This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft File: _QxrK9KdMWhIfJ7F_eTD_ELZz74.mft (raw, json) Hash identifier: OUOrwiEOJkpxMHNPDJkRxnxDTv+XE6rACsjbF0up2kc= Subject key identifier: 66:D1:AE:AF:B0:E3:0E:53:74:9B:52:E7:35:56:38:E1:84:35:B8:0B Authority key identifier: FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE Certificate issuer: /CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe Certificate serial: 019B31C3F9E5A16FC8A2180F14FF1C712E74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft Manifest number: 12B1 Signing time: Thu 18 Dec 2025 14:01:25 +0000 Manifest this update: Thu 18 Dec 2025 14:01:25 +0000 Manifest next update: Fri 19 Dec 2025 14:01:25 +0000 Files and hashes: 1: 1-Ofv8tDBMWs_4Hbhr7lMN_HF2TI.roa (hash: uH/td80fED56QPX1k1oOVphRVZ11UL29yzqyURnsYnc=) 2: _QxrK9KdMWhIfJ7F_eTD_ELZz74.crl (hash: XmsJEkh5w/7EDpKc4HVnMjbhlBwg8whwx+QiQQumI/w=) 3: ptc21Pv_RMZdbmNfwt1t43MswfA.roa (hash: mrzhJeNsIe6my5EK8oo2DkozZxDWWdzOh94g4W2m17U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c3:f9:e5:a1:6f:c8:a2:18:0f:14:ff:1c:71:2e:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe Validity Not Before: Dec 18 14:01:25 2025 GMT Not After : Dec 19 14:01:25 2025 GMT Subject: CN=66d1aeafb0e30e53749b52e7355638e18435b80b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f0:90:81:73:8e:70:72:b8:79:a4:12:38:8d: 7f:6e:b2:10:35:0b:20:76:e5:1a:96:10:37:cc:a3: f0:52:aa:cf:be:b8:17:27:19:5b:36:fb:ce:5b:94: 6e:3f:7d:86:fa:2c:92:f3:ca:13:08:d1:05:ce:f4: 5f:d1:47:43:54:a7:13:3f:ed:26:ac:bf:ab:92:d2: 45:3e:0c:00:4f:a6:49:94:dd:84:4f:6e:64:e7:4c: ea:d2:c7:5f:6b:00:9e:b1:e7:a2:f4:11:09:64:84: bf:89:dd:11:fb:36:38:ba:5b:87:93:86:a3:5c:04: ef:52:52:a4:91:be:96:af:fd:16:a8:b1:0a:29:97: 40:25:db:d3:5a:66:40:1a:8f:be:26:f2:7f:61:52: d2:7d:c4:36:9b:9b:cb:5a:8c:f3:ee:fe:55:34:76: bc:79:dd:43:e4:7b:9d:09:a5:cc:f3:f5:c7:53:9a: 0d:73:99:5b:a9:92:0b:4b:7d:92:69:ee:b2:6a:b6: 47:76:0b:25:48:95:d5:d8:f8:8e:01:b4:af:64:a5: fc:4a:61:cf:fc:9d:9d:03:fd:8c:f5:52:65:53:d4: 6c:e2:be:75:4b:3b:5a:98:96:34:a4:f6:80:5a:ce: 38:59:44:d5:35:16:84:5a:24:e4:5a:f3:b0:23:f2: 66:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D1:AE:AF:B0:E3:0E:53:74:9B:52:E7:35:56:38:E1:84:35:B8:0B X509v3 Authority Key Identifier: keyid:FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:e3:c8:8c:6f:d1:58:cd:ae:70:ad:98:f0:2b:6b:b0:1d:ee: 