This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft File: Q68umH0rY63apa3BePMekNh2qqc.mft (raw, json) Hash identifier: eObCbGLS+RUswr3E3q6/Y7LNYSSsEF72gfsc30xaw1A= Subject key identifier: 3D:22:7E:8B:FD:B9:AE:64:B5:2E:FE:D9:E4:8D:4B:8F:D4:FE:91:4D Authority key identifier: 43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7 Certificate issuer: /CN=43af2e987d2b63addaa5adc178f31e90d876aaa7 Certificate serial: 019B11261CE248C8FF84973A70C7FE63561E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft Manifest number: 1775 Signing time: Fri 12 Dec 2025 06:01:08 +0000 Manifest this update: Fri 12 Dec 2025 06:01:08 +0000 Manifest next update: Sat 13 Dec 2025 06:01:08 +0000 Files and hashes: 1: 71gvIX06FZhti5C8KqbG-iL3ji8.roa (hash: ixliMnZsbefklIbCdZSQC08KvvVc2/x3CDK+CGl2CBA=) 2: IEgYKG7Z6QdmhTg8jbadzlqUL0A.roa (hash: czHiBi7aC7gYGx6TuroDY+vPvsviuucmLi9+d2nYML8=) 3: N7dkJGPV_ClH0zdsWhUXQhLf-fI.roa (hash: 61rIBj7suoaRe9FEYDOMgKbW4Bfv19fnscul85uRvy8=) 4: Q68umH0rY63apa3BePMekNh2qqc.crl (hash: d9ayTMLXLKUdZdw6Vb9Cg92UBlsC4GkcGKKKydj1Muo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:26:1c:e2:48:c8:ff:84:97:3a:70:c7:fe:63:56:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43af2e987d2b63addaa5adc178f31e90d876aaa7 Validity Not Before: Dec 12 06:01:08 2025 GMT Not After : Dec 13 06:01:08 2025 GMT Subject: CN=3d227e8bfdb9ae64b52efed9e48d4b8fd4fe914d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:38:90:7b:90:16:a2:1e:03:1d:cb:d7:59:7e: ae:37:07:bb:db:64:75:0d:98:e4:96:30:96:c0:f8: 18:6e:54:48:57:68:da:7b:d2:c1:70:81:c3:0f:97: be:dc:cd:56:1e:15:25:f6:4d:a4:f3:d6:61:1b:5c: 23:d7:5b:62:e5:03:98:92:b6:d0:c6:d2:c0:d6:5d: 86:e8:b4:93:94:d6:03:38:99:39:5d:05:ab:6f:e6: 43:2a:4d:52:82:9f:e9:f0:3f:58:63:c8:4b:53:f0: 29:39:7f:6e:e7:ef:03:d4:90:b8:95:d6:cb:94:51: bf:ad:f4:d0:25:ea:87:fb:ff:71:48:72:d0:5e:6e: f9:d4:6b:1d:f1:0c:f4:11:6e:e2:b4:81:1c:ee:94: d0:b3:46:5c:43:9d:16:a3:36:69:d2:54:b6:36:83: b5:90:f2:f6:37:65:ac:d0:38:c6:10:23:bf:cb:13: d1:8b:85:c6:b9:75:b7:45:fd:a6:27:01:5c:a4:1e: 34:86:3e:fd:66:bc:ec:35:9e:2c:fe:66:83:20:c2: 1d:d5:69:7c:e8:38:d3:79:0d:c5:5d:25:e5:53:f2: 84:23:98:f5:f2:ad:db:12:27:76:60:e3:0e:32:f0: 0a:71:98:7f:33:e8:19:3a:84:37:12:2e:dd:f4:37: 64:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:22:7E:8B:FD:B9:AE:64:B5:2E:FE:D9:E4:8D:4B:8F:D4:FE:91:4D X509v3 Authority Key Identifier: keyid:43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:f5:e1:8f:6e:e3:c1:f1:f3:2d:2c:11:d9:39:a2:5f:79:36: 