This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft File: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft (raw, json) Hash identifier: nBGHafkKGXVGXXbU5Yp1Q18nUZnryEtQFyX1KyxXVW8= Subject key identifier: AD:30:EF:BA:0D:11:19:ED:91:3E:58:A0:E4:28:75:02:B7:30:8C:75 Authority key identifier: 43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84 Certificate issuer: /CN=43ca7f3f65d2947af94f398bb3c7c9c320019084 Certificate serial: 019AF577D26DF577729CB7F2394480D5FADC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft Manifest number: 0C47 Signing time: Sat 06 Dec 2025 21:01:01 +0000 Manifest this update: Sat 06 Dec 2025 21:01:01 +0000 Manifest next update: Sun 07 Dec 2025 21:01:01 +0000 Files and hashes: 1: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl (hash: UanFJE/89ke6DxN0ICdDGoTPWNLjX2pygWdE9EvMFLI=) 2: n71Z9zO5i6A3MnYNwx7Uxb_OUGA.roa (hash: CVGNrsSAJVnXCFxttiW1g0o49r+f3Le2U2M52m4z4p8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:d2:6d:f5:77:72:9c:b7:f2:39:44:80:d5:fa:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43ca7f3f65d2947af94f398bb3c7c9c320019084 Validity Not Before: Dec 6 21:01:01 2025 GMT Not After : Dec 7 21:01:01 2025 GMT Subject: CN=ad30efba0d1119ed913e58a0e4287502b7308c75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:8d:cd:8c:cd:d5:bd:f1:ba:91:45:27:da:f5: d0:1e:29:59:93:ab:0f:80:09:ee:53:82:79:69:ab: 7d:28:97:7f:c9:6e:78:3d:9a:29:9e:32:27:9b:d0: b6:ca:10:69:da:ee:30:73:2f:dd:e0:37:36:40:c9: a5:af:da:21:61:55:ca:3b:47:55:7a:1a:0b:1f:20: 9e:2e:fc:eb:56:31:45:52:35:a8:6f:62:7b:6c:3c: dd:e8:00:68:0b:74:79:ce:80:62:6c:92:73:64:5e: 88:3e:48:a5:55:83:11:f7:82:7e:b2:16:43:53:a4: b5:81:3a:74:af:cc:18:b4:a5:56:79:e4:f1:eb:70: af:24:28:bd:b3:87:61:07:a6:23:5e:32:28:8a:4b: a3:67:fa:98:a6:51:cf:89:ab:9f:b4:a8:bc:3f:c5: 38:d4:2a:d1:24:14:e7:d1:6c:2b:b5:f5:b0:3d:38: 94:a9:69:ea:33:15:f9:7e:82:c5:73:b6:f6:3e:cf: f3:14:e7:5d:a1:38:21:5a:73:cc:d5:08:72:af:27: 4a:19:7b:e0:53:c1:8f:b5:4e:45:0f:f6:2e:60:cc: cc:da:13:a1:55:41:6c:fb:b6:b9:bf:63:0a:e6:c2: 0d:4c:f9:f3:92:27:84:35:87:b8:d6:e8:0e:40:14: 48:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:30:EF:BA:0D:11:19:ED:91:3E:58:A0:E4:28:75:02:B7:30:8C:75 X509v3 Authority Key Identifier: keyid:43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:33:f9:5c:dc:79:03:cf:cc:ed:d3:5a:9a:2e:cd:f1:68:b5: 