This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft File: q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft (raw, json) Hash identifier: ZONeLAI4WsM4G1EjuKtyO9GvhoQ5LcJ3EoCgdop6/PI= Subject key identifier: 62:FD:EC:2F:B7:F3:B8:34:DD:51:47:4A:0D:25:D1:F7:0C:D1:D5:6A Authority key identifier: AB:B0:60:16:6D:64:CE:AD:0E:29:57:97:E8:D2:7C:55:D8:89:8B:C2 Certificate issuer: /CN=abb060166d64cead0e295797e8d27c55d8898bc2 Certificate serial: 019AF31B8ED492A4B8FB53D0D2168D18CDC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 10:01:00 +0000 Manifest this update: Sat 06 Dec 2025 10:01:00 +0000 Manifest next update: Sun 07 Dec 2025 10:01:00 +0000 Files and hashes: 1: ZVdKIHMCZIgZmO29HfZuK9KianY.roa (hash: 2kGDIO6FKG2t3hXhHnF2iU2nfmaxGFRQZKaQHnUSkxM=) 2: q7BgFm1kzq0OKVeX6NJ8VdiJi8I.crl (hash: N/55mhHtTfiJAtKaLkdBQygmGaFfs5odbbFm4VeAT9s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:8e:d4:92:a4:b8:fb:53:d0:d2:16:8d:18:cd:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abb060166d64cead0e295797e8d27c55d8898bc2 Validity Not Before: Dec 6 10:01:00 2025 GMT Not After : Dec 7 10:01:00 2025 GMT Subject: CN=62fdec2fb7f3b834dd51474a0d25d1f70cd1d56a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c7:74:01:62:d1:ca:54:a8:71:be:83:39:aa: 08:d7:3a:57:0d:0d:5c:86:7c:6b:1e:11:96:12:32: 1e:47:4d:aa:07:c2:2f:e3:4a:c1:43:35:1c:f5:81: 98:53:73:bb:c2:c4:98:54:65:04:2f:f6:5f:64:cc: 3f:02:73:f0:71:51:b9:b5:86:a0:f4:08:8d:cf:67: 82:fb:b7:43:86:34:3e:6c:66:62:b5:03:d8:75:6b: cb:d4:f5:0b:5e:6c:aa:a0:ee:4f:25:60:93:df:9f: fa:98:c6:ee:5b:c9:06:80:ff:d1:ee:0f:a0:c8:e7: af:6d:2d:a3:2d:0b:e7:f4:aa:12:2f:4e:56:3f:5d: 20:93:e8:8f:bd:a6:d8:4d:75:1e:7d:2e:e3:83:79: 96:44:fd:71:3f:69:07:53:0f:f3:76:ed:3b:9e:82: e1:0c:11:94:87:c5:6f:b4:a1:87:38:ed:a3:9f:83: e2:31:02:12:84:86:78:01:17:ad:3c:af:2f:aa:59: e4:9d:f5:a8:9a:77:41:7d:38:09:9c:f4:0a:b4:ae: 68:c1:89:ce:06:6b:71:01:3d:f7:06:0d:f1:6b:b6: 6f:e0:76:90:7b:49:42:e0:ec:2b:80:00:e6:c6:6f: fc:ae:25:98:89:99:45:05:13:bb:12:50:c1:f1:4b: 77:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:FD:EC:2F:B7:F3:B8:34:DD:51:47:4A:0D:25:D1:F7:0C:D1:D5:6A X509v3 Authority Key Identifier: keyid:AB:B0:60:16:6D:64:CE:AD:0E:29:57:97:E8:D2:7C:55:D8:89:8B:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:90:f8:0b:83:99:50:e3:df:2d:13:e5:78:af:68:ea:9b:99: 09:11:51:ed:e5:7f:6d:37:7e:98:d7:61:b3:2f:61:f0:b9:c8: 