This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft File: Q6XKFbwjwyXxNB6YidhYuO12104.mft (raw, json) Hash identifier: OV038OnLuAhFrT7gpFUhFD8cdpNmvXtQ+ZJCvCqBPJ8= Subject key identifier: F2:C5:B0:64:9E:AC:D5:69:D7:6A:A5:1F:CF:E5:20:D7:98:8B:26:EB Authority key identifier: 43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E Certificate issuer: /CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e Certificate serial: 019AF38937FF130C9DC8638A4FE2E4F7BD5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft Manifest number: 03C7 Signing time: Sat 06 Dec 2025 12:00:47 +0000 Manifest this update: Sat 06 Dec 2025 12:00:47 +0000 Manifest next update: Sun 07 Dec 2025 12:00:47 +0000 Files and hashes: 1: Q6XKFbwjwyXxNB6YidhYuO12104.crl (hash: 0IhioRtgiR2eW370V72EvOtvFlW533Ypro1kPqxJf5A=) 2: nNbHw-B9ovJEjkk8hXq6L72QjEA.roa (hash: gipZmwcUyYZU1rfrC2SjuA4uq7CTXt+ZJKoz6Ec8OnA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:37:ff:13:0c:9d:c8:63:8a:4f:e2:e4:f7:bd:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e Validity Not Before: Dec 6 12:00:47 2025 GMT Not After : Dec 7 12:00:47 2025 GMT Subject: CN=f2c5b0649eacd569d76aa51fcfe520d7988b26eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:cd:39:be:0d:69:d8:f7:2d:75:c7:3a:ca:5b: 47:93:6f:f9:92:ce:5c:4a:43:c6:01:26:6e:c4:db: 72:56:a3:0b:ec:48:67:89:ca:6b:0c:c5:32:92:0a: 57:c9:fc:ba:c4:c2:09:c0:2e:fb:b4:20:53:c0:24: 4d:eb:4e:06:84:90:e0:ea:f5:3a:b2:6c:c4:dc:37: 22:17:7f:8d:14:cd:a7:1d:da:6a:4d:fc:2e:96:aa: 95:19:e2:50:18:9f:5c:cd:d7:d0:91:1b:36:68:9e: 52:3f:38:6e:5b:de:12:8e:17:2e:60:52:f8:07:d1: 45:af:25:77:42:74:f0:06:3c:80:8a:b0:51:07:44: 18:aa:7f:60:ac:58:ed:15:cd:8a:3b:54:20:50:ed: e1:8f:93:b9:74:96:1a:b1:a7:8d:6b:45:4f:6c:1b: 51:19:71:1d:80:5f:f5:95:3a:e6:0c:0c:82:ff:5d: 6b:f4:7c:9c:b5:64:27:ce:5f:d2:3c:ce:2b:7e:a2: a3:97:f4:77:3e:8f:14:2f:bf:0d:dd:4e:9b:df:29: 77:4a:30:bc:63:e5:e8:60:27:a7:8b:78:51:9d:3c: 56:62:ad:8b:c7:78:73:e4:98:9b:b1:83:7f:ba:91: 7e:e8:df:39:1b:52:45:80:30:17:65:54:89:e1:0e: e1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C5:B0:64:9E:AC:D5:69:D7:6A:A5:1F:CF:E5:20:D7:98:8B:26:EB X509v3 Authority Key Identifier: keyid:43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:db:20:6b:de:62:b2:5a:07:ba:f3:3e:f2:d0:78:5f:cf:77: ee:d4:ad:45:39:aa:87:35:55:57:4c:54:33:f8:ba:d0:dc:42: 