This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft File: q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft (raw, json) Hash identifier: FR9boNgaQz8rU2UyF1s03ThMidn20JJUOMKBT6pGO00= Subject key identifier: 3C:4B:B8:9A:6F:0E:EF:26:D1:EA:BE:F2:C0:63:D2:BA:CE:79:5C:76 Authority key identifier: AB:87:73:43:68:D8:83:15:F1:1B:32:93:86:CC:5E:F2:BB:87:58:58 Certificate issuer: /CN=ab87734368d88315f11b329386cc5ef2bb875858 Certificate serial: 019AF23FD5D7FF057714E413ACFE399BBF6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 06:01:01 +0000 Manifest this update: Sat 06 Dec 2025 06:01:01 +0000 Manifest next update: Sun 07 Dec 2025 06:01:01 +0000 Files and hashes: 1: q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl (hash: 4dTXiZqfhZWK8Z9gbi7XC80saq33dX4NIigJoftmbtA=) 2: sqo5PLdWdHMa-3THIwpzThX3MIQ.roa (hash: mkeWzT4DWdeQx69gMonfC3UIQ6XY4x+08EOS1mbWBlo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:d5:d7:ff:05:77:14:e4:13:ac:fe:39:9b:bf:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab87734368d88315f11b329386cc5ef2bb875858 Validity Not Before: Dec 6 06:01:01 2025 GMT Not After : Dec 7 06:01:01 2025 GMT Subject: CN=3c4bb89a6f0eef26d1eabef2c063d2bace795c76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:26:1c:45:ce:b3:38:d3:e6:3e:a4:60:01:a6: 13:9c:6f:b6:0d:a6:35:5a:ea:4d:83:1b:90:d1:30: cd:6d:69:c9:c0:36:23:c8:e1:bd:2c:54:5a:3e:03: 73:80:b6:d4:e6:e0:61:32:52:5d:16:0e:29:4b:7e: d3:b3:2b:ea:4e:49:41:91:01:3b:b5:7d:f0:e9:81: de:48:f8:27:fc:c9:ba:b3:37:4d:d9:f8:51:88:e2: 8a:bf:15:ad:cc:c2:99:bd:ab:63:83:d4:1e:f5:69: c7:d6:6b:a1:55:e9:53:0d:9e:c5:8e:bc:3b:c2:05: c1:4e:e2:2a:44:b4:eb:f0:1f:52:64:b1:03:c0:40: 5d:f6:d3:0f:63:4f:f8:4b:39:61:b8:a3:5a:f0:8b: 28:1a:9a:06:08:5c:ac:53:44:f0:26:bf:b7:4f:e1: cc:77:38:79:22:65:45:d6:5c:30:f3:ee:93:cd:70: 10:d2:5c:14:6f:16:82:89:4c:08:08:a1:94:e4:2c: 00:b3:88:bc:da:61:ea:4e:63:b4:a9:85:ba:7f:60: 12:92:f5:db:55:85:62:44:17:69:62:37:70:96:d0: 64:62:50:5e:f6:b2:52:85:bc:52:9d:9a:43:f0:17: 33:11:de:e1:35:52:a1:e8:01:65:bb:1a:aa:17:ee: 35:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:4B:B8:9A:6F:0E:EF:26:D1:EA:BE:F2:C0:63:D2:BA:CE:79:5C:76 X509v3 Authority Key Identifier: keyid:AB:87:73:43:68:D8:83:15:F1:1B:32:93:86:CC:5E:F2:BB:87:58:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:fb:37:4e:79:7a:dd:4b:9c:a4:b5:4f:b9:65:10:d1:6b:d9: 