This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft File: _-Q3vK2brPo7drfdBFQTP7TYyz4.mft (raw, json) Hash identifier: YdvAt3pYNOyWbu3BeHJ8muQ+++B4uKPt5mmmW8KkQ7M= Subject key identifier: 73:26:C9:95:45:B6:6C:4F:53:1D:A2:98:74:D8:AD:D1:9E:1A:26:07 Authority key identifier: FF:E4:37:BC:AD:9B:AC:FA:3B:76:B7:DD:04:54:13:3F:B4:D8:CB:3E Certificate issuer: /CN=ffe437bcad9bacfa3b76b7dd0454133fb4d8cb3e Certificate serial: 019B59ACDF51AE587D70394E48BB719C795F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft Manifest number: 0190 Signing time: Fri 26 Dec 2025 08:01:00 +0000 Manifest this update: Fri 26 Dec 2025 08:01:00 +0000 Manifest next update: Sat 27 Dec 2025 08:01:00 +0000 Files and hashes: 1: BLqnqYXfNpeDaXR1TT1NxALunTU.roa (hash: HiOoL5QoKyGrCXU+ZvFwDx1bHqF6go6OY2pLOukJd1s=) 2: _-Q3vK2brPo7drfdBFQTP7TYyz4.crl (hash: Zc9ASjgzumfgvpdIWp4qMTLOrfpnkyuS6leoGTYHBRA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:df:51:ae:58:7d:70:39:4e:48:bb:71:9c:79:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffe437bcad9bacfa3b76b7dd0454133fb4d8cb3e Validity Not Before: Dec 26 08:01:00 2025 GMT Not After : Dec 27 08:01:00 2025 GMT Subject: CN=7326c99545b66c4f531da29874d8add19e1a2607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0b:81:80:dd:27:7d:ed:92:d2:bb:a9:9e:e4: 10:c6:0b:e0:57:14:c0:44:ee:93:35:53:57:c5:1f: 47:c1:d8:f4:40:b1:3f:be:56:c9:7b:e7:18:c0:bb: 8c:ee:fa:22:22:1f:e9:c6:61:05:75:78:13:56:45: ea:ec:8a:43:e0:5e:8f:13:f9:b8:6f:82:82:36:b4: e4:31:7c:0c:89:61:15:28:8a:f7:2a:bf:b7:0a:6f: a5:20:25:da:6e:0a:1d:5b:7c:07:32:44:78:30:41: ea:46:6b:36:8d:3a:cd:13:39:a7:73:a4:cc:4b:78: d3:97:b2:7d:d1:71:a9:3d:1e:25:42:d2:be:ae:e0: e8:3e:22:47:63:7e:ab:ba:69:5b:be:47:d3:d9:98: f0:6f:8c:3f:6d:b5:29:0e:2b:d8:c6:d1:61:94:77: 57:98:48:fa:f0:bc:a1:3f:3d:90:29:c9:11:15:08: 3d:18:e9:bf:35:90:d2:20:ad:07:70:b0:8a:f2:7f: 6b:b7:80:19:c2:6f:08:b9:5a:e3:c4:5c:9a:f6:bb: 9e:17:1a:43:0a:3a:58:da:a7:d9:a1:7e:92:a8:d1: ea:a6:74:a4:ba:f8:6f:ee:66:bb:c5:35:6b:47:05: a3:9e:97:a4:5d:36:b9:70:e5:0d:49:a0:c5:b7:48: ed:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:26:C9:95:45:B6:6C:4F:53:1D:A2:98:74:D8:AD:D1:9E:1A:26:07 X509v3 Authority Key Identifier: keyid:FF:E4:37:BC:AD:9B:AC:FA:3B:76:B7:DD:04:54:13:3F:B4:D8:CB:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:de:c4:14:2e:5d:82:9d:61:65:8d:f8:2b:e0:18:16:9d:5e: 