81:27:38:63:fa:81:a8:cb:d9:a6:71:34:cd:c8:94:ff:d8:31: f9:d7:f1:5b:90:db:14:ff:cd:94:fd:76:53:03:f2:99:f7:7e: ec:d7:41:d1:76:b9:a8:4f:50:80:95:5f:31:24:53:c2:f0:05: 48:e5:6b:fc:5e:06:c2:4b:86:82:d0:58:f3:cf:24:c6:72:df: 72:b8:1c:8f:f3:6b:7b:a6:1f:9c:19:8c:45:06:98:3d:d7:f0: 38:6f:86:b9:5d:5e:21:f7:86:1f:98:ea:8a:4a:d3:dd:11:58: 55:e8:78:d5:f6:50:8b:ec:64:24:f7:20:53:f2:4c:24:78:fd: f4:4b:ae:6d:2f:54:e3:8e:b8:99:54:3f:64:b4:a8:22:6e:9a: cf:f2:7a:f3:ff:b7:81:35:80:8d:26:f5:9b:a5:99:58:bc:fe: 3c:07:1b:e8:54:67:57:e5:ed:e4:35:63:89:03:38:86:9b:be: f6:8c:7e:09:1e:3c:61:06:ec:2f:27:21:46:86:77:b7:5a:bf: 53:d1:f0:e5:1f:a3:0e:28:8e:ad:3b:f8:7b:0a:f5:d6:b3:57: 39:59:19:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziTf/EwydyGOKT+Lk971eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzYTVjYTE1YmMyM2MzMjVmMTM0MWU5ODg5ZDg1OGI4ZWQ3 NmQ3NGUwHhcNMjUxMjA2MTIwMDQ3WhcNMjUxMjA3MTIwMDQ3WjAzMTEwLwYDVQQD EyhmMmM1YjA2NDllYWNkNTY5ZDc2YWE1MWZjZmU1MjBkNzk4OGIyNmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjM05vg1p2Pctdcc6yltHk2/5ks5c SkPGASZuxNtyVqML7EhnicprDMUykgpXyfy6xMIJwC77tCBTwCRN604GhJDg6vU6 smzE3DciF3+NFM2nHdpqTfwulqqVGeJQGJ9czdfQkRs2aJ5SPzhuW94SjhcuYFL4 B9FFryV3QnTwBjyAirBRB0QYqn9grFjtFc2KO1QgUO3hj5O5dJYasaeNa0VPbBtR GXEdgF/1lTrmDAyC/11r9HyctWQnzl/SPM4rfqKjl/R3Po8UL78N3U6b3yl3SjC8 Y+XoYCeni3hRnTxWYq2Lx3hz5JibsYN/upF+6N85G1JFgDAXZVSJ4Q7hBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPLFsGSerNVp12qlH8/lINeYiybrMB8GA1UdIwQY MBaAFEOlyhW8I8Ml8TQemInYWLjtdtdOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTZYS0Zid2p3eVh4TkI2WWlkaFl1TzEyMTA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi84NzRiZWUtZTcyYS00YmViLTkxZTgt YTk2ZTI2MTAzY2VlLzEvUTZYS0Zid2p3eVh4TkI2WWlkaFl1TzEyMTA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi84NzRiZWUtZTcyYS00YmViLTkxZTgtYTk2ZTI2MTAzY2Vl LzEvUTZYS0Zid2p3eVh4TkI2WWlkaFl1TzEyMTA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW9sga95i sloHuvM+8tB4X8937tStRTmqhzVVV0xUM/i60NxCgSc4Y/qBqMvZpnE0zciU/9gx +dfxW5DbFP/NlP12UwPymfd+7NdB0Xa5qE9QgJVfMSRTwvAFSOVr/F4GwkuGgtBY 888kxnLfcrgcj/Nre6YfnBmMRQaYPdfwOG+GuV1eIfeGH5jqikrT3RFYVeh41fZQ i+xkJPcgU/JMJHj99EuubS9U4464mVQ/ZLSoIm6az/J68/+3gTWAjSb1m6WZWLz+ PAcb6FRnV+Xt5DVjiQM4hpu+9ox+CR48YQbsLychRoZ3t1q/U9Hw5R+jDiiOrTv4 ewr11rNXOVkZ7A== -----END CERTIFICATE-----Generated at Sat Dec 6 18:01:13 2025 by rpki-client