This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft File: Q2T-c0GbyG1fLnK0FLa01DedW_U.mft (raw, json) Hash identifier: Wd8RC7xj7Qxvju+ivhXLlQFMzVQCEsjl1xsHDYO88ic= Subject key identifier: 36:48:9A:3F:45:66:D8:95:83:94:F8:5A:D4:82:3F:D2:C7:84:90:46 Authority key identifier: 43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5 Certificate issuer: /CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5 Certificate serial: 019AF954D845F75F09935FDDFF3CBC892BF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft Manifest number: 176A Signing time: Sun 07 Dec 2025 15:01:18 +0000 Manifest this update: Sun 07 Dec 2025 15:01:18 +0000 Manifest next update: Mon 08 Dec 2025 15:01:18 +0000 Files and hashes: 1: F_vaOKUje6wVSmmdNWKQj90pJEs.roa (hash: lSDHkW2GLzRQJdNUjIFPaHP5/gFVElG0iEqr3Re75Vs=) 2: Q2T-c0GbyG1fLnK0FLa01DedW_U.crl (hash: 20k+XcXeidAjsipueyGLRJnqLSxiZiWdLDn4Stx1SeE=) 3: mJRbgDWTWOF5d-waA4kjPdUwfKM.roa (hash: Cjg8Drs7NcYUITHcRSLo1PVz8MlOvWaOvbO+s0BbSe0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 15:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:54:d8:45:f7:5f:09:93:5f:dd:ff:3c:bc:89:2b:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5 Validity Not Before: Dec 7 15:01:18 2025 GMT Not After : Dec 8 15:01:18 2025 GMT Subject: CN=36489a3f4566d8958394f85ad4823fd2c7849046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8a:f6:5d:60:67:cb:ac:36:fe:97:37:94:cf: 90:9f:a5:85:97:4b:f4:17:b7:56:fc:fc:31:13:48: 57:1e:59:3f:0e:5a:bf:79:08:ab:72:0a:e3:c8:f4: ad:82:7a:62:5d:23:86:2b:e9:90:ad:cc:8a:c3:8d: 6a:3c:31:49:55:a0:88:99:0e:3d:e0:34:62:c9:03: 58:7f:77:f5:54:02:0f:73:c1:bd:d0:ea:70:44:68: 8e:8c:99:6b:20:4c:e6:30:cd:3f:2a:2a:c1:a0:16: 62:74:5a:1a:03:7b:cf:a8:ea:ce:ae:f1:22:7b:5c: d0:15:ab:e5:40:9f:53:87:a3:06:9f:ed:14:30:09: 88:c7:c4:82:e9:30:45:4e:40:43:8a:8a:70:c2:c6: 48:36:c2:6d:0a:60:2e:02:9b:c1:34:18:a9:fe:64: ff:a8:79:12:e3:84:54:dc:4a:75:6b:d5:5a:11:eb: bd:ea:38:af:d1:f3:28:3f:04:fd:8a:0f:6c:01:1a: 5e:c9:ab:f7:8d:28:fb:9d:b2:44:06:60:a2:21:b9: 58:cf:96:ee:25:ef:5d:c6:c2:73:53:a0:4f:20:d5: 48:28:2f:22:e9:52:df:52:0a:d0:aa:cb:47:e8:b3: a0:d6:9b:89:11:c4:6d:32:1e:64:36:fe:c6:a8:68: ac:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:48:9A:3F:45:66:D8:95:83:94:F8:5A:D4:82:3F:D2:C7:84:90:46 X509v3 Authority Key Identifier: keyid:43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:cb:a1:c7:71:a2:f4:9f:c1:c3:b3:ff:68:26:e5:9a:21:40: