This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft File: Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft (raw, json) Hash identifier: ivEq2KwB1IjQm/UFH47Kr/DOAebpwVNx18S+HPBWQMQ= Subject key identifier: E8:02:DD:83:40:99:BA:F7:45:3F:D3:3C:3D:3E:D2:21:2B:AB:4B:2A Authority key identifier: 43:9E:43:21:CF:21:8B:92:65:D5:63:B5:BE:A5:1D:BF:17:66:CE:C8 Certificate issuer: /CN=439e4321cf218b9265d563b5bea51dbf1766cec8 Certificate serial: 019B2D0ADE583FDA46E9F3244D7B4AB2973E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft Manifest number: 0498 Signing time: Wed 17 Dec 2025 16:00:45 +0000 Manifest this update: Wed 17 Dec 2025 16:00:45 +0000 Manifest next update: Thu 18 Dec 2025 16:00:45 +0000 Files and hashes: 1: Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl (hash: FQg7yJQtalRq+cFXFry5r+hzy0bmL/JyzALRiV3aNdc=) 2: nK8r6BW7X2Id54DEAsyFnRHZOsA.roa (hash: ++ZMcQT7NmyLhSBPeMlDbkE+/3o7EgGxMfB7gUiQzt0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0a:de:58:3f:da:46:e9:f3:24:4d:7b:4a:b2:97:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439e4321cf218b9265d563b5bea51dbf1766cec8 Validity Not Before: Dec 17 16:00:45 2025 GMT Not After : Dec 18 16:00:45 2025 GMT Subject: CN=e802dd834099baf7453fd33c3d3ed2212bab4b2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2d:87:2c:ec:5a:59:ab:24:a2:fb:05:c6:4a: ed:b7:9e:09:3b:53:ce:63:31:a5:e8:34:2c:12:b4: 91:c0:aa:90:12:ac:d8:04:c2:2b:9c:21:93:d0:02: 1f:6c:08:7f:21:b3:50:39:6c:d4:f3:9f:6a:42:0d: a4:23:b5:3d:0f:f0:3b:2c:e5:2a:0b:b1:a4:7d:b4: ec:f1:f6:5c:d9:6b:f9:b5:53:e4:9e:cc:df:85:46: f8:05:b8:93:0f:57:50:49:35:3a:20:57:f1:e9:74: 0f:86:04:81:1e:a1:3a:52:d8:a2:82:a6:4b:d8:98: 3f:80:77:18:0a:44:d9:64:9a:8d:e5:e6:ec:56:e4: 5d:8c:fc:5e:0a:72:32:87:93:79:be:09:66:48:84: 39:ae:c5:7a:fa:de:28:ad:19:33:30:33:6c:40:46: 86:12:38:d0:78:57:f3:06:d7:d1:1a:4a:fb:2a:aa: c1:5b:e5:36:96:e0:c2:79:95:68:1d:19:4e:9a:17: f6:f9:d4:85:37:40:a3:d5:96:df:2f:16:21:1e:47: bf:9e:ce:9f:57:28:60:73:9f:54:3e:bb:16:3e:2b: b1:48:6f:36:c7:ea:28:75:0e:63:b8:02:6e:b7:09: 22:3c:58:e1:9f:7c:31:0a:5e:06:16:5b:19:6a:04: 65:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:02:DD:83:40:99:BA:F7:45:3F:D3:3C:3D:3E:D2:21:2B:AB:4B:2A X509v3 Authority Key Identifier: keyid:43:9E:43:21:CF:21:8B:92:65:D5:63:B5:BE:A5:1D:BF:17:66:CE:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:3d:62:ba:d7:1c:95:31:36:79:e4:4c:ae:18:ad:80:ac:da: 