This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft File: q3vjT10mnaUCqmg0i_B7ktksDMQ.mft (raw, json) Hash identifier: 53U3HpZNlq+7mwGNNaiGL4K+j/PbYMj5iCZk6n4WY3Y= Subject key identifier: 7C:99:56:63:0C:D4:31:DC:6D:BA:45:41:60:93:C0:91:36:3D:22:5C Authority key identifier: AB:7B:E3:4F:5D:26:9D:A5:02:AA:68:34:8B:F0:7B:92:D9:2C:0C:C4 Certificate issuer: /CN=ab7be34f5d269da502aa68348bf07b92d92c0cc4 Certificate serial: 019AF49BEFC09B3A84848DD11019EC355266 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3vjT10mnaUCqmg0i_B7ktksDMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft Manifest number: 0268 Signing time: Sat 06 Dec 2025 17:00:51 +0000 Manifest this update: Sat 06 Dec 2025 17:00:51 +0000 Manifest next update: Sun 07 Dec 2025 17:00:51 +0000 Files and hashes: 1: 7abujg5YyGw-Dy5kOxbayEhXp8E.roa (hash: lOz5VIr6Vz6VAh0bdDShfDUIzKOutVJzrANsECMkN+c=) 2: q3vjT10mnaUCqmg0i_B7ktksDMQ.crl (hash: 2aSW/pJCqdFnhLvkak4nxGdBVgMLFc0tzwKA4IHeNe8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/q3vjT10mnaUCqmg0i_B7ktksDMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:ef:c0:9b:3a:84:84:8d:d1:10:19:ec:35:52:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab7be34f5d269da502aa68348bf07b92d92c0cc4 Validity Not Before: Dec 6 17:00:51 2025 GMT Not After : Dec 7 17:00:51 2025 GMT Subject: CN=7c9956630cd431dc6dba45416093c091363d225c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:bb:4c:ea:55:63:c8:f1:06:a0:1b:b5:22:34: 5d:08:78:c8:d3:d3:a8:65:91:4b:3f:65:c4:62:5f: b6:b4:43:3c:bc:94:dd:a4:c0:a5:a6:2d:ca:7b:e7: 59:e3:52:20:53:6e:a3:2c:34:9d:bc:5c:14:cc:84: 15:b1:92:c6:2b:c2:bc:8e:8c:4a:4d:8a:cc:73:38: d3:8c:40:7f:4f:48:0e:9e:99:ef:65:d9:7b:7c:c8: 54:41:47:68:7e:a4:41:bb:d1:eb:b3:7f:cf:52:ab: da:39:8c:ef:2d:c6:1d:e5:35:6a:8a:b0:78:9f:2c: 6b:df:70:c4:26:bf:33:25:b0:ac:9d:21:fd:2b:66: 02:d6:a4:3d:f3:95:b6:8d:87:d3:56:1d:95:d3:83: bb:c2:b1:1e:98:40:f8:fd:75:94:de:8c:d4:17:78: 35:f6:88:13:36:4d:4e:49:e7:ea:89:cb:bf:24:36: d3:f2:68:a1:86:19:e5:4f:3a:a6:5e:12:07:fa:20: c6:9c:a1:41:ca:0d:c5:b8:6b:81:10:56:01:80:e5: 74:50:d0:50:2a:9a:54:8d:d1:1a:45:15:a7:1f:ea: a8:7b:20:00:db:6b:55:2f:f1:69:b9:e1:63:e8:a1: 41:e5:d5:20:05:1c:dd:16:27:c9:df:8a:3d:9f:5f: e2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:99:56:63:0C:D4:31:DC:6D:BA:45:41:60:93:C0:91:36:3D:22:5C X509v3 Authority Key Identifier: keyid:AB:7B:E3:4F:5D:26:9D:A5:02:AA:68:34:8B:F0:7B:92:D9:2C:0C:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3vjT10mnaUCqmg0i_B7ktksDMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:da:1e:3d:65:17:ec:14:b0:b1:22:93:94:4a:bf:e2:75:fa: 