This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft File: Q1lOVdyWy5uYClKqY35IqNhzicA.mft (raw, json) Hash identifier: jJJngs0bec1VRUyuevwLJHcsinQT1vOY6PBOF8B8dvE= Subject key identifier: 97:C8:9A:EC:F6:3A:C2:30:DD:7C:DF:7B:FA:25:E5:CF:17:62:E3:96 Authority key identifier: 43:59:4E:55:DC:96:CB:9B:98:0A:52:AA:63:7E:48:A8:D8:73:89:C0 Certificate issuer: /CN=43594e55dc96cb9b980a52aa637e48a8d87389c0 Certificate serial: 019B42B70FB2C7921199928793102FEAA3C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1lOVdyWy5uYClKqY35IqNhzicA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 21:00:51 +0000 Manifest this update: Sun 21 Dec 2025 21:00:51 +0000 Manifest next update: Mon 22 Dec 2025 21:00:51 +0000 Files and hashes: 1: Hw_YSikfvPxyjT0Axd5BlNhcASU.roa (hash: r5NiDKMzZzkd/HZAp6j3JOaexr/ITFnq6zXIPbUaL0k=) 2: Q1lOVdyWy5uYClKqY35IqNhzicA.crl (hash: bJf+/v01wKmhdq3BHStWDtNiVQcJpx6tAIy0unAWEwI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft rsync://rpki.ripe.net/repository/DEFAULT/Q1lOVdyWy5uYClKqY35IqNhzicA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:0f:b2:c7:92:11:99:92:87:93:10:2f:ea:a3:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43594e55dc96cb9b980a52aa637e48a8d87389c0 Validity Not Before: Dec 21 21:00:51 2025 GMT Not After : Dec 22 21:00:51 2025 GMT Subject: CN=97c89aecf63ac230dd7cdf7bfa25e5cf1762e396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2f:36:74:46:4a:67:97:c4:f2:e9:ad:e9:f7: 50:5b:c2:b2:98:c6:e7:a4:7b:bf:4e:83:78:cd:cb: b3:6d:8d:da:ed:6f:f6:e8:94:ea:ea:21:0c:6d:91: 55:80:ab:f6:de:b4:66:cf:4d:8d:c0:57:7b:3b:d1: 4d:28:a0:63:cf:31:e2:ad:61:16:01:1f:3f:2f:b4: cf:3c:6b:24:57:a8:b1:0f:a6:99:f7:50:bd:21:7f: d3:87:4a:ed:39:99:53:5b:8f:48:f6:0d:f5:de:66: 7a:6e:d2:36:20:35:99:31:f0:f3:2c:15:bf:cb:69: 2b:65:0f:44:bd:fa:56:91:bc:50:a0:5c:d6:43:bd: 11:1b:8c:39:b2:02:04:a6:c7:57:df:6b:70:9a:f0: ed:63:0f:bd:8f:7c:86:64:e2:79:44:24:80:06:5c: b5:d9:f5:a5:c3:95:9c:3a:69:4c:1b:9e:a5:47:2f: c9:b3:e9:f1:42:f8:48:ad:1c:f7:1a:61:c7:a7:06: a9:47:0e:3c:15:91:4d:88:57:98:f9:58:ca:63:3f: 10:7e:ed:00:9d:68:0c:a7:d1:6e:dc:d8:23:d2:d3: 91:e1:9a:1a:61:3c:ef:f7:2c:e0:39:c0:20:71:9d: eb:04:b2:70:f6:56:f9:be:a4:29:66:f6:09:e8:a7: 15:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C8:9A:EC:F6:3A:C2:30:DD:7C:DF:7B:FA:25:E5:CF:17:62:E3:96 X509v3 Authority Key Identifier: keyid:43:59:4E:55:DC:96:CB:9B:98:0A:52:AA:63:7E:48:A8:D8:73:89:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1lOVdyWy5uYClKqY35IqNhzicA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:72:34:9b:c6:09:ae:7c:fd:63:ab:e2:b4:2c:47:20:ac:48: d9:c3:c0:e3:01:38:42:86:34:9b:58:8c:c1:40:3d:2e:a9:18: 42:e5:3b:f9:4a:26:ce:ae:d0:e8:ee:a2:df:89:57:ab:fb:5d: fe:8b:a9:b2:51:3e:81:61:c4:3e:90:52:cd:ed:cb:31:6f:b9: 1e:be:57:15:12:a5:2f:d9:18:3e:b1:3d:ea:e0:43:78:a6:c7: c7:c0:06:21:31:6f:0a:35:27:7a:23:8e:e8:d3:fc:cc:4d:0a: 8e:52:33:d9:55:b4:df:3e:17:9a:c0:34:df:0e:0e:a5:b8:6e: b3:7f:bc:b7:39:ef:17:92:f0:b9:79:4c:17:0b:bf:aa:3c:dd: 10:ed:59:dd:0a:4b:3c:1e:a4:fd:c2:f4:32:40:ba:a9:74:b9: 49:a7:d4:e9:b3:64:05:1e:e6:bc:2c:f6:d2:b2:db:77:0a:94: 56:c8:d7:53:8e:c9:ed:0c:b3:02:50:ba:32:59:51:93:ad:c5: eb:62:61:2b:06:7a:92:f2:6d:57:c5:1c:b6:4a:08:e4:b8:a5: fd:58:2b:77:a6:13:4b:19:b4:25:18:c3:2d:e6:68:f4:b0:3d: 17:32:7d:6b:4c:b6:7f:0e:76:19:fd:83:a8:29:34:b6:0e:c3: 7a:8b:89:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCtw+yx5IRmZKHkxAv6qPBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzNTk0ZTU1ZGM5NmNiOWI5ODBhNTJhYTYzN2U0OGE4ZDg3 Mzg5YzAwHhcNMjUxMjIxMjEwMDUxWhcNMjUxMjIyMjEwMDUxWjAzMTEwLwYDVQQD Eyg5N2M4OWFlY2Y2M2FjMjMwZGQ3Y2RmN2JmYTI1ZTVjZjE3NjJlMzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtC82dEZKZ5fE8umt6fdQW8KymMbn pHu/ToN4zcuzbY3a7W/26JTq6iEMbZFVgKv23rRmz02NwFd7O9FNKKBjzzHirWEW AR8/L7TPPGskV6ixD6aZ91C9IX/Th0rtOZlTW49I9g313mZ6btI2IDWZMfDzLBW/ y2krZQ9EvfpWkbxQoFzWQ70RG4w5sgIEpsdX32twmvDtYw+9j3yGZOJ5RCSABly1 2fWlw5WcOmlMG56lRy/Js+nxQvhIrRz3GmHHpwapRw48FZFNiFeY+VjKYz8Qfu0A nWgMp9Fu3Ngj0tOR4ZoaYTzv9yzgOcAgcZ3rBLJw9lb5vqQpZvYJ6KcVHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJfImuz2OsIw3Xzfe/ol5c8XYuOWMB8GA1UdIwQY MBaAFENZTlXclsubmApSqmN+SKjYc4nAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTFsT1ZkeVd5NXVZQ2xLcVkzNUlxTmh6aWNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84NWUxMjUtODVkNi00M2YwLTk4YmYt ZDhmYTBlZGEzYWJlLzEvUTFsT1ZkeVd5NXVZQ2xLcVkzNUlxTmh6aWNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS84NWUxMjUtODVkNi00M2YwLTk4YmYtZDhmYTBlZGEzYWJl LzEvUTFsT1ZkeVd5NXVZQ2xLcVkzNUlxTmh6aWNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd3I0m8YJ rnz9Y6vitCxHIKxI2cPA4wE4QoY0m1iMwUA9LqkYQuU7+Uomzq7Q6O6i34lXq/td /oupslE+gWHEPpBSze3LMW+5Hr5XFRKlL9kYPrE96uBDeKbHx8AGITFvCjUneiOO 6NP8zE0KjlIz2VW03z4XmsA03w4Opbhus3+8tznvF5LwuXlMFwu/qjzdEO1Z3QpL PB6k/cL0MkC6qXS5SafU6bNkBR7mvCz20rLbdwqUVsjXU47J7QyzAlC6MllRk63F 62JhKwZ6kvJtV8UctkoI5Lil/Vgrd6YTSxm0JRjDLeZo9LA9FzJ9a0y2fw52Gf2D qCk0tg7DeouJYg== -----END CERTIFICATE-----Generated at Mon Dec 22 02:17:56 2025 by rpki-client