This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft File: RQxYEkixGuKkb1UuXKQ8adZecqg.mft (raw, json) Hash identifier: 1k2NZmSLoNCgeMw+RA/BL/o//4OVxuOPDAw3LGfMgw0= Subject key identifier: 3D:01:0E:A4:CD:1E:E7:82:D6:57:E8:11:E8:6F:65:A7:47:AD:30:EF Authority key identifier: 45:0C:58:12:48:B1:1A:E2:A4:6F:55:2E:5C:A4:3C:69:D6:5E:72:A8 Certificate issuer: /CN=450c581248b11ae2a46f552e5ca43c69d65e72a8 Certificate serial: 019B1ACD9D5E4933C143265A4996DD0F5BFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft Manifest number: 06AD Signing time: Sun 14 Dec 2025 03:00:41 +0000 Manifest this update: Sun 14 Dec 2025 03:00:41 +0000 Manifest next update: Mon 15 Dec 2025 03:00:41 +0000 Files and hashes: 1: 0_1h7wiM0sCkz01y6bDZ2Uk-dbc.roa (hash: Ffwz5CuVaWNGX3f2MIwGg4hQj6U4+om5+V9sWUjyVOQ=) 2: NuPZabEjwj0Zl1ftGcMBtd-pDXA.roa (hash: +dUUuU1kwfnIBk7+1pVXttGVzaNSvBfz3v21l1kMiPM=) 3: RQxYEkixGuKkb1UuXKQ8adZecqg.crl (hash: E8zG9mKptEkPxEJvIw4fEl6ua7DAmDnaFgwY1aLO8Ac=) 4: scTpjmBPVtpmk2iyuFSVq2caLTA.roa (hash: soRiwcgYjvvPsJmPt1LLzDQ901dQXHqAdbvUyjzTo70=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:cd:9d:5e:49:33:c1:43:26:5a:49:96:dd:0f:5b:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=450c581248b11ae2a46f552e5ca43c69d65e72a8 Validity Not Before: Dec 14 03:00:41 2025 GMT Not After : Dec 15 03:00:41 2025 GMT Subject: CN=3d010ea4cd1ee782d657e811e86f65a747ad30ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3a:32:4d:e6:fc:df:5d:0c:69:03:d9:ba:1d: 44:f3:89:f8:69:b9:e7:8e:99:eb:e7:94:fe:85:3b: 90:fa:c2:d9:99:5f:09:94:9a:6a:41:78:17:e6:72: 61:1e:a4:d1:fa:45:8d:a9:b0:31:52:3f:75:87:e8: d5:1a:23:de:19:00:dd:69:9a:ae:c5:75:36:88:69: 92:b6:95:d6:15:e0:cd:a8:66:31:27:44:ce:e3:60: 4f:1e:83:9e:9a:53:a5:fe:54:e2:3d:1b:30:2b:31: dc:f0:55:ce:64:8b:2c:9d:fe:1a:74:77:75:ae:99: 41:e4:b6:5b:63:ca:2b:a9:29:e2:74:09:c1:33:56: 91:1c:0d:71:a1:c5:bb:4f:0a:77:ef:d9:46:40:cc: 26:9c:6c:fb:be:fb:3c:94:fd:83:ae:8c:44:68:a9: 48:af:53:cb:79:78:6c:29:78:2c:ba:88:3a:18:c2: af:86:7c:88:6b:86:00:36:cd:22:75:a0:ce:fc:0e: f2:a8:2d:7b:14:22:cf:0b:b6:d6:63:e3:9e:ec:a7: d3:5e:47:64:7b:7c:2a:51:e8:cb:e0:be:4f:35:80: 74:b0:33:7d:8f:28:1b:ba:b4:eb:52:46:30:93:48: af:b4:20:2a:30:2e:ba:66:6c:16:fd:de:4d:24:e2: cd:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:01:0E:A4:CD:1E:E7:82:D6:57:E8:11:E8:6F:65:A7:47:AD:30:EF X509v3 Authority Key Identifier: keyid:45:0C:58:12:48:B1:1A:E2:A4:6F:55:2E:5C:A4:3C:69:D6:5E:72:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:33:49:eb:66:ec:95:6f:63:39:f2:98:bc:a8:95:54:37:07: