This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft File: Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft (raw, json) Hash identifier: dN07XIt0jNsws2kOQY5e2Op4vRXS1OY9nCXoVL/C8qo= Subject key identifier: 30:91:43:9F:F8:56:BB:DF:CC:FA:AE:2B:B1:50:EA:50:FF:56:E9:A6 Authority key identifier: 43:FA:D7:95:48:AF:C5:C8:3E:59:BB:FE:38:8C:64:49:2C:B5:50:13 Certificate issuer: /CN=43fad79548afc5c83e59bbfe388c64492cb55013 Certificate serial: 019AF6534451D54DF5256E82942C741F01C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft Manifest number: 1762 Signing time: Sun 07 Dec 2025 01:00:43 +0000 Manifest this update: Sun 07 Dec 2025 01:00:43 +0000 Manifest next update: Mon 08 Dec 2025 01:00:43 +0000 Files and hashes: 1: 2cU_Yyosgv72VzuSZ-lEPM4bEA0.roa (hash: rOVsbZQ+258/yYvznSDjCoRvmCP4xDAfS/95mmV0VJ8=) 2: KhZxCrijEh6I5tUjdOiH08SDAlU.roa (hash: d7J/i0PvapKbq1ZXNQfO7tB9y3eyZqeGbgRInR/S46w=) 3: Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl (hash: fzgA1cnVXiNXl/kZ+tEuoOncPW30UVAqt+SdSGRx6qM=) 4: sG_rr6I8pDA92eA5vBpgqLHPlcc.roa (hash: VBbgkzxs+YQuemItqSI61ff6E1GX47Q0q9j9ZQDjYJM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:44:51:d5:4d:f5:25:6e:82:94:2c:74:1f:01:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43fad79548afc5c83e59bbfe388c64492cb55013 Validity Not Before: Dec 7 01:00:43 2025 GMT Not After : Dec 8 01:00:43 2025 GMT Subject: CN=3091439ff856bbdfccfaae2bb150ea50ff56e9a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:67:ff:d6:4d:c1:0f:1c:22:ab:d9:4f:37:36: f9:15:c8:54:d0:96:f4:55:a8:14:d9:16:46:dc:1c: 79:b3:98:38:4c:76:64:bb:14:5f:26:45:99:98:b7: 9d:7b:bd:83:55:79:7b:fb:bb:c1:f4:4c:56:f7:55: 7f:c8:14:0b:97:0c:ab:7d:ce:bc:71:16:d5:47:1f: 59:ca:38:db:90:b7:7a:b0:ae:20:20:b4:2c:92:7e: e1:32:72:78:f7:3c:69:15:22:45:d4:e6:f3:2e:38: 54:9f:5d:11:7e:c6:e1:42:bc:61:46:ac:d4:6f:e5: 69:6b:17:e5:ae:27:a6:e9:c7:29:62:c1:02:99:47: 64:be:ea:db:f0:50:8a:bb:45:eb:2e:6f:dd:1b:fc: 62:44:27:86:20:88:ad:93:0a:c0:01:e9:65:4d:22: c2:82:ae:7b:4a:a3:c5:db:a9:33:c1:4d:16:40:57: 12:a2:08:c2:fb:83:1a:b1:1e:c0:da:3a:fa:a3:56: f1:e5:f3:4e:8b:72:95:56:fa:6e:46:94:90:e9:b0: 3b:74:07:0d:6a:5a:fc:76:1f:d0:df:ff:c0:9d:f1: 4a:82:65:63:4a:68:9d:08:ed:c8:b9:41:5a:0a:91: f3:13:b9:49:29:12:12:4b:59:00:e8:1e:c8:96:95: 9c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:91:43:9F:F8:56:BB:DF:CC:FA:AE:2B:B1:50:EA:50:FF:56:E9:A6 X509v3 Authority Key Identifier: keyid:43:FA:D7:95:48:AF:C5:C8:3E:59:BB:FE:38:8C:64:49:2C:B5:50:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:aa:7f:42:cd:03:2f:e4:5b:1d:0b:dd:98:49:42:07:fd:87: d6:e9:68:a7:6b:47:14:47:2a:db:5e:a4:e5:78:f3:4a:16:af: b4:fe:b6:93:f7:af:e5:5c:cd:5c:4a:34:b2:db:bd:23:72:2a: f5:a4:f5:42:31:d6:cb:a8:43:92:98:84:be:de:b8:cc:ea:6a: 85:f0:f3:83:d1:d0:f9:af:57:dd:c7:a7:ce:7c:1a:48:d6:33: b5:9d:01:e2:0c:f0:38:c8:64:f0:79:6f:1d:05:68:ef:0a:11: 3c:e0:cf:6c:f3:9c:69:8c:71:67:63:b9:01:f8:e7:07:c2:ec: fa:4a:de:e1:42:2b:00:d9:4a:f0:e5:f1:7f:9b:95:24:5e:73: 7e:c0:f6:ab:f5:98:77:1f:9a:bc:e1:19:ef:7b:0e:3d:41:b6: 2e:36:1e:2d:66:39:ac:15:d5:4d:e2:eb:ea:e9:53:76:ad:8f: 77:89:f2:f2:90:42:f8:0d:ed:bc:48:0b:2a:28:e0:94:13:83: f8:d8:ca:b7:98:a3:ef:00:1b:75:14:b7:e8:79:30:9e:11:69: 4c:8c:2e:7f:c0:0f:78:37:f5:e4:cd:c5:58:e5:c8:b4:e7:86: 68:72:54:b1:fb:98:37:62:7c:51:4e:a7:87:cc:aa:2d:23:38: e5:b4:1d:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U0RR1U31JW6ClCx0HwHIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZmFkNzk1NDhhZmM1YzgzZTU5YmJmZTM4OGM2NDQ5MmNi NTUwMTMwHhcNMjUxMjA3MDEwMDQzWhcNMjUxMjA4MDEwMDQzWjAzMTEwLwYDVQQD EygzMDkxNDM5ZmY4NTZiYmRmY2NmYWFlMmJiMTUwZWE1MGZmNTZlOWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWf/1k3BDxwiq9lPNzb5FchU0Jb0 VagU2RZG3Bx5s5g4THZkuxRfJkWZmLede72DVXl7+7vB9ExW91V/yBQLlwyrfc68 cRbVRx9ZyjjbkLd6sK4gILQskn7hMnJ49zxpFSJF1ObzLjhUn10RfsbhQrxhRqzU b+Vpaxflriem6ccpYsECmUdkvurb8FCKu0XrLm/dG/xiRCeGIIitkwrAAellTSLC gq57SqPF26kzwU0WQFcSogjC+4MasR7A2jr6o1bx5fNOi3KVVvpuRpSQ6bA7dAcN alr8dh/Q3//AnfFKgmVjSmidCO3IuUFaCpHzE7lJKRISS1kA6B7IlpWc0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDCRQ5/4VrvfzPquK7FQ6lD/VummMB8GA1UdIwQY MBaAFEP615VIr8XIPlm7/jiMZEkstVATMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUV9yWGxVaXZ4Y2ctV2J2LU9JeGtTU3kxVUJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8yY2YyYzEtMTk2Mi00YjcwLTllNWIt ZmU4NTVkYWJiNzVlLzEvUV9yWGxVaXZ4Y2ctV2J2LU9JeGtTU3kxVUJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8yY2YyYzEtMTk2Mi00YjcwLTllNWItZmU4NTVkYWJiNzVl LzEvUV9yWGxVaXZ4Y2ctV2J2LU9JeGtTU3kxVUJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATKp/Qs0D L+RbHQvdmElCB/2H1ulop2tHFEcq216k5XjzShavtP62k/ev5VzNXEo0stu9I3Iq 9aT1QjHWy6hDkpiEvt64zOpqhfDzg9HQ+a9X3cenznwaSNYztZ0B4gzwOMhk8Hlv HQVo7woRPODPbPOcaYxxZ2O5AfjnB8Ls+kre4UIrANlK8OXxf5uVJF5zfsD2q/WY dx+avOEZ73sOPUG2LjYeLWY5rBXVTeLr6ulTdq2Pd4ny8pBC+A3tvEgLKijglBOD +NjKt5ij7wAbdRS36HkwnhFpTIwuf8APeDf15M3FWOXItOeGaHJUsfuYN2J8UU6n h8yqLSM45bQdkg== -----END CERTIFICATE-----Generated at Sun Dec 7 06:03:07 2025 by rpki-client