This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft File: Q664_1W9RlALJ9uc8d7CVidrK2o.mft (raw, json) Hash identifier: AiLEjUJkBeUayhlPjo6gTVafqGyBlfbK+oPvSJSxfAU= Subject key identifier: FA:DF:F2:45:B4:44:7F:00:C0:60:86:8D:74:91:4F:C4:43:32:F6:A5 Authority key identifier: 43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A Certificate issuer: /CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a Certificate serial: 019AF23F7B5649E6008B767FB511A3D6BAF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft Manifest number: 0455 Signing time: Sat 06 Dec 2025 06:00:37 +0000 Manifest this update: Sat 06 Dec 2025 06:00:37 +0000 Manifest next update: Sun 07 Dec 2025 06:00:37 +0000 Files and hashes: 1: B5665HYy6kSNy90OpMzSYkfYZ78.roa (hash: l3LMbVnBNYo1auwulw02upGn169zVSqtpPpAH0JkHoI=) 2: BhseQy6cfY2KxD85qSiLzXh-5UM.roa (hash: 0YvZXzvsO+BZgmZ0JpcK1I5V3fjP6y+JiPN3ak5ChGQ=) 3: Q664_1W9RlALJ9uc8d7CVidrK2o.crl (hash: 6IgVSyJQd0AtdyyPXeVB8QAp8U5FkreWMX+kNmQpspE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:7b:56:49:e6:00:8b:76:7f:b5:11:a3:d6:ba:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a Validity Not Before: Dec 6 06:00:37 2025 GMT Not After : Dec 7 06:00:37 2025 GMT Subject: CN=fadff245b4447f00c060868d74914fc44332f6a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f9:1e:6f:1f:85:15:0d:50:bf:ec:3f:e1:c7: 97:75:f7:ee:99:3b:fd:5a:ff:a5:a4:5e:66:2a:92: ff:fb:27:ab:34:d2:f9:31:b9:31:4d:1f:d3:c8:07: 1f:2a:e9:03:c1:0e:77:2b:a3:66:aa:03:60:93:b9: 09:2c:9d:c1:cf:6a:ba:fb:57:97:cf:84:ab:95:22: e8:39:47:8e:b0:9e:72:f7:66:de:8e:76:63:20:68: 00:75:bf:6d:9b:37:e0:e9:7c:02:4e:a9:a0:da:56: 08:1b:ff:cc:97:f7:1a:ab:97:fb:2e:3e:18:aa:13: 3b:70:4e:a2:44:d7:ad:00:60:04:40:9a:e4:28:f8: ae:c7:44:d1:0e:23:89:6d:b9:b6:10:82:2f:df:c8: b4:74:8e:48:e6:f5:1a:80:c2:ec:d4:81:c1:6f:eb: 92:bd:02:2a:3f:b6:56:ca:7e:d7:d6:4d:71:01:0f: 24:38:42:10:1a:f4:b2:cb:28:d7:ab:eb:eb:ed:ec: 95:6a:7e:7d:dd:80:46:e6:ff:2a:73:3c:5c:1c:36: 58:5c:41:33:e6:c7:38:7e:3b:1a:54:98:bb:8b:e4: 79:e0:c2:da:57:ad:42:24:ee:11:78:20:a0:1f:0f: 15:c0:b6:32:24:9a:d6:b3:5d:0d:ed:24:56:4a:bc: 0a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:DF:F2:45:B4:44:7F:00:C0:60:86:8D:74:91:4F:C4:43:32:F6:A5 X509v3 Authority Key Identifier: keyid:43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:0d:b7:83:11:32:4f:7f:61:0a:2c:ae:56:5d:51:97:e8:c9: b3:cf:16:0d:68:39:ba:c4:23:ae:7a:fa:a9:e5:fc:5a:d9:f8: ca:2f:a1:08:c1:92:5e:f6:16:aa:5c:0d:38:6a:65:08:eb:22: ac:7f:44:a1:af:49:c9:e1:3b:1d:32:83:79:3c:8a:bc:37:f6: da:72:ca:ee:d1:a2:44:82:14:a4:8b:6d:29:d6:fc:e9:a7:49: 1c:73:6b:c2:bb:d1:61:aa:56:86:8b:59:02:97:37:96:91:7d: 3b:d4:48:e7:a4:ef:f4:44:71:b1:c1:59:31:9a:ef:43:58:e5: e6:29:fb:51:a6:18:39:a4:ac:62:08:f0:21:ca:30:84:89:eb: 91:37:0c:4f:aa:70:0c:44:79:56:86:0c:80:21:7c:ee:cb:d8: 64:3b:4a:50:07:27:41:4e:c6:b8:31:4f:3a:db:54:b8:97:9d: f6:dc:ab:21:a4:c7:5b:78:48:9b:58:e5:2c:9a:ae:ee:82:52: 7f:17:ce:ec:49:24:e7:12:9b:1a:72:03:56:e8:fa:68:e7:b5: 12:4e:ee:06:a5:38:ed:98:07:96:ea:d7:ea:92:e6:2c:cc:70: 91:0a:c4:94:a1:93:05:a2:64:0e:cf:1d:c8:1e:97:73:6f:1f: 70:96:da:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP3tWSeYAi3Z/tRGj1rrwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzYWViOGZmNTViZDQ2NTAwYjI3ZGI5Y2YxZGVjMjU2Mjc2 YjJiNmEwHhcNMjUxMjA2MDYwMDM3WhcNMjUxMjA3MDYwMDM3WjAzMTEwLwYDVQQD EyhmYWRmZjI0NWI0NDQ3ZjAwYzA2MDg2OGQ3NDkxNGZjNDQzMzJmNmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfkebx+FFQ1Qv+w/4ceXdffumTv9 Wv+lpF5mKpL/+yerNNL5MbkxTR/TyAcfKukDwQ53K6NmqgNgk7kJLJ3Bz2q6+1eX z4SrlSLoOUeOsJ5y92bejnZjIGgAdb9tmzfg6XwCTqmg2lYIG//Ml/caq5f7Lj4Y qhM7cE6iRNetAGAEQJrkKPiux0TRDiOJbbm2EIIv38i0dI5I5vUagMLs1IHBb+uS vQIqP7ZWyn7X1k1xAQ8kOEIQGvSyyyjXq+vr7eyVan593YBG5v8qczxcHDZYXEEz 5sc4fjsaVJi7i+R54MLaV61CJO4ReCCgHw8VwLYyJJrWs10N7SRWSrwKQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPrf8kW0RH8AwGCGjXSRT8RDMvalMB8GA1UdIwQY MBaAFEOuuP9VvUZQCyfbnPHewlYnaytqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTY2NF8xVzlSbEFMSjl1YzhkN0NWaWRySzJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8zYjZmYjQtNTJlOC00NGUyLWFiZTgt MmMyZmJhZDJmMDExLzEvUTY2NF8xVzlSbEFMSjl1YzhkN0NWaWRySzJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8zYjZmYjQtNTJlOC00NGUyLWFiZTgtMmMyZmJhZDJmMDEx LzEvUTY2NF8xVzlSbEFMSjl1YzhkN0NWaWRySzJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQw23gxEy T39hCiyuVl1Rl+jJs88WDWg5usQjrnr6qeX8Wtn4yi+hCMGSXvYWqlwNOGplCOsi rH9Eoa9JyeE7HTKDeTyKvDf22nLK7tGiRIIUpIttKdb86adJHHNrwrvRYapWhotZ Apc3lpF9O9RI56Tv9ERxscFZMZrvQ1jl5in7UaYYOaSsYgjwIcowhInrkTcMT6pw DER5VoYMgCF87svYZDtKUAcnQU7GuDFPOttUuJed9tyrIaTHW3hIm1jlLJqu7oJS fxfO7Ekk5xKbGnIDVuj6aOe1Ek7uBqU47ZgHlurX6pLmLMxwkQrElKGTBaJkDs8d yB6Xc28fcJbaxw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:57 2025 by rpki-client