This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft File: Q7iP8e37ZyBmAwJncaquyEuLHrg.mft (raw, json) Hash identifier: IH0oMRES07HknxHzXiTiUgl3u1Nyxr4/s7B9eKOsOmI= Subject key identifier: A8:4C:F6:1C:A7:8C:1C:72:AC:F3:B9:F3:92:85:BA:D5:0A:84:E6:C9 Authority key identifier: 43:B8:8F:F1:ED:FB:67:20:66:03:02:67:71:AA:AE:C8:4B:8B:1E:B8 Certificate issuer: /CN=43b88ff1edfb67206603026771aaaec84b8b1eb8 Certificate serial: 019B5A51EE9B31D3DA95F47BCCA966CBAC81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q7iP8e37ZyBmAwJncaquyEuLHrg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft Manifest number: 0F47 Signing time: Fri 26 Dec 2025 11:01:17 +0000 Manifest this update: Fri 26 Dec 2025 11:01:17 +0000 Manifest next update: Sat 27 Dec 2025 11:01:17 +0000 Files and hashes: 1: Q7iP8e37ZyBmAwJncaquyEuLHrg.crl (hash: eYsMC9BMo3s0WDdpRrSqDmIB+kkPPM5kAVK0Tof21L8=) 2: gg-emnwJIGdBmpEHYh5OFvjnfmc.roa (hash: f0YF0XqFky78qYjbpn5730w15nHy84AldxyEdZxgOEY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft rsync://rpki.ripe.net/repository/DEFAULT/Q7iP8e37ZyBmAwJncaquyEuLHrg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:ee:9b:31:d3:da:95:f4:7b:cc:a9:66:cb:ac:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43b88ff1edfb67206603026771aaaec84b8b1eb8 Validity Not Before: Dec 26 11:01:17 2025 GMT Not After : Dec 27 11:01:17 2025 GMT Subject: CN=a84cf61ca78c1c72acf3b9f39285bad50a84e6c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:27:af:e3:f3:dc:40:d2:03:07:ee:26:07:47: d4:7f:63:ab:03:c5:f2:c5:50:90:ef:4e:11:71:ad: cf:60:1b:a2:80:b5:b0:48:91:3a:fc:39:b4:6d:d3: 15:54:53:70:bf:7c:eb:7f:57:f8:4d:a6:db:4c:65: d4:ce:4a:93:e5:7f:0f:e4:a4:91:59:85:16:df:95: 0d:2e:fa:55:35:cd:1a:fc:b7:fc:55:52:02:c3:e8: d5:b8:e5:cf:ef:88:bb:fd:eb:98:8f:34:ea:0d:76: 8b:59:72:ef:d3:d9:57:3a:10:23:53:cf:ba:9f:4b: 91:fd:7c:0e:da:a6:ce:e1:8f:b8:22:53:08:b2:0f: 38:ed:b3:9b:0a:28:f7:dc:23:63:0a:65:dd:88:2e: 3f:90:da:a3:b5:21:40:bf:4d:97:2b:90:71:f0:b7: 62:ae:0f:51:bb:6e:60:7e:e2:06:ff:10:5e:c6:ea: 20:df:70:d6:bd:7e:e4:7e:4a:42:c0:58:2f:55:73: a2:19:61:cf:fa:8d:0a:d2:22:fa:1e:79:0b:b7:80: 28:c3:e6:a8:e2:1c:72:5b:c2:91:61:af:5f:97:64: ad:2b:18:02:d4:6b:9c:74:71:cd:a2:ad:b4:38:72: 0d:d6:1c:72:f2:2a:e1:b8:91:6a:86:59:21:7d:dc: f3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:4C:F6:1C:A7:8C:1C:72:AC:F3:B9:F3:92:85:BA:D5:0A:84:E6:C9 X509v3 Authority Key Identifier: