This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft File: Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft (raw, json) Hash identifier: 0FtRDzAjHoKOd/Cat1tD2uffqFu8izwYDMFEkBXovfQ= Subject key identifier: 03:50:D0:BC:10:EF:2B:6C:33:B6:3B:EF:5E:F3:84:0F:3A:D0:F3:DA Authority key identifier: 43:9E:43:21:CF:21:8B:92:65:D5:63:B5:BE:A5:1D:BF:17:66:CE:C8 Certificate issuer: /CN=439e4321cf218b9265d563b5bea51dbf1766cec8 Certificate serial: 019AF31C7BE086C1D9E787A20D15A27EE345 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft Manifest number: 047A Signing time: Sat 06 Dec 2025 10:02:01 +0000 Manifest this update: Sat 06 Dec 2025 10:02:01 +0000 Manifest next update: Sun 07 Dec 2025 10:02:01 +0000 Files and hashes: 1: Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl (hash: Q6gbXPlwt9PnZPBHCngNp9bR0zm447YKzwaHwqHlo0Y=) 2: nK8r6BW7X2Id54DEAsyFnRHZOsA.roa (hash: ++ZMcQT7NmyLhSBPeMlDbkE+/3o7EgGxMfB7gUiQzt0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:7b:e0:86:c1:d9:e7:87:a2:0d:15:a2:7e:e3:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439e4321cf218b9265d563b5bea51dbf1766cec8 Validity Not Before: Dec 6 10:02:01 2025 GMT Not After : Dec 7 10:02:01 2025 GMT Subject: CN=0350d0bc10ef2b6c33b63bef5ef3840f3ad0f3da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d0:ed:11:20:b0:7e:49:08:50:d4:5d:0e:d4: 39:98:11:28:25:d6:d9:ac:ce:ee:ee:de:46:d4:a3: 37:02:14:ce:0a:e1:ab:b6:bd:21:2f:a3:e0:b2:62: a5:13:6e:1b:51:b8:cd:c3:87:a7:78:2d:23:3e:08: 7f:b4:e5:e2:86:79:59:21:e0:fc:4f:72:ea:25:44: 78:43:40:61:5d:47:b9:d5:a0:dc:4d:fd:66:ef:b7: 7c:e8:a4:c5:97:49:79:94:9b:54:34:12:0f:06:d2: 96:d6:81:c0:67:e2:90:49:09:a8:f2:b2:ce:db:05: 80:f4:21:81:80:56:32:23:26:2b:27:23:b5:5b:c7: 63:59:8c:d8:3e:a2:a8:14:0c:8e:dd:fe:ca:e0:9b: b6:1a:a0:90:7f:e4:b1:e2:5f:26:18:b1:99:15:0f: 29:19:af:78:83:46:27:8e:53:0a:67:0f:2e:59:7c: c3:79:a4:fb:92:60:32:cf:1e:86:91:c5:a3:7a:d1: 2e:26:b4:58:02:b1:19:99:bf:67:d2:ae:7b:8d:bc: 57:28:41:90:8d:79:a8:bb:12:d2:84:a3:46:df:fa: 70:4a:86:f9:00:e4:e7:41:e0:3d:a1:67:76:58:e6: e7:83:ce:ac:45:b2:59:86:a5:4c:45:82:4a:3f:a5: 39:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:50:D0:BC:10:EF:2B:6C:33:B6:3B:EF:5E:F3:84:0F:3A:D0:F3:DA X509v3 Authority Key Identifier: keyid:43:9E:43:21:CF:21:8B:92:65:D5:63:B5:BE:A5:1D:BF:17:66:CE:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:e0:f2:78:b2:44:24:58:3a:52:66:09:3c:5a:3f:99:82:94: df:e0:74:db:5d:02:0e:76:79:1c:33:f9:e3:f7:9e:a4:c9:00: 8c:8d:51:6c:10:a9:50:6f:81:ee:f1:bb:8e:07:d3:48:c5:ff: 40:f0:9b:2f:d9:9a:42:57:71:21:0b:87:7d:39:18:1c:f6:13: 1e:04:28:9a:aa:f0:85:1d:77:c1:d7:a2:5b:7e:25:ff:78:70: 53:e5:cf:41:74:af:a1:9d:44:a1:3c:a2:16:2c:5b:5d:de:78: 04:22:5a:b7:5c:49:a3:d9:1a:6b:b3:cd:9e:62:8b:38:1b:15: ba:87:7d:72:23:ac:4f:2b:b2:0d:67:f4:66:f8:78:f9:21:ae: 65:e7:c9:de:80:8b:eb:dd:3a:3c:31:c6:61:be:40:97:83:52: 13:01:18:48:34:27:67:34:fd:04:63:5e:03:74:a8:dd:a9:35: 5f:b6:b6:95:67:e7:3f:de:05:8b:a9:42:31:f3:b9:4e:12:00: 65:bc:d6:54:98:2a:40:9c:d5:db:15:c2:48:73:a7:9a:c5:b5: 52:7a:2e:ac:5b:a6:9f:54:03:78:80:e2:d2:48:a9:5b:50:99: 6c:2b:f8:f3:ba:65:d4:90:e9:b7:a5:80:71:a9:fe:2e:a4:1e: 95:53:3b:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHHvghsHZ54eiDRWifuNFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzOWU0MzIxY2YyMThiOTI2NWQ1NjNiNWJlYTUxZGJmMTc2 NmNlYzgwHhcNMjUxMjA2MTAwMjAxWhcNMjUxMjA3MTAwMjAxWjAzMTEwLwYDVQQD EygwMzUwZDBiYzEwZWYyYjZjMzNiNjNiZWY1ZWYzODQwZjNhZDBmM2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NDtESCwfkkIUNRdDtQ5mBEoJdbZ rM7u7t5G1KM3AhTOCuGrtr0hL6PgsmKlE24bUbjNw4eneC0jPgh/tOXihnlZIeD8 T3LqJUR4Q0BhXUe51aDcTf1m77d86KTFl0l5lJtUNBIPBtKW1oHAZ+KQSQmo8rLO 2wWA9CGBgFYyIyYrJyO1W8djWYzYPqKoFAyO3f7K4Ju2GqCQf+Sx4l8mGLGZFQ8p Ga94g0YnjlMKZw8uWXzDeaT7kmAyzx6GkcWjetEuJrRYArEZmb9n0q57jbxXKEGQ jXmouxLShKNG3/pwSob5AOTnQeA9oWd2WObng86sRbJZhqVMRYJKP6U5BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFANQ0LwQ7ytsM7Y7717zhA860PPaMB8GA1UdIwQY MBaAFEOeQyHPIYuSZdVjtb6lHb8XZs7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTU1REljOGhpNUpsMVdPMXZxVWR2eGRtenNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZGQ3NTYtMzg5OS00YTQ5LWI2ZmUt MTU1MTVhZDliNjA1LzEvUTU1REljOGhpNUpsMVdPMXZxVWR2eGRtenNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC82ZGQ3NTYtMzg5OS00YTQ5LWI2ZmUtMTU1MTVhZDliNjA1 LzEvUTU1REljOGhpNUpsMVdPMXZxVWR2eGRtenNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdODyeLJE JFg6UmYJPFo/mYKU3+B0210CDnZ5HDP54/eepMkAjI1RbBCpUG+B7vG7jgfTSMX/ QPCbL9maQldxIQuHfTkYHPYTHgQomqrwhR13wdeiW34l/3hwU+XPQXSvoZ1EoTyi FixbXd54BCJat1xJo9kaa7PNnmKLOBsVuod9ciOsTyuyDWf0Zvh4+SGuZefJ3oCL 6906PDHGYb5Al4NSEwEYSDQnZzT9BGNeA3So3ak1X7a2lWfnP94Fi6lCMfO5ThIA ZbzWVJgqQJzV2xXCSHOnmsW1UnourFumn1QDeIDi0kipW1CZbCv487pl1JDpt6WA can+LqQelVM7Dw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:31:40 2025 by rpki-client