This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft File: Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft (raw, json) Hash identifier: gRqCseaBbigfGCbWWPjVqKbDlpc261/lpo3OZhsGiJc= Subject key identifier: 5C:02:A9:A1:F8:E1:CB:F2:23:1B:B9:C1:B5:DB:B0:30:40:A7:96:94 Authority key identifier: 43:AC:C2:F2:BE:1A:36:B0:89:21:65:44:D2:3C:95:AC:E2:32:E1:43 Certificate issuer: /CN=43acc2f2be1a36b089216544d23c95ace232e143 Certificate serial: 019B4A035A98D2009432CD3ABA119420E5B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft Manifest number: 0AE3 Signing time: Tue 23 Dec 2025 07:01:32 +0000 Manifest this update: Tue 23 Dec 2025 07:01:32 +0000 Manifest next update: Wed 24 Dec 2025 07:01:32 +0000 Files and hashes: 1: KKb3movEaRK5uooL7CLlRng9BxI.roa (hash: QF2heUsD9ZCfGN4fGvk2RN46irWE6FgEYevma5ik6/E=) 2: Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl (hash: IsftCiLxzePz//Z2CJ3VksiZudVu/+w7HF3a/fqk8Gk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:03:5a:98:d2:00:94:32:cd:3a:ba:11:94:20:e5:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43acc2f2be1a36b089216544d23c95ace232e143 Validity Not Before: Dec 23 07:01:32 2025 GMT Not After : Dec 24 07:01:32 2025 GMT Subject: CN=5c02a9a1f8e1cbf2231bb9c1b5dbb03040a79694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d8:d7:69:b4:5a:e1:ee:91:fe:e4:0f:61:5d: 5b:10:eb:b7:23:72:eb:06:55:04:5d:f1:c7:98:39: 95:18:e9:55:d7:7b:e7:07:3a:4f:24:d0:b2:33:dd: b9:87:cb:4c:3c:9d:35:1c:84:24:fa:f8:cd:88:3e: 26:2a:4d:14:b7:2b:04:1b:e5:df:b0:6e:99:45:16: 54:c7:9d:a4:e1:04:39:90:3d:0d:5c:76:99:f2:e2: 4d:a0:a1:11:b9:5d:94:9f:bc:56:4c:36:d4:88:79: 28:2b:ac:43:50:07:28:00:a5:05:09:1b:09:22:7a: 9d:18:af:65:7e:87:74:c5:99:c5:30:5f:59:bf:ae: 84:c8:ad:b8:df:bb:2f:1d:1c:26:4d:0a:9f:4e:e5: 4b:ca:5c:f5:51:cf:a9:0b:61:bd:e1:97:48:58:1f: f9:96:8a:9b:0b:a2:e4:0b:7f:57:43:ef:1e:4e:ac: c0:8e:08:98:5a:10:e8:06:de:9d:b8:ee:0d:79:53: 8a:b9:0a:15:6f:c3:34:bb:a1:f8:89:fc:0f:cf:ca: fb:f2:97:10:22:f0:3b:a7:02:68:2f:6d:e7:d0:a4: 9e:ff:2f:8a:ad:19:7d:83:2b:07:84:07:8e:47:85: ca:8a:94:28:4e:cf:63:53:13:4b:31:9c:d7:b6:50: dc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:02:A9:A1:F8:E1:CB:F2:23:1B:B9:C1:B5:DB:B0:30:40:A7:96:94 X509v3 Authority Key Identifier: keyid:43:AC:C2:F2:BE:1A:36:B0:89:21:65:44:D2:3C:95:AC:E2:32:E1:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:a1:c5:da:5e:61:9f:d2:51:0d:21:7a:36:da:9b:a6:b7:a3: f1:c6:78:6d:81:c8:1a:d2:25:dc:70:7e:8a:86:b1:a1:7a:2a: c3:18:65:00:f1:63:68:ac:10:af:58:15:ee:b5:07:ee:da:e3: 0d:eb:9b:bb:9f:a5:ce:d5:50:5d:b2:2a:f7:a5:2c:d5:65:5f: f4:7d:42:f7:34:1d:f2:67:12:35:18:7a:4d:24:bb:cf:ea:a9: 13:ef:9e:67:b9:b8:55:52:e0:6c:e0:f2:bb:f3:bb:fc:9a:ef: 54:39:60:01:f5:4e:21:95:9d:67:ef:cc:d9:39:63:08:11:6e: 56:32:ee:62:46:e2:57:37:d3:1e:0a:8c:fe:65:71:8e:f7:e6: 9d:fc:45:b2:a6:de:7e:f3:ae:9b:7b:fb:22:f5:b7:7f:2d:c0: 2e:19:ea:09:75:27:cf:b3:35:63:87:6e:bf:2a:59:6b:d4:df: b0:71:6e:07:f6:07:a2:6b:e4:9a:7c:87:89:6a:9a:3f:a4:3b: 1e:71:a4:61:e8:3a:ad:96:69:ba:50:66:a1:39:28:68:75:56: 79:cd:ff:d9:c9:ef:bd:0f:9d:14:e2:c6:4e:47:1d:92:91:ad: ad:0c:d2:ed:ef:de:6e:a0:73:be:b3:57:e9:ca:6b:2e:77:06: 4a:5b:d4:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKA1qY0gCUMs06uhGUIOW3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzYWNjMmYyYmUxYTM2YjA4OTIxNjU0NGQyM2M5NWFjZTIz MmUxNDMwHhcNMjUxMjIzMDcwMTMyWhcNMjUxMjI0MDcwMTMyWjAzMTEwLwYDVQQD Eyg1YzAyYTlhMWY4ZTFjYmYyMjMxYmI5YzFiNWRiYjAzMDQwYTc5Njk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tjXabRa4e6R/uQPYV1bEOu3I3Lr BlUEXfHHmDmVGOlV13vnBzpPJNCyM925h8tMPJ01HIQk+vjNiD4mKk0UtysEG+Xf sG6ZRRZUx52k4QQ5kD0NXHaZ8uJNoKERuV2Un7xWTDbUiHkoK6xDUAcoAKUFCRsJ InqdGK9lfod0xZnFMF9Zv66EyK2437svHRwmTQqfTuVLylz1Uc+pC2G94ZdIWB/5 loqbC6LkC39XQ+8eTqzAjgiYWhDoBt6duO4NeVOKuQoVb8M0u6H4ifwPz8r78pcQ IvA7pwJoL23n0KSe/y+KrRl9gysHhAeOR4XKipQoTs9jUxNLMZzXtlDcewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFwCqaH44cvyIxu5wbXbsDBAp5aUMB8GA1UdIwQY MBaAFEOswvK+GjawiSFlRNI8laziMuFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTZ6QzhyNGFOckNKSVdWRTBqeVZyT0l5NFVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9lYWNkNDgtNzZlYS00ZWM3LWExNDEt ZjUyMDE2NThmYTE0LzEvUTZ6QzhyNGFOckNKSVdWRTBqeVZyT0l5NFVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9lYWNkNDgtNzZlYS00ZWM3LWExNDEtZjUyMDE2NThmYTE0 LzEvUTZ6QzhyNGFOckNKSVdWRTBqeVZyT0l5NFVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjaHF2l5h n9JRDSF6Ntqbprej8cZ4bYHIGtIl3HB+ioaxoXoqwxhlAPFjaKwQr1gV7rUH7trj Deubu5+lztVQXbIq96Us1WVf9H1C9zQd8mcSNRh6TSS7z+qpE++eZ7m4VVLgbODy u/O7/JrvVDlgAfVOIZWdZ+/M2TljCBFuVjLuYkbiVzfTHgqM/mVxjvfmnfxFsqbe fvOum3v7IvW3fy3ALhnqCXUnz7M1Y4duvypZa9TfsHFuB/YHomvkmnyHiWqaP6Q7 HnGkYeg6rZZpulBmoTkoaHVWec3/2cnvvQ+dFOLGTkcdkpGtrQzS7e/ebqBzvrNX 6cprLncGSlvUPA== -----END CERTIFICATE-----Generated at Tue Dec 23 13:02:18 2025 by rpki-client