56:b6:ee:10:6c:bd:9e:f1:95:ed:68:3f:8d:30:e0:dc:47:b1: 7f:67:8a:41:22:17:15:5a:c9:d8:b0:b1:e7:43:dd:62:bc:9b: 9b:be:dc:f0:4d:04:87:d0:0b:d6:1e:c2:51:f7:3a:f6:73:e1: 53:ea:a6:4d:86:a3:b9:34:4e:74:1d:55:19:3e:86:80:68:5d: 55:23:f0:00:12:2e:92:0f:32:9b:3c:3e:c5:a8:72:4b:75:fd: 5e:38:db:b5:4a:9b:dd:c3:3d:8c:64:38:50:0c:49:7a:7d:d3: 7d:92:98:fa:74:59:89:13:8d:22:a9:5c:c8:62:22:c0:77:56: fd:bd:8e:6e:dd:db:da:ca:a5:d7:bd:2c:d7:98:73:51:18:58: c9:3d:7b:60:23:d7:34:1e:49:55:09:3d:45:da:06:40:16:fb: fa:c0:46:f9:8a:0f:ef:a1:34:fe:b1:d7:8a:05:7d:ab:df:19: ff:83:83:63:f4:45:08:d9:6c:2a:2f:a2:e8:40:af:79:88:5a: eb:b1:9a:db:f1:b8:60:b1:1c:9d:a4:0a:3b:65:07:9b:88:df: ce:c8:75:d0:21:d9:ba:97:95:30:27:31:fd:8f:24:35:8e:55: 4f:d0:89:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrN9Rrlh9cDlOSLtxnHlfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZTQzN2JjYWQ5YmFjZmEzYjc2YjdkZDA0NTQxMzNmYjRk OGNiM2UwHhcNMjUxMjI2MDgwMTAwWhcNMjUxMjI3MDgwMTAwWjAzMTEwLwYDVQQD Eyg3MzI2Yzk5NTQ1YjY2YzRmNTMxZGEyOTg3NGQ4YWRkMTllMWEyNjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQuBgN0nfe2S0rupnuQQxgvgVxTA RO6TNVNXxR9Hwdj0QLE/vlbJe+cYwLuM7voiIh/pxmEFdXgTVkXq7IpD4F6PE/m4 b4KCNrTkMXwMiWEVKIr3Kr+3Cm+lICXabgodW3wHMkR4MEHqRms2jTrNEzmnc6TM S3jTl7J90XGpPR4lQtK+ruDoPiJHY36rumlbvkfT2Zjwb4w/bbUpDivYxtFhlHdX mEj68LyhPz2QKckRFQg9GOm/NZDSIK0HcLCK8n9rt4AZwm8IuVrjxFya9rueFxpD CjpY2qfZoX6SqNHqpnSkuvhv7ma7xTVrRwWjnpekXTa5cOUNSaDFt0jttQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHMmyZVFtmxPUx2imHTYrdGeGiYHMB8GA1UdIwQY MBaAFP/kN7ytm6z6O3a33QRUEz+02Ms+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXy1RM3ZLMmJyUG83ZHJmZEJGUVRQN1RZeXo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8zZDQ4MjctM2YxNC00MzBlLTljZWUt ZDEyMWM1YTc1ZDk4LzEvXy1RM3ZLMmJyUG83ZHJmZEJGUVRQN1RZeXo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi8zZDQ4MjctM2YxNC00MzBlLTljZWUtZDEyMWM1YTc1ZDk4 LzEvXy1RM3ZLMmJyUG83ZHJmZEJGUVRQN1RZeXo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAat7EFC5d gp1hZY34K+AYFp1eVrbuEGy9nvGV7Wg/jTDg3Eexf2eKQSIXFVrJ2LCx50PdYryb m77c8E0Eh9AL1h7CUfc69nPhU+qmTYajuTROdB1VGT6GgGhdVSPwABIukg8ymzw+ xahyS3X9XjjbtUqb3cM9jGQ4UAxJen3TfZKY+nRZiRONIqlcyGIiwHdW/b2Obt3b 2sql170s15hzURhYyT17YCPXNB5JVQk9RdoGQBb7+sBG+YoP76E0/rHXigV9q98Z /4ODY/RFCNlsKi+i6ECveYha67Ga2/G4YLEcnaQKO2UHm4jfzsh10CHZupeVMCcx /Y8kNY5VT9CJ+Q== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:39 2025 by rpki-client