9a:09:3d:67:d8:8c:28:e3:d5:98:f0:df:d3:f4:7f:c7:b8:69: bd:cc:ff:74:bc:d6:df:d7:3b:d6:f1:bf:bf:c7:f8:b3:fc:bb: 48:1f:59:42:61:bc:5a:e5:8c:1a:6d:b1:6e:37:4c:f3:62:20: 9c:2f:c9:45:6f:5d:0b:01:eb:73:bc:90:18:0e:fb:20:b5:ee: cb:7f:91:1c:85:d0:49:8f:6a:85:03:64:33:72:9a:d2:38:5a: 81:6b:40:07:7a:d9:0e:d2:62:37:bd:24:af:a2:06:9a:1f:55: bf:cd:2d:92:2a:e1:98:d9:cf:ae:7a:56:3b:ad:fe:7c:ce:91: f0:ba:a3:15:ac:c7:06:41:d0:be:85:68:bb:b2:18:a5:ae:25: e5:a5:8d:b4:62:62:f0:79:68:6e:3f:ff:df:aa:e4:09:e9:cb: 6c:ad:b3:c4:cd:42:bd:55:cc:2b:65:22:38:f1:f0:40:4d:5d: 8c:06:11:09:67:6c:a2:b3:26:5e:0a:20:18:a5:2d:15:e3:e1: 69:ba:e8:61:20:11:f0:69:40:46:e3:46:e8:68:6a:3e:25:5a: dc:d6:79:67:26:20:28:f7:75:aa:ac:0b:45:e7:c5:18:20:1f: b8:b2:ee:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRJhziSMj/hJc6cMf+Y1YeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzYWYyZTk4N2QyYjYzYWRkYWE1YWRjMTc4ZjMxZTkwZDg3 NmFhYTcwHhcNMjUxMjEyMDYwMTA4WhcNMjUxMjEzMDYwMTA4WjAzMTEwLwYDVQQD EygzZDIyN2U4YmZkYjlhZTY0YjUyZWZlZDllNDhkNGI4ZmQ0ZmU5MTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTiQe5AWoh4DHcvXWX6uNwe722R1 DZjkljCWwPgYblRIV2jae9LBcIHDD5e+3M1WHhUl9k2k89ZhG1wj11ti5QOYkrbQ xtLA1l2G6LSTlNYDOJk5XQWrb+ZDKk1Sgp/p8D9YY8hLU/ApOX9u5+8D1JC4ldbL lFG/rfTQJeqH+/9xSHLQXm751Gsd8Qz0EW7itIEc7pTQs0ZcQ50WozZp0lS2NoO1 kPL2N2Ws0DjGECO/yxPRi4XGuXW3Rf2mJwFcpB40hj79ZrzsNZ4s/maDIMId1Wl8 6DjTeQ3FXSXlU/KEI5j18q3bEid2YOMOMvAKcZh/M+gZOoQ3Ei7d9DdkXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD0ifov9ua5ktS7+2eSNS4/U/pFNMB8GA1UdIwQY MBaAFEOvLph9K2Ot2qWtwXjzHpDYdqqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTY4dW1IMHJZNjNhcGEzQmVQTWVrTmgycXFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82Njg0MzctOTdjMi00OGMyLWI3Yzgt Y2M3NzQ2NzE5NDA2LzEvUTY4dW1IMHJZNjNhcGEzQmVQTWVrTmgycXFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi82Njg0MzctOTdjMi00OGMyLWI3YzgtY2M3NzQ2NzE5NDA2 LzEvUTY4dW1IMHJZNjNhcGEzQmVQTWVrTmgycXFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHvXhj27j wfHzLSwR2TmiX3k2mgk9Z9iMKOPVmPDf0/R/x7hpvcz/dLzW39c71vG/v8f4s/y7 SB9ZQmG8WuWMGm2xbjdM82IgnC/JRW9dCwHrc7yQGA77ILXuy3+RHIXQSY9qhQNk M3Ka0jhagWtAB3rZDtJiN70kr6IGmh9Vv80tkirhmNnPrnpWO63+fM6R8LqjFazH BkHQvoVou7IYpa4l5aWNtGJi8Hlobj//36rkCenLbK2zxM1CvVXMK2UiOPHwQE1d jAYRCWdsorMmXgogGKUtFePhabroYSAR8GlARuNG6GhqPiVa3NZ5ZyYgKPd1qqwL RefFGCAfuLLuNQ== -----END CERTIFICATE-----Generated at Fri Dec 12 09:33:07 2025 by rpki-client