63:3c:c3:8c:7d:95:2f:d7:63:67:3b:94:1c:60:49:00:d6:3e: bb:e9:67:d6:d1:c1:a3:3f:b6:3d:c4:3a:37:6a:d0:44:e6:7e: af:3c:25:e8:87:22:24:6a:8f:4d:25:47:3c:57:87:68:b1:ff: 42:19:b6:1f:77:03:c0:08:7c:02:ca:4c:c3:f0:c6:ec:9f:5c: fc:04:d8:5c:45:0d:ad:5f:2d:8a:5b:03:ad:30:95:9d:a1:10: b6:3a:08:3e:a5:e7:cc:f8:6b:e6:25:49:86:da:6a:85:ea:31: b3:5c:26:ae:57:eb:bf:1c:ba:90:d4:fe:a9:fc:37:94:50:93: 4d:c4:55:bd:2b:c2:6b:b8:49:f7:a9:a0:61:16:97:4d:a4:a8: a6:44:0d:6e:e1:9b:b2:38:62:0b:24:f8:05:c6:86:0d:c5:74: c9:2b:1f:7f:2e:5b:42:de:02:dd:5a:0f:39:f4:0f:b1:5f:57: 78:a8:d8:2b:7b:67:1c:e3:81:11:f7:9e:f5:e3:cc:49:13:84: 5e:c2:e3:4f:07:22:7f:09:70:e2:86:fa:7b:e5:01:9a:21:bb: ae:5b:c9:90:bb:b6:7c:3e:92:62:bb:97:b5:d4:c2:0d:12:14: 8e:1d:d9:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstCt5YP9pG6fMkTXtKspc+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzOWU0MzIxY2YyMThiOTI2NWQ1NjNiNWJlYTUxZGJmMTc2 NmNlYzgwHhcNMjUxMjE3MTYwMDQ1WhcNMjUxMjE4MTYwMDQ1WjAzMTEwLwYDVQQD EyhlODAyZGQ4MzQwOTliYWY3NDUzZmQzM2MzZDNlZDIyMTJiYWI0YjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC2HLOxaWaskovsFxkrtt54JO1PO YzGl6DQsErSRwKqQEqzYBMIrnCGT0AIfbAh/IbNQOWzU859qQg2kI7U9D/A7LOUq C7GkfbTs8fZc2Wv5tVPknszfhUb4BbiTD1dQSTU6IFfx6XQPhgSBHqE6UtiigqZL 2Jg/gHcYCkTZZJqN5ebsVuRdjPxeCnIyh5N5vglmSIQ5rsV6+t4orRkzMDNsQEaG EjjQeFfzBtfRGkr7KqrBW+U2luDCeZVoHRlOmhf2+dSFN0Cj1ZbfLxYhHke/ns6f Vyhgc59UPrsWPiuxSG82x+oodQ5juAJutwkiPFjhn3wxCl4GFlsZagRlowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOgC3YNAmbr3RT/TPD0+0iErq0sqMB8GA1UdIwQY MBaAFEOeQyHPIYuSZdVjtb6lHb8XZs7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTU1REljOGhpNUpsMVdPMXZxVWR2eGRtenNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZGQ3NTYtMzg5OS00YTQ5LWI2ZmUt MTU1MTVhZDliNjA1LzEvUTU1REljOGhpNUpsMVdPMXZxVWR2eGRtenNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC82ZGQ3NTYtMzg5OS00YTQ5LWI2ZmUtMTU1MTVhZDliNjA1 LzEvUTU1REljOGhpNUpsMVdPMXZxVWR2eGRtenNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoz1iutcc lTE2eeRMrhitgKzaYzzDjH2VL9djZzuUHGBJANY+u+ln1tHBoz+2PcQ6N2rQROZ+ rzwl6IciJGqPTSVHPFeHaLH/Qhm2H3cDwAh8AspMw/DG7J9c/ATYXEUNrV8tilsD rTCVnaEQtjoIPqXnzPhr5iVJhtpqheoxs1wmrlfrvxy6kNT+qfw3lFCTTcRVvSvC a7hJ96mgYRaXTaSopkQNbuGbsjhiCyT4BcaGDcV0ySsffy5bQt4C3VoPOfQPsV9X eKjYK3tnHOOBEfee9ePMSROEXsLjTwcifwlw4ob6e+UBmiG7rlvJkLu2fD6SYruX tdTCDRIUjh3Z0Q== -----END CERTIFICATE-----Generated at Wed Dec 17 17:47:03 2025 by rpki-client