45:e9:44:87:1e:c7:44:e6:69:78:e9:7b:e3:ce:2b:d1:eb:ab: 14:f4:66:e1:59:56:71:f7:c6:46:e6:a6:e8:34:f6:30:a6:23: e8:3e:5a:76:e7:44:b1:07:c1:bd:f3:a6:f2:7c:c8:5c:e2:2a: 52:89:fb:0a:70:a7:13:f4:96:64:d7:68:f4:cc:40:5c:b8:8e: f1:91:86:e3:6d:37:da:64:28:8d:d5:94:f1:00:d8:64:1c:a7: 7c:75:5f:53:7f:e8:5d:37:19:34:f8:34:f1:87:65:64:b2:23: a3:41:bc:c0:c2:fa:a9:e1:6a:71:f7:a6:3a:ff:75:94:43:5b: 00:82:5e:11:94:5b:30:1d:1a:60:bc:a8:c1:7c:6e:6b:5c:56: de:b3:07:1f:2c:02:62:e5:7f:33:d3:c7:c1:fa:32:e3:94:80: b9:33:cd:48:d4:e5:06:eb:5a:0c:7e:2c:14:f8:45:f1:e6:c8: 71:14:5e:c8:f1:01:63:8f:8f:b4:70:34:8a:e7:18:95:2b:c6: c3:6d:cb:85:cd:74:fb:9c:66:b4:3c:d7:03:d0:04:65:a7:ab: a7:72:56:7d:c2:65:c7:76:e8:0e:b0:65:3c:1f:75:b3:5a:1d: 44:6f:9b:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m+/AmzqEhI3REBnsNVJmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiN2JlMzRmNWQyNjlkYTUwMmFhNjgzNDhiZjA3YjkyZDky YzBjYzQwHhcNMjUxMjA2MTcwMDUxWhcNMjUxMjA3MTcwMDUxWjAzMTEwLwYDVQQD Eyg3Yzk5NTY2MzBjZDQzMWRjNmRiYTQ1NDE2MDkzYzA5MTM2M2QyMjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27tM6lVjyPEGoBu1IjRdCHjI09Oo ZZFLP2XEYl+2tEM8vJTdpMClpi3Ke+dZ41IgU26jLDSdvFwUzIQVsZLGK8K8joxK TYrMczjTjEB/T0gOnpnvZdl7fMhUQUdofqRBu9Hrs3/PUqvaOYzvLcYd5TVqirB4 nyxr33DEJr8zJbCsnSH9K2YC1qQ985W2jYfTVh2V04O7wrEemED4/XWU3ozUF3g1 9ogTNk1OSefqicu/JDbT8mihhhnlTzqmXhIH+iDGnKFByg3FuGuBEFYBgOV0UNBQ KppUjdEaRRWnH+qoeyAA22tVL/FpueFj6KFB5dUgBRzdFifJ34o9n1/ivQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHyZVmMM1DHcbbpFQWCTwJE2PSJcMB8GA1UdIwQY MBaAFKt7409dJp2lAqpoNIvwe5LZLAzEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTN2alQxMG1uYVVDcW1nMGlfQjdrdGtzRE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9lMGFmNjgtZGM2ZS00MWNjLWE2ZGUt NTU4M2U2MWFkYjM4LzEvcTN2alQxMG1uYVVDcW1nMGlfQjdrdGtzRE1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9lMGFmNjgtZGM2ZS00MWNjLWE2ZGUtNTU4M2U2MWFkYjM4 LzEvcTN2alQxMG1uYVVDcW1nMGlfQjdrdGtzRE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALNoePWUX 7BSwsSKTlEq/4nX6RelEhx7HROZpeOl7484r0eurFPRm4VlWcffGRuam6DT2MKYj 6D5adudEsQfBvfOm8nzIXOIqUon7CnCnE/SWZNdo9MxAXLiO8ZGG42032mQojdWU 8QDYZBynfHVfU3/oXTcZNPg08YdlZLIjo0G8wML6qeFqcfemOv91lENbAIJeEZRb MB0aYLyowXxua1xW3rMHHywCYuV/M9PHwfoy45SAuTPNSNTlButaDH4sFPhF8ebI cRReyPEBY4+PtHA0iucYlSvGw23Lhc10+5xmtDzXA9AEZaerp3JWfcJlx3boDrBl PB91s1odRG+bNw== -----END CERTIFICATE-----Generated at Sun Dec 7 01:33:29 2025 by rpki-client