This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft File: q6gfB6STo-ZDdS5mvYFG9Xca34g.mft (raw, json) Hash identifier: P64FzklMSiY7/tn+K9sukYjUZETUx6gC+6ZHQLTUox0= Subject key identifier: 4B:3A:6B:87:C6:F0:7D:00:8F:5F:F1:95:CE:07:0A:02:76:CA:7F:A1 Authority key identifier: AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88 Certificate issuer: /CN=aba81f07a493a3e643752e66bd8146f5771adf88 Certificate serial: 019B0E5B8711001465184D63F3FA610C418D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft Manifest number: 174B Signing time: Thu 11 Dec 2025 17:00:37 +0000 Manifest this update: Thu 11 Dec 2025 17:00:37 +0000 Manifest next update: Fri 12 Dec 2025 17:00:37 +0000 Files and hashes: 1: _7nFqf5lz5tcDACtAr9RF1OczjU.roa (hash: +++HO383AAZs8DTGnKyEbL2DY3xsbwwnVwL8cUM+bTU=) 2: dABSJLRi0TLcB4OYtofXt8vc5mI.roa (hash: LxLgAjIFySbpl2HK3ef4vXYPLVBckR21OqAdcEmHAdI=) 3: q6gfB6STo-ZDdS5mvYFG9Xca34g.crl (hash: eDT+bd4G+SZwBwv19kAibMt9+/wLU4aPqhAem8D3rLY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 17:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5b:87:11:00:14:65:18:4d:63:f3:fa:61:0c:41:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aba81f07a493a3e643752e66bd8146f5771adf88 Validity Not Before: Dec 11 17:00:37 2025 GMT Not After : Dec 12 17:00:37 2025 GMT Subject: CN=4b3a6b87c6f07d008f5ff195ce070a0276ca7fa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:36:18:ee:e0:a7:91:d2:a3:ac:a8:e8:60:3b: 86:76:69:69:6c:02:a2:d8:32:99:11:88:09:c6:4a: 02:bf:7b:51:a3:00:b2:21:f3:aa:ec:a2:3b:5d:1d: 29:29:ea:41:b1:ba:b2:fc:91:85:6d:cb:b2:0b:d7: 73:7c:5f:cd:6d:f6:b0:22:39:e5:d0:58:dd:c9:93: 9a:ce:38:ba:58:7d:90:10:36:92:03:4f:62:5f:5c: 61:5d:df:7b:8f:2e:36:b7:df:17:ca:9e:43:d2:3f: 2b:38:28:cc:ad:5b:79:cd:22:29:7d:51:3e:e4:e7: c5:aa:b9:38:85:e7:db:bc:e4:e0:39:f6:90:d6:e1: e8:64:2c:c6:19:60:d6:00:86:53:b6:ce:36:7d:f0: 77:28:19:62:44:18:8c:d5:f9:1b:7f:01:46:f7:6e: 4d:15:55:79:bc:8b:c2:0d:5f:eb:50:91:3b:e7:5a: 6f:da:35:60:6a:56:8a:24:e4:ba:90:ad:fa:7e:6b: d5:09:e0:90:3a:26:00:3d:1e:78:86:8a:3d:85:da: 14:22:69:ee:95:d6:93:22:fd:04:f6:97:ef:83:40: 48:64:a5:cd:a4:55:d9:a6:c5:70:28:bc:4f:95:95: 55:76:6c:f9:f6:a5:a1:f6:00:f1:f7:11:94:fb:9a: e1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:3A:6B:87:C6:F0:7D:00:8F:5F:F1:95:CE:07:0A:02:76:CA:7F:A1 X509v3 Authority Key Identifier: keyid:AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:c7:44:5d:66:f5:79:d3:f0:e5:1d:34:99:a0:11:e1:fd:1d: c9:8f:3b:55:73:8f:b8:66:25:ef:35:5d:31:ce:32:a2:b9:59: a6:12:aa:02:c5:f3:b2:d5:df:f5:fe:66:4a:8d:26:9b:da:ea: 62:79:ca:70:df:7a:34:f0:f3:22:32:86:a8:b0:f5:a2:7a:81: e7:57:44:52:c6:a2:b2:0a:a4:92:7b:a6:a9:a9:0d:2b:ce:68: c4:1d:10:43:d9:fa:33:b0:90:e4:9b:85:12:a4:fe:d9:4d:93: 36:79:fa:b2:ca:c3:bf:fa:db:91:fc:5f:22:f8:65:a5:aa:c7: 2c:ce:f1:47:9d:15:ba:1e:a2:84:42:9b:ac:59:24:a3:31:fd: cc:31:15:03:a0:a8:89:1e:47:39:15:35:7d:93:9a:d2:52:70: b5:64:3b:06:93:81:eb:08:29:2f:01:fd:2b:c9:80:e5:79:57: a5:e9:ca:d8:4d:9c:07:67:9f:2b:e4:92:f7:cb:44:7f:b6:70: bd:19:22:ca:b1:4a:78:c3:a5:3e:57:00:31:2d:74:3d:82:35: 28:ab:88:34:98:95:c7:27:6d:fb:f4:91:ce:69:4b:0b:00:5b: 2d:74:7d:c0:d1:3f:ed:bf:39:a6:d2:0f:dc:36:50:5c:56:d1: c6:47:67:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOW4cRABRlGE1j8/phDEGNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYTgxZjA3YTQ5M2EzZTY0Mzc1MmU2NmJkODE0NmY1Nzcx YWRmODgwHhcNMjUxMjExMTcwMDM3WhcNMjUxMjEyMTcwMDM3WjAzMTEwLwYDVQQD Eyg0YjNhNmI4N2M2ZjA3ZDAwOGY1ZmYxOTVjZTA3MGEwMjc2Y2E3ZmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DYY7uCnkdKjrKjoYDuGdmlpbAKi 2DKZEYgJxkoCv3tRowCyIfOq7KI7XR0pKepBsbqy/JGFbcuyC9dzfF/NbfawIjnl 0FjdyZOazji6WH2QEDaSA09iX1xhXd97jy42t98Xyp5D0j8rOCjMrVt5zSIpfVE+ 5OfFqrk4hefbvOTgOfaQ1uHoZCzGGWDWAIZTts42ffB3KBliRBiM1fkbfwFG925N FVV5vIvCDV/rUJE751pv2jVgalaKJOS6kK36fmvVCeCQOiYAPR54hoo9hdoUImnu ldaTIv0E9pfvg0BIZKXNpFXZpsVwKLxPlZVVdmz59qWh9gDx9xGU+5rhtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEs6a4fG8H0Aj1/xlc4HCgJ2yn+hMB8GA1UdIwQY MBaAFKuoHwekk6PmQ3UuZr2BRvV3Gt+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTZnZkI2U1RvLVpEZFM1bXZZRkc5WGNhMzRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC84NGUyY2UtMWVhYy00ZTEyLWFjNTgt NTFjM2NjY2U3MmRmLzEvcTZnZkI2U1RvLVpEZFM1bXZZRkc5WGNhMzRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC84NGUyY2UtMWVhYy00ZTEyLWFjNTgtNTFjM2NjY2U3MmRm LzEvcTZnZkI2U1RvLVpEZFM1bXZZRkc5WGNhMzRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEMdEXWb1 edPw5R00maAR4f0dyY87VXOPuGYl7zVdMc4yorlZphKqAsXzstXf9f5mSo0mm9rq YnnKcN96NPDzIjKGqLD1onqB51dEUsaisgqkknumqakNK85oxB0QQ9n6M7CQ5JuF EqT+2U2TNnn6ssrDv/rbkfxfIvhlparHLM7xR50Vuh6ihEKbrFkkozH9zDEVA6Co iR5HORU1fZOa0lJwtWQ7BpOB6wgpLwH9K8mA5XlXpenK2E2cB2efK+SS98tEf7Zw vRkiyrFKeMOlPlcAMS10PYI1KKuINJiVxydt+/SRzmlLCwBbLXR9wNE/7b85ptIP 3DZQXFbRxkdngw== -----END CERTIFICATE-----Generated at Fri Dec 12 02:38:08 2025 by rpki-client