This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.mft File: q3qquyPNJFv6go-wJSHWRMbVtWY.mft (raw, json) Hash identifier: JzmquLQ8J7+2Es23dkbOgJvpmHU8JNBgPBdzKabmI0A= Subject key identifier: 74:04:BC:55:EC:E7:FE:9F:D2:02:94:D1:8B:0C:0B:03:73:D8:DD:AD Authority key identifier: AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66 Certificate issuer: /CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566 Certificate serial: 019B2FD56FB3339F2C2424D9B539084A3AE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.mft Manifest number: 1468 Signing time: Thu 18 Dec 2025 05:01:15 +0000 Manifest this update: Thu 18 Dec 2025 05:01:15 +0000 Manifest next update: Fri 19 Dec 2025 05:01:15 +0000 Files and hashes: 1: bgfztVWShrtQVnnUy79Uwf2ad-U.roa (hash: 6rNqpGYtQ5hCAICw5R79FB5nCbidIpeSHwH6YCdW27k=) 2: q3qquyPNJFv6go-wJSHWRMbVtWY.crl (hash: yI0yRqgIQUPN2+hq4f3q07b0NTGZHX1+UWQmCjrs73o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.mft rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d5:6f:b3:33:9f:2c:24:24:d9:b5:39:08:4a:3a:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566 Validity Not Before: Dec 18 05:01:15 2025 GMT Not After : Dec 19 05:01:15 2025 GMT Subject: CN=7404bc55ece7fe9fd20294d18b0c0b0373d8ddad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3a:b8:8f:70:fe:1c:25:c0:68:eb:24:51:72: 01:2b:00:ac:4f:23:70:26:00:16:47:7b:49:2e:53: 3e:cc:1c:2a:f5:4d:be:06:35:56:07:0d:bd:a6:1d: 6b:47:52:e6:04:fd:27:41:cb:04:0e:18:64:0d:f7: 6b:83:65:f2:2b:22:8e:35:55:bd:83:99:e5:c5:85: d6:a8:b8:76:42:c0:dc:1b:91:d0:4a:d3:23:ae:7b: 45:70:5c:48:e1:60:48:63:6b:e5:75:86:c9:68:31: ea:a2:0d:2a:5d:ad:60:23:7d:a0:a6:c8:d7:b3:67: d2:12:7c:00:db:88:de:62:00:ae:f6:17:2d:eb:ea: 38:b6:da:b4:e5:7d:83:4c:5f:ae:5a:d1:e5:ba:dd: 9d:b6:4c:cf:2a:c7:fa:db:35:67:ee:cc:0f:f8:87: 2d:14:6b:33:8f:e7:f2:a2:f6:4c:5a:ad:cf:07:1c: 95:ed:51:61:6c:86:7f:dc:4b:50:51:d7:a1:05:91: 10:77:5b:97:0e:48:d4:7d:94:7b:f0:dd:a8:42:f2: ea:07:93:9d:c5:fa:6c:1f:1a:b5:b1:e4:75:cc:7c: b0:a6:92:4f:dd:25:0b:3f:9c:0c:aa:cb:4f:86:f1: c9:f9:75:d5:9d:fc:07:72:bd:a3:5d:bf:05:31:cb: dc:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:04:BC:55:EC:E7:FE:9F:D2:02:94:D1:8B:0C:0B:03:73:D8:DD:AD X509v3 Authority Key Identifier: keyid:AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:38:0e:89:1c:3a:39:ab:e4:e6:2f:ad:46:fb:86:b3:c6:d3: 