This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft File: _QxrK9KdMWhIfJ7F_eTD_ELZz74.mft (raw, json) Hash identifier: P98xztmfDho0NRRQfihk4XzZ0dkIMw5XlxwAG/qnOi0= Subject key identifier: BA:34:BD:41:55:4D:3A:A8:B4:45:F0:65:B2:63:2D:0A:6F:FF:D1:63 Authority key identifier: FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE Certificate issuer: /CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe Certificate serial: 019AF20969E85D6F837BE6C15E7D12ADDF26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft Manifest number: 1290 Signing time: Sat 06 Dec 2025 05:01:34 +0000 Manifest this update: Sat 06 Dec 2025 05:01:34 +0000 Manifest next update: Sun 07 Dec 2025 05:01:34 +0000 Files and hashes: 1: 1-Ofv8tDBMWs_4Hbhr7lMN_HF2TI.roa (hash: uH/td80fED56QPX1k1oOVphRVZ11UL29yzqyURnsYnc=) 2: _QxrK9KdMWhIfJ7F_eTD_ELZz74.crl (hash: MQ0/mfO4bJy2AAm3O6n17DC8UQwpaCUElTMRVyzHHgA=) 3: ptc21Pv_RMZdbmNfwt1t43MswfA.roa (hash: mrzhJeNsIe6my5EK8oo2DkozZxDWWdzOh94g4W2m17U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:69:e8:5d:6f:83:7b:e6:c1:5e:7d:12:ad:df:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe Validity Not Before: Dec 6 05:01:34 2025 GMT Not After : Dec 7 05:01:34 2025 GMT Subject: CN=ba34bd41554d3aa8b445f065b2632d0a6fffd163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ae:e5:e3:1c:45:66:2b:84:7a:ad:62:5b:4d: b9:09:5b:c6:03:dd:09:99:c1:d8:bd:f2:82:e0:40: 6f:c9:de:18:a8:cb:39:e7:07:01:ff:9f:dc:af:c7: 3b:43:59:10:5a:52:4d:05:b1:65:d0:48:92:b9:76: 35:c5:88:a3:bf:88:77:0c:86:5d:ec:c2:84:49:20: d6:a0:ea:d8:48:d6:02:5d:78:3b:1c:8e:de:05:d1: ca:17:0e:cb:46:c2:8d:fd:18:ca:49:1b:80:20:5e: 6e:e1:1b:5a:e0:56:69:4d:a4:ec:38:f6:24:1e:6f: d1:63:20:c5:c6:c1:1d:a0:76:12:48:39:80:d3:7a: d1:9a:10:97:ba:cb:1f:2e:d9:4c:d7:20:f8:a7:0b: 51:5d:ee:b8:1d:37:a3:78:0a:1c:78:99:98:90:48: 85:be:d4:68:28:42:15:53:fe:a5:84:fb:bf:34:9f: 7a:45:bf:5e:52:d2:9e:2e:5b:19:4f:e1:97:94:89: 2c:97:02:63:27:29:f3:b7:59:f3:87:85:dd:83:b2: 02:00:24:b4:fe:9f:3e:cb:4c:f4:19:63:04:13:ac: cd:a4:c4:59:10:9c:5a:75:3b:f5:c9:f6:d4:31:c9: 29:f7:0b:16:fa:02:87:bb:e5:4a:1d:0c:3d:59:7c: 09:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:34:BD:41:55:4D:3A:A8:B4:45:F0:65:B2:63:2D:0A:6F:FF:D1:63 X509v3 Authority Key Identifier: keyid:FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:5b:73:11:72:ce:1b:f8:bf:52:df:51:7f:24:a3:2c:3c:8a: 