This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft File: Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft (raw, json) Hash identifier: 51jgKaNG280WJyAUIyhgEyWaoyih/n9LqfTbiJxbRYc= Subject key identifier: 9C:09:27:E9:3A:2F:F5:2A:35:F1:0A:C1:55:B5:8A:DB:FF:2E:88:76 Authority key identifier: 43:7A:5C:7E:7C:7E:AB:23:92:37:2F:C3:8D:48:C7:A9:77:B2:4A:BD Certificate issuer: /CN=437a5c7e7c7eab2392372fc38d48c7a977b24abd Certificate serial: 019AF209432F0A799E3A6D385BEB57367A90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft Manifest number: 123B Signing time: Sat 06 Dec 2025 05:01:24 +0000 Manifest this update: Sat 06 Dec 2025 05:01:24 +0000 Manifest next update: Sun 07 Dec 2025 05:01:24 +0000 Files and hashes: 1: Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl (hash: mSwwnr75LnHDPEanArpFKZbbYCNA2wTSqPWpzHX99LA=) 2: va7AQWl8BQjaONNSCF5yVhc4880.roa (hash: AGJNupVoKM3POzJ8IDK+xNNPIdqw4tebW6fT+PeJcHc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:43:2f:0a:79:9e:3a:6d:38:5b:eb:57:36:7a:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=437a5c7e7c7eab2392372fc38d48c7a977b24abd Validity Not Before: Dec 6 05:01:24 2025 GMT Not After : Dec 7 05:01:24 2025 GMT Subject: CN=9c0927e93a2ff52a35f10ac155b58adbff2e8876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f2:08:70:88:ce:f7:9a:02:14:31:65:d8:eb: c8:ad:e7:8c:c1:0f:80:72:b6:f1:06:58:09:48:f6: c5:de:c7:d5:04:92:5d:f4:e7:b5:b2:79:c9:8f:4e: 27:2b:33:d5:4b:87:66:dd:cb:97:ba:88:32:0e:75: bc:5f:be:16:7f:3c:81:40:5a:ba:99:e9:20:9c:6e: 91:b6:4c:b8:7a:04:6b:05:a6:57:84:97:5d:5c:f6: 39:bf:62:ef:b5:08:82:f8:7a:e5:b4:c9:e3:67:93: 4c:a9:05:16:44:17:93:c8:e4:b7:a5:c1:90:a7:0b: 95:33:aa:8b:72:63:f9:0b:46:21:60:dc:fe:61:66: 88:09:a6:32:fa:0c:6c:1e:c8:7e:c7:55:9a:60:ab: b7:4b:d3:88:67:8b:26:8f:a2:c5:64:ea:49:f8:c9: 4a:af:1c:20:0e:6b:38:79:67:7d:e9:51:fa:fd:9f: c7:ba:1a:87:56:7c:1c:ff:96:78:9b:69:a9:4e:bf: d4:42:88:57:98:5d:74:c8:36:34:4d:cd:18:fb:c5: 8d:9c:e0:48:dc:d4:2e:36:13:c5:ad:a9:10:eb:5a: 73:87:4b:5b:6f:60:1d:22:5b:09:80:bc:8e:5a:6b: 1e:93:6b:0c:2c:21:04:db:41:29:e2:f8:80:8a:fa: 9e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:09:27:E9:3A:2F:F5:2A:35:F1:0A:C1:55:B5:8A:DB:FF:2E:88:76 X509v3 Authority Key Identifier: keyid:43:7A:5C:7E:7C:7E:AB:23:92:37:2F:C3:8D:48:C7:A9:77:B2:4A:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:ed:c3:3c:94:cb:84:ae:9a:70:93:29:f2:4f:1f:b4:72:66: 