This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.mft File: Q38Wavs_EC-xJUO5Jwl8lra6ncI.mft (raw, json) Hash identifier: wtf8AYPgy03SKz1NyMryQRTIeVjvwf2qhzV6WL9FH4U= Subject key identifier: 7E:1B:F9:BF:52:6C:3F:1D:BE:72:40:AE:7A:A7:71:5A:6A:88:A8:86 Authority key identifier: 43:7F:16:6A:FB:3F:10:2F:B1:25:43:B9:27:09:7C:96:B6:BA:9D:C2 Certificate issuer: /CN=437f166afb3f102fb12543b927097c96b6ba9dc2 Certificate serial: 019AF49BE5F69CE864A4AB9DC88867E6670C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q38Wavs_EC-xJUO5Jwl8lra6ncI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.mft Manifest number: 01F3 Signing time: Sat 06 Dec 2025 17:00:48 +0000 Manifest this update: Sat 06 Dec 2025 17:00:48 +0000 Manifest next update: Sun 07 Dec 2025 17:00:48 +0000 Files and hashes: 1: Q38Wavs_EC-xJUO5Jwl8lra6ncI.crl (hash: ASuWvr8sdw/LgTJCVs4dgwi+qhwHqlajCQXtV6aISNI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.crl rsync://rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.mft rsync://rpki.ripe.net/repository/DEFAULT/Q38Wavs_EC-xJUO5Jwl8lra6ncI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:e5:f6:9c:e8:64:a4:ab:9d:c8:88:67:e6:67:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=437f166afb3f102fb12543b927097c96b6ba9dc2 Validity Not Before: Dec 6 17:00:48 2025 GMT Not After : Dec 7 17:00:48 2025 GMT Subject: CN=7e1bf9bf526c3f1dbe7240ae7aa7715a6a88a886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:49:e9:16:e2:a2:5d:10:ec:89:41:e4:62:ed: 80:d6:42:47:09:6e:62:f9:e1:33:ad:14:02:a9:cd: 4b:60:27:16:b6:47:6f:75:10:aa:d0:07:3c:c9:09: c4:d8:0f:f3:6c:43:bf:c6:13:fd:f6:99:07:68:22: fc:fe:ae:80:86:42:ca:3d:cb:65:ff:7a:20:10:c2: 15:4f:77:cf:38:4a:12:74:d2:9e:3f:e5:c4:52:36: 37:b5:c4:6c:56:00:0f:ae:ec:95:35:dc:42:87:5b: ac:94:63:94:ef:72:bc:3a:ac:60:a0:e5:62:ca:e8: 77:ae:0e:ee:2f:9c:67:65:9f:70:53:c9:12:ce:c4: 0e:f0:2d:d4:8f:1a:0c:f7:c1:9f:2d:fb:66:06:eb: 24:02:7f:b0:74:66:54:4e:75:a6:d3:3f:2f:67:4c: 67:d6:2f:6f:7b:21:1b:86:c9:03:4c:a7:e2:dd:a7: 66:81:58:6e:3b:3e:fc:87:4f:cd:8f:11:cc:5a:81: dd:a7:5c:9e:16:9c:a6:a7:66:e0:b4:3a:2f:6d:7c: 0c:55:fb:11:21:43:5b:65:33:a9:c8:f8:cc:e3:96: bd:98:62:30:0f:fd:0c:61:a6:bd:54:b1:65:22:c6: b4:c6:4d:4a:5a:e8:7d:b3:68:45:50:36:5d:b0:47: 6f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:1B:F9:BF:52:6C:3F:1D:BE:72:40:AE:7A:A7:71:5A:6A:88:A8:86 X509v3 Authority Key Identifier: keyid:43:7F:16:6A:FB:3F:10:2F:B1:25:43:B9:27:09:7C:96:B6:BA:9D:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q38Wavs_EC-xJUO5Jwl8lra6ncI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:b9:21:9c:ba:01:ca:86:75:f1:d7:7d:06:30:13:d0:3f:d8: 