b1:1e:b3:6c:7b:05: 63:24:68:81:88:5d:42:f9:9f:fd:69:43:50:e8:cd: eb:d1:3d:b4:43:d5:ca:03:11:72:24:5f:ef:77:6b: 94:f9:10:f8:59:cb:48:5c:2d:56:d4:61:fb:85:6d: 0a:83:fe:30:ca:39:cd:dc:d2:5a:c2:23:f3:b0:16: 27:35:37:a8:a6:a0:17:38:58:ab:37:bb:45:ba:16: 03:57:26:5d:48:06:0a:a4:67:69:02:0e:ec:96:10: ea:21:97:48:de:dc:49:18:c6:9d:1a:68:8c:12:c2: 63:fb:f7:17:aa:af:95:5e:97:d0:8c:5a:8b:50:73: be:a6:3b:f8:75:f1:87:21:8f:e1:2d:1e:35:20:30: 87:fc:c3:12:cb:e6:a5:27:a3:4e:63:69:f8:ab:63: 27:a2:5d:a3:0f:05:5b:ad:9f:ac:98:e1:6f:5d:50: 05:6a:3a:7a:1f:dc:a5:2f:5d:10:0c:f8:c7:eb:2a: 2d:fe:84:be:d1:23:0e:be:d2:9c:60:ea:df:fc:42: 81:b1:88:de:26:d4:27:c1:c0:5d:3f:bf:47:08:3b: 39:5e:6f:64:cb:83:ff:5c:b6:14:9b:80:2a:58:e2: 6d:2f:3f:19:45:a8:d9:90:8d:5f:10:30:19:54:29: 01:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:BB:D2:65:C6:A2:F7:0A:66:57:5F:6C:31:51:D2:D4:29:5B:05:7E X509v3 Authority Key Identifier: keyid:43:9E:43:21:CF:21:8B:92:65:D5:63:B5:BE:A5:1D:BF:17:66:CE:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:03:f5:3f:36:e3:50:a2:28:0e:0d:a2:dc:f5:ef:93:ba:d5: 68:39:39:e3:d8:a8:d4:39:e8:28:bf:08:81:c1:08:95:b0:5d: 31:c8:4d:11:a4:19:a5:2c:54:35:48:d8:8b:08:98:30:a6:d1: 4e:b9:49:c6:ad:bd:27:02:50:47:b1:4f:34:ef:08:12:a2:fc: e8:94:d2:89:d3:c4:88:1f:fd:73:55:f8:b2:1e:5c:f0:a4:b5: 94:cb:39:7d:62:8b:e3:8e:45:ff:52:2c:36:93:be:7b:2e:93: 55:46:f8:a8:f6:20:40:02:b7:7e:b5:62:81:a0:d0:f9:61:74: a8:22:6e:b9:5d:69:a8:de:7f:7c:a9:ca:f5:e5:1c:c1:04:c8: db:ec:ac:92:48:d0:5a:de:0a:1d:15:a1:ed:30:df:99:46:a8: ea:3b:dc:91:a0:2d:89:57:f4:c8:2d:7b:65:80:f0:db:ba:7f: 35:9a:0f:2b:39:6a:20:d9:57:31:6b:3d:45:3c:38:b6:3a:e9: 19:55:b5:61:35:8b:60:69:ed:e9:a1:bc:bb:05:2d:9f:1f:44: 76:47:d2:ad:41:38:89:fc:21:44:33:47:35:ef:81:24:9c:41: bf:17:6e:69:32:9b:c9:e7:c2:f0:96:8a:c9:64:5e:13:93:09: 66:d2:1c:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xXDEY7VatfWEcQoU8YOHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzOWU0MzIxY2YyMThiOTI2NWQ1NjNiNWJlYTUxZGJmMTc2 NmNlYzgwHhcNMjUxMjE5MDQwMTUzWhcNMjUxMjIwMDQwMTUzWjAzMTEwLwYDVQQD EyhmY2JiZDI2NWM2YTJmNzBhNjY1NzVmNmMzMTUxZDJkNDI5NWIwNTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkMCxVG65WmxHrNsewVjJGiBiF1C +Z/9aUNQ6M3r0T20Q9XKAxFyJF/vd2uU+RD4WctIXC1W1GH7hW0Kg/4wyjnN3NJa wiPzsBYnNTeopqAXOFirN7tFuhYDVyZdSAYKpGdpAg7slhDqIZdI3txJGMadGmiM EsJj+/cXqq+VXpfQjFqLUHO+pjv4dfGHIY/hLR41IDCH/MMSy+alJ6NOY2n4q2Mn ol2jDwVbrZ+smOFvXVAFajp6H9ylL10QDPjH6yot/oS+0SMOvtKcYOrf/EKBsYje JtQnwcBdP79HCDs5Xm9ky4P/XLYUm4AqWOJtLz8ZRajZkI1fEDAZVCkBXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPy70mXGovcKZldfbDFR0tQpWwV+MB8GA1UdIwQY MBaAFEOeQyHPIYuSZdVjtb6lHb8XZs7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTU1REljOGhpNUpsMVdPMXZxVWR2eGRtenNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZGQ3NTYtMzg5OS00YTQ5LWI2ZmUt MTU1MTVhZDliNjA1LzEvUTU1REljOGhpNUpsMVdPMXZxVWR2eGRtenNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC82ZGQ3NTYtMzg5OS00YTQ5LWI2ZmUtMTU1MTVhZDliNjA1 LzEvUTU1REljOGhpNUpsMVdPMXZxVWR2eGRtenNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhwP1Pzbj UKIoDg2i3PXvk7rVaDk549io1DnoKL8IgcEIlbBdMchNEaQZpSxUNUjYiwiYMKbR TrlJxq29JwJQR7FPNO8IEqL86JTSidPEiB/9c1X4sh5c8KS1lMs5fWKL445F/1Is NpO+ey6TVUb4qPYgQAK3frVigaDQ+WF0qCJuuV1pqN5/fKnK9eUcwQTI2+yskkjQ Wt4KHRWh7TDfmUao6jvckaAtiVf0yC17ZYDw27p/NZoPKzlqINlXMWs9RTw4tjrp GVW1YTWLYGnt6aG8uwUtnx9EdkfSrUE4ifwhRDNHNe+BJJxBvxduaTKbyefC8JaK yWReE5MJZtIc9A== -----END CERTIFICATE-----Generated at Fri Dec 19 12:19:29 2025 by rpki-client