This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4ec725-4d8d-4311-934f-3880552a5439/1/qKt9aNaaUqpQx5mZC5IYQZwUeTU.mft File: qKt9aNaaUqpQx5mZC5IYQZwUeTU.mft (raw, json) Hash identifier: wntXIIrUOcqRhEM9ULnJ17B5ZErj9fSsqFFtPWMVSTs= Subject key identifier: 4F:06:A1:01:53:A8:48:C4:EC:5C:62:A8:EB:11:71:30:A4:1B:9D:8E Authority key identifier: A8:AB:7D:68:D6:9A:52:AA:50:C7:99:99:0B:92:18:41:9C:14:79:35 Certificate issuer: /CN=a8ab7d68d69a52aa50c799990b9218419c147935 Certificate serial: 019AF5E5CAE426EEC7E3274D45ACDFD9A3AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKt9aNaaUqpQx5mZC5IYQZwUeTU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4ec725-4d8d-4311-934f-3880552a5439/1/qKt9aNaaUqpQx5mZC5IYQZwUeTU.mft Manifest number: 018E Signing time: Sat 06 Dec 2025 23:01:08 +0000 Manifest this update: Sat 06 Dec 2025 23:01:08 +0000 Manifest next update: Sun 07 Dec 2025 23:01:08 +0000 Files and hashes: 1: QfAqEIrfh5GlI2pgvhMIdjzs2sM.roa (hash: dMt2CrdZCWtAfbu3OjW6t5fx1eVLHzaohbZwBE6VIR4=) 2: qKt9aNaaUqpQx5mZC5IYQZwUeTU.crl (hash: +/ttEWvdLIIDMIg8icPxTAvwzBBvyRKhEw00EIkDeKk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4ec725-4d8d-4311-934f-3880552a5439/1/qKt9aNaaUqpQx5mZC5IYQZwUeTU.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/4ec725-4d8d-4311-934f-3880552a5439/1/qKt9aNaaUqpQx5mZC5IYQZwUeTU.mft rsync://rpki.ripe.net/repository/DEFAULT/qKt9aNaaUqpQx5mZC5IYQZwUeTU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:ca:e4:26:ee:c7:e3:27:4d:45:ac:df:d9:a3:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8ab7d68d69a52aa50c799990b9218419c147935 Validity Not Before: Dec 6 23:01:08 2025 GMT Not After : Dec 7 23:01:08 2025 GMT Subject: CN=4f06a10153a848c4ec5c62a8eb117130a41b9d8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a2:7d:88:5e:6a:d3:6e:e3:ba:34:bd:13:b0: 92:4f:f8:9b:77:40:6b:e2:eb:33:9b:34:bd:ce:b1: 90:32:c7:21:9d:0d:62:c8:30:4b:7d:ac:80:c7:c4: cd:bd:a5:d9:be:7d:ee:0b:6a:44:2e:96:31:b0:30: 5f:83:85:8d:21:9f:f6:16:a2:56:d6:6e:cc:fc:2d: 80:df:a9:08:ac:55:6d:52:f6:58:7f:2b:4a:b5:0f: 85:ee:e8:15:a2:e8:b7:0b:de:01:73:4c:81:8d:f6: 62:b2:eb:c0:7f:bf:f1:38:f9:8a:a0:50:d0:46:26: 8b:68:2a:f4:5a:0b:d3:b7:cf:f1:62:da:66:5c:e2: 33:48:36:44:c8:c9:32:e7:e1:5a:34:9f:95:db:eb: 6d:28:6d:5a:d7:35:9e:2f:f9:86:98:27:4a:71:d5: fb:89:ce:4e:97:5f:c9:12:4f:a5:96:9f:72:ff:8e: 1f:8e:ef:cb:fb:3a:b5:b6:50:6d:cf:c6:36:4c:38: ec:41:c3:03:49:d9:25:cb:e0:d9:82:ea:af:e7:04: 41:4b:f7:2d:7f:c2:2a:05:85:81:69:1f:2f:22:2e: 7e:a9:ea:5b:14:51:44:14:c2:e5:01:a4:4c:81:8f: da:40:81:d8:41:43:3f:2c:f4:99:01:7d:19:9f:d1: 9d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:06:A1:01:53:A8:48:C4:EC:5C:62:A8:EB:11:71:30:A4:1B:9D:8E X509v3 Authority Key Identifier: keyid:A8:AB:7D:68:D6:9A:52:AA:50:C7:99:99:0B:92:18:41:9C:14:79:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKt9aNaaUqpQx5mZC5IYQZwUeTU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4ec725-4d8d-4311-934f-3880552a5439/1/qKt9aNaaUqpQx5mZC5IYQZwUeTU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4ec725-4d8d-4311-934f-3880552a5439/1/qKt9aNaaUqpQx5mZC5IYQZwUeTU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:b0:f6:b1:2e:c2:09:4c:8b:f1:ab:c0:35:e1:d3:07:5d:b5: cb:35:e1:61:d2:25:7e:65:e1:bc:f9:88:27:e8:43:18:c8:53: c1:e4:01:61:a4:b8:5d:95:79:44:cc:50:26:97:e7:b4:3e:9c: 78:e6:a9:c9:6b:ee:31:e2:66:ba:ca:09:ff:6b:01:ca:c4:e9: c6:c3:8a:76:97:63:4a:2a:0b:13:0a:4f:3a:87:2f:ab:91:78: 71:d5:fc:4a:e1:d9:5d:7e:ef:56:e6:01:40:58:ca:03:e6:45: 82:fb:c3:3b:60:44:1e:76:12:31:31:47:3f:0f:b8:9a:9c:17: 67:dd:6b:b7:27:39:d9:94:90:2b:c5:08:2b:83:6a:12:8e:a5: 44:b5:c9:31:48:fc:bd:5b:47:e2:1c:3a:40:3f:65:4d:8e:89: cf:c0:bf:ad:b2:ff:3e:15:1d:bc:6d:42:4d:bb:3f:4a:91:39: da:ca:ea:1e:a5:3f:54:65:08:1c:a2:78:25:17:5d:c7:ef:3e: bd:2a:fe:f6:34:2e:6d:ac:2c:5a:a8:0a:20:d5:19:87:7a:de: 2c:e6:c3:1c:44:c2:ea:74:67:07:f4:65:d8:eb:60:d7:60:2b: 69:78:37:9a:a1:d6:1d:a1:b6:3e:38:40:b9:05:98:ff:82:45: f4:7d:10:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15crkJu7H4ydNRazf2aOqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4YWI3ZDY4ZDY5YTUyYWE1MGM3OTk5OTBiOTIxODQxOWMx NDc5MzUwHhcNMjUxMjA2MjMwMTA4WhcNMjUxMjA3MjMwMTA4WjAzMTEwLwYDVQQD Eyg0ZjA2YTEwMTUzYTg0OGM0ZWM1YzYyYThlYjExNzEzMGE0MWI5ZDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6J9iF5q027jujS9E7CST/ibd0Br 4uszmzS9zrGQMschnQ1iyDBLfayAx8TNvaXZvn3uC2pELpYxsDBfg4WNIZ/2FqJW 1m7M/C2A36kIrFVtUvZYfytKtQ+F7ugVoui3C94Bc0yBjfZisuvAf7/xOPmKoFDQ RiaLaCr0WgvTt8/xYtpmXOIzSDZEyMky5+FaNJ+V2+ttKG1a1zWeL/mGmCdKcdX7 ic5Ol1/JEk+llp9y/44fju/L+zq1tlBtz8Y2TDjsQcMDSdkly+DZguqv5wRBS/ct f8IqBYWBaR8vIi5+qepbFFFEFMLlAaRMgY/aQIHYQUM/LPSZAX0Zn9GdcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE8GoQFTqEjE7FxiqOsRcTCkG52OMB8GA1UdIwQY MBaAFKirfWjWmlKqUMeZmQuSGEGcFHk1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUt0OWFOYWFVcXBReDVtWkM1SVlRWndVZVRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi80ZWM3MjUtNGQ4ZC00MzExLTkzNGYt Mzg4MDU1MmE1NDM5LzEvcUt0OWFOYWFVcXBReDVtWkM1SVlRWndVZVRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi80ZWM3MjUtNGQ4ZC00MzExLTkzNGYtMzg4MDU1MmE1NDM5 LzEvcUt0OWFOYWFVcXBReDVtWkM1SVlRWndVZVRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmLD2sS7C CUyL8avANeHTB121yzXhYdIlfmXhvPmIJ+hDGMhTweQBYaS4XZV5RMxQJpfntD6c eOapyWvuMeJmusoJ/2sBysTpxsOKdpdjSioLEwpPOocvq5F4cdX8SuHZXX7vVuYB QFjKA+ZFgvvDO2BEHnYSMTFHPw+4mpwXZ91rtyc52ZSQK8UIK4NqEo6lRLXJMUj8 vVtH4hw6QD9lTY6Jz8C/rbL/PhUdvG1CTbs/SpE52srqHqU/VGUIHKJ4JRddx+8+ vSr+9jQubawsWqgKINUZh3reLObDHETC6nRnB/Rl2Otg12AraXg3mqHWHaG2PjhA uQWY/4JF9H0QYg== -----END CERTIFICATE-----Generated at Sun Dec 7 03:42:11 2025 by rpki-client