keyid:43:B8:8F:F1:ED:FB:67:20:66:03:02:67:71:AA:AE:C8:4B:8B:1E:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q7iP8e37ZyBmAwJncaquyEuLHrg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:e8:0c:fa:25:3e:5d:3b:31:cd:f7:f3:b7:f2:20:9f:c7:bb: f3:68:79:eb:41:48:38:6c:76:05:8d:29:67:89:97:ad:e3:07: 6d:c8:8b:9e:0f:8d:93:db:72:ef:5e:8c:7a:70:14:3b:ab:79: a7:ca:b8:76:42:db:11:ae:67:b0:bb:b3:c5:4c:60:db:b9:85: e1:90:3b:23:72:38:d5:64:a4:13:e1:0b:ad:d9:a0:1e:92:e1: a6:67:4e:d1:7b:84:61:07:8e:a6:9d:3d:7a:a5:89:9b:e7:84: 69:8d:51:02:7a:01:df:0d:9d:df:01:96:4d:25:af:6c:fb:24: 91:7f:77:0a:e6:89:64:63:b3:d2:cd:97:9f:05:ee:e3:e7:1f: 92:79:37:a3:3d:5c:16:6e:79:cd:e5:fd:1d:93:84:13:80:99: 95:a8:b2:1a:11:3d:b7:6c:48:c2:c4:39:54:a6:7d:2f:77:14: a8:6b:3c:8b:28:49:ee:6f:6d:75:3a:1a:1b:4b:ca:2c:d9:ad: 72:cb:3a:62:3d:5c:15:8e:9b:df:23:86:5e:ae:47:30:23:2b: e3:24:03:8e:8b:c0:5e:a0:1a:4f:4e:a7:4a:15:4d:f5:ff:16: 22:73:e8:7e:06:b0:d1:cc:cf:77:3b:10:0d:a0:84:e7:b1:35: c5:0f:60:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUe6bMdPalfR7zKlmy6yBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzYjg4ZmYxZWRmYjY3MjA2NjAzMDI2NzcxYWFhZWM4NGI4 YjFlYjgwHhcNMjUxMjI2MTEwMTE3WhcNMjUxMjI3MTEwMTE3WjAzMTEwLwYDVQQD EyhhODRjZjYxY2E3OGMxYzcyYWNmM2I5ZjM5Mjg1YmFkNTBhODRlNmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yev4/PcQNIDB+4mB0fUf2OrA8Xy xVCQ704Rca3PYBuigLWwSJE6/Dm0bdMVVFNwv3zrf1f4TabbTGXUzkqT5X8P5KSR WYUW35UNLvpVNc0a/Lf8VVICw+jVuOXP74i7/euYjzTqDXaLWXLv09lXOhAjU8+6 n0uR/XwO2qbO4Y+4IlMIsg847bObCij33CNjCmXdiC4/kNqjtSFAv02XK5Bx8Ldi rg9Ru25gfuIG/xBexuog33DWvX7kfkpCwFgvVXOiGWHP+o0K0iL6HnkLt4Aow+ao 4hxyW8KRYa9fl2StKxgC1GucdHHNoq20OHIN1hxy8irhuJFqhlkhfdzz7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKhM9hynjBxyrPO585KFutUKhObJMB8GA1UdIwQY MBaAFEO4j/Ht+2cgZgMCZ3GqrshLix64MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTdpUDhlMzdaeUJtQXdKbmNhcXV5RXVMSHJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9lNWM3ODMtNDM2ZS00NmU1LWI1MTQt YzFiZTVkYzAxYmJlLzEvUTdpUDhlMzdaeUJtQXdKbmNhcXV5RXVMSHJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9lNWM3ODMtNDM2ZS00NmU1LWI1MTQtYzFiZTVkYzAxYmJl LzEvUTdpUDhlMzdaeUJtQXdKbmNhcXV5RXVMSHJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEOgM+iU+ XTsxzffzt/Ign8e782h560FIOGx2BY0pZ4mXreMHbciLng+Nk9ty716MenAUO6t5 p8q4dkLbEa5nsLuzxUxg27mF4ZA7I3I41WSkE+ELrdmgHpLhpmdO0XuEYQeOpp09 eqWJm+eEaY1RAnoB3w2d3wGWTSWvbPskkX93CuaJZGOz0s2XnwXu4+cfknk3oz1c Fm55zeX9HZOEE4CZlaiyGhE9t2xIwsQ5VKZ9L3cUqGs8iyhJ7m9tdToaG0vKLNmt css6Yj1cFY6b3yOGXq5HMCMr4yQDjovAXqAaT06nShVN9f8WInPofgaw0czPdzsQ DaCE57E1xQ9gZw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:19 2025 by rpki-client