c8:18:5b:63:e7:bd:80:6c:bc:24:81:bd:7f:a5:0e:12:2b:14: cf:0e:e8:e5:44:9d:f3:27:39:2f:b9:a7:58:6a:a6:ba:40:a8: 30:b5:0d:3f:e0:42:77:47:19:36:26:da:ee:46:18:b3:c9:24: 8a:3c:0c:af:a7:c7:1f:45:f0:3f:7a:bb:65:c9:0c:ef:44:16: f6:b6:93:0f:12:b4:e7:bb:09:71:2e:07:2b:0c:44:c5:9e:b7: aa:8e:94:5b:d2:79:57:ac:0d:b0:1e:f0:3b:a8:64:b4:a8:d8: 08:1b:62:37:14:40:d1:8c:ba:44:61:45:ea:47:66:b6:97:ef: 2d:c7:d7:4e:c5:3a:cc:32:4b:1c:a0:6e:78:ca:35:9a:26:50: a0:de:3b:41:64:01:32:c1:d2:2d:f7:17:10:fb:b9:15:b7:28: 02:79:ea:2c:1b:16:a7:1f:cf:db:af:25:8b:56:70:38:ac:24: b9:a1:84:1f:45:af:86:50:b7:f0:86:87:30:9a:bb:e4:fd:92: 1c:45:e0:e7:46:e6:66:1a:85:ef:61:d5:2d:92:38:51:ee:2c: 18:68:9b:a5:9a:ea:de:93:20:ed:93:74:a8:2f:cf:96:0e:95: 4d:1b:1d:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr5VNhF918Jk1/d/zy8iSvzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzNjRmZTczNDE5YmM4NmQ1ZjJlNzJiNDE0YjZiNGQ0Mzc5 ZDViZjUwHhcNMjUxMjA3MTUwMTE4WhcNMjUxMjA4MTUwMTE4WjAzMTEwLwYDVQQD EygzNjQ4OWEzZjQ1NjZkODk1ODM5NGY4NWFkNDgyM2ZkMmM3ODQ5MDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Yr2XWBny6w2/pc3lM+Qn6WFl0v0 F7dW/PwxE0hXHlk/Dlq/eQircgrjyPStgnpiXSOGK+mQrcyKw41qPDFJVaCImQ49 4DRiyQNYf3f1VAIPc8G90OpwRGiOjJlrIEzmMM0/KirBoBZidFoaA3vPqOrOrvEi e1zQFavlQJ9Th6MGn+0UMAmIx8SC6TBFTkBDiopwwsZINsJtCmAuApvBNBip/mT/ qHkS44RU3Ep1a9VaEeu96jiv0fMoPwT9ig9sARpeyav3jSj7nbJEBmCiIblYz5bu Je9dxsJzU6BPINVIKC8i6VLfUgrQqstH6LOg1puJEcRtMh5kNv7GqGisfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDZImj9FZtiVg5T4WtSCP9LHhJBGMB8GA1UdIwQY MBaAFENk/nNBm8htXy5ytBS2tNQ3nVv1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTJULWMwR2J5RzFmTG5LMEZMYTAxRGVkV19VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8wYjE4MTUtNTNkNy00NTZkLTlmYjQt NjcwMzA4ZDFlYzlkLzEvUTJULWMwR2J5RzFmTG5LMEZMYTAxRGVkV19VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8wYjE4MTUtNTNkNy00NTZkLTlmYjQtNjcwMzA4ZDFlYzlk LzEvUTJULWMwR2J5RzFmTG5LMEZMYTAxRGVkV19VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtcuhx3Gi 9J/Bw7P/aCblmiFAyBhbY+e9gGy8JIG9f6UOEisUzw7o5USd8yc5L7mnWGqmukCo MLUNP+BCd0cZNiba7kYYs8kkijwMr6fHH0XwP3q7ZckM70QW9raTDxK057sJcS4H KwxExZ63qo6UW9J5V6wNsB7wO6hktKjYCBtiNxRA0Yy6RGFF6kdmtpfvLcfXTsU6 zDJLHKBueMo1miZQoN47QWQBMsHSLfcXEPu5FbcoAnnqLBsWpx/P268li1ZwOKwk uaGEH0WvhlC38IaHMJq75P2SHEXg50bmZhqF72HVLZI4Ue4sGGibpZrq3pMg7ZN0 qC/Plg6VTRsdDw== -----END CERTIFICATE-----Generated at Mon Dec 8 00:58:27 2025 by rpki-client