36:d5:67:42:36:45:93:c8:71:ef:f4:e2:00:a4:0a:17:be:ec: f4:00:27:b2:a4:ba:44:90:11:ff:03:4f:56:01:40:3f:31:3a: ad:88:9d:18:dc:04:c0:8e:47:53:ce:16:16:1b:1c:13:8a:fe: 90:5e:7e:8e:75:14:57:19:3a:27:80:04:27:21:c6:d5:a6:59: 96:0b:62:63:b3:23:86:74:6f:dd:e1:96:1e:0d:cc:10:cb:82: d2:21:ad:ec:0b:71:02:e0:d5:1b:84:c3:b1:92:aa:d3:b0:94: e2:c1:db:3e:6c:7e:d6:36:b5:aa:c1:13:24:69:e6:b0:68:35: 56:12:8a:75:c9:07:51:d0:9f:d7:4a:fa:f8:00:7b:69:96:24: c7:23:81:4a:73:20:13:13:fe:59:e7:d8:dc:4c:da:6a:8c:3e: 61:32:8e:10:a7:a3:ad:17:56:8d:a2:e4:87:f0:f5:b2:a6:70: aa:0c:be:e4:0c:83:60:bd:74:3d:72:20:89:f1:98:10:03:c3: a0:2e:21:e6:41:ac:d2:1b:db:a6:2f:e9:dc:18:b1:90:ce:ef: 1d:bf:f1:5c:2b:8e:21:f2:45:bd:cf:93:bc:e2:a5:16:19:8b: c0:f1:bd:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCUMvCnmeOm04W+tXNnqQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzN2E1YzdlN2M3ZWFiMjM5MjM3MmZjMzhkNDhjN2E5Nzdi MjRhYmQwHhcNMjUxMjA2MDUwMTI0WhcNMjUxMjA3MDUwMTI0WjAzMTEwLwYDVQQD Eyg5YzA5MjdlOTNhMmZmNTJhMzVmMTBhYzE1NWI1OGFkYmZmMmU4ODc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/IIcIjO95oCFDFl2OvIreeMwQ+A crbxBlgJSPbF3sfVBJJd9Oe1snnJj04nKzPVS4dm3cuXuogyDnW8X74WfzyBQFq6 mekgnG6Rtky4egRrBaZXhJddXPY5v2LvtQiC+HrltMnjZ5NMqQUWRBeTyOS3pcGQ pwuVM6qLcmP5C0YhYNz+YWaICaYy+gxsHsh+x1WaYKu3S9OIZ4smj6LFZOpJ+MlK rxwgDms4eWd96VH6/Z/HuhqHVnwc/5Z4m2mpTr/UQohXmF10yDY0Tc0Y+8WNnOBI 3NQuNhPFrakQ61pzh0tbb2AdIlsJgLyOWmsek2sMLCEE20Ep4viAivqerwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJwJJ+k6L/UqNfEKwVW1itv/Loh2MB8GA1UdIwQY MBaAFEN6XH58fqsjkjcvw41Ix6l3skq9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTNwY2ZueC1xeU9TTnlfRGpVakhxWGV5U3IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy83ZmFhZTYtOWYzMC00MmVkLWIzNzUt NTVhNDNhYWI4ZjczLzEvUTNwY2ZueC1xeU9TTnlfRGpVakhxWGV5U3IwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy83ZmFhZTYtOWYzMC00MmVkLWIzNzUtNTVhNDNhYWI4Zjcz LzEvUTNwY2ZueC1xeU9TTnlfRGpVakhxWGV5U3IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArO3DPJTL hK6acJMp8k8ftHJmNtVnQjZFk8hx7/TiAKQKF77s9AAnsqS6RJAR/wNPVgFAPzE6 rYidGNwEwI5HU84WFhscE4r+kF5+jnUUVxk6J4AEJyHG1aZZlgtiY7MjhnRv3eGW Hg3MEMuC0iGt7AtxAuDVG4TDsZKq07CU4sHbPmx+1ja1qsETJGnmsGg1VhKKdckH UdCf10r6+AB7aZYkxyOBSnMgExP+WefY3Ezaaow+YTKOEKejrRdWjaLkh/D1sqZw qgy+5AyDYL10PXIgifGYEAPDoC4h5kGs0hvbpi/p3BixkM7vHb/xXCuOIfJFvc+T vOKlFhmLwPG9Ig== -----END CERTIFICATE-----Generated at Sat Dec 6 14:01:03 2025 by rpki-client