This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft File: Q68umH0rY63apa3BePMekNh2qqc.mft (raw, json) Hash identifier: BQXa2KeW0mtwDAmdqGVhnTv2FkISqVU1fSapmgVQN1M= Subject key identifier: D2:EB:B0:2C:5E:6F:36:A0:C7:83:85:2C:73:DE:0D:41:13:D2:9D:0C Authority key identifier: 43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7 Certificate issuer: /CN=43af2e987d2b63addaa5adc178f31e90d876aaa7 Certificate serial: 019AF23FC039343636F874D91CC59970AD7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 06:00:55 +0000 Manifest this update: Sat 06 Dec 2025 06:00:55 +0000 Manifest next update: Sun 07 Dec 2025 06:00:55 +0000 Files and hashes: 1: 71gvIX06FZhti5C8KqbG-iL3ji8.roa (hash: ixliMnZsbefklIbCdZSQC08KvvVc2/x3CDK+CGl2CBA=) 2: IEgYKG7Z6QdmhTg8jbadzlqUL0A.roa (hash: czHiBi7aC7gYGx6TuroDY+vPvsviuucmLi9+d2nYML8=) 3: N7dkJGPV_ClH0zdsWhUXQhLf-fI.roa (hash: 61rIBj7suoaRe9FEYDOMgKbW4Bfv19fnscul85uRvy8=) 4: Q68umH0rY63apa3BePMekNh2qqc.crl (hash: JNd2zIYJ8MAbBlRmqDEqp83eeekzEjc70WWXwzyl3wk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:c0:39:34:36:36:f8:74:d9:1c:c5:99:70:ad:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43af2e987d2b63addaa5adc178f31e90d876aaa7 Validity Not Before: Dec 6 06:00:55 2025 GMT Not After : Dec 7 06:00:55 2025 GMT Subject: CN=d2ebb02c5e6f36a0c783852c73de0d4113d29d0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d2:30:ec:60:c8:6c:1a:84:11:c5:4f:3b:a8: d1:e2:71:04:67:9e:0b:b8:5f:5b:f6:00:c7:37:92: c2:e1:87:d7:f6:c1:e1:4b:f1:35:d5:95:2c:a3:12: 83:91:e3:38:d9:d0:c2:48:c7:f3:cc:b8:b1:7f:d1: e3:89:75:de:dc:0a:b7:45:a9:37:23:18:ca:74:7d: a2:24:4d:fe:f8:a2:1e:00:3f:72:ff:cd:ae:4c:55: da:fc:45:03:e1:02:c4:a3:67:81:aa:6a:73:08:e2: 49:2b:10:9c:15:8c:26:c2:6e:16:1f:14:06:df:72: 62:c8:0a:d0:b6:46:c6:cd:c0:3c:30:5b:d7:78:fa: 7a:70:39:49:2f:90:45:ce:d2:44:c3:a3:f7:30:c5: 84:58:7d:7d:48:43:44:b5:f0:6c:49:d4:9b:2c:4a: 93:17:83:e9:16:08:e4:75:2d:4a:b0:84:7b:3a:f4: 73:5d:d5:c3:9e:ec:b7:fe:a8:0a:b7:77:2a:2d:9c: 50:e0:0f:a0:4a:fb:7e:ed:f9:56:1b:fa:80:2b:9a: ba:52:80:c3:55:0b:d2:8b:29:4f:21:9d:16:73:b0: ba:3e:94:e0:0d:10:13:b4:6b:45:f6:1f:37:5a:62: 21:8e:5c:10:7c:2c:30:31:d0:4d:a6:58:26:de:36: 8f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:EB:B0:2C:5E:6F:36:A0:C7:83:85:2C:73:DE:0D:41:13:D2:9D:0C X509v3 Authority Key Identifier: keyid:43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:ef:7a:e3:66:5c:ef:2d:c5:dd:8d:96:08:83:cf:7b:eb:88: d4:0b:b1:e8:71:7a:6b:65:1c:30:3e:90:64:85:ae:f5:0a:68: d7:28:22:a2:07:2b:5f:c9:16:21:77:eb:06:89:46:29:fc:d0: a0:ae:f3:89:b1:40:39:2b:ad:2c:b1:d4:3c:31:3b:5b:b2:5d: d6:8a:6b:77:4e:b6:d8:03:09:92:10:5a:9e:ef:ce:00:65:9c: 87:fa:76:20:e8:ee:84:c4:46:4c:7a:a6:6c:3f:19:d6:4a:42: 30:eb:95:95:ad:50:c4:2a:29:26:72:72:5a:cd:8b:d1:ba:e5: 8f:b8:0d:7b:2a:69:23:09:52:0a:4c:4b:36:c4:dd:15:e8:f1: b1:d2:4c:65:6a:c5:4e:42:ef:64:73:4e:5c:37:e5:61:6d:08: 4a:4d:07:84:a6:6a:d7:a3:47:ca:c1:80:76:b7:02:e8:1f:36: e1:18:c7:e0:43:f2:97:29:b1:46:c1:cb:11:2c:8b:f9:81:3d: bb:1f:52:10:db:db:92:df:f3:d0:d5:ee:f5:85:5a:4b:63:66: 29:44:76:13:be:3b:7f:93:75:db:6a:98:71:cf:a8:db:6f:43: 6c:d6:bd:47:6d:fb:d7:f5:8b:2c:85:b2:4e:04:ed:e9:31:25: 97:b1:15:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP8A5NDY2+HTZHMWZcK16MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzYWYyZTk4N2QyYjYzYWRkYWE1YWRjMTc4ZjMxZTkwZDg3 NmFhYTcwHhcNMjUxMjA2MDYwMDU1WhcNMjUxMjA3MDYwMDU1WjAzMTEwLwYDVQQD EyhkMmViYjAyYzVlNmYzNmEwYzc4Mzg1MmM3M2RlMGQ0MTEzZDI5ZDBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNIw7GDIbBqEEcVPO6jR4nEEZ54L uF9b9gDHN5LC4YfX9sHhS/E11ZUsoxKDkeM42dDCSMfzzLixf9HjiXXe3Aq3Rak3 IxjKdH2iJE3++KIeAD9y/82uTFXa/EUD4QLEo2eBqmpzCOJJKxCcFYwmwm4WHxQG 33JiyArQtkbGzcA8MFvXePp6cDlJL5BFztJEw6P3MMWEWH19SENEtfBsSdSbLEqT F4PpFgjkdS1KsIR7OvRzXdXDnuy3/qgKt3cqLZxQ4A+gSvt+7flWG/qAK5q6UoDD VQvSiylPIZ0Wc7C6PpTgDRATtGtF9h83WmIhjlwQfCwwMdBNplgm3jaP5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNLrsCxebzagx4OFLHPeDUET0p0MMB8GA1UdIwQY MBaAFEOvLph9K2Ot2qWtwXjzHpDYdqqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTY4dW1IMHJZNjNhcGEzQmVQTWVrTmgycXFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82Njg0MzctOTdjMi00OGMyLWI3Yzgt Y2M3NzQ2NzE5NDA2LzEvUTY4dW1IMHJZNjNhcGEzQmVQTWVrTmgycXFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi82Njg0MzctOTdjMi00OGMyLWI3YzgtY2M3NzQ2NzE5NDA2 LzEvUTY4dW1IMHJZNjNhcGEzQmVQTWVrTmgycXFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAku9642Zc 7y3F3Y2WCIPPe+uI1Aux6HF6a2UcMD6QZIWu9Qpo1ygiogcrX8kWIXfrBolGKfzQ oK7zibFAOSutLLHUPDE7W7Jd1oprd0622AMJkhBanu/OAGWch/p2IOjuhMRGTHqm bD8Z1kpCMOuVla1QxCopJnJyWs2L0brlj7gNeyppIwlSCkxLNsTdFejxsdJMZWrF TkLvZHNOXDflYW0ISk0HhKZq16NHysGAdrcC6B824RjH4EPylymxRsHLESyL+YE9 ux9SENvbkt/z0NXu9YVaS2NmKUR2E747f5N122qYcc+o229DbNa9R2371/WLLIWy TgTt6TEll7EVoQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:06:35 2025 by rpki-client