64:26:3c:ba:31:a0:e3:09:5f:ce:d0:9c:20:54:2f:8d:c4:b5: 06:7e:10:de:7c:0a:9d:d8:7f:e1:ca:c2:23:38:ba:00:a0:36: 8d:53:17:da:83:dc:59:9c:cf:9b:d7:cf:8c:c4:92:98:56:d1: 5d:a4:c0:2e:16:8c:58:e0:5c:63:70:65:12:9c:e5:ad:96:43: 95:6e:16:a2:62:4a:79:69:a5:7f:af:0d:bf:32:8c:40:37:46: ac:ee:4e:78:bf:c3:61:c9:eb:a2:b7:3d:05:b0:8b:be:0c:78: 85:d6:a8:1e:5e:96:1b:b0:5b:73:b7:d4:22:77:d5:4f:5c:f6: 86:b4:1a:47:5c:62:cd:e4:ab:89:85:4c:0f:eb:e0:82:0d:9d: 6e:28:71:05:bd:cb:e1:bc:e0:de:92:52:57:68:f1:e1:e3:a0: 7d:83:d6:3e:80:ac:75:31:56:8c:c7:dd:f5:cf:db:44:2f:dc: 9d:6d:9e:26:a9:ab:6d:93:2e:9d:55:07:04:41:e1:4f:54:0a: c6:66:1c:35:42:37:a1:56:75:fb:d9:2e:c2:22:85:aa:e2:51: 68:fa:bb:6c:64:41:1d:db:20:29:58:a6:7b:86:fe:e3:ba:d4: 2e:f2:ae:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m+X2nOhkpKudyIhn5mcMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzN2YxNjZhZmIzZjEwMmZiMTI1NDNiOTI3MDk3Yzk2YjZi YTlkYzIwHhcNMjUxMjA2MTcwMDQ4WhcNMjUxMjA3MTcwMDQ4WjAzMTEwLwYDVQQD Eyg3ZTFiZjliZjUyNmMzZjFkYmU3MjQwYWU3YWE3NzE1YTZhODhhODg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEnpFuKiXRDsiUHkYu2A1kJHCW5i +eEzrRQCqc1LYCcWtkdvdRCq0Ac8yQnE2A/zbEO/xhP99pkHaCL8/q6AhkLKPctl /3ogEMIVT3fPOEoSdNKeP+XEUjY3tcRsVgAPruyVNdxCh1uslGOU73K8OqxgoOVi yuh3rg7uL5xnZZ9wU8kSzsQO8C3UjxoM98GfLftmBuskAn+wdGZUTnWm0z8vZ0xn 1i9veyEbhskDTKfi3admgVhuOz78h0/NjxHMWoHdp1yeFpymp2bgtDovbXwMVfsR IUNbZTOpyPjM45a9mGIwD/0MYaa9VLFlIsa0xk1KWuh9s2hFUDZdsEdv+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH4b+b9SbD8dvnJArnqncVpqiKiGMB8GA1UdIwQY MBaAFEN/Fmr7PxAvsSVDuScJfJa2up3CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTM4V2F2c19FQy14SlVPNUp3bDhscmE2bmNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mYTExYTctMjQyNi00MjhlLTlkODct MDNlMWQzNTEzYzE0LzEvUTM4V2F2c19FQy14SlVPNUp3bDhscmE2bmNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9mYTExYTctMjQyNi00MjhlLTlkODctMDNlMWQzNTEzYzE0 LzEvUTM4V2F2c19FQy14SlVPNUp3bDhscmE2bmNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH7khnLoB yoZ18dd9BjAT0D/YZCY8ujGg4wlfztCcIFQvjcS1Bn4Q3nwKndh/4crCIzi6AKA2 jVMX2oPcWZzPm9fPjMSSmFbRXaTALhaMWOBcY3BlEpzlrZZDlW4WomJKeWmlf68N vzKMQDdGrO5OeL/DYcnrorc9BbCLvgx4hdaoHl6WG7Bbc7fUInfVT1z2hrQaR1xi zeSriYVMD+vggg2dbihxBb3L4bzg3pJSV2jx4eOgfYPWPoCsdTFWjMfd9c/bRC/c nW2eJqmrbZMunVUHBEHhT1QKxmYcNUI3oVZ1+9kuwiKFquJRaPq7bGRBHdsgKVim e4b+47rULvKulA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:53:49 2025 by rpki-client