This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.mft File: q3kW82CYNO1AFNqMaVs0CnsKWA4.mft (raw, json) Hash identifier: e/vU/GkirV5LrnvB14Qgs+2SGPT0uAC2N08LGLhgU7s= Subject key identifier: 95:40:0E:17:2E:96:31:76:D2:07:7F:19:6B:EA:EA:20:BD:24:A6:8B Authority key identifier: AB:79:16:F3:60:98:34:ED:40:14:DA:8C:69:5B:34:0A:7B:0A:58:0E Certificate issuer: /CN=ab7916f3609834ed4014da8c695b340a7b0a580e Certificate serial: 019AF1D248CC3F661808A9B84DFF39248729 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3kW82CYNO1AFNqMaVs0CnsKWA4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.mft Manifest number: 010C Signing time: Sat 06 Dec 2025 04:01:21 +0000 Manifest this update: Sat 06 Dec 2025 04:01:21 +0000 Manifest next update: Sun 07 Dec 2025 04:01:21 +0000 Files and hashes: 1: BrmKnel9vz9ZJoRYmUMmfv_fkdA.roa (hash: iTZbysj75EFXeStqkEh3kRfDOJLprFh8UOBLsS70Pok=) 2: q3kW82CYNO1AFNqMaVs0CnsKWA4.crl (hash: 96GwLrL3L/M03V77EEjumc9dD5NKLpn//LvLoJX4utg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.mft rsync://rpki.ripe.net/repository/DEFAULT/q3kW82CYNO1AFNqMaVs0CnsKWA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:48:cc:3f:66:18:08:a9:b8:4d:ff:39:24:87:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab7916f3609834ed4014da8c695b340a7b0a580e Validity Not Before: Dec 6 04:01:21 2025 GMT Not After : Dec 7 04:01:21 2025 GMT Subject: CN=95400e172e963176d2077f196beaea20bd24a68b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d9:54:50:60:b4:e2:8f:51:fe:40:29:18:57: 5b:44:a2:d4:50:31:f7:0e:a0:8c:dc:f5:ac:66:84: 38:99:e9:b4:51:cd:b2:fc:fb:be:3a:62:e2:9c:86: aa:56:35:dd:26:3a:5a:90:c8:dd:c4:d4:b4:69:a9: a2:fa:ae:04:f3:b4:a3:58:ab:c6:79:ef:94:f8:e4: 33:b3:7d:81:dc:ec:6b:30:2a:b7:79:9d:9c:90:e4: f9:1b:fb:37:3e:d9:37:c4:fa:8b:b7:ee:d8:8f:b4: 72:78:6f:e5:85:08:c3:45:fd:55:c1:dd:3d:1c:f7: 07:7e:84:fe:58:82:99:a6:3b:83:8d:cc:fd:50:cd: e2:02:7f:6c:47:89:ba:40:01:98:14:15:29:1f:24: f1:a5:ef:1b:bd:cd:03:91:ae:eb:6c:66:c1:3b:a2: d3:05:34:6e:1c:01:3b:ab:b3:a1:62:50:5c:a7:32: 12:c2:4e:f8:08:28:e4:b3:5c:68:ef:8b:cd:ca:d8: f2:7a:04:52:dc:66:9f:9d:08:9a:6b:75:1c:34:af: bb:c8:38:9c:17:47:89:75:30:c8:6e:0f:34:e4:e8: ca:01:74:3d:47:06:b2:60:96:c4:0e:5d:88:9f:f3: b3:a0:06:28:85:94:43:9a:11:e0:8c:c3:37:6f:89: 1c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:40:0E:17:2E:96:31:76:D2:07:7F:19:6B:EA:EA:20:BD:24:A6:8B X509v3 Authority Key Identifier: keyid:AB:79:16:F3:60:98:34:ED:40:14:DA:8C:69:5B:34:0A:7B:0A:58:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3kW82CYNO1AFNqMaVs0CnsKWA4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:87:de:c6:6f:1c:9c:d7:9b:21:ba:2e:ca:a5:69:ba:f2:79: 39:1b:9b:e6:7d:3f:53:3b:c1:63:11:0f:bb:cf:f5:d6:bd:2c: 11:a1:ad:79:54:15:f6:e7:4c:a0:00:66:6f:c6:24:5d:3d:b3: d8:53:6a:5c:58:2c:83:4c:fb:b9:84:0b:6f:5e:d3:bb:5e:f2: fa:9b:e0:12:c3:21:48:da:e5:08:34:b2:ae:f7:d3:24:62:ef: 81:dc:86:55:53:6e:11:59:16:33:ad:e9:e8:c6:64:eb:4d:42: 71:9d:63:63:38:3f:b5:a2:f9:ab:d4:9d:42:22:50:20:f6:60: 09:6d:2f:33:1b:3f:e9:be:d8:4f:19:08:d6:a0:01:01:aa:ab: a4:0e:73:4b:d7:ff:b9:81:e8:8f:b4:62:73:42:30:1b:19:1f: 65:5a:7c:81:13:c2:b9:5f:cd:f9:f4:1c:6b:98:81:09:90:1e: 70:fc:bd:d5:12:1e:b4:7f:f9:f1:fd:61:fa:cd:a1:5a:5c:a3: 3e:e7:55:88:d6:1d:7e:5a:b5:ac:c3:c3:33:a0:1c:d1:fe:8d: 90:46:b1:36:34:7d:02:35:55:22:8e:9c:50:0d:41:37:a7:f2: 0b:d9:63:3f:2a:64:03:c0:53:af:0b:d7:18:d7:8c:01:17:bf: 07:d0:2e:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0kjMP2YYCKm4Tf85JIcpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiNzkxNmYzNjA5ODM0ZWQ0MDE0ZGE4YzY5NWIzNDBhN2Iw YTU4MGUwHhcNMjUxMjA2MDQwMTIxWhcNMjUxMjA3MDQwMTIxWjAzMTEwLwYDVQQD Eyg5NTQwMGUxNzJlOTYzMTc2ZDIwNzdmMTk2YmVhZWEyMGJkMjRhNjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNlUUGC04o9R/kApGFdbRKLUUDH3 DqCM3PWsZoQ4mem0Uc2y/Pu+OmLinIaqVjXdJjpakMjdxNS0aami+q4E87SjWKvG ee+U+OQzs32B3OxrMCq3eZ2ckOT5G/s3Ptk3xPqLt+7Yj7RyeG/lhQjDRf1Vwd09 HPcHfoT+WIKZpjuDjcz9UM3iAn9sR4m6QAGYFBUpHyTxpe8bvc0Dka7rbGbBO6LT BTRuHAE7q7OhYlBcpzISwk74CCjks1xo74vNytjyegRS3GafnQiaa3UcNK+7yDic F0eJdTDIbg805OjKAXQ9RwayYJbEDl2In/OzoAYohZRDmhHgjMM3b4kc6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJVADhculjF20gd/GWvq6iC9JKaLMB8GA1UdIwQY MBaAFKt5FvNgmDTtQBTajGlbNAp7ClgOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTNrVzgyQ1lOTzFBRk5xTWFWczBDbnNLV0E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9mMjY1MTQtYWVmNS00YTQ2LTg4NTEt YjY2MzAwYTdmOWYxLzEvcTNrVzgyQ1lOTzFBRk5xTWFWczBDbnNLV0E0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9mMjY1MTQtYWVmNS00YTQ2LTg4NTEtYjY2MzAwYTdmOWYx LzEvcTNrVzgyQ1lOTzFBRk5xTWFWczBDbnNLV0E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvofexm8c nNebIbouyqVpuvJ5ORub5n0/UzvBYxEPu8/11r0sEaGteVQV9udMoABmb8YkXT2z 2FNqXFgsg0z7uYQLb17Tu17y+pvgEsMhSNrlCDSyrvfTJGLvgdyGVVNuEVkWM63p 6MZk601CcZ1jYzg/taL5q9SdQiJQIPZgCW0vMxs/6b7YTxkI1qABAaqrpA5zS9f/ uYHoj7Ric0IwGxkfZVp8gRPCuV/N+fQca5iBCZAecPy91RIetH/58f1h+s2hWlyj PudViNYdflq1rMPDM6Ac0f6NkEaxNjR9AjVVIo6cUA1BN6fyC9ljPypkA8BTrwvX GNeMARe/B9Au+w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:21:52 2025 by rpki-client