60:51:9a:ee:ce:cd:cb:02:ec:32:b3:9d:51:90:2b:35:4b:33: b7:c1:cf:48:e4:be:3e:53:51:3f:96:77:9c:14:97:71:c2:12: 7c:80:fd:93:3f:9e:af:a9:89:4f:c6:82:f8:c2:93:dc:52:fe: 52:0a:50:ed:24:63:78:6a:77:f4:78:be:aa:9f:12:1e:f8:68: b9:7d:84:89:75:84:ba:9a:ed:b9:28:88:14:ca:14:f8:7f:c7: 2d:df:d5:3b:1a:5b:b4:6e:c7:3b:dd:c0:40:ce:8e:b6:cb:7a: c3:d9:88:1b:27:4b:97:29:2f:91:c6:6a:8c:e3:f5:3f:bb:d2: a4:92:3b:4a:73:c1:0f:a9:e2:82:7a:f3:e2:a2:5e:9f:38:26: 2b:99:7f:37:89:97:6e:f4:2c:3c:6c:c7:8b:d8:ff:4c:eb:e9: 2d:5b:d4:c6:79:48:0e:66:71:b1:b4:54:da:a5:7f:e6:ac:64: ad:4f:c1:a1:a4:80:e9:bd:c7:52:f4:cb:75:30:ff:8d:dd:5d: c1:7e:e2:db:7f:3e:ac:9c:b9:ec:20:38:5c:c6:99:7a:75:79: 66:06:37:7a:58:14:18:2e:10:bd:64:57:da:89:5a:48:d7:95: 9a:d1:bc:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9XX/wV3FOQTrP45m79tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiODc3MzQzNjhkODgzMTVmMTFiMzI5Mzg2Y2M1ZWYyYmI4 NzU4NTgwHhcNMjUxMjA2MDYwMTAxWhcNMjUxMjA3MDYwMTAxWjAzMTEwLwYDVQQD EygzYzRiYjg5YTZmMGVlZjI2ZDFlYWJlZjJjMDYzZDJiYWNlNzk1Yzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSYcRc6zONPmPqRgAaYTnG+2DaY1 WupNgxuQ0TDNbWnJwDYjyOG9LFRaPgNzgLbU5uBhMlJdFg4pS37TsyvqTklBkQE7 tX3w6YHeSPgn/Mm6szdN2fhRiOKKvxWtzMKZvatjg9Qe9WnH1muhVelTDZ7Fjrw7 wgXBTuIqRLTr8B9SZLEDwEBd9tMPY0/4SzlhuKNa8IsoGpoGCFysU0TwJr+3T+HM dzh5ImVF1lww8+6TzXAQ0lwUbxaCiUwICKGU5CwAs4i82mHqTmO0qYW6f2ASkvXb VYViRBdpYjdwltBkYlBe9rJShbxSnZpD8BczEd7hNVKh6AFluxqqF+41rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDxLuJpvDu8m0eq+8sBj0rrOeVx2MB8GA1UdIwQY MBaAFKuHc0No2IMV8Rsyk4bMXvK7h1hYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTRkelEyallneFh4R3pLVGhzeGU4cnVIV0ZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS81NjI1NDgtN2IzZC00MGIzLTljMDUt MTg1ODVlZDk0YTk4LzEvcTRkelEyallneFh4R3pLVGhzeGU4cnVIV0ZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS81NjI1NDgtN2IzZC00MGIzLTljMDUtMTg1ODVlZDk0YTk4 LzEvcTRkelEyallneFh4R3pLVGhzeGU4cnVIV0ZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHfs3Tnl6 3UucpLVPuWUQ0WvZYFGa7s7NywLsMrOdUZArNUszt8HPSOS+PlNRP5Z3nBSXccIS fID9kz+er6mJT8aC+MKT3FL+UgpQ7SRjeGp39Hi+qp8SHvhouX2EiXWEuprtuSiI FMoU+H/HLd/VOxpbtG7HO93AQM6Otst6w9mIGydLlykvkcZqjOP1P7vSpJI7SnPB D6nignrz4qJenzgmK5l/N4mXbvQsPGzHi9j/TOvpLVvUxnlIDmZxsbRU2qV/5qxk rU/BoaSA6b3HUvTLdTD/jd1dwX7i238+rJy57CA4XMaZenV5ZgY3elgUGC4QvWRX 2olaSNeVmtG8CA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:20:06 2025 by rpki-client