This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft File: Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft (raw, json) Hash identifier: l0sl1KwM1ygMUypzqtBSWDPhRgRGtGShq827oTS+43E= Subject key identifier: E8:C2:FD:D2:FA:BD:EB:9E:2A:C6:DA:C5:A1:D7:6B:4E:92:FB:3D:27 Authority key identifier: 43:67:54:7D:85:1E:3C:D7:76:CD:33:29:0B:24:54:AC:C0:E8:51:BB Certificate issuer: /CN=4367547d851e3cd776cd33290b2454acc0e851bb Certificate serial: 019AF12DE404EFF3DA02DA879E12D9C0E3B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft Manifest number: 03E9 Signing time: Sat 06 Dec 2025 01:01:47 +0000 Manifest this update: Sat 06 Dec 2025 01:01:47 +0000 Manifest next update: Sun 07 Dec 2025 01:01:47 +0000 Files and hashes: 1: Q2dUfYUePNd2zTMpCyRUrMDoUbs.crl (hash: tjAyrG7KpBui2c/QBs3nhlmxf6vmMrJ6eDHStj6Q1oE=) 2: upaHuTNxbV8mQ-zLRwrgVtkGsmY.roa (hash: sKbR8/VdnyYU5WVgCkow2npUXtpJF6ZJXDD7UHW/B2o=) 3: xvG96kRnwdG7PR_lGfPJHrdMaV4.roa (hash: pffhMvPKQ6cwuLRh2l4tkaNr9f/bxq1LdIavJf6VGcE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.crl rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft rsync://rpki.ripe.net/repository/DEFAULT/Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:e4:04:ef:f3:da:02:da:87:9e:12:d9:c0:e3:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4367547d851e3cd776cd33290b2454acc0e851bb Validity Not Before: Dec 6 01:01:47 2025 GMT Not After : Dec 7 01:01:47 2025 GMT Subject: CN=e8c2fdd2fabdeb9e2ac6dac5a1d76b4e92fb3d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:32:b4:20:2c:f4:cb:48:89:bc:1b:be:d7:ac: 65:17:b2:35:2f:b3:6f:91:49:b9:57:b9:2a:5f:0f: 03:0c:e2:ad:31:d5:34:98:90:ab:e9:63:44:8f:ac: d4:ba:fa:ad:87:d2:59:6c:5a:95:7c:25:ec:d7:6a: bf:bf:44:e3:0b:42:73:71:a5:2a:c9:9a:78:b5:0d: a9:79:b2:9f:29:0c:74:1e:23:f5:b4:64:6b:00:96: 01:78:76:2f:b0:57:a0:01:53:1f:dd:8e:68:49:0e: 28:9d:ab:79:91:95:5a:b3:9b:fa:a0:bd:85:8f:cc: 18:99:24:58:7e:d5:b7:6c:d7:0f:43:b4:f0:87:f3: cc:3c:1f:e4:18:b6:1d:e2:65:9b:9d:a5:5c:69:69: f7:ce:ad:b3:5b:34:87:cc:36:4f:4b:e1:bc:59:d3: 5e:c9:2c:83:48:7e:41:6d:54:22:c4:d5:9d:91:ea: 8c:11:0a:34:51:5d:30:ad:76:be:04:07:ec:51:dd: 2a:d9:91:2d:60:57:c9:f1:9d:2a:08:43:35:dc:0c: 57:f4:77:73:d1:c9:51:de:08:17:09:21:3a:b2:92: ef:a6:92:54:e2:aa:fb:5e:98:25:d3:fc:af:dd:15: 19:fb:1b:67:ab:b7:92:0a:fb:b3:c0:0a:a6:ee:be: b4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:C2:FD:D2:FA:BD:EB:9E:2A:C6:DA:C5:A1:D7:6B:4E:92:FB:3D:27 X509v3 Authority Key Identifier: keyid:43:67:54:7D:85:1E:3C:D7:76:CD:33:29:0B:24:54:AC:C0:E8:51:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:09:d5:df:aa:70:30:7e:8d:92:66:e2:7f:b8:21:ef:81:9a: 27:ec:47:1c:0c:4e:b2:99:72:8d:26:16:f4:1f:91:dc:6f:d3: b0:7c:38:64:55:57:ec:c7:f2:61:bf:9e:86:41:77:b5:c3:cf: e3:97:ed:89:92:c1:d6:38:ec:9c:8e:c2:50:89:f0:9a:7a:64: 28:38:32:21:7b:a6:e3:69:5a:4e:3b:c4:52:67:5c:87:87:58: 78:55:25:65:b6:4e:1f:ed:10:72:63:92:d2:e4:11:7c:e7:73: 65:cc:51:84:17:42:cb:8b:4f:0c:e0:f0:44:00:0e:1e:43:9f: b3:a9:f1:b8:45:ee:9e:f2:3d:95:e4:8c:46:bc:bb:dd:1c:97: 89:1f:e4:e1:89:b4:51:b3:2b:d5:f6:eb:32:f8:48:e2:12:17: e8:e8:de:04:c2:99:87:f0:c8:91:a7:7f:1b:cf:b7:28:0f:74: d3:26:80:de:f5:60:03:f0:bc:71:6a:ee:a4:1a:87:7e:1b:49: d0:b5:21:20:61:97:6c:1e:4a:f7:55:59:ff:a0:05:21:b0:82: d9:17:0b:2c:5e:be:9a:ac:62:5d:e4:95:e2:5c:67:19:53:50: 2e:a4:fc:78:79:23:da:2f:90:d8:42:9c:d9:3f:6c:fc:61:43: ea:a9:3d:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLeQE7/PaAtqHnhLZwOO5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzNjc1NDdkODUxZTNjZDc3NmNkMzMyOTBiMjQ1NGFjYzBl ODUxYmIwHhcNMjUxMjA2MDEwMTQ3WhcNMjUxMjA3MDEwMTQ3WjAzMTEwLwYDVQQD EyhlOGMyZmRkMmZhYmRlYjllMmFjNmRhYzVhMWQ3NmI0ZTkyZmIzZDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7TK0ICz0y0iJvBu+16xlF7I1L7Nv kUm5V7kqXw8DDOKtMdU0mJCr6WNEj6zUuvqth9JZbFqVfCXs12q/v0TjC0JzcaUq yZp4tQ2pebKfKQx0HiP1tGRrAJYBeHYvsFegAVMf3Y5oSQ4onat5kZVas5v6oL2F j8wYmSRYftW3bNcPQ7Twh/PMPB/kGLYd4mWbnaVcaWn3zq2zWzSHzDZPS+G8WdNe ySyDSH5BbVQixNWdkeqMEQo0UV0wrXa+BAfsUd0q2ZEtYFfJ8Z0qCEM13AxX9Hdz 0clR3ggXCSE6spLvppJU4qr7Xpgl0/yv3RUZ+xtnq7eSCvuzwAqm7r60uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOjC/dL6veueKsbaxaHXa06S+z0nMB8GA1UdIwQY MBaAFENnVH2FHjzXds0zKQskVKzA6FG7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTJkVWZZVWVQTmQyelRNcEN5UlVyTURvVWJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi84NzRjODUtOWU3ZC00YWNlLTk1OGYt ZGFiN2YwYzhkMjQwLzEvUTJkVWZZVWVQTmQyelRNcEN5UlVyTURvVWJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi84NzRjODUtOWU3ZC00YWNlLTk1OGYtZGFiN2YwYzhkMjQw LzEvUTJkVWZZVWVQTmQyelRNcEN5UlVyTURvVWJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfwnV36pw MH6Nkmbif7gh74GaJ+xHHAxOsplyjSYW9B+R3G/TsHw4ZFVX7MfyYb+ehkF3tcPP 45ftiZLB1jjsnI7CUInwmnpkKDgyIXum42laTjvEUmdch4dYeFUlZbZOH+0QcmOS 0uQRfOdzZcxRhBdCy4tPDODwRAAOHkOfs6nxuEXunvI9leSMRry73RyXiR/k4Ym0 UbMr1fbrMvhI4hIX6OjeBMKZh/DIkad/G8+3KA900yaA3vVgA/C8cWrupBqHfhtJ 0LUhIGGXbB5K91VZ/6AFIbCC2RcLLF6+mqxiXeSV4lxnGVNQLqT8eHkj2i+Q2EKc 2T9s/GFD6qk9JQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:06:35 2025 by rpki-client