This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft File: Q34DDURmGkwgHroD3kUrBLjn2eU.mft (raw, json) Hash identifier: pQcgzFOng0/B/vvGUS+aYdr2rNzpu3IgmTmE2RC53Pg= Subject key identifier: FF:34:47:BE:28:DB:88:80:14:6D:AA:D3:28:76:60:74:AA:39:9E:5F Authority key identifier: 43:7E:03:0D:44:66:1A:4C:20:1E:BA:03:DE:45:2B:04:B8:E7:D9:E5 Certificate issuer: /CN=437e030d44661a4c201eba03de452b04b8e7d9e5 Certificate serial: 019AF49BD2569130C9DFE62CCE2FA1E429D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft Manifest number: 16A8 Signing time: Sat 06 Dec 2025 17:00:43 +0000 Manifest this update: Sat 06 Dec 2025 17:00:43 +0000 Manifest next update: Sun 07 Dec 2025 17:00:43 +0000 Files and hashes: 1: Q34DDURmGkwgHroD3kUrBLjn2eU.crl (hash: 2aiA7A72BPrT5ZOXC+A4AsE+Sacm56WfFiO5Zt+Uac0=) 2: aTnDDG7156iJH1B7VtXl45Lxz4c.roa (hash: uqmE7u3SyyyiP9Dvg82dGi927wLVOacs75i5/YZ4Qho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:d2:56:91:30:c9:df:e6:2c:ce:2f:a1:e4:29:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=437e030d44661a4c201eba03de452b04b8e7d9e5 Validity Not Before: Dec 6 17:00:43 2025 GMT Not After : Dec 7 17:00:43 2025 GMT Subject: CN=ff3447be28db8880146daad328766074aa399e5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:56:c2:4b:af:a7:83:22:9e:12:3d:f7:8c:93: 38:bc:1a:f4:17:22:14:ba:27:ac:e1:e8:19:d3:cf: fe:ce:1b:79:ea:df:4d:14:0b:16:28:54:b4:bc:2f: a5:de:51:bd:12:cd:6a:be:3e:10:1d:fc:bf:a1:40: 70:0a:45:7d:1c:ee:4a:c6:da:94:e9:f7:20:c3:2a: ed:37:ef:7f:67:da:d1:b3:c6:d8:52:ba:1e:18:89: 75:de:32:95:f5:c1:6c:b7:b9:d6:e3:79:a6:cb:42: a8:eb:52:56:d4:62:1a:28:4d:ef:7a:ce:fc:f2:34: 14:c7:50:d3:df:38:b3:d2:b5:90:fb:6f:d8:25:63: c2:aa:6e:3c:15:94:4d:5b:d5:4c:1b:3b:fb:1a:83: bd:bf:cb:8e:e2:16:f4:61:bf:e0:33:d7:e1:03:b4: 20:3a:55:f6:e5:f2:72:9e:b0:69:cd:d2:07:62:59: 6e:64:f8:62:9d:0e:a0:09:83:79:f8:b0:be:3d:0f: 53:5c:34:21:c9:ba:20:ee:5e:9c:be:c5:63:db:f8: 11:4d:56:85:69:d1:cc:35:bd:d4:f7:c3:fc:0d:d7: 03:06:e8:eb:b5:f8:a3:09:15:62:d8:82:d4:aa:7a: 49:7f:da:55:2d:29:2a:00:e2:53:4c:47:ca:a0:35: 58:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:34:47:BE:28:DB:88:80:14:6D:AA:D3:28:76:60:74:AA:39:9E:5F X509v3 Authority Key Identifier: keyid:43:7E:03:0D:44:66:1A:4C:20:1E:BA:03:DE:45:2B:04:B8:E7:D9:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:9a:76:1c:19:3c:e6:84:57:d3:8e:29:fe:bd:a9:bc:3a:09: d5:4a:da:3f:12:c5:28:38:7c:6d:82:43:bd:43:08:7f:cf:b5: 4a:ed:9b:7e:81:a4:87:5d:5f:f4:ca:ab:cd:0c:a9:04:b1:e8: 16:1d:31:8c:64:1c:93:d5:1e:11:b0:fa:a0:b5:c8:83:ca:b3: 11:44:81:e5:0c:5d:ab:77:df:91:38:0a:39:5d:93:40:df:04: 43:95:bc:ce:14:bb:85:49:05:7a:6b:d8:ef:5a:67:31:4f:66: d9:c4:74:5a:e5:c8:67:99:30:7c:13:9e:36:8e:92:68:29:a4: ba:b8:7a:00:ad:ff:62:3c:1b:bf:b3:8b:09:5f:34:b6:ee:c8: 21:90:3b:79:f9:a2:a6:a9:35:b8:5d:d6:92:94:0d:36:b4:97: f2:81:6d:71:5d:18:e8:1c:98:45:7a:a5:cb:ab:58:b0:bd:90: 95:75:c3:0c:f9:a2:53:e5:41:65:e2:d5:16:61:33:01:9c:5c: b6:ef:b4:24:1a:8c:db:75:50:c2:e4:73:87:de:c2:59:8d:c5: 96:c5:7b:1c:e8:08:ff:dd:e5:40:f3:04:62:d0:33:02:43:1e: 9b:2e:55:30:9d:a8:53:45:66:15:d5:95:6e:61:b8:28:62:88: 5e:41:d1:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m9JWkTDJ3+Yszi+h5CnYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzN2UwMzBkNDQ2NjFhNGMyMDFlYmEwM2RlNDUyYjA0Yjhl N2Q5ZTUwHhcNMjUxMjA2MTcwMDQzWhcNMjUxMjA3MTcwMDQzWjAzMTEwLwYDVQQD EyhmZjM0NDdiZTI4ZGI4ODgwMTQ2ZGFhZDMyODc2NjA3NGFhMzk5ZTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1bCS6+ngyKeEj33jJM4vBr0FyIU uies4egZ08/+zht56t9NFAsWKFS0vC+l3lG9Es1qvj4QHfy/oUBwCkV9HO5KxtqU 6fcgwyrtN+9/Z9rRs8bYUroeGIl13jKV9cFst7nW43mmy0Ko61JW1GIaKE3ves78 8jQUx1DT3ziz0rWQ+2/YJWPCqm48FZRNW9VMGzv7GoO9v8uO4hb0Yb/gM9fhA7Qg OlX25fJynrBpzdIHYlluZPhinQ6gCYN5+LC+PQ9TXDQhybog7l6cvsVj2/gRTVaF adHMNb3U98P8DdcDBujrtfijCRVi2ILUqnpJf9pVLSkqAOJTTEfKoDVYdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP80R74o24iAFG2q0yh2YHSqOZ5fMB8GA1UdIwQY MBaAFEN+Aw1EZhpMIB66A95FKwS459nlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTM0RERVUm1Ha3dnSHJvRDNrVXJCTGpuMmVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS80YmUyNTktYmU5Ni00MGZhLTg4MGUt YmJkMjEwNmYzMzcwLzEvUTM0RERVUm1Ha3dnSHJvRDNrVXJCTGpuMmVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS80YmUyNTktYmU5Ni00MGZhLTg4MGUtYmJkMjEwNmYzMzcw LzEvUTM0RERVUm1Ha3dnSHJvRDNrVXJCTGpuMmVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVpp2HBk8 5oRX044p/r2pvDoJ1UraPxLFKDh8bYJDvUMIf8+1Su2bfoGkh11f9MqrzQypBLHo Fh0xjGQck9UeEbD6oLXIg8qzEUSB5Qxdq3ffkTgKOV2TQN8EQ5W8zhS7hUkFemvY 71pnMU9m2cR0WuXIZ5kwfBOeNo6SaCmkurh6AK3/Yjwbv7OLCV80tu7IIZA7efmi pqk1uF3WkpQNNrSX8oFtcV0Y6ByYRXqly6tYsL2QlXXDDPmiU+VBZeLVFmEzAZxc tu+0JBqM23VQwuRzh97CWY3FlsV7HOgI/93lQPMEYtAzAkMemy5VMJ2oU0VmFdWV bmG4KGKIXkHRMA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:30:05 2025 by rpki-client