This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft File: Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft (raw, json) Hash identifier: obCAOdIaD+PbYARGt4EnTp9vJIUXHYh3Y7BpSBVst14= Subject key identifier: D9:B9:5B:96:63:E3:FD:27:EA:88:6D:51:1B:8D:AA:E2:D1:B5:B6:AF Authority key identifier: 43:77:2B:99:99:3B:06:08:D2:78:2A:F4:5A:22:EB:93:C7:FD:A6:3B Certificate issuer: /CN=43772b99993b0608d2782af45a22eb93c7fda63b Certificate serial: 019AF208DF0A43C105772B5E1C5EA213EFC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3crmZk7BgjSeCr0WiLrk8f9pjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft Manifest number: 1434 Signing time: Sat 06 Dec 2025 05:00:58 +0000 Manifest this update: Sat 06 Dec 2025 05:00:58 +0000 Manifest next update: Sun 07 Dec 2025 05:00:58 +0000 Files and hashes: 1: Jz6Plky4nRwLQTJJcOF7jGNXrSw.roa (hash: /BEPfzyhvzI281lagKYoLrBP/3LTnv9Sk0+qZpDUYPQ=) 2: Q3crmZk7BgjSeCr0WiLrk8f9pjs.crl (hash: Jj1DlJ8ScJkYN0cqZ04fTcjp7poZbbvfhaqrVVodYn0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.crl rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft rsync://rpki.ripe.net/repository/DEFAULT/Q3crmZk7BgjSeCr0WiLrk8f9pjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:df:0a:43:c1:05:77:2b:5e:1c:5e:a2:13:ef:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43772b99993b0608d2782af45a22eb93c7fda63b Validity Not Before: Dec 6 05:00:58 2025 GMT Not After : Dec 7 05:00:58 2025 GMT Subject: CN=d9b95b9663e3fd27ea886d511b8daae2d1b5b6af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:20:11:b7:d3:99:b5:db:ee:c3:c3:0c:46:53: c9:91:7b:23:c9:1e:b3:33:2f:e5:22:e8:94:19:f8: 04:6f:20:71:67:77:31:ee:a2:05:8b:30:77:3c:24: 4f:44:1c:c0:d7:28:b3:5d:fb:bd:77:b2:82:8d:4c: 66:e5:32:f0:26:00:aa:82:14:7e:6f:a0:ce:0b:14: f4:b4:4a:c2:05:d8:d7:ce:2f:19:6c:b8:3d:6e:e5: 26:95:d9:cb:e1:1d:46:59:94:2e:9b:58:21:fc:71: 51:98:be:47:04:ad:e1:de:f4:cf:fc:50:d9:fd:fb: 9c:27:37:9b:45:63:f9:a6:56:c4:a0:a0:61:97:81: 34:7d:3a:f7:cf:a0:53:19:13:f1:1d:29:e5:9a:8d: 27:30:2e:49:56:da:34:73:98:b7:98:1a:c4:8a:13: 56:0c:da:a1:da:42:fd:84:73:00:57:28:04:bc:e3: 3f:9d:fb:d3:cb:d6:9e:c4:1d:9d:74:a1:15:86:5c: 9b:f5:0b:7a:f0:95:4a:4c:9f:35:f7:0b:6b:5b:c7: 23:30:90:9b:b1:53:c0:39:b6:4a:7f:61:62:bb:41: 38:03:f3:90:9b:51:a5:c2:cc:61:39:7f:33:0f:e1: 5e:7d:5b:2b:d6:21:53:2d:6e:17:a0:1d:82:24:ac: 22:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B9:5B:96:63:E3:FD:27:EA:88:6D:51:1B:8D:AA:E2:D1:B5:B6:AF X509v3 Authority Key Identifier: keyid:43:77:2B:99:99:3B:06:08:D2:78:2A:F4:5A:22:EB:93:C7:FD:A6:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3crmZk7BgjSeCr0WiLrk8f9pjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:31:ab:4a:4d:c6:36:99:13:9f:2d:fc:87:b6:9d:6a:cc:81: 24:7f:d3:a4:15:24:58:ba:f4:02:dd:4f:96:8a:25:3b:56:8f: 6d:21:6d:bf:f9:4d:99:dd:08:f2:06:16:56:8f:3e:6e:fd:1b: e9:86:27:da:26:0a:75:05:fe:d8:58:08:0a:8a:d4:20:f8:8a: 4e:41:b0:ac:7e:f1:86:47:59:7a:5e:45:96:1b:a4:b0:52:8e: 3d:d7:01:92:f1:db:b5:90:98:46:7f:c3:24:01:27:44:88:6b: 76:35:ae:e1:66:bb:f8:d3:ee:03:b1:1c:3d:f3:f7:03:4c:d9: 17:cc:b4:71:aa:0a:0d:6d:60:50:b8:7b:06:0b:bd:4d:4b:d6: 43:6b:41:e2:63:5e:75:67:ed:14:90:eb:c2:2e:cf:7c:8d:cb: 4e:a0:68:0a:2b:8d:e6:70:12:f4:1c:bf:02:e8:ba:ef:d5:37: 26:b0:6e:29:d2:07:2e:f7:b7:bf:63:8c:01:36:67:cd:36:9d: 88:e6:75:c6:7c:3f:11:0c:55:ab:8d:67:82:48:cf:16:ca:33: d3:07:79:4f:89:56:79:9a:cc:d3:ad:a8:db:3e:91:aa:0c:a0: fd:2e:d2:dd:fe:99:ed:99:f4:94:89:f1:c7:61:9b:35:e7:f2: c1:1e:f1:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCN8KQ8EFdyteHF6iE+/BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzNzcyYjk5OTkzYjA2MDhkMjc4MmFmNDVhMjJlYjkzYzdm ZGE2M2IwHhcNMjUxMjA2MDUwMDU4WhcNMjUxMjA3MDUwMDU4WjAzMTEwLwYDVQQD EyhkOWI5NWI5NjYzZTNmZDI3ZWE4ODZkNTExYjhkYWFlMmQxYjViNmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCARt9OZtdvuw8MMRlPJkXsjyR6z My/lIuiUGfgEbyBxZ3cx7qIFizB3PCRPRBzA1yizXfu9d7KCjUxm5TLwJgCqghR+ b6DOCxT0tErCBdjXzi8ZbLg9buUmldnL4R1GWZQum1gh/HFRmL5HBK3h3vTP/FDZ /fucJzebRWP5plbEoKBhl4E0fTr3z6BTGRPxHSnlmo0nMC5JVto0c5i3mBrEihNW DNqh2kL9hHMAVygEvOM/nfvTy9aexB2ddKEVhlyb9Qt68JVKTJ819wtrW8cjMJCb sVPAObZKf2Fiu0E4A/OQm1GlwsxhOX8zD+FefVsr1iFTLW4XoB2CJKwi5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNm5W5Zj4/0n6ohtURuNquLRtbavMB8GA1UdIwQY MBaAFEN3K5mZOwYI0ngq9Foi65PH/aY7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTNjcm1aazdCZ2pTZUNyMFdpTHJrOGY5cGpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi80ZmJlYTgtNWU3OS00NmEyLWJhNWMt YTE2ZDk3YWZhNjQzLzEvUTNjcm1aazdCZ2pTZUNyMFdpTHJrOGY5cGpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi80ZmJlYTgtNWU3OS00NmEyLWJhNWMtYTE2ZDk3YWZhNjQz LzEvUTNjcm1aazdCZ2pTZUNyMFdpTHJrOGY5cGpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPjGrSk3G NpkTny38h7adasyBJH/TpBUkWLr0At1PloolO1aPbSFtv/lNmd0I8gYWVo8+bv0b 6YYn2iYKdQX+2FgICorUIPiKTkGwrH7xhkdZel5FlhuksFKOPdcBkvHbtZCYRn/D JAEnRIhrdjWu4Wa7+NPuA7EcPfP3A0zZF8y0caoKDW1gULh7Bgu9TUvWQ2tB4mNe dWftFJDrwi7PfI3LTqBoCiuN5nAS9By/Aui679U3JrBuKdIHLve3v2OMATZnzTad iOZ1xnw/EQxVq41ngkjPFsoz0wd5T4lWeZrM062o2z6Rqgyg/S7S3f6Z7Zn0lInx x2GbNefywR7xcA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:20:16 2025 by rpki-client