This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft File: Q57sdw36ZitOpkoCLus46D2q4ig.mft (raw, json) Hash identifier: 4hfbFBBKVIEc7XkfYVO2J3Lf+PLjuPQp9mFaGehXTjs= Subject key identifier: 15:F2:63:7A:8A:87:A6:33:23:47:CF:0C:70:AF:00:ED:E5:DF:5D:DE Authority key identifier: 43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28 Certificate issuer: /CN=439eec770dfa662b4ea64a022eeb38e83daae228 Certificate serial: 019AF16470D19D4271EF3E069487926D081F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft Manifest number: 08F7 Signing time: Sat 06 Dec 2025 02:01:22 +0000 Manifest this update: Sat 06 Dec 2025 02:01:22 +0000 Manifest next update: Sun 07 Dec 2025 02:01:22 +0000 Files and hashes: 1: Q57sdw36ZitOpkoCLus46D2q4ig.crl (hash: JszMrCUKr/RY1F+E/QZzUeexYna5u7LzVgUoGexILaQ=) 2: s-6iu0euq8mwctWc84gynbP4Gz8.roa (hash: ix817uYIHKTbd4XoAS5Yf6A1NltjL0SfzgZQTYUowKc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:70:d1:9d:42:71:ef:3e:06:94:87:92:6d:08:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439eec770dfa662b4ea64a022eeb38e83daae228 Validity Not Before: Dec 6 02:01:22 2025 GMT Not After : Dec 7 02:01:22 2025 GMT Subject: CN=15f2637a8a87a6332347cf0c70af00ede5df5dde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:00:c1:9c:1d:87:22:c6:99:c4:18:1f:05:76: c8:a9:f1:cb:05:fb:0b:7b:95:d6:be:ac:f3:6f:8c: 67:8b:13:70:99:9b:94:43:cc:28:b8:05:ad:20:ac: 26:58:e0:53:76:c9:98:ab:d6:8a:3b:6c:99:b1:7e: 17:0d:1c:d5:12:9d:1b:3a:91:f4:bc:45:64:1c:06: 3c:28:36:50:9c:41:14:a8:ab:87:67:1f:5c:18:cc: 27:68:c9:bf:31:79:53:03:72:b3:7a:4e:0e:68:43: fc:73:dc:bf:01:0c:51:92:d8:75:bc:2e:82:f4:9a: 0d:80:2e:18:cc:7d:d1:47:fd:2d:49:71:2f:8b:df: f7:e8:d1:b3:a3:dc:61:c4:41:a1:53:89:15:32:4a: a2:2c:0a:4c:a8:15:e5:36:eb:c2:0b:70:05:40:e2: ef:8f:da:18:f5:42:ad:f1:50:c9:06:b3:2e:6b:f3: d1:f3:5d:ca:5e:fb:e7:2a:34:94:c4:fc:36:59:5b: 4e:1d:e4:5f:e4:f3:f6:ec:36:a7:44:12:fd:d9:0e: 00:b1:69:d7:b6:87:c6:9a:15:32:d6:33:9b:45:cc: 0e:86:26:e0:33:9c:26:8f:c1:76:bf:8a:59:1c:7e: f3:25:f5:9c:1a:d1:9c:39:a9:92:51:cf:c0:25:83: 1c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:F2:63:7A:8A:87:A6:33:23:47:CF:0C:70:AF:00:ED:E5:DF:5D:DE X509v3 Authority Key Identifier: keyid:43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:6c:07:d1:e7:55:5c:5d:2f:e4:ec:b3:62:66:e2:83:25:15: 54:a6:06:0c:03:ff:6e:7d:62:50:44:99:5a:cd:11:ac:14:54: 