This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft File: q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft (raw, json) Hash identifier: GgoS20RL+HyOIy3n0ZXPZQ+nCZYWvOT0zYv3gE5APhY= Subject key identifier: B3:A1:F9:37:B9:8E:11:8F:DB:F7:C4:1C:94:68:03:19:C4:AF:F0:36 Authority key identifier: AB:E4:43:F9:AE:98:AC:AF:DD:D6:16:2D:5C:8E:B0:F9:41:9A:05:F7 Certificate issuer: /CN=abe443f9ae98acafddd6162d5c8eb0f9419a05f7 Certificate serial: 019B34FB895757FC7B3A164FB4A59DDB18F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q-RD-a6YrK_d1hYtXI6w-UGaBfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft Manifest number: 1430 Signing time: Fri 19 Dec 2025 05:00:58 +0000 Manifest this update: Fri 19 Dec 2025 05:00:58 +0000 Manifest next update: Sat 20 Dec 2025 05:00:58 +0000 Files and hashes: 1: OQ-BUjiM-4ZYICksoUde6ONei7U.roa (hash: nuZwAEc9XGaRcjHMhQRLcOzGazeKsZ0/3EUvFc3DPLU=) 2: q-RD-a6YrK_d1hYtXI6w-UGaBfc.crl (hash: /HGSSKkLbOcfDBkhCx+ZMYh+0VNU6K4QUT7iLLmAuMQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft rsync://rpki.ripe.net/repository/DEFAULT/q-RD-a6YrK_d1hYtXI6w-UGaBfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:89:57:57:fc:7b:3a:16:4f:b4:a5:9d:db:18:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abe443f9ae98acafddd6162d5c8eb0f9419a05f7 Validity Not Before: Dec 19 05:00:58 2025 GMT Not After : Dec 20 05:00:58 2025 GMT Subject: CN=b3a1f937b98e118fdbf7c41c94680319c4aff036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d2:de:53:2b:30:5a:e5:44:18:c2:38:62:35: 4f:68:6d:5b:3c:1d:8b:52:92:e0:90:01:4a:ca:06: 74:63:ff:e6:88:fd:50:06:31:a4:8b:bb:bd:55:b4: 88:c1:a9:2e:fe:99:cc:9b:c9:75:67:66:0b:ef:da: 7e:ad:29:ff:ff:c1:30:ee:c6:42:dd:cd:3b:7b:2e: c6:95:85:88:67:78:4d:03:fd:29:8a:4c:47:9b:c0: 44:e8:e7:ad:3a:b2:5a:ee:67:f0:2e:5b:cc:a1:59: ee:4c:ea:07:ac:aa:8c:fa:28:17:d3:66:47:b7:3c: cd:d2:de:66:5c:c1:cf:a8:39:18:30:6e:15:70:da: 85:47:dd:a7:cf:4e:93:88:6e:0d:47:b5:a0:a7:70: 08:d5:dc:2d:ff:87:59:52:90:e7:71:5f:6c:bc:b4: 7f:f9:40:78:12:17:52:7b:d8:74:f9:d8:03:d8:21: 47:66:1f:50:e7:29:7c:f7:3e:40:29:91:68:86:f4: 9e:3a:fe:6a:ba:d9:d6:63:70:5e:54:90:b4:7d:a9: 2a:68:02:76:39:87:29:51:ad:47:8e:8a:c2:ae:5f: cb:e4:e9:63:70:10:5e:57:91:b5:b0:e6:0d:6d:d9: a2:da:4b:58:0f:7f:42:de:ff:39:ac:90:9b:b5:43: 5d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A1:F9:37:B9:8E:11:8F:DB:F7:C4:1C:94:68:03:19:C4:AF:F0:36 X509v3 Authority Key Identifier: keyid:AB:E4:43:F9:AE:98:AC:AF:DD:D6:16:2D:5C:8E:B0:F9:41:9A:05:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-RD-a6YrK_d1hYtXI6w-UGaBfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:a2:b3:3b:8a:cd:c2:73:d1:33:86:8f:88:90:b4:e1:8a:3f: 1b:58:06:df:25:e0:f8:68:f4:c4:5f:89:5c:d2:fc:e3:57:2b: af:72:46:ea:fe:2d:05:17:b7:ca:e3:14:38:b4:6c:1b:ff:33: 72:39:cf:af:23:71:8f:2b:fd:14:ff:1b:c3:ae:5b:97:79:13: e9:ae:ec:19:46:16:52:87:35:1c:1b:bd:cb:be:48:65:79:9d: 1e:f3:23:35:67:78:eb:91:1b:05:30:e6:eb:28:73:ac:bb:7a: 71:47:c0:16:cb:10:19:93:e2:f0:de:db:4c:71:cb:d4:31:e0: d5:2b:79:45:d0:f6:61:23:a5:71:26:28:11:64:3a:6c:2a:ac: 18:95:ba:d9:da:d9:16:a8:dd:7f:58:05:3a:ca:3a:98:74:82: c8:5c:29:e8:df:0e:fa:b1:86:65:96:74:13:00:96:f0:1f:ed: 3f:0e:9b:81:dd:51:96:00:29:65:c3:97:55:01:93:6f:40:3c: 24:e0:e0:e9:32:da:48:45:1b:cc:3c:c2:90:a2:cf:36:d1:8b: 01:1f:3a:69:a4:c4:a3:76:c9:d6:ef:25:84:e7:8f:7b:bc:83: cc:1c:77:9e:f7:68:4e:39:6e:45:22:e3:18:71:a7:fb:4c:5c: d2:ae:a4:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+4lXV/x7OhZPtKWd2xj5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiZTQ0M2Y5YWU5OGFjYWZkZGQ2MTYyZDVjOGViMGY5NDE5 YTA1ZjcwHhcNMjUxMjE5MDUwMDU4WhcNMjUxMjIwMDUwMDU4WjAzMTEwLwYDVQQD EyhiM2ExZjkzN2I5OGUxMThmZGJmN2M0MWM5NDY4MDMxOWM0YWZmMDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9LeUyswWuVEGMI4YjVPaG1bPB2L UpLgkAFKygZ0Y//miP1QBjGki7u9VbSIwaku/pnMm8l1Z2YL79p+rSn//8Ew7sZC 3c07ey7GlYWIZ3hNA/0pikxHm8BE6OetOrJa7mfwLlvMoVnuTOoHrKqM+igX02ZH tzzN0t5mXMHPqDkYMG4VcNqFR92nz06TiG4NR7Wgp3AI1dwt/4dZUpDncV9svLR/ +UB4EhdSe9h0+dgD2CFHZh9Q5yl89z5AKZFohvSeOv5qutnWY3BeVJC0fakqaAJ2 OYcpUa1HjorCrl/L5OljcBBeV5G1sOYNbdmi2ktYD39C3v85rJCbtUNdSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLOh+Te5jhGP2/fEHJRoAxnEr/A2MB8GA1UdIwQY MBaAFKvkQ/mumKyv3dYWLVyOsPlBmgX3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcS1SRC1hNllyS19kMWhZdFhJNnctVUdhQmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi85MDBiMjQtZjI4Ni00YmM3LTk2MWUt MDQ0YjY4NmJjOTdmLzEvcS1SRC1hNllyS19kMWhZdFhJNnctVUdhQmZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi85MDBiMjQtZjI4Ni00YmM3LTk2MWUtMDQ0YjY4NmJjOTdm LzEvcS1SRC1hNllyS19kMWhZdFhJNnctVUdhQmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMqKzO4rN wnPRM4aPiJC04Yo/G1gG3yXg+Gj0xF+JXNL841crr3JG6v4tBRe3yuMUOLRsG/8z cjnPryNxjyv9FP8bw65bl3kT6a7sGUYWUoc1HBu9y75IZXmdHvMjNWd465EbBTDm 6yhzrLt6cUfAFssQGZPi8N7bTHHL1DHg1St5RdD2YSOlcSYoEWQ6bCqsGJW62drZ Fqjdf1gFOso6mHSCyFwp6N8O+rGGZZZ0EwCW8B/tPw6bgd1RlgApZcOXVQGTb0A8 JODg6TLaSEUbzDzCkKLPNtGLAR86aaTEo3bJ1u8lhOePe7yDzBx3nvdoTjluRSLj GHGn+0xc0q6krw== -----END CERTIFICATE-----Generated at Fri Dec 19 12:00:21 2025 by rpki-client