This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft File: q3ukNXZmdmStbymmZicOM1eDbxo.mft (raw, json) Hash identifier: YSNHwPy0joIWIGUiwB9YqfgrEkbP/Sbd719gj6y4Pwg= Subject key identifier: D6:2D:FE:8E:FD:37:C9:E9:71:7C:33:FE:08:77:4F:EA:DA:59:F2:50 Authority key identifier: AB:7B:A4:35:76:66:76:64:AD:6F:29:A6:66:27:0E:33:57:83:6F:1A Certificate issuer: /CN=ab7ba43576667664ad6f29a666270e3357836f1a Certificate serial: 019AF209294807E041A69FEFF18BEE633FA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 05:01:17 +0000 Manifest this update: Sat 06 Dec 2025 05:01:17 +0000 Manifest next update: Sun 07 Dec 2025 05:01:17 +0000 Files and hashes: 1: q3ukNXZmdmStbymmZicOM1eDbxo.crl (hash: SjJ0UsMxq1d6tWnBXPg8R97HRPH3jzwBCpIL2zWSw+E=) 2: rFtQ52vnm-Gf2JN4L6yb0DTiUgw.roa (hash: U6PLdhl9fIkfcENijAv37MSFDTY2VRfS2bCNJb0dRIc=) 3: z4h6VOta7nlktuKCkK1-Zw-1S8Q.roa (hash: XA8aL+R7cIm6KIZ8pt2+mp6cPL138KkhjyZFmjM+7SU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.crl rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:29:48:07:e0:41:a6:9f:ef:f1:8b:ee:63:3f:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab7ba43576667664ad6f29a666270e3357836f1a Validity Not Before: Dec 6 05:01:17 2025 GMT Not After : Dec 7 05:01:17 2025 GMT Subject: CN=d62dfe8efd37c9e9717c33fe08774feada59f250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a6:1c:14:08:cb:e6:f6:9f:a9:c4:31:55:1c: 2e:54:32:cf:72:a7:02:ee:61:60:0a:b3:7f:ae:ec: 86:7b:9c:73:01:89:19:e0:87:af:5a:13:5f:fb:22: 59:2e:29:d6:16:0b:54:3c:ae:cd:dc:95:1f:16:88: da:e9:88:e9:1c:1b:33:4e:72:1b:29:b6:a9:b7:95: bb:ea:8c:4e:e1:1d:ba:bb:c3:c6:7f:83:a8:9e:3f: e3:7a:c8:5e:95:f4:ad:3b:b6:c4:9e:1e:42:fd:cd: f1:51:68:aa:16:81:7a:89:c6:71:4f:f9:18:c0:34: ef:89:87:7f:9f:eb:9c:d3:1a:4a:ac:9a:ae:1b:b3: 6e:a4:3e:48:8b:ac:ef:85:d7:70:3e:b9:28:9a:a5: 3e:cd:72:29:ac:48:97:20:36:7b:d8:78:7f:24:44: 8f:b8:78:ad:9f:eb:c6:2d:d9:54:79:03:f0:da:13: 5d:84:db:54:f4:2d:64:5f:59:2b:26:3e:45:64:ce: d0:0f:61:61:4f:c4:f0:f1:1b:2b:ae:d4:43:93:f4: 9b:d7:67:a9:6e:48:ef:03:28:36:68:d6:f8:fc:2e: fb:bd:31:5c:64:f4:1f:f1:d2:8d:55:c1:de:f3:67: ac:92:3e:7a:5d:c9:c3:de:91:1a:c3:92:e6:73:cf: eb:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:2D:FE:8E:FD:37:C9:E9:71:7C:33:FE:08:77:4F:EA:DA:59:F2:50 X509v3 Authority Key Identifier: keyid:AB:7B:A4:35:76:66:76:64:AD:6F:29:A6:66:27:0E:33:57:83:6F:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:0b:f2:e9:18:a0:3f:c2:39:67:44:82:31:02:74:9a:e5:6b: a8:af:8e:9e:a9:a6:bb:6f:b4:4b:6f:e5:da:3e:61:1b:7f:64: 59:35:2f:6d:75:f7:b8:67:9e:ad:3f:3a:99:06:ed:4a:5d:74: c4:4e:8b:a2:09:50:e9:22:8d:f3:fc:b2:bd:b3:a5:6a:1a:f1: 57:58:cf:89:53:bb:26:ed:47:67:e5:8d:d6:c0:16:0a:68:60: 67:65:01:c0:99:f0:10:6d:b4:e3:3f:c0:2a:98:91:54:61:21: db:fe:06:9b:75:43:f3:b5:6b:80:82:20:01:e9:02:31:56:1c: a0:67:39:5e:dc:94:f6:d0:2a:fe:69:86:6b:3c:0f:eb:86:62: b4:6c:6b:36:65:8c:ae:b6:78:48:f7:f8:f0:bd:8d:8e:5f:85: fa:66:7d:27:7a:a5:0d:49:96:b6:58:4c:68:83:e5:85:24:eb: 5c:22:6a:23:e9:fc:e3:bb:e4:a0:05:ac:02:cb:ea:52:ce:4b: 72:65:7c:f4:83:6e:13:f5:5c:60:89:96:de:14:3f:ab:b9:cd: d6:ff:8e:52:66:b0:aa:98:ba:b6:42:b2:9e:ee:70:82:41:84: e5:58:d3:b0:91:b2:5a:77:f0:bd:d4:96:a6:f6:54:30:bb:20: dd:1a:8e:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCSlIB+BBpp/v8YvuYz+kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiN2JhNDM1NzY2Njc2NjRhZDZmMjlhNjY2MjcwZTMzNTc4 MzZmMWEwHhcNMjUxMjA2MDUwMTE3WhcNMjUxMjA3MDUwMTE3WjAzMTEwLwYDVQQD EyhkNjJkZmU4ZWZkMzdjOWU5NzE3YzMzZmUwODc3NGZlYWRhNTlmMjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaYcFAjL5vafqcQxVRwuVDLPcqcC 7mFgCrN/ruyGe5xzAYkZ4IevWhNf+yJZLinWFgtUPK7N3JUfFoja6YjpHBszTnIb Kbapt5W76oxO4R26u8PGf4Oonj/jeshelfStO7bEnh5C/c3xUWiqFoF6icZxT/kY wDTviYd/n+uc0xpKrJquG7NupD5Ii6zvhddwPrkomqU+zXIprEiXIDZ72Hh/JESP uHitn+vGLdlUeQPw2hNdhNtU9C1kX1krJj5FZM7QD2FhT8Tw8RsrrtRDk/Sb12ep bkjvAyg2aNb4/C77vTFcZPQf8dKNVcHe82eskj56XcnD3pEaw5Lmc8/rcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNYt/o79N8npcXwz/gh3T+raWfJQMB8GA1UdIwQY MBaAFKt7pDV2ZnZkrW8ppmYnDjNXg28aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTN1a05YWm1kbVN0YnltbVppY09NMWVEYnhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8wZTFmOTEtYzNlZC00MzVkLWE0NWYt MjNhYzc1ODA0OGVjLzEvcTN1a05YWm1kbVN0YnltbVppY09NMWVEYnhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8wZTFmOTEtYzNlZC00MzVkLWE0NWYtMjNhYzc1ODA0OGVj LzEvcTN1a05YWm1kbVN0YnltbVppY09NMWVEYnhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgAvy6Rig P8I5Z0SCMQJ0muVrqK+Onqmmu2+0S2/l2j5hG39kWTUvbXX3uGeerT86mQbtSl10 xE6LoglQ6SKN8/yyvbOlahrxV1jPiVO7Ju1HZ+WN1sAWCmhgZ2UBwJnwEG204z/A KpiRVGEh2/4Gm3VD87VrgIIgAekCMVYcoGc5XtyU9tAq/mmGazwP64ZitGxrNmWM rrZ4SPf48L2Njl+F+mZ9J3qlDUmWtlhMaIPlhSTrXCJqI+n847vkoAWsAsvqUs5L cmV89INuE/VcYImW3hQ/q7nN1v+OUmawqpi6tkKynu5wgkGE5VjTsJGyWnfwvdSW pvZUMLsg3RqOwQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:14:52 2025 by rpki-client