This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft File: Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft (raw, json) Hash identifier: M/077qYeEIoJJ++ErEDksMjeqDFwU1I/yWnl5tdbsRI= Subject key identifier: 3E:FA:2F:C8:8E:A1:46:E4:86:0D:70:60:5A:F6:EB:23:ED:F3:FA:CD Authority key identifier: 43:8F:8E:D1:21:BA:30:81:CF:B2:15:FA:AB:50:AE:14:5B:59:0D:D2 Certificate issuer: /CN=438f8ed121ba3081cfb215faab50ae145b590dd2 Certificate serial: 019AF50A84C458312E5DCE6AD2838333B7D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q4-O0SG6MIHPshX6q1CuFFtZDdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft Manifest number: 104A Signing time: Sat 06 Dec 2025 19:01:38 +0000 Manifest this update: Sat 06 Dec 2025 19:01:38 +0000 Manifest next update: Sun 07 Dec 2025 19:01:38 +0000 Files and hashes: 1: Q4-O0SG6MIHPshX6q1CuFFtZDdI.crl (hash: reupEo2jwgM7MobNDlSKueqsqUjYjQN3E/0/HSTN3Vw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.crl rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft rsync://rpki.ripe.net/repository/DEFAULT/Q4-O0SG6MIHPshX6q1CuFFtZDdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:84:c4:58:31:2e:5d:ce:6a:d2:83:83:33:b7:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=438f8ed121ba3081cfb215faab50ae145b590dd2 Validity Not Before: Dec 6 19:01:38 2025 GMT Not After : Dec 7 19:01:38 2025 GMT Subject: CN=3efa2fc88ea146e4860d70605af6eb23edf3facd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:83:d2:fb:b9:c8:d9:03:32:3c:e6:bf:01:ca: bf:26:de:24:38:76:0e:94:dc:a2:e1:a7:9e:da:1a: a6:55:44:ae:6b:46:c2:1b:37:4c:ba:1e:a6:95:3d: 5e:06:a9:39:bd:ca:de:72:3d:76:29:6e:ea:64:1a: fb:8d:9f:d8:c3:d7:76:6d:ee:89:75:52:f2:53:60: 30:77:91:d6:a6:9a:9f:96:7a:ea:03:86:6b:b1:aa: e7:da:c8:1b:0a:04:5a:ec:9d:15:2f:01:a9:4a:68: 2b:96:9c:eb:09:62:28:b3:2e:b4:1d:2b:12:62:57: 43:d8:8b:b0:d2:23:67:06:53:0c:cf:2a:33:8c:a6: c4:6d:5f:54:9f:da:4d:51:bd:37:91:f8:a3:81:ed: 5a:23:3d:5c:2c:16:b7:da:39:8e:d6:32:2f:3c:c9: 24:fd:c8:b3:33:5b:45:87:d8:1b:8a:b4:5e:53:3c: 02:bc:18:13:fd:46:35:c3:d3:82:90:7c:f6:36:bd: be:56:fc:95:9f:c4:93:d3:d5:af:ab:b4:6e:33:c9: dc:24:a8:05:a1:eb:6a:9c:31:53:56:61:ee:86:25: 3b:86:c3:da:00:89:b1:0f:8b:3a:63:5f:f9:53:dc: 49:49:71:a3:3e:54:cf:82:f9:65:06:31:d6:d3:de: 9b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:FA:2F:C8:8E:A1:46:E4:86:0D:70:60:5A:F6:EB:23:ED:F3:FA:CD X509v3 Authority Key Identifier: keyid:43:8F:8E:D1:21:BA:30:81:CF:B2:15:FA:AB:50:AE:14:5B:59:0D:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4-O0SG6MIHPshX6q1CuFFtZDdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:61:26:2e:09:0b:ec:b7:55:e5:7c:07:30:d2:24:25:cf:ea: