This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d7d583-2d4a-4abd-923e-23a58f3d61d7/1/WQu-q0iEKkGvrEkh0TV4OLb-bIc.mft File: WQu-q0iEKkGvrEkh0TV4OLb-bIc.mft (raw, json) Hash identifier: LIBEW4KloEaAiA3/rYQG4mIAMfkWL+XF+Zi+PKubPYI= Subject key identifier: 1B:41:FD:08:CB:61:60:2C:C5:3E:1C:12:C8:63:80:5C:F0:2D:24:8A Authority key identifier: 59:0B:BE:AB:48:84:2A:41:AF:AC:49:21:D1:35:78:38:B6:FE:6C:87 Certificate issuer: /CN=590bbeab48842a41afac4921d1357838b6fe6c87 Certificate serial: 019AF31D56AFEA20969482AB6B607DECDFF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQu-q0iEKkGvrEkh0TV4OLb-bIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d7d583-2d4a-4abd-923e-23a58f3d61d7/1/WQu-q0iEKkGvrEkh0TV4OLb-bIc.mft Manifest number: 57 Signing time: Sat 06 Dec 2025 10:02:57 +0000 Manifest this update: Sat 06 Dec 2025 10:02:57 +0000 Manifest next update: Sun 07 Dec 2025 10:02:57 +0000 Files and hashes: 1: TFbaF5iKEXoV94om-cXBI8K88Gw.roa (hash: Rapi4XUSpgRm7jm1pFAQz6RjmBJRmhTABSFDVzeD42Y=) 2: WQu-q0iEKkGvrEkh0TV4OLb-bIc.crl (hash: e1ug/KYKKgN9/Jlat2jWvw3TSaOFcDVEGJr+2TpcUKw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d7d583-2d4a-4abd-923e-23a58f3d61d7/1/WQu-q0iEKkGvrEkh0TV4OLb-bIc.crl rsync://rpki.ripe.net/repository/DEFAULT/11/d7d583-2d4a-4abd-923e-23a58f3d61d7/1/WQu-q0iEKkGvrEkh0TV4OLb-bIc.mft rsync://rpki.ripe.net/repository/DEFAULT/WQu-q0iEKkGvrEkh0TV4OLb-bIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:56:af:ea:20:96:94:82:ab:6b:60:7d:ec:df:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590bbeab48842a41afac4921d1357838b6fe6c87 Validity Not Before: Dec 6 10:02:57 2025 GMT Not After : Dec 7 10:02:57 2025 GMT Subject: CN=1b41fd08cb61602cc53e1c12c863805cf02d248a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:33:98:9d:81:9e:70:31:27:b2:d3:a3:6b:f7: 56:d1:1b:34:b9:8b:44:fc:d4:cf:27:95:63:10:af: 53:6a:01:27:86:63:5e:29:c5:5f:53:61:6f:29:6d: 1e:e5:04:33:06:ef:1e:c8:93:fd:12:d1:5f:0e:9b: 28:18:fb:b5:52:c7:21:ff:2a:2a:9c:a8:94:8c:12: f6:61:50:a0:34:7e:00:d8:64:ba:c9:7c:de:c5:ad: 79:e4:d4:29:68:7a:14:3a:14:e1:ff:6a:f8:28:94: c1:03:36:37:13:82:2e:3e:45:27:1a:bb:28:d4:7b: 59:96:54:1b:b9:c6:8d:e2:d4:5b:94:40:22:f9:9a: fd:51:8a:c3:0e:6c:6e:3a:fe:48:0f:94:34:c2:3c: 34:a1:84:31:6d:ce:6c:ea:78:7e:0a:72:6c:b3:6d: d4:b3:03:6e:0e:9b:e4:e9:bb:27:ac:a7:f6:bf:9f: c8:07:0a:32:6f:a5:83:3d:e7:77:1f:bb:7d:94:8f: 4f:8a:3b:ec:14:f9:e7:21:fe:26:d1:df:45:27:72: 84:67:96:86:9e:24:4e:9d:a5:44:ab:1d:91:9d:db: d2:cd:89:18:a8:49:5c:7d:ca:69:c0:41:2a:14:29: d5:9b:81:7c:52:10:9d:c6:0b:d8:83:90:b4:e5:4c: 9e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:41:FD:08:CB:61:60:2C:C5:3E:1C:12:C8:63:80:5C:F0:2D:24:8A X509v3 Authority Key Identifier: keyid:59:0B:BE:AB:48:84:2A:41:AF:AC:49:21:D1:35:78:38:B6:FE:6C:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQu-q0iEKkGvrEkh0TV4OLb-bIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d7d583-2d4a-4abd-923e-23a58f3d61d7/1/WQu-q0iEKkGvrEkh0TV4OLb-bIc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d7d583-2d4a-4abd-923e-23a58f3d61d7/1/WQu-q0iEKkGvrEkh0TV4OLb-bIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:ce:d7:bb:b5:0b:55:cc:19:b1:b9:92:10:6b:96:78:45:b8: 01:1b:87:14:80:89:28:46:5b:ff:8c:d7:ef:4e:69:83:eb:64: 33:f2:86:2c:60:42:f6:9d:c4:b5:ec:0f:e7:10:7d:17:67:7a: d6:88:0b:a9:cb:49:6b:a9:3a:69:e1:26:5e:6c:70:ab:ea:cd: 15:84:ff:44:f4:fa:cc:27:86:1b:b6:09:11:82:8f:81:7c:da: 3a:b9:aa:e3:b5:01:d8:87:97:94:db:34:85:d5:ea:3e:be:a5: de:0b:92:56:32:b5:2c:4d:ee:ac:4e:b9:07:ed:70:c1:68:af: 74:06:a8:74:8e:7e:1d:18:76:b3:a2:96:0b:0d:8b:d5:e8:e7: ef:9e:4e:6d:47:e2:b9:40:b3:70:43:29:8e:b5:c2:77:55:68: bf:fd:55:cb:5e:e2:32:f4:43:64:2f:77:7b:b4:4d:bb:16:c2: 03:1d:4b:3f:af:fc:e4:eb:97:4b:91:ad:61:41:22:2c:51:7f: 55:55:c7:2a:04:6e:be:33:80:1a:05:47:59:ed:78:fa:b5:22: 13:fd:2f:b1:c2:5e:1d:aa:9c:32:2c:79:31:08:18:5d:f3:0b: 9a:85:a7:ea:4a:84:61:15:30:f9:95:8e:c5:f4:c9:38:e1:7c: a3:4c:32:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHVav6iCWlIKra2B97N/wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5MGJiZWFiNDg4NDJhNDFhZmFjNDkyMWQxMzU3ODM4YjZm ZTZjODcwHhcNMjUxMjA2MTAwMjU3WhcNMjUxMjA3MTAwMjU3WjAzMTEwLwYDVQQD EygxYjQxZmQwOGNiNjE2MDJjYzUzZTFjMTJjODYzODA1Y2YwMmQyNDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjOYnYGecDEnstOja/dW0Rs0uYtE /NTPJ5VjEK9TagEnhmNeKcVfU2FvKW0e5QQzBu8eyJP9EtFfDpsoGPu1Usch/yoq nKiUjBL2YVCgNH4A2GS6yXzexa155NQpaHoUOhTh/2r4KJTBAzY3E4IuPkUnGrso 1HtZllQbucaN4tRblEAi+Zr9UYrDDmxuOv5ID5Q0wjw0oYQxbc5s6nh+CnJss23U swNuDpvk6bsnrKf2v5/IBwoyb6WDPed3H7t9lI9PijvsFPnnIf4m0d9FJ3KEZ5aG niROnaVEqx2RndvSzYkYqElcfcppwEEqFCnVm4F8UhCdxgvYg5C05UyeywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBtB/QjLYWAsxT4cEshjgFzwLSSKMB8GA1UdIwQY MBaAFFkLvqtIhCpBr6xJIdE1eDi2/myHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1F1LXEwaUVLa0d2ckVraDBUVjRPTGItYkljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kN2Q1ODMtMmQ0YS00YWJkLTkyM2Ut MjNhNThmM2Q2MWQ3LzEvV1F1LXEwaUVLa0d2ckVraDBUVjRPTGItYkljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9kN2Q1ODMtMmQ0YS00YWJkLTkyM2UtMjNhNThmM2Q2MWQ3 LzEvV1F1LXEwaUVLa0d2ckVraDBUVjRPTGItYkljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYM7Xu7UL VcwZsbmSEGuWeEW4ARuHFICJKEZb/4zX705pg+tkM/KGLGBC9p3EtewP5xB9F2d6 1ogLqctJa6k6aeEmXmxwq+rNFYT/RPT6zCeGG7YJEYKPgXzaOrmq47UB2IeXlNs0 hdXqPr6l3guSVjK1LE3urE65B+1wwWivdAaodI5+HRh2s6KWCw2L1ejn755ObUfi uUCzcEMpjrXCd1Vov/1Vy17iMvRDZC93e7RNuxbCAx1LP6/85OuXS5GtYUEiLFF/ VVXHKgRuvjOAGgVHWe14+rUiE/0vscJeHaqcMix5MQgYXfMLmoWn6kqEYRUw+ZWO xfTJOOF8o0wyXQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:07:36 2025 by rpki-client