This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft File: Q_BsNphySzf-GhcRQX29iOu_CpE.mft (raw, json) Hash identifier: OCVFAy3KlOO9AdHRRztBx5R4k7g8RKaS3I/Y9nA/l7c= Subject key identifier: 80:D3:C5:0F:BD:13:9A:D7:F0:0E:A0:AC:D1:46:B2:D6:6A:EB:13:19 Authority key identifier: 43:F0:6C:36:98:72:4B:37:FE:1A:17:11:41:7D:BD:88:EB:BF:0A:91 Certificate issuer: /CN=43f06c3698724b37fe1a1711417dbd88ebbf0a91 Certificate serial: 019AF577CE3F0A20BFB08749025D9A8368C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft Manifest number: B7 Signing time: Sat 06 Dec 2025 21:01:00 +0000 Manifest this update: Sat 06 Dec 2025 21:01:00 +0000 Manifest next update: Sun 07 Dec 2025 21:01:00 +0000 Files and hashes: 1: CxgM5umcJQIKAphd4HGRMxjPCiQ.roa (hash: A0nE+ddeI2g2MvTBC556Td71a5D11i+c62doMFlZiC8=) 2: JknyP3Ybin2U1sEXva4KCDR1c1I.roa (hash: O0vUT6Dy38kn7d3i/5/I+631QCA6tRSEMUbIaeBWKKg=) 3: Q_BsNphySzf-GhcRQX29iOu_CpE.crl (hash: aBzJMcnW3deavSnEa3xB1nKZ2iBVtv4D/h8W9N6RTf4=) 4: hraQuSPXm_BKduHB1VDVz3ZUcQY.roa (hash: WS2hCjy7E85ll6h/ANkIKpGGT1mve9bfebhKK3l26Xw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.crl rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:ce:3f:0a:20:bf:b0:87:49:02:5d:9a:83:68:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43f06c3698724b37fe1a1711417dbd88ebbf0a91 Validity Not Before: Dec 6 21:01:00 2025 GMT Not After : Dec 7 21:01:00 2025 GMT Subject: CN=80d3c50fbd139ad7f00ea0acd146b2d66aeb1319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:62:be:65:54:e5:43:4e:2a:f0:cf:a2:a2:14: 18:71:2e:16:c8:b2:6d:d1:55:60:9f:5c:fa:27:04: 95:29:6d:9d:23:12:57:01:10:a8:c4:ca:7a:ec:75: 2d:5b:5e:aa:a1:4b:bb:92:cc:50:0d:19:83:87:c4: cf:07:2f:08:04:94:89:a8:de:6f:6e:e7:26:ff:46: e3:25:0b:f4:0b:73:08:46:12:ed:94:b8:16:2b:af: 59:45:13:7f:40:23:a5:a8:8c:06:2b:0f:aa:36:0f: 61:f7:89:db:a4:4d:fc:d3:c1:d5:a3:fa:94:8d:be: ee:77:3e:ac:61:cc:ac:08:2f:16:20:1b:d6:a1:58: 6c:67:46:64:5b:1a:9b:1d:4b:40:1d:73:40:07:31: 59:f9:26:e2:de:fa:14:f8:36:69:51:11:ae:45:da: 92:99:04:e8:58:c3:5a:b4:6c:e6:7c:0a:b9:21:e8: c9:a9:ca:b5:fb:60:79:9a:28:77:80:b4:68:84:b3: 28:02:f6:3f:b9:6b:c1:48:18:85:ac:be:94:de:93: 20:57:61:40:db:97:e6:1e:c0:2a:78:cc:bf:6e:15: 3c:0d:26:16:24:8e:18:b4:3d:97:c3:ae:78:50:92: 10:9c:d1:3a:96:69:e8:3f:d7:83:b3:42:50:5d:7f: 35:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:D3:C5:0F:BD:13:9A:D7:F0:0E:A0:AC:D1:46:B2:D6:6A:EB:13:19 X509v3 Authority Key Identifier: keyid:43:F0:6C:36:98:72:4B:37:FE:1A:17:11:41:7D:BD:88:EB:BF:0A:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:61:a0:ce:0f:df:fa:1c:6c:f8:7f:82:21:59:e9:5c:62:3f: 3b:60:12:f5:8f:30:dc:33:14:64:6f:98:35:df:5a:1b:22:c5: 3d:06:59:97:04:8a:5e:65:64:ee:f9:2d:5a:e4:6e:08:b7:e9: c8:4c:25:0b:73:25:13:18:1f:70:ea:94:39:15:b1:ca:21:ee: 4d:24:c6:43:64:ac:ce:8f:d6:29:27:9c:51:8c:96:b4:a5:d0: 70:75:11:95:3e:3a:d2:f9:a1:87:3e:65:15:6c:2c:cc:61:1f: 08:1f:66:77:5e:bd:59:56:03:10:ca:c1:e8:a2:b0:da:8a:e2: 16:77:80:82:78:60:37:f2:6b:24:7c:d8:10:af:1e:9d:ce:3c: ce:83:4b:3f:9d:5f:3d:be:cc:d9:fc:39:b5:cc:e2:c8:a8:99: 37:d8:63:76:b4:a1:5b:c5:56:33:c6:a4:84:58:97:4d:12:94: 2c:a6:d8:5c:11:db:52:8b:e4:a4:50:86:90:06:fc:a2:e0:e9: ff:2f:58:a6:09:4b:a2:36:fa:7b:1e:2d:4f:76:aa:e9:24:dd: cd:ff:0a:e7:d4:13:f6:d4:74:f7:c9:07:61:a4:19:e9:a6:bb: 42:0a:77:7f:ba:f9:48:a4:3f:95:3b:2f:63:2d:1a:5d:42:e1: 6e:06:9a:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d84/CiC/sIdJAl2ag2jCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZjA2YzM2OTg3MjRiMzdmZTFhMTcxMTQxN2RiZDg4ZWJi ZjBhOTEwHhcNMjUxMjA2MjEwMTAwWhcNMjUxMjA3MjEwMTAwWjAzMTEwLwYDVQQD Eyg4MGQzYzUwZmJkMTM5YWQ3ZjAwZWEwYWNkMTQ2YjJkNjZhZWIxMzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGK+ZVTlQ04q8M+iohQYcS4WyLJt 0VVgn1z6JwSVKW2dIxJXARCoxMp67HUtW16qoUu7ksxQDRmDh8TPBy8IBJSJqN5v bucm/0bjJQv0C3MIRhLtlLgWK69ZRRN/QCOlqIwGKw+qNg9h94nbpE3808HVo/qU jb7udz6sYcysCC8WIBvWoVhsZ0ZkWxqbHUtAHXNABzFZ+Sbi3voU+DZpURGuRdqS mQToWMNatGzmfAq5IejJqcq1+2B5mih3gLRohLMoAvY/uWvBSBiFrL6U3pMgV2FA 25fmHsAqeMy/bhU8DSYWJI4YtD2Xw654UJIQnNE6lmnoP9eDs0JQXX81vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIDTxQ+9E5rX8A6grNFGstZq6xMZMB8GA1UdIwQY MBaAFEPwbDaYcks3/hoXEUF9vYjrvwqRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUV9Cc05waHlTemYtR2hjUlFYMjlpT3VfQ3BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83ZGFiNmEtOTQ3Yi00YTEyLThhMjct MGUxZWZkNWEzNzQ2LzEvUV9Cc05waHlTemYtR2hjUlFYMjlpT3VfQ3BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83ZGFiNmEtOTQ3Yi00YTEyLThhMjctMGUxZWZkNWEzNzQ2 LzEvUV9Cc05waHlTemYtR2hjUlFYMjlpT3VfQ3BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ2Ggzg/f +hxs+H+CIVnpXGI/O2AS9Y8w3DMUZG+YNd9aGyLFPQZZlwSKXmVk7vktWuRuCLfp yEwlC3MlExgfcOqUORWxyiHuTSTGQ2Sszo/WKSecUYyWtKXQcHURlT460vmhhz5l FWwszGEfCB9md169WVYDEMrB6KKw2oriFneAgnhgN/JrJHzYEK8enc48zoNLP51f Pb7M2fw5tcziyKiZN9hjdrShW8VWM8akhFiXTRKULKbYXBHbUovkpFCGkAb8ouDp /y9YpglLojb6ex4tT3aq6STdzf8K59QT9tR098kHYaQZ6aa7Qgp3f7r5SKQ/lTsv Yy0aXULhbgaaRw== -----END CERTIFICATE-----Generated at Sun Dec 7 04:35:21 2025 by rpki-client