6a:bd:88:2a:aa:4f:83:64:5e:d3:59:8e:4a:ea:a1:bb:e0:c9: d1:be:e9:a4:b8:f1:a0:39:75:30:7c:bb:81:63:5d:a0:fd:41: 1a:23:94:c1:ec:d9:b7:9a:8b:69:37:22:c6:e6:d2:c5:1c:92: 7f:c5:6e:a2:16:fc:60:b4:f9:a4:39:e9:f0:57:c8:8b:a7:64: 8a:9c:42:be:32:c4:09:01:9b:20:01:28:e1:74:e9:b0:bc:de: 1c:88:4a:e1:fa:58:2b:37:17:8e:0d:38:c1:b9:ed:5f:66:e1: d8:bc:d8:8c:ee:47:56:98:1d:6f:ab:07:d1:8b:c7:37:d4:c5: 71:ce:83:ef:64:6b:ff:06:62:e3:34:60:66:5b:31:77:78:e7: 2e:f2:95:ba:c4:60:3e:74:9e:9d:32:e4:65:9d:6b:c9:f1:c6: be:d5:b7:ab:95:47:e2:ae:76:82:a4:49:e0:ae:ec:10:0b:09: ec:99:d3:62:a3:5f:bb:d4:b5:96:88:62:ad:0c:44:02:42:e2: 5d:cc:50:15:d4:98:45:bc:b4:a9:38:c9:17:d7:fe:06:5f:98: 48:30:a9:6f:fd:2a:c4:b8:f0:66:0b:39:0c:f4:4d:ff:10:7d: de:09:d4:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCWnoXW+De+bBXn0Srd8mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMGM2YjJiZDI5ZDMxNjg0ODdjOWVjNWZkZTRjM2ZjNDJk OWNmYmUwHhcNMjUxMjA2MDUwMTM0WhcNMjUxMjA3MDUwMTM0WjAzMTEwLwYDVQQD EyhiYTM0YmQ0MTU1NGQzYWE4YjQ0NWYwNjViMjYzMmQwYTZmZmZkMTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAva7l4xxFZiuEeq1iW025CVvGA90J mcHYvfKC4EBvyd4YqMs55wcB/5/cr8c7Q1kQWlJNBbFl0EiSuXY1xYijv4h3DIZd 7MKESSDWoOrYSNYCXXg7HI7eBdHKFw7LRsKN/RjKSRuAIF5u4Rta4FZpTaTsOPYk Hm/RYyDFxsEdoHYSSDmA03rRmhCXussfLtlM1yD4pwtRXe64HTejeAoceJmYkEiF vtRoKEIVU/6lhPu/NJ96Rb9eUtKeLlsZT+GXlIkslwJjJynzt1nzh4Xdg7ICACS0 /p8+y0z0GWMEE6zNpMRZEJxadTv1yfbUMckp9wsW+gKHu+VKHQw9WXwJlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLo0vUFVTTqotEXwZbJjLQpv/9FjMB8GA1UdIwQY MBaAFP0MayvSnTFoSHyexf3kw/xC2c++MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1F4cks5S2RNV2hJZko3Rl9lVERfRUxaejc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80MzVkODgtMzcxZS00Zjg2LWE5MGEt Y2ZiYmMxNDY3MWEzLzEvX1F4cks5S2RNV2hJZko3Rl9lVERfRUxaejc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi80MzVkODgtMzcxZS00Zjg2LWE5MGEtY2ZiYmMxNDY3MWEz LzEvX1F4cks5S2RNV2hJZko3Rl9lVERfRUxaejc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfVtzEXLO G/i/Ut9RfySjLDyKar2IKqpPg2Re01mOSuqhu+DJ0b7ppLjxoDl1MHy7gWNdoP1B GiOUwezZt5qLaTcixubSxRySf8Vuohb8YLT5pDnp8FfIi6dkipxCvjLECQGbIAEo 4XTpsLzeHIhK4fpYKzcXjg04wbntX2bh2LzYjO5HVpgdb6sH0YvHN9TFcc6D72Rr /wZi4zRgZlsxd3jnLvKVusRgPnSenTLkZZ1ryfHGvtW3q5VH4q52gqRJ4K7sEAsJ 7JnTYqNfu9S1lohirQxEAkLiXcxQFdSYRby0qTjJF9f+Bl+YSDCpb/0qxLjwZgs5 DPRN/xB93gnUJA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:17:55 2025 by rpki-client