c7:dc:ec:3b:b4:14:81:28:1e:61:77:df:02:f3:63:91:64:2a: ea:fb:8c:70:fe:30:53:80:7c:11:bb:d2:f1:f9:e6:e6:cf:c5: d1:f0:30:aa:85:0a:cf:2d:6a:9c:86:7e:8b:1d:00:47:54:cf: 08:57:25:f7:fa:7c:22:ed:2a:5f:7b:a3:c0:71:2f:9c:0b:a3: 4a:0d:61:93:8e:50:52:95:23:0e:cb:57:5c:b3:5b:f0:09:f8: a9:b0:3d:b2:78:7a:3d:5b:fb:d4:e9:e5:32:2a:55:77:fb:f2: d8:ca:31:fd:4c:ff:d9:49:aa:22:8f:c6:b5:95:3a:65:ff:bf: d4:dd:bf:e6:e7:b9:51:7a:08:e4:a4:8d:5c:58:c0:d2:c6:d5: f3:d5:65:50:c6:da:78:05:f8:81:8e:27:26:4c:f6:57:e5:32: be:a7:b8:dc:9a:73:89:89:f2:ea:ad:3f:a7:11:10:00:dc:1f: 17:36:db:e7:dd:c4:71:6f:4f:52:e9:5c:65:c4:64:40:d9:52: 47:f1:ea:c4:17:60:e3:e0:df:91:5e:f8:30:16:2a:e0:ac:af: d9:26:9b:b3:49:ae:81:ad:c3:68:cb:de:5d:48:23:59:96:2c: 36:4a:40:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CoTEWDEuXc5q0oODM7fZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzOGY4ZWQxMjFiYTMwODFjZmIyMTVmYWFiNTBhZTE0NWI1 OTBkZDIwHhcNMjUxMjA2MTkwMTM4WhcNMjUxMjA3MTkwMTM4WjAzMTEwLwYDVQQD EygzZWZhMmZjODhlYTE0NmU0ODYwZDcwNjA1YWY2ZWIyM2VkZjNmYWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IPS+7nI2QMyPOa/Acq/Jt4kOHYO lNyi4aee2hqmVUSua0bCGzdMuh6mlT1eBqk5vcrecj12KW7qZBr7jZ/Yw9d2be6J dVLyU2Awd5HWppqflnrqA4Zrsarn2sgbCgRa7J0VLwGpSmgrlpzrCWIosy60HSsS YldD2Iuw0iNnBlMMzyozjKbEbV9Un9pNUb03kfijge1aIz1cLBa32jmO1jIvPMkk /cizM1tFh9gbirReUzwCvBgT/UY1w9OCkHz2Nr2+VvyVn8ST09Wvq7RuM8ncJKgF oetqnDFTVmHuhiU7hsPaAImxD4s6Y1/5U9xJSXGjPlTPgvllBjHW096biQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD76L8iOoUbkhg1wYFr26yPt8/rNMB8GA1UdIwQY MBaAFEOPjtEhujCBz7IV+qtQrhRbWQ3SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTQtTzBTRzZNSUhQc2hYNnExQ3VGRnRaRGRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS85MzUwNDQtMWFmNS00NWQwLWFjZWIt ZDA0MDY3NjdlNmNjLzEvUTQtTzBTRzZNSUhQc2hYNnExQ3VGRnRaRGRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS85MzUwNDQtMWFmNS00NWQwLWFjZWItZDA0MDY3NjdlNmNj LzEvUTQtTzBTRzZNSUhQc2hYNnExQ3VGRnRaRGRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGmEmLgkL 7LdV5XwHMNIkJc/qx9zsO7QUgSgeYXffAvNjkWQq6vuMcP4wU4B8EbvS8fnm5s/F 0fAwqoUKzy1qnIZ+ix0AR1TPCFcl9/p8Iu0qX3ujwHEvnAujSg1hk45QUpUjDstX XLNb8An4qbA9snh6PVv71OnlMipVd/vy2Mox/Uz/2UmqIo/GtZU6Zf+/1N2/5ue5 UXoI5KSNXFjA0sbV89VlUMbaeAX4gY4nJkz2V+Uyvqe43JpziYny6q0/pxEQANwf Fzbb593EcW9PUulcZcRkQNlSR/HqxBdg4+DfkV74MBYq4Kyv2Sabs0muga3DaMve XUgjWZYsNkpAiA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:04:31 2025 by rpki-client