96:48:c6:f2:ba:ed:2e:b6:fb:d4:60:29:70:2c:32:4b:7d:aa: f8:fd:0a:b3:a0:0f:31:f2:5d:93:83:13:f4:a7:95:09:d7:bf: 96:41:6f:b5:34:65:0f:93:3a:eb:22:84:41:7f:48:27:d7:e0: 4d:a6:96:fa:b4:60:1f:65:29:99:b4:f9:4b:bc:32:bd:80:8f: b7:4a:98:84:36:cb:ea:07:8e:e9:20:cc:5b:4f:cd:69:54:fc: fc:38:b6:50:24:f3:43:2c:78:bb:52:a4:c1:c4:49:6c:b8:c2: f4:10:2b:b4:38:30:42:3b:13:14:18:19:d7:46:ae:83:05:81: 02:b2:1c:e6:aa:38:74:bf:cc:3c:8b:06:db:15:e1:40:50:4b: 68:f8:f6:da:61:f4:13:4b:ca:84:49:9f:78:96:d9:0e:8e:12: 91:42:2e:5d:ee:a2:3a:e4:07:b1:f8:98:7e:24:7d:d0:05:46: dd:73:15:4c:f7:45:42:b9:c4:bf:2c:18:a9:b3:89:62:30:f0: c7:ae:bc:c3:8f:4b:57:da:63:63:db:c8:33:96:87:36:04:46: 88:ab:62:dc:a3:77:3a:2e:5b:38:f4:e2:fc:6a:fa:94:52:cc: 25:c9:58:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d9Jt9XdynLfyOUSA1frcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzY2E3ZjNmNjVkMjk0N2FmOTRmMzk4YmIzYzdjOWMzMjAw MTkwODQwHhcNMjUxMjA2MjEwMTAxWhcNMjUxMjA3MjEwMTAxWjAzMTEwLwYDVQQD EyhhZDMwZWZiYTBkMTExOWVkOTEzZTU4YTBlNDI4NzUwMmI3MzA4Yzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAko3NjM3VvfG6kUUn2vXQHilZk6sP gAnuU4J5aat9KJd/yW54PZopnjInm9C2yhBp2u4wcy/d4Dc2QMmlr9ohYVXKO0dV ehoLHyCeLvzrVjFFUjWob2J7bDzd6ABoC3R5zoBibJJzZF6IPkilVYMR94J+shZD U6S1gTp0r8wYtKVWeeTx63CvJCi9s4dhB6YjXjIoikujZ/qYplHPiauftKi8P8U4 1CrRJBTn0WwrtfWwPTiUqWnqMxX5foLFc7b2Ps/zFOddoTghWnPM1QhyrydKGXvg U8GPtU5FD/YuYMzM2hOhVUFs+7a5v2MK5sINTPnzkieENYe41ugOQBRIvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK0w77oNERntkT5YoOQodQK3MIx1MB8GA1UdIwQY MBaAFEPKfz9l0pR6+U85i7PHycMgAZCEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUThwX1AyWFNsSHI1VHptTHM4Zkp3eUFCa0lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9mNmNmNDQtNjZkMy00ZjBiLTgxMzIt ZDUzODExZmJkN2IwLzEvUThwX1AyWFNsSHI1VHptTHM4Zkp3eUFCa0lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9mNmNmNDQtNjZkMy00ZjBiLTgxMzItZDUzODExZmJkN2Iw LzEvUThwX1AyWFNsSHI1VHptTHM4Zkp3eUFCa0lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAujP5XNx5 A8/M7dNami7N8Wi1lkjG8rrtLrb71GApcCwyS32q+P0Ks6APMfJdk4MT9KeVCde/ lkFvtTRlD5M66yKEQX9IJ9fgTaaW+rRgH2UpmbT5S7wyvYCPt0qYhDbL6geO6SDM W0/NaVT8/Di2UCTzQyx4u1KkwcRJbLjC9BArtDgwQjsTFBgZ10augwWBArIc5qo4 dL/MPIsG2xXhQFBLaPj22mH0E0vKhEmfeJbZDo4SkUIuXe6iOuQHsfiYfiR90AVG 3XMVTPdFQrnEvywYqbOJYjDwx668w49LV9pjY9vIM5aHNgRGiKti3KN3Oi5bOPTi /Gr6lFLMJclYSg== -----END CERTIFICATE-----Generated at Sun Dec 7 03:14:51 2025 by rpki-client