4d:43:8c:3f:ef:49:29:9a:79:d6:41:85:25:54:02:d1:52:42: ac:de:ed:ba:88:87:ae:44:30:f8:85:cb:12:da:f3:7a:70:68: 58:95:97:2b:4e:b2:b6:8c:2d:a1:c8:18:d1:49:5a:28:50:a7: fd:ef:57:e7:0e:9b:0b:d1:d6:ba:72:f2:bf:19:ba:ae:42:5a: 93:39:e7:09:94:34:ed:f9:4a:fe:cf:3f:5e:68:87:98:48:7a: 77:39:18:62:80:6b:37:9f:67:7e:a9:dc:ec:c8:d4:c7:a5:45: 7f:e8:f1:bd:23:b4:72:b8:6a:24:5b:3f:46:bc:ed:0c:7b:44: d6:23:8d:2a:44:1f:39:11:3a:17:65:bd:49:57:af:dd:e2:5d: b4:54:81:8c:f2:b8:53:85:2e:37:1e:f9:b0:23:c1:cf:7a:1d: 24:55:63:5b:29:e9:e6:e8:c8:5a:0c:42:62:08:1c:8b:0e:75: 28:2f:fa:be:8e:9f:f4:bb:b7:e8:b9:40:9f:71:be:1c:64:fe: ad:b3:0a:0a:7c:d2:c2:85:19:d3:e2:4c:98:ea:ae:fa:e0:ea: 11:af:b7:b9:c8:00:7f:83:f3:f3:8d:6c:93:19:1f:31:83:a4: 30:49:69:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxw/nloW/IohgPFP8ccS50MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMGM2YjJiZDI5ZDMxNjg0ODdjOWVjNWZkZTRjM2ZjNDJk OWNmYmUwHhcNMjUxMjE4MTQwMTI1WhcNMjUxMjE5MTQwMTI1WjAzMTEwLwYDVQQD Eyg2NmQxYWVhZmIwZTMwZTUzNzQ5YjUyZTczNTU2MzhlMTg0MzViODBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPCQgXOOcHK4eaQSOI1/brIQNQsg duUalhA3zKPwUqrPvrgXJxlbNvvOW5RuP32G+iyS88oTCNEFzvRf0UdDVKcTP+0m rL+rktJFPgwAT6ZJlN2ET25k50zq0sdfawCeseei9BEJZIS/id0R+zY4uluHk4aj XATvUlKkkb6Wr/0WqLEKKZdAJdvTWmZAGo++JvJ/YVLSfcQ2m5vLWozz7v5VNHa8 ed1D5HudCaXM8/XHU5oNc5lbqZILS32Sae6yarZHdgslSJXV2PiOAbSvZKX8SmHP /J2dA/2M9VJlU9Rs4r51SztamJY0pPaAWs44WUTVNRaEWiTkWvOwI/JmlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGbRrq+w4w5TdJtS5zVWOOGENbgLMB8GA1UdIwQY MBaAFP0MayvSnTFoSHyexf3kw/xC2c++MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1F4cks5S2RNV2hJZko3Rl9lVERfRUxaejc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80MzVkODgtMzcxZS00Zjg2LWE5MGEt Y2ZiYmMxNDY3MWEzLzEvX1F4cks5S2RNV2hJZko3Rl9lVERfRUxaejc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi80MzVkODgtMzcxZS00Zjg2LWE5MGEtY2ZiYmMxNDY3MWEz LzEvX1F4cks5S2RNV2hJZko3Rl9lVERfRUxaejc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiOPIjG/R WM2ucK2Y8CtrsB3uTUOMP+9JKZp51kGFJVQC0VJCrN7tuoiHrkQw+IXLEtrzenBo WJWXK06ytowtocgY0UlaKFCn/e9X5w6bC9HWunLyvxm6rkJakznnCZQ07flK/s8/ XmiHmEh6dzkYYoBrN59nfqnc7MjUx6VFf+jxvSO0crhqJFs/RrztDHtE1iONKkQf ORE6F2W9SVev3eJdtFSBjPK4U4UuNx75sCPBz3odJFVjWynp5ujIWgxCYggciw51 KC/6vo6f9Lu36LlAn3G+HGT+rbMKCnzSwoUZ0+JMmOqu+uDqEa+3ucgAf4Pz841s kxkfMYOkMElpgQ== -----END CERTIFICATE-----Generated at Thu Dec 18 15:44:00 2025 by rpki-client