a3:b4:9b:24:f8:46:ec:c9:52:e5:21:28:58:55:24:83:8b:2e: 54:bf:ae:d7:6d:6e:86:0a:17:8c:23:e4:a4:d0:82:66:22:43: 6e:f4:23:2e:26:0d:17:f1:26:50:15:62:a1:e4:9c:11:10:10: 78:ef:d4:2b:e8:95:d3:19:af:c4:86:50:1a:21:4e:da:29:57: 38:51:9e:49:3a:76:99:06:81:90:a6:58:2e:e9:fd:df:82:34: c0:b8:ea:9d:84:71:03:e0:61:ae:b4:fe:61:f0:cd:85:c1:62: a6:e2:e4:e9:3f:0b:b4:9f:47:a5:95:60:b3:16:83:f1:2b:3d: 96:5f:75:10:3d:ee:71:24:46:b0:cb:e0:07:16:ce:27:0a:a3: c7:f7:35:99:f3:66:0e:91:52:29:43:57:6d:b1:15:c1:92:e2: 15:39:25:ae:21:af:d2:a0:2f:9c:66:e9:c1:a9:65:29:e7:aa: e5:8b:38:de:41:43:0c:90:97:d3:b0:8c:e6:07:d6:a0:a2:cd: f7:03:6d:ef:a3:8e:d6:4b:19:a2:da:b4:c2:f1:b7:c9:34:49: a5:09:fc:ac:b7:f8:fd:b5:08:9e:d5:9f:37:4c:31:7c:94:89: 5c:dc:09:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsazZ1eSTPBQyZaSZbdD1v8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1MGM1ODEyNDhiMTFhZTJhNDZmNTUyZTVjYTQzYzY5ZDY1 ZTcyYTgwHhcNMjUxMjE0MDMwMDQxWhcNMjUxMjE1MDMwMDQxWjAzMTEwLwYDVQQD EygzZDAxMGVhNGNkMWVlNzgyZDY1N2U4MTFlODZmNjVhNzQ3YWQzMGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DoyTeb8310MaQPZuh1E84n4abnn jpnr55T+hTuQ+sLZmV8JlJpqQXgX5nJhHqTR+kWNqbAxUj91h+jVGiPeGQDdaZqu xXU2iGmStpXWFeDNqGYxJ0TO42BPHoOemlOl/lTiPRswKzHc8FXOZIssnf4adHd1 rplB5LZbY8orqSnidAnBM1aRHA1xocW7Twp379lGQMwmnGz7vvs8lP2DroxEaKlI r1PLeXhsKXgsuog6GMKvhnyIa4YANs0idaDO/A7yqC17FCLPC7bWY+Oe7KfTXkdk e3wqUejL4L5PNYB0sDN9jygburTrUkYwk0ivtCAqMC66ZmwW/d5NJOLNHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD0BDqTNHueC1lfoEehvZadHrTDvMB8GA1UdIwQY MBaAFEUMWBJIsRripG9VLlykPGnWXnKoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlF4WUVraXhHdUtrYjFVdVhLUThhZFplY3FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8xY2YwYjItYzUxZC00NWY1LTg0ZGMt NzQ5OWE4MjMxZjU2LzEvUlF4WUVraXhHdUtrYjFVdVhLUThhZFplY3FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8xY2YwYjItYzUxZC00NWY1LTg0ZGMtNzQ5OWE4MjMxZjU2 LzEvUlF4WUVraXhHdUtrYjFVdVhLUThhZFplY3FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAozNJ62bs lW9jOfKYvKiVVDcHo7SbJPhG7MlS5SEoWFUkg4suVL+u121uhgoXjCPkpNCCZiJD bvQjLiYNF/EmUBVioeScERAQeO/UK+iV0xmvxIZQGiFO2ilXOFGeSTp2mQaBkKZY Lun934I0wLjqnYRxA+BhrrT+YfDNhcFipuLk6T8LtJ9HpZVgsxaD8Ss9ll91ED3u cSRGsMvgBxbOJwqjx/c1mfNmDpFSKUNXbbEVwZLiFTklriGv0qAvnGbpwallKeeq 5Ys43kFDDJCX07CM5gfWoKLN9wNt76OO1ksZotq0wvG3yTRJpQn8rLf4/bUIntWf N0wxfJSJXNwJVw== -----END CERTIFICATE-----Generated at Sun Dec 14 13:45:24 2025 by rpki-client