08:6a:2e:95:3d:8e:a3:e4:f8:7d:f2:8d:0d:bc:fb:55:e8:22: 78:57:e9:72:50:12:cd:75:6c:72:4e:5a:63:a8:01:34:7a:c2: 08:54:1c:45:8a:00:37:b0:bb:64:b5:69:83:76:3c:ff:44:28: ff:2d:e7:1f:0e:06:af:d1:1e:d2:07:cc:ef:61:60:ab:8b:84: 44:eb:64:cf:eb:70:b5:92:57:fd:24:f6:15:eb:56:2a:d4:29: e4:6b:4b:fc:d9:05:99:6f:6c:77:43:c8:40:f6:15:92:ad:9c: 4e:79:9c:61:39:c7:e0:04:da:24:53:25:18:d7:7e:3c:7d:c5: 05:f2:71:bd:7f:04:03:51:c3:fe:f1:a9:bb:0b:c6:82:6a:c4: fe:b1:d9:a3:f1:f1:45:92:f8:97:b9:1e:75:79:9f:58:49:98: 7c:72:28:5f:d0:1a:e8:30:9f:e8:7f:85:16:80:db:5b:cd:0f: ab:78:7f:26:cc:a2:f8:e3:41:60:33:c6:42:08:e4:40:0f:fe: d9:03:4b:e8:d7:79:56:92:12:30:09:ef:91:49:55:f1:61:f6: fc:18:af:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZHDRnUJx7z4GlIeSbQgfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzOWVlYzc3MGRmYTY2MmI0ZWE2NGEwMjJlZWIzOGU4M2Rh YWUyMjgwHhcNMjUxMjA2MDIwMTIyWhcNMjUxMjA3MDIwMTIyWjAzMTEwLwYDVQQD EygxNWYyNjM3YThhODdhNjMzMjM0N2NmMGM3MGFmMDBlZGU1ZGY1ZGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgDBnB2HIsaZxBgfBXbIqfHLBfsL e5XWvqzzb4xnixNwmZuUQ8wouAWtIKwmWOBTdsmYq9aKO2yZsX4XDRzVEp0bOpH0 vEVkHAY8KDZQnEEUqKuHZx9cGMwnaMm/MXlTA3Kzek4OaEP8c9y/AQxRkth1vC6C 9JoNgC4YzH3RR/0tSXEvi9/36NGzo9xhxEGhU4kVMkqiLApMqBXlNuvCC3AFQOLv j9oY9UKt8VDJBrMua/PR813KXvvnKjSUxPw2WVtOHeRf5PP27DanRBL92Q4AsWnX tofGmhUy1jObRcwOhibgM5wmj8F2v4pZHH7zJfWcGtGcOamSUc/AJYMcOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBXyY3qKh6YzI0fPDHCvAO3l313eMB8GA1UdIwQY MBaAFEOe7HcN+mYrTqZKAi7rOOg9quIoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTU3c2R3MzZaaXRPcGtvQ0x1czQ2RDJxNGlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi82Yjg0MzQtZjQ1NC00MWM3LTkyYjkt MzUyZjdjYTAxMWFlLzEvUTU3c2R3MzZaaXRPcGtvQ0x1czQ2RDJxNGlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi82Yjg0MzQtZjQ1NC00MWM3LTkyYjktMzUyZjdjYTAxMWFl LzEvUTU3c2R3MzZaaXRPcGtvQ0x1czQ2RDJxNGlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXmwH0edV XF0v5OyzYmbigyUVVKYGDAP/bn1iUESZWs0RrBRUCGoulT2Oo+T4ffKNDbz7Vegi eFfpclASzXVsck5aY6gBNHrCCFQcRYoAN7C7ZLVpg3Y8/0Qo/y3nHw4Gr9Ee0gfM 72Fgq4uEROtkz+twtZJX/ST2FetWKtQp5GtL/NkFmW9sd0PIQPYVkq2cTnmcYTnH 4ATaJFMlGNd+PH3FBfJxvX8EA1HD/vGpuwvGgmrE/rHZo/HxRZL4l7kedXmfWEmY fHIoX9Aa6DCf6H+FFoDbW80Pq3h/Jsyi+ONBYDPGQgjkQA/+2QNL6Nd5VpISMAnv kUlV8WH2/BivPQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:21:40 2025 by rpki-client