This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft File: qMbzkzUMd1mMEhrNPJL3BIV274k.mft (raw, json) Hash identifier: bTROMvUh/hEPQzfUASbRZQkWcJy4Cmp/e5VisrF0mQI= Subject key identifier: 41:45:F8:8D:67:FB:85:C3:48:D2:9E:BC:28:E3:F6:CF:91:3D:96:1D Authority key identifier: A8:C6:F3:93:35:0C:77:59:8C:12:1A:CD:3C:92:F7:04:85:76:EF:89 Certificate issuer: /CN=a8c6f393350c77598c121acd3c92f7048576ef89 Certificate serial: 019B36B2D7D01EC92C8B1980D1239401B469 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qMbzkzUMd1mMEhrNPJL3BIV274k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft Manifest number: 0EBB Signing time: Fri 19 Dec 2025 13:00:48 +0000 Manifest this update: Fri 19 Dec 2025 13:00:48 +0000 Manifest next update: Sat 20 Dec 2025 13:00:48 +0000 Files and hashes: 1: eOh7otVHHrYHGXBG7XugLjFkG3I.roa (hash: jBij6Zpdi8PdzGdFEr+QptijCvWCfUOl+3jki1c2vMs=) 2: lCDqNprGOb5vTF01oJ8hwQqZCRE.roa (hash: mFZkrlVA4mVLiefirb6z2hXCAJmumM9YtxbYwU/yy10=) 3: qMbzkzUMd1mMEhrNPJL3BIV274k.crl (hash: UsHJRgGoA9Tk8drM201g5uLLnn35tMdGefIBBSqfue0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft rsync://rpki.ripe.net/repository/DEFAULT/qMbzkzUMd1mMEhrNPJL3BIV274k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b2:d7:d0:1e:c9:2c:8b:19:80:d1:23:94:01:b4:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8c6f393350c77598c121acd3c92f7048576ef89 Validity Not Before: Dec 19 13:00:48 2025 GMT Not After : Dec 20 13:00:48 2025 GMT Subject: CN=4145f88d67fb85c348d29ebc28e3f6cf913d961d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:21:3d:51:7d:90:3b:98:19:79:c1:a1:35:90: 10:a6:2b:1e:da:39:84:55:fb:f6:3d:42:9f:10:49: 9e:78:bd:7d:27:79:bf:43:97:7f:94:b3:69:a4:54: b6:46:13:3d:8a:d1:ea:0f:3c:0c:1a:99:fb:c3:4a: bb:56:b4:7e:eb:29:ed:c9:69:12:25:13:b6:65:06: 07:1d:5f:f1:9b:85:8f:bd:24:55:e2:75:9d:d7:a5: 45:55:42:c1:93:d8:e5:6d:05:89:9f:eb:53:ad:8e: 4a:4a:71:6d:ce:89:64:b9:b4:61:05:bc:dc:30:10: d4:21:c4:fb:2a:71:17:a2:61:ef:0d:37:39:f9:79: 86:fc:76:be:94:69:66:be:3d:d4:1c:9a:d5:49:1b: 3f:18:4a:0f:aa:bc:f9:9e:f9:b3:5e:fe:e7:96:da: 23:c9:ca:9e:fa:c4:f7:1f:65:f0:97:12:15:9a:cb: b0:7c:d9:12:c1:a1:da:ab:4e:5c:44:1b:e2:0a:ae: 78:e6:43:1d:1d:32:31:63:5f:77:df:d2:c5:90:53: 91:cf:e4:25:04:5c:6b:6a:54:34:ea:41:14:7e:7f: 2f:f8:99:04:d3:63:52:70:82:1c:a2:c0:c0:1b:6e: cf:5e:c3:9b:03:c3:2f:5a:28:f4:30:d4:59:13:62: 68:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:45:F8:8D:67:FB:85:C3:48:D2:9E:BC:28:E3:F6:CF:91:3D:96:1D X509v3 Authority Key Identifier: keyid:A8:C6:F3:93:35:0C:77:59:8C:12:1A:CD:3C:92:F7:04:85:76:EF:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qMbzkzUMd1mMEhrNPJL3BIV274k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:5d:67:91:c2:7d:c6:d8:fc:d9:10:b3:93:8f:75:ae:07:3a: af:82:59:70:eb:d1:04:48:35:cc:0d:eb:07:da:36:79:cd:18: 64:53:73:3e:35:24:31:6e:3b:ac:14:db:89:09:02:43:bd:0b: c1:30:c9:01:3d:f5:d0:8d:39:9b:14:84:97:ce:5a:b1:57:a5: ca:43:97:17:09:7d:5d:16:80:65:24:d6:de:66:ab:24:7e:8d: 5f:fd:24:9b:a2:42:54:2a:62:82:7f:13:81:ad:25:32:4f:21: 75:63:8d:85:c7:af:85:27:47:78:2a:ee:95:fe:83:33:e6:3a: 56:87:1c:2b:f7:ae:58:5e:03:aa:73:12:a6:09:d5:aa:4b:90: 60:b6:7d:fa:2a:b1:d8:b2:e7:c7:fd:6c:c7:64:de:1b:9b:5f: dd:9a:ac:29:61:9e:6e:c1:3d:04:58:97:98:b4:bf:f3:04:9a: 46:98:9e:63:de:34:7b:a3:ec:02:e5:73:c6:b1:12:93:6e:a6: 40:51:41:57:4c:04:dd:8a:49:d3:59:cb:ba:aa:25:a3:b0:d3: 0c:30:82:95:51:bf:fd:a8:1f:58:00:df:90:32:7e:4b:cb:f1: 35:e5:4d:f3:72:0b:17:c0:da:81:e7:b3:57:ec:3a:b9:43:6c: f1:68:34:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2stfQHsksixmA0SOUAbRpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4YzZmMzkzMzUwYzc3NTk4YzEyMWFjZDNjOTJmNzA0ODU3 NmVmODkwHhcNMjUxMjE5MTMwMDQ4WhcNMjUxMjIwMTMwMDQ4WjAzMTEwLwYDVQQD Eyg0MTQ1Zjg4ZDY3ZmI4NWMzNDhkMjllYmMyOGUzZjZjZjkxM2Q5NjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9CE9UX2QO5gZecGhNZAQpise2jmE Vfv2PUKfEEmeeL19J3m/Q5d/lLNppFS2RhM9itHqDzwMGpn7w0q7VrR+6yntyWkS JRO2ZQYHHV/xm4WPvSRV4nWd16VFVULBk9jlbQWJn+tTrY5KSnFtzolkubRhBbzc MBDUIcT7KnEXomHvDTc5+XmG/Ha+lGlmvj3UHJrVSRs/GEoPqrz5nvmzXv7nltoj ycqe+sT3H2XwlxIVmsuwfNkSwaHaq05cRBviCq545kMdHTIxY19339LFkFORz+Ql BFxralQ06kEUfn8v+JkE02NScIIcosDAG27PXsObA8MvWij0MNRZE2JoAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEFF+I1n+4XDSNKevCjj9s+RPZYdMB8GA1UdIwQY MBaAFKjG85M1DHdZjBIazTyS9wSFdu+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcU1iemt6VU1kMW1NRWhyTlBKTDNCSVYyNzRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS83MDllMDctNDdkNS00NzIwLWI3Nzct YzZiY2EwMWIyZmY4LzEvcU1iemt6VU1kMW1NRWhyTlBKTDNCSVYyNzRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS83MDllMDctNDdkNS00NzIwLWI3NzctYzZiY2EwMWIyZmY4 LzEvcU1iemt6VU1kMW1NRWhyTlBKTDNCSVYyNzRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJl1nkcJ9 xtj82RCzk491rgc6r4JZcOvRBEg1zA3rB9o2ec0YZFNzPjUkMW47rBTbiQkCQ70L wTDJAT310I05mxSEl85asVelykOXFwl9XRaAZSTW3marJH6NX/0km6JCVCpign8T ga0lMk8hdWONhcevhSdHeCrulf6DM+Y6VoccK/euWF4DqnMSpgnVqkuQYLZ9+iqx 2LLnx/1sx2TeG5tf3ZqsKWGebsE9BFiXmLS/8wSaRpieY940e6PsAuVzxrESk26m QFFBV0wE3YpJ01nLuqolo7DTDDCClVG//agfWADfkDJ+S8vxNeVN83ILF8Dageez V+w6uUNs8Wg0zA== -----END CERTIFICATE-----Generated at Fri Dec 19 15:21:50 2025 by rpki-client