This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.mft File: Q_2TYug7hS8_0zEbCQlvYommoPg.mft (raw, json) Hash identifier: g7lKBQA6WDLBMl8SSmmmVGQML2aJEWt8C7YWgUlGiZc= Subject key identifier: A6:51:3E:25:0B:45:E9:66:F4:CC:C2:92:28:32:F6:68:CF:38:CF:D7 Authority key identifier: 43:FD:93:62:E8:3B:85:2F:3F:D3:31:1B:09:09:6F:62:89:A6:A0:F8 Certificate issuer: /CN=43fd9362e83b852f3fd3311b09096f6289a6a0f8 Certificate serial: 019AFBE752782AE1BEDB6793FA39BAB8E585 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q_2TYug7hS8_0zEbCQlvYommoPg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.mft Manifest number: 103B Signing time: Mon 08 Dec 2025 03:00:32 +0000 Manifest this update: Mon 08 Dec 2025 03:00:32 +0000 Manifest next update: Tue 09 Dec 2025 03:00:32 +0000 Files and hashes: 1: Fy-RDVpoQYqhk9YIhC0_OXJ7Ngw.roa (hash: MSpbkpTae0BKWb0wW1Z5MLxX2eex/b1uULBuB1GrJoU=) 2: Q_2TYug7hS8_0zEbCQlvYommoPg.crl (hash: zjyyYkiVx2drT7hcyJPlZfe395oZ1i/UXllVQOIgz0I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.mft rsync://rpki.ripe.net/repository/DEFAULT/Q_2TYug7hS8_0zEbCQlvYommoPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:e7:52:78:2a:e1:be:db:67:93:fa:39:ba:b8:e5:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43fd9362e83b852f3fd3311b09096f6289a6a0f8 Validity Not Before: Dec 8 03:00:32 2025 GMT Not After : Dec 9 03:00:32 2025 GMT Subject: CN=a6513e250b45e966f4ccc2922832f668cf38cfd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6d:50:a7:84:6a:99:53:19:7a:af:92:43:14: 15:1b:7d:a6:2d:99:01:55:71:60:25:17:84:9e:61: de:57:0e:3d:d2:09:c5:be:58:02:d9:f7:83:b0:51: 2c:0e:fd:23:71:c6:d9:b0:e1:ea:a6:93:67:04:fe: 1a:db:64:c5:0d:41:d7:0c:55:50:e8:38:a5:f1:13: d8:c5:b1:26:c5:94:c3:8a:5a:cc:a7:2d:81:0f:24: be:a1:4b:24:a4:c0:1a:7f:73:d5:9a:dc:87:8b:8b: ba:c2:65:8a:e8:cf:88:ca:17:2d:79:54:fd:82:bf: b6:32:b1:6a:cb:75:04:40:f6:4d:89:da:1f:33:64: 5d:a6:74:98:8a:8f:28:0e:db:1a:10:42:90:57:1c: c9:14:bf:62:59:5d:1c:46:ad:34:c3:db:d2:5b:9c: e7:d5:38:42:28:ec:16:b5:a4:bf:be:f1:82:fe:d4: 8a:ab:e6:ba:93:6f:ce:5f:10:a2:c8:2b:8b:56:b9: 88:9b:9b:d6:86:81:82:eb:31:68:f7:79:56:d1:48: c4:27:33:d9:88:6f:8f:28:ef:77:39:71:bb:6d:16: d7:84:a5:52:91:d3:4a:98:70:29:fa:59:96:e5:75: 99:b8:89:ef:a9:98:ed:f8:29:71:44:ed:45:8e:77: 97:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:51:3E:25:0B:45:E9:66:F4:CC:C2:92:28:32:F6:68:CF:38:CF:D7 X509v3 Authority Key Identifier: keyid:43:FD:93:62:E8:3B:85:2F:3F:D3:31:1B:09:09:6F:62:89:A6:A0:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_2TYug7hS8_0zEbCQlvYommoPg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:d3:5d:6a:4f:88:11:65:fb:4d:f3:8b:c6:35:14:c1:e3:8f: a5:69:46:56:84:15:9e:d6:84:87:65:3d:ab:41:be:bf:04:df: 64:44:43:a2:a0:20:91:1f:46:9b:34:ff:75:29:3b:eb:b3:71: 20:c7:c2:2d:5e:73:78:3d:e3:e3:d9:3c:b5:0b:e8:ba:ea:56: bb:5f:ba:ea:96:52:b0:c4:d7:c0:39:bd:8f:31:3f:e2:d0:ed: b9:82:83:d1:67:21:a4:e5:fb:05:ea:39:03:3d:46:6e:f4:da: 15:e7:6c:dd:30:2a:b8:ce:44:00:df:b4:c3:bf:f1:76:46:9f: 70:ee:b9:53:fc:1c:c6:1e:6a:ee:25:fa:85:cd:f4:b3:1d:9c: 0c:b2:ee:95:fb:4b:44:4a:1a:34:53:50:a2:15:dc:2d:f5:f5: 33:13:26:92:33:3e:6a:c1:01:71:51:77:46:8c:9b:ea:96:3f: 09:1f:76:ee:73:bf:04:60:0c:4f:dd:90:0d:36:e5:4b:02:1b: 8d:3f:58:6a:57:48:0a:52:00:2d:e5:b7:df:92:68:1f:c3:19: e7:57:e3:74:31:f8:9d:f4:e4:ac:3d:d7:17:dd:47:67:1e:95: d5:da:15:af:1b:67:b1:f6:0f:81:54:fd:e6:6a:6f:57:79:91: f3:ce:15:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr751J4KuG+22eT+jm6uOWFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZmQ5MzYyZTgzYjg1MmYzZmQzMzExYjA5MDk2ZjYyODlh NmEwZjgwHhcNMjUxMjA4MDMwMDMyWhcNMjUxMjA5MDMwMDMyWjAzMTEwLwYDVQQD EyhhNjUxM2UyNTBiNDVlOTY2ZjRjY2MyOTIyODMyZjY2OGNmMzhjZmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyG1Qp4RqmVMZeq+SQxQVG32mLZkB VXFgJReEnmHeVw490gnFvlgC2feDsFEsDv0jccbZsOHqppNnBP4a22TFDUHXDFVQ 6Dil8RPYxbEmxZTDilrMpy2BDyS+oUskpMAaf3PVmtyHi4u6wmWK6M+IyhcteVT9 gr+2MrFqy3UEQPZNidofM2RdpnSYio8oDtsaEEKQVxzJFL9iWV0cRq00w9vSW5zn 1ThCKOwWtaS/vvGC/tSKq+a6k2/OXxCiyCuLVrmIm5vWhoGC6zFo93lW0UjEJzPZ iG+PKO93OXG7bRbXhKVSkdNKmHAp+lmW5XWZuInvqZjt+ClxRO1FjneXTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKZRPiULRelm9MzCkigy9mjPOM/XMB8GA1UdIwQY MBaAFEP9k2LoO4UvP9MxGwkJb2KJpqD4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUV8yVFl1ZzdoUzhfMHpFYkNRbHZZb21tb1BnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xZDNjMTUtMzQxNi00NGFkLTlhODkt NjU0N2JiMWI4MGMyLzEvUV8yVFl1ZzdoUzhfMHpFYkNRbHZZb21tb1BnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8xZDNjMTUtMzQxNi00NGFkLTlhODktNjU0N2JiMWI4MGMy LzEvUV8yVFl1ZzdoUzhfMHpFYkNRbHZZb21tb1BnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMtNdak+I EWX7TfOLxjUUweOPpWlGVoQVntaEh2U9q0G+vwTfZERDoqAgkR9GmzT/dSk767Nx IMfCLV5zeD3j49k8tQvouupWu1+66pZSsMTXwDm9jzE/4tDtuYKD0WchpOX7Beo5 Az1GbvTaFeds3TAquM5EAN+0w7/xdkafcO65U/wcxh5q7iX6hc30sx2cDLLulftL REoaNFNQohXcLfX1MxMmkjM+asEBcVF3Royb6pY/CR927nO/BGAMT92QDTblSwIb jT9YaldIClIALeW335JoH8MZ51fjdDH4nfTkrD3XF91HZx6V1doVrxtnsfYPgVT9 5mpvV3mR884VAA== -----END CERTIFICATE-----Generated at Mon Dec 8 09:37:23 2025 by rpki-client