This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft File: Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft (raw, json) Hash identifier: mg07DdECkdNw0zq6WiNMbr33ykb3kaIZ2Es9cOIm2gk= Subject key identifier: 62:B8:E1:8C:0C:DB:BD:A8:58:37:B8:98:67:02:74:93:C3:73:10:0C Authority key identifier: 43:B9:2E:C2:B0:E3:2C:B7:B2:DB:13:E3:76:52:98:D6:D2:E5:85:CD Certificate issuer: /CN=43b92ec2b0e32cb7b2db13e3765298d6d2e585cd Certificate serial: 019B32D7F86082E2615094E7F18AB9B23631 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q7kuwrDjLLey2xPjdlKY1tLlhc0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft Manifest number: 0797 Signing time: Thu 18 Dec 2025 19:02:52 +0000 Manifest this update: Thu 18 Dec 2025 19:02:52 +0000 Manifest next update: Fri 19 Dec 2025 19:02:52 +0000 Files and hashes: 1: Q7kuwrDjLLey2xPjdlKY1tLlhc0.crl (hash: df+HD+BV/aV6RD84MXz+nUOFb+RUub+5g09JEQ3bzoA=) 2: VMxe0uGWpSo7MC38AuPyARm4ELw.roa (hash: tdke4bTnyhBCQowtj7hvI4mzPoyXG8N51jhjgyuQaj8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft rsync://rpki.ripe.net/repository/DEFAULT/Q7kuwrDjLLey2xPjdlKY1tLlhc0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:f8:60:82:e2:61:50:94:e7:f1:8a:b9:b2:36:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43b92ec2b0e32cb7b2db13e3765298d6d2e585cd Validity Not Before: Dec 18 19:02:52 2025 GMT Not After : Dec 19 19:02:52 2025 GMT Subject: CN=62b8e18c0cdbbda85837b89867027493c373100c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:95:08:95:d3:09:ec:9d:2c:74:6a:e2:81:d6: 2f:81:ec:8d:1b:e2:82:3d:f7:89:88:b6:04:18:67: e8:29:16:8c:df:f0:13:9b:a4:a3:0f:a4:7d:94:de: 33:9b:37:35:c1:68:2c:aa:3d:9c:f3:e7:22:e0:76: cd:4d:a8:d4:52:c5:34:12:c0:53:f4:f2:cb:07:a9: 1a:07:fc:18:d6:41:88:0e:43:b0:d5:34:7f:10:bb: f4:1c:dc:78:5c:12:58:c3:82:59:fd:7e:ab:99:e9: 50:0b:cb:08:d5:ef:78:fe:4d:f6:ef:8a:96:c3:15: ff:7f:1b:4e:3b:e7:a0:7f:dc:f8:43:be:60:63:bc: 98:b9:f5:68:b2:ab:88:c7:8c:80:9f:f2:ee:21:11: 66:ab:c5:ad:4c:11:7e:c6:9d:43:39:2c:2c:9d:1f: 1f:14:7e:59:8e:87:4f:28:33:aa:ac:29:1b:3f:16: 72:23:c1:fa:b5:dd:de:bd:e5:31:14:4a:7b:12:e2: 09:49:67:77:f4:58:bf:0e:59:e6:8c:79:fe:4b:c6: 81:51:26:8b:1a:e3:bc:ab:48:72:3f:5f:75:2c:7a: 0e:6e:ff:d4:83:d2:ea:78:d2:9d:5d:17:5d:a3:0f: 62:30:f9:14:74:a6:a6:b6:f4:c7:0e:10:f1:7a:d0: 95:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:B8:E1:8C:0C:DB:BD:A8:58:37:B8:98:67:02:74:93:C3:73:10:0C X509v3 Authority Key Identifier: keyid:43:B9:2E:C2:B0:E3:2C:B7:B2:DB:13:E3:76:52:98:D6:D2:E5:85:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q7kuwrDjLLey2xPjdlKY1tLlhc0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:8f:4c:16:14:05:ce:5c:94:fd:d3:af:2a:b0:27:3c:db:b3: a2:5f:2b:8c:b2:d8:29:a2:d3:e8:ab:5a:0d:90:20:68:5b:d9: a3:d6:8d:40:09:79:3c:6f:78:27:7b:72:8d:f2:73:c3:2e:51: 0d:f1:00:19:63:79:57:3a:eb:a6:f0:72:8a:aa:a9:f1:94:73: bb:cd:4d:f8:e8:13:61:73:5a:1a:fb:99:a8:ee:d3:9e:67:f0: cf:4b:df:45:21:35:8f:68:92:1b:9f:7e:42:d2:99:d0:6d:b7: 60:e3:41:d5:79:53:e1:37:d7:09:7a:65:71:8f:16:14:aa:27: d9:33:65:ab:a7:57:90:1e:1c:3f:ab:d4:ed:98:f7:b2:e0:f1: 75:d1:72:f0:c7:15:29:77:62:95:7e:e7:7d:34:64:38:06:9f: ec:2b:95:e3:5f:06:ce:33:9c:3f:30:78:34:d1:36:f7:6c:41: 56:ec:d2:ef:da:16:80:cb:7e:d0:dc:e3:ef:02:99:ac:b6:45: 2e:fa:79:fa:9f:7f:eb:e4:59:16:73:da:3e:a4:67:ed:9f:b3: 03:41:22:68:f4:45:7f:c8:22:e9:ca:1e:bb:8b:a5:82:e9:38: 23:63:84:ef:7b:71:a1:d3:e7:da:18:50:ce:78:9f:66:43:e6: 0e:16:30:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1/hgguJhUJTn8Yq5sjYxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzYjkyZWMyYjBlMzJjYjdiMmRiMTNlMzc2NTI5OGQ2ZDJl NTg1Y2QwHhcNMjUxMjE4MTkwMjUyWhcNMjUxMjE5MTkwMjUyWjAzMTEwLwYDVQQD Eyg2MmI4ZTE4YzBjZGJiZGE4NTgzN2I4OTg2NzAyNzQ5M2MzNzMxMDBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5UIldMJ7J0sdGrigdYvgeyNG+KC PfeJiLYEGGfoKRaM3/ATm6SjD6R9lN4zmzc1wWgsqj2c8+ci4HbNTajUUsU0EsBT 9PLLB6kaB/wY1kGIDkOw1TR/ELv0HNx4XBJYw4JZ/X6rmelQC8sI1e94/k3274qW wxX/fxtOO+egf9z4Q75gY7yYufVosquIx4yAn/LuIRFmq8WtTBF+xp1DOSwsnR8f FH5ZjodPKDOqrCkbPxZyI8H6td3eveUxFEp7EuIJSWd39Fi/DlnmjHn+S8aBUSaL GuO8q0hyP191LHoObv/Ug9LqeNKdXRddow9iMPkUdKamtvTHDhDxetCVmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGK44YwM272oWDe4mGcCdJPDcxAMMB8GA1UdIwQY MBaAFEO5LsKw4yy3stsT43ZSmNbS5YXNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTdrdXdyRGpMTGV5MnhQamRsS1kxdExsaGMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84OTI4NmYtMGU1OS00NjI2LWE2MTct NjAyMTUxNTIyYTA5LzEvUTdrdXdyRGpMTGV5MnhQamRsS1kxdExsaGMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy84OTI4NmYtMGU1OS00NjI2LWE2MTctNjAyMTUxNTIyYTA5 LzEvUTdrdXdyRGpMTGV5MnhQamRsS1kxdExsaGMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcY9MFhQF zlyU/dOvKrAnPNuzol8rjLLYKaLT6KtaDZAgaFvZo9aNQAl5PG94J3tyjfJzwy5R DfEAGWN5VzrrpvByiqqp8ZRzu81N+OgTYXNaGvuZqO7Tnmfwz0vfRSE1j2iSG59+ QtKZ0G23YONB1XlT4TfXCXplcY8WFKon2TNlq6dXkB4cP6vU7Zj3suDxddFy8McV KXdilX7nfTRkOAaf7CuV418GzjOcPzB4NNE292xBVuzS79oWgMt+0Nzj7wKZrLZF Lvp5+p9/6+RZFnPaPqRn7Z+zA0EiaPRFf8gi6coeu4ulguk4I2OE73txodPn2hhQ znifZkPmDhYwWw== -----END CERTIFICATE-----Generated at Thu Dec 18 21:29:45 2025 by rpki-client