This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft File: Q1QWsigrRTPDUJwY6VfODINryDc.mft (raw, json) Hash identifier: lpETIWoHqEu7T06FsJkp3Tup7kyzueun43deYowqgdI= Subject key identifier: 0F:C8:ED:D5:98:DE:17:32:90:D8:49:C0:9F:D5:69:4E:28:44:49:8C Authority key identifier: 43:54:16:B2:28:2B:45:33:C3:50:9C:18:E9:57:CE:0C:83:6B:C8:37 Certificate issuer: /CN=435416b2282b4533c3509c18e957ce0c836bc837 Certificate serial: 019B2B54514885F2DBED62985F095C7C03E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft Manifest number: 0F6E Signing time: Wed 17 Dec 2025 08:01:44 +0000 Manifest this update: Wed 17 Dec 2025 08:01:44 +0000 Manifest next update: Thu 18 Dec 2025 08:01:44 +0000 Files and hashes: 1: Q1QWsigrRTPDUJwY6VfODINryDc.crl (hash: 9Vd1PTtPRuVlvJY1RAebSfvjof+w89/rR7J8HG6GS7M=) 2: Tt9cDnLqp2SOeeoElhH21A1JSmo.roa (hash: g7FEq0smlg0TkkjLfygzTEzTD8KkWT+7GvQHUxPqdJo=) 3: pSYXiKXGXABhmANIG0Y2vhGLRUA.roa (hash: kjXcWabBcy+Nz9B+eKiIbdHIvrnXu/XwD/9ZftdegXw=) 4: uJ1wgWjtfF_PUvxzUj8noSaLQx0.roa (hash: 5K3mYspcTrH8J1dlAJJG2SBHWuIALi8AQG16SYzuq8w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 08:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:54:51:48:85:f2:db:ed:62:98:5f:09:5c:7c:03:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=435416b2282b4533c3509c18e957ce0c836bc837 Validity Not Before: Dec 17 08:01:44 2025 GMT Not After : Dec 18 08:01:44 2025 GMT Subject: CN=0fc8edd598de173290d849c09fd5694e2844498c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:94:7c:08:0f:03:b5:7c:b9:dc:f5:af:94:e1: 31:a7:41:e5:44:f6:c2:01:2d:ce:81:b4:60:23:d2: 26:a1:61:32:32:ca:c1:9d:18:c9:55:bc:43:9b:6d: 3e:20:97:7b:d0:4d:52:e1:f1:b4:d9:af:6e:7f:a2: 36:66:f8:ec:5f:91:3e:1f:47:af:1d:90:71:31:fc: 34:4f:88:5b:01:7a:db:c5:93:95:1b:93:64:6a:60: b9:85:69:f3:78:80:79:5f:03:87:00:15:05:d0:31: fa:44:13:93:8f:56:e9:8f:44:ed:93:af:d3:0d:39: 89:63:3f:bf:1a:40:c9:61:ac:c2:6e:5f:b0:d2:ea: 73:07:9e:92:1a:6f:b4:40:4b:cd:81:75:50:2a:1f: 1e:43:95:39:12:c5:b9:6a:f6:88:88:89:2d:b4:81: 08:bc:b0:7c:1c:36:c5:4f:70:38:43:70:08:0b:7c: 95:94:59:86:2d:b3:98:b9:6c:2b:69:67:c0:20:7a: 69:cf:a0:2f:bc:13:ec:3f:2d:ae:13:33:17:33:bb: 4f:7b:d1:2f:79:82:b6:6c:a4:f2:6a:4f:f1:f1:c5: b7:63:2e:7d:25:b1:0c:2d:e9:30:c8:cc:14:fd:12: b9:12:c6:7b:7b:7a:28:7d:bb:be:a9:96:f9:39:24: 81:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:C8:ED:D5:98:DE:17:32:90:D8:49:C0:9F:D5:69:4E:28:44:49:8C X509v3 Authority Key Identifier: keyid:43:54:16:B2:28:2B:45:33:C3:50:9C:18:E9:57:CE:0C:83:6B:C8:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:4b:04:3b:85:fe:6f:00:03:35:9d:e7:c2:76:8b:5e:4c:64: 93:6c:48:d2:84:3e:60:09:9a:32:f2:01:d3:4a:34:b7:f1:d5: d8:10:d4:6f:c3:37:b0:69:ad:5e:fc:22:77:0d:2a:b4:7d:ff: 33:7d:3a:41:74:ba:b2:3d:71:a0:f1:48:6e:9f:b0:01:00:6a: 9d:c7:fc:4f:01:c9:71:44:82:90:cc:35:f8:40:38:36:7e:31: ca:1a:e1:ad:36:a3:3f:3a:09:76:54:d3:6f:cc:7d:c1:82:f2: 2c:98:ba:5e:14:28:fd:c6:7c:6f:b4:97:b7:f0:c4:0a:05:30: df:04:a2:6d:5a:9d:a0:f5:c5:e8:7a:41:12:a9:6a:30:a4:28: 5f:2f:5f:1f:bd:e7:39:a3:13:25:18:9b:3a:dc:cd:a7:9a:c9: 7c:f5:f7:08:3d:9c:c5:45:c0:f5:54:65:63:21:91:ae:ab:1a: 30:eb:2a:68:e3:f0:bf:9a:65:c6:1b:e9:fb:a6:bd:88:39:5b: e7:56:84:86:0d:26:a3:d6:63:60:db:c5:cc:ab:fe:27:1f:ba: 77:bb:c8:cc:17:fa:24:43:81:15:51:e2:21:79:ab:5d:62:95: 77:63:be:5c:9b:c6:bb:db:60:c1:8f:66:67:92:ac:db:4c:08: 39:f4:02:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrVFFIhfLb7WKYXwlcfAPiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzNTQxNmIyMjgyYjQ1MzNjMzUwOWMxOGU5NTdjZTBjODM2 YmM4MzcwHhcNMjUxMjE3MDgwMTQ0WhcNMjUxMjE4MDgwMTQ0WjAzMTEwLwYDVQQD EygwZmM4ZWRkNTk4ZGUxNzMyOTBkODQ5YzA5ZmQ1Njk0ZTI4NDQ0OThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpR8CA8DtXy53PWvlOExp0HlRPbC AS3OgbRgI9ImoWEyMsrBnRjJVbxDm20+IJd70E1S4fG02a9uf6I2ZvjsX5E+H0ev HZBxMfw0T4hbAXrbxZOVG5NkamC5hWnzeIB5XwOHABUF0DH6RBOTj1bpj0Ttk6/T DTmJYz+/GkDJYazCbl+w0upzB56SGm+0QEvNgXVQKh8eQ5U5EsW5avaIiIkttIEI vLB8HDbFT3A4Q3AIC3yVlFmGLbOYuWwraWfAIHppz6AvvBPsPy2uEzMXM7tPe9Ev eYK2bKTyak/x8cW3Yy59JbEMLekwyMwU/RK5EsZ7e3oofbu+qZb5OSSBZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/I7dWY3hcykNhJwJ/VaU4oREmMMB8GA1UdIwQY MBaAFENUFrIoK0Uzw1CcGOlXzgyDa8g3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTFRV3NpZ3JSVFBEVUp3WTZWZk9ESU5yeURjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82M2ZmODEtNjQ2MC00YzA1LTg1MmQt MjYyZWIzOWJiZTc2LzEvUTFRV3NpZ3JSVFBEVUp3WTZWZk9ESU5yeURjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy82M2ZmODEtNjQ2MC00YzA1LTg1MmQtMjYyZWIzOWJiZTc2 LzEvUTFRV3NpZ3JSVFBEVUp3WTZWZk9ESU5yeURjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvEsEO4X+ bwADNZ3nwnaLXkxkk2xI0oQ+YAmaMvIB00o0t/HV2BDUb8M3sGmtXvwidw0qtH3/ M306QXS6sj1xoPFIbp+wAQBqncf8TwHJcUSCkMw1+EA4Nn4xyhrhrTajPzoJdlTT b8x9wYLyLJi6XhQo/cZ8b7SXt/DECgUw3wSibVqdoPXF6HpBEqlqMKQoXy9fH73n OaMTJRibOtzNp5rJfPX3CD2cxUXA9VRlYyGRrqsaMOsqaOPwv5plxhvp+6a9iDlb 51aEhg0mo9ZjYNvFzKv+Jx+6d7vIzBf6JEOBFVHiIXmrXWKVd2O+XJvGu9tgwY9m Z5Ks20wIOfQCPw== -----END CERTIFICATE-----Generated at Wed Dec 17 17:54:14 2025 by rpki-client