16:0c:87:29:18:2b:c5:84:09:af:89:62:97:fd:5b:62:a6:15: 32:fe:f2:5d:01:13:d2:ae:1e:eb:95:86:40:ff:ca:80:c4:cd: bf:9b:ec:be:15:84:9a:a3:11:f6:95:c5:7d:72:fd:d2:30:39: 63:ba:cb:9a:52:33:ea:eb:38:af:c0:e4:99:33:3d:48:b8:88: a1:90:2b:e9:c0:f2:0a:54:a6:da:51:42:0f:14:d1:c0:44:09: 60:e7:8d:50:fc:e2:15:fa:1d:fe:88:aa:eb:76:0a:1c:14:2c: 1c:2c:c2:40:4d:12:38:23:f6:87:db:03:ab:1b:9d:3e:e7:26: 19:25:e5:0c:58:4e:36:68:cd:c0:8d:16:7a:24:8b:64:04:79: ff:b5:3c:2f:64:b7:7e:d2:9a:e9:b4:92:73:14:e2:3b:2a:01: a3:dd:64:32:91:87:26:9d:77:56:b0:a4:13:d8:1b:9d:41:4f: 29:62:b4:d5:75:f0:ec:53:e3:dd:77:3a:15:02:88:71:6b:7c: 2d:a7:6c:34:18:43:11:a5:90:19:f8:64:ef:97:a0:75:43:71: 64:0e:f7:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG47UkqS4+1PQ0haNGM3JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYjA2MDE2NmQ2NGNlYWQwZTI5NTc5N2U4ZDI3YzU1ZDg4 OThiYzIwHhcNMjUxMjA2MTAwMTAwWhcNMjUxMjA3MTAwMTAwWjAzMTEwLwYDVQQD Eyg2MmZkZWMyZmI3ZjNiODM0ZGQ1MTQ3NGEwZDI1ZDFmNzBjZDFkNTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMd0AWLRylSocb6DOaoI1zpXDQ1c hnxrHhGWEjIeR02qB8Iv40rBQzUc9YGYU3O7wsSYVGUEL/ZfZMw/AnPwcVG5tYag 9AiNz2eC+7dDhjQ+bGZitQPYdWvL1PULXmyqoO5PJWCT35/6mMbuW8kGgP/R7g+g yOevbS2jLQvn9KoSL05WP10gk+iPvabYTXUefS7jg3mWRP1xP2kHUw/zdu07noLh DBGUh8VvtKGHOO2jn4PiMQIShIZ4ARetPK8vqlnknfWomndBfTgJnPQKtK5owYnO BmtxAT33Bg3xa7Zv4HaQe0lC4OwrgADmxm/8riWYiZlFBRO7ElDB8Ut3TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGL97C+387g03VFHSg0l0fcM0dVqMB8GA1UdIwQY MBaAFKuwYBZtZM6tDilXl+jSfFXYiYvCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTdCZ0ZtMWt6cTBPS1ZlWDZOSjhWZGlKaThJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mMjg4YmQtMTBmNS00N2IzLWIxMjQt NmIxMzY0OTRlM2RjLzEvcTdCZ0ZtMWt6cTBPS1ZlWDZOSjhWZGlKaThJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9mMjg4YmQtMTBmNS00N2IzLWIxMjQtNmIxMzY0OTRlM2Rj LzEvcTdCZ0ZtMWt6cTBPS1ZlWDZOSjhWZGlKaThJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMZD4C4OZ UOPfLRPleK9o6puZCRFR7eV/bTd+mNdhsy9h8LnIFgyHKRgrxYQJr4lil/1bYqYV Mv7yXQET0q4e65WGQP/KgMTNv5vsvhWEmqMR9pXFfXL90jA5Y7rLmlIz6us4r8Dk mTM9SLiIoZAr6cDyClSm2lFCDxTRwEQJYOeNUPziFfod/oiq63YKHBQsHCzCQE0S OCP2h9sDqxudPucmGSXlDFhONmjNwI0WeiSLZAR5/7U8L2S3ftKa6bSScxTiOyoB o91kMpGHJp13VrCkE9gbnUFPKWK01XXw7FPj3Xc6FQKIcWt8LadsNBhDEaWQGfhk 75egdUNxZA738Q== -----END CERTIFICATE-----Generated at Sat Dec 6 13:22:44 2025 by rpki-client