7a:de:73:58:a0:8d:c8:3c:2b:a0:fa:ca:e7:77:e2:c5:1b:39: a3:be:bf:3b:0c:1c:84:71:df:9f:2c:f8:de:1d:9f:88:10:21: 0b:65:5f:65:8b:d2:43:73:5f:e4:52:e5:d6:70:1d:e2:f2:a2: 46:19:b3:08:a4:6d:46:41:5e:cf:d0:61:0f:25:eb:93:4b:35: 85:13:4c:ce:f0:bb:72:1c:da:9c:98:4c:27:a1:44:a2:7b:b9: 2c:0b:54:08:a1:5b:10:6b:41:62:08:2b:0c:a6:77:69:ac:c1: 8d:c3:c4:bc:1a:d6:5d:e3:f2:83:de:04:d6:10:93:7b:43:1f: a1:85:f8:f8:45:ef:89:e9:48:7a:94:90:f7:ed:9e:bd:b3:73: 01:58:c8:8e:18:0d:4f:2b:02:03:2f:19:d1:a7:f4:5e:f8:9a: 4a:57:f1:f8:45:7a:81:23:d0:cf:41:b5:73:81:8f:91:8e:44: b7:b0:af:75:6a:b0:29:90:a0:87:7b:85:26:ef:e4:79:21:5e: e9:54:2e:f0:b4:0b:8d:04:e6:38:f2:9d:d0:7f:83:ce:2e:a8: 44:f2:90:8d:03:2f:16:4c:05:98:ef:a0:12:02:16:40:5b:2c: 18:a3:8e:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1W+zM58sJCTZtTkISjrlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiN2FhYWJiMjNjZDI0NWJmYTgyOGZiMDI1MjFkNjQ0YzZk NWI1NjYwHhcNMjUxMjE4MDUwMTE1WhcNMjUxMjE5MDUwMTE1WjAzMTEwLwYDVQQD Eyg3NDA0YmM1NWVjZTdmZTlmZDIwMjk0ZDE4YjBjMGIwMzczZDhkZGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjq4j3D+HCXAaOskUXIBKwCsTyNw JgAWR3tJLlM+zBwq9U2+BjVWBw29ph1rR1LmBP0nQcsEDhhkDfdrg2XyKyKONVW9 g5nlxYXWqLh2QsDcG5HQStMjrntFcFxI4WBIY2vldYbJaDHqog0qXa1gI32gpsjX s2fSEnwA24jeYgCu9hct6+o4ttq05X2DTF+uWtHlut2dtkzPKsf62zVn7swP+Ict FGszj+fyovZMWq3PBxyV7VFhbIZ/3EtQUdehBZEQd1uXDkjUfZR78N2oQvLqB5Od xfpsHxq1seR1zHywppJP3SULP5wMqstPhvHJ+XXVnfwHcr2jXb8FMcvcPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHQEvFXs5/6f0gKU0YsMCwNz2N2tMB8GA1UdIwQY MBaAFKt6qrsjzSRb+oKPsCUh1kTG1bVmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTNxcXV5UE5KRnY2Z28td0pTSFdSTWJWdFdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS80NmRlYzUtYzM4ZC00YzFkLTljZWMt OWVhZDgxZGEyZTQ0LzEvcTNxcXV5UE5KRnY2Z28td0pTSFdSTWJWdFdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS80NmRlYzUtYzM4ZC00YzFkLTljZWMtOWVhZDgxZGEyZTQ0 LzEvcTNxcXV5UE5KRnY2Z28td0pTSFdSTWJWdFdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJzgOiRw6 Oavk5i+tRvuGs8bTet5zWKCNyDwroPrK53fixRs5o76/OwwchHHfnyz43h2fiBAh C2VfZYvSQ3Nf5FLl1nAd4vKiRhmzCKRtRkFez9BhDyXrk0s1hRNMzvC7chzanJhM J6FEonu5LAtUCKFbEGtBYggrDKZ3aazBjcPEvBrWXePyg94E1hCTe0MfoYX4+EXv ielIepSQ9+2evbNzAVjIjhgNTysCAy8Z0af0XviaSlfx+EV6gSPQz0G1c4GPkY5E t7CvdWqwKZCgh3uFJu/keSFe6VQu8LQLjQTmOPKd0H+Dzi6oRPKQjQMvFkwFmO+g EgIWQFssGKOO/g== -----END CERTIFICATE-----Generated at Thu Dec 18 13:06:04 2025 by rpki-client