This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft File: Q68umH0rY63apa3BePMekNh2qqc.mft (raw, json) Hash identifier: 31TUtQq/Xlzk6D5N7L13xdjxSTidSMe6xFvm17Itw5c= Subject key identifier: 85:E4:F2:D0:13:52:5A:19:03:9C:4F:DB:5B:07:84:4B:F6:0E:4C:06 Authority key identifier: 43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7 Certificate issuer: /CN=43af2e987d2b63addaa5adc178f31e90d876aaa7 Certificate serial: 019B31FAD90F2AF08F703DA6B59FC7671293 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft Manifest number: 1786 Signing time: Thu 18 Dec 2025 15:01:21 +0000 Manifest this update: Thu 18 Dec 2025 15:01:21 +0000 Manifest next update: Fri 19 Dec 2025 15:01:21 +0000 Files and hashes: 1: 71gvIX06FZhti5C8KqbG-iL3ji8.roa (hash: ixliMnZsbefklIbCdZSQC08KvvVc2/x3CDK+CGl2CBA=) 2: IEgYKG7Z6QdmhTg8jbadzlqUL0A.roa (hash: czHiBi7aC7gYGx6TuroDY+vPvsviuucmLi9+d2nYML8=) 3: N7dkJGPV_ClH0zdsWhUXQhLf-fI.roa (hash: 61rIBj7suoaRe9FEYDOMgKbW4Bfv19fnscul85uRvy8=) 4: Q68umH0rY63apa3BePMekNh2qqc.crl (hash: HmA6pnpxAjjIT143+aHh6+beixuSFeLZlydsTy20s0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:d9:0f:2a:f0:8f:70:3d:a6:b5:9f:c7:67:12:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43af2e987d2b63addaa5adc178f31e90d876aaa7 Validity Not Before: Dec 18 15:01:21 2025 GMT Not After : Dec 19 15:01:21 2025 GMT Subject: CN=85e4f2d013525a19039c4fdb5b07844bf60e4c06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7b:94:ca:19:7b:1f:80:f9:ba:03:1b:ad:cf: 06:19:ba:81:97:92:e5:23:f5:32:eb:73:93:d0:7f: e2:31:c7:21:53:0f:33:98:fc:57:90:e1:28:8a:d6: 4c:9d:de:cb:13:b5:c9:57:93:c5:19:81:5f:15:df: 6c:40:de:e5:73:15:be:1e:e9:7e:1a:d4:bd:d9:5f: b4:a1:c7:e9:21:2f:cf:75:f5:76:97:c3:8f:a5:4b: c4:28:42:13:8a:ca:b5:4e:fd:ef:96:ce:05:8b:54: 2d:17:bd:7f:79:c3:4c:37:a9:40:b4:b0:47:dc:3b: e5:62:b7:7f:18:d6:94:5a:3e:76:ff:57:ef:d4:77: 88:6e:51:6f:21:3a:fd:6b:35:21:b0:02:97:d3:db: a0:58:35:53:a2:ec:93:9a:7c:d8:44:37:38:eb:dd: a9:cb:e8:19:90:a8:06:cc:e5:3c:af:fc:c0:ba:cb: 69:2d:6f:74:a0:e8:1a:94:3e:95:4d:87:e2:22:bd: 1f:ee:37:d9:e6:73:3f:89:a5:5d:ed:4e:bf:03:da: 1d:c7:14:3f:bc:22:74:15:2e:de:4a:9b:d6:fd:c9: 3d:15:52:0b:cd:85:e9:05:d3:ee:b8:ea:ae:3a:8c: f0:d2:46:6b:05:a1:4e:48:09:e1:08:1e:99:9c:a2: ec:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E4:F2:D0:13:52:5A:19:03:9C:4F:DB:5B:07:84:4B:F6:0E:4C:06 X509v3 Authority Key Identifier: keyid:43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:8e:00:aa:31:c4:cb:11:a6:79:49:31:f5:91:79:cf:c9:61: fc:6e:be:d6:a6:14:c5:6a:81:d4:b2:c0:13:53:6c:a4:be:11: bc:1d:b3:18:44:f8:e7:ca:e6:81:07:e8:58:61:17:85:98:c4: ae:98:f2:ca:74:48:1c:6f:14:8c:bc:9e:b2:e7:aa:2f:5c:47: 75:1d:d9:88:5b:87:b7:95:a3:ad:40:09:90:63:46:93:0f:98: b3:1d:96:ae:c7:37:32:72:f8:35:43:28:2e:1a:06:1f:19:da: dc:71:d7:c1:70:87:63:b2:7f:56:a0:7b:34:60:1e:ab:f9:02: 4f:62:82:6e:07:be:33:06:ef:b9:dc:e4:67:e9:72:cd:5b:f1: ae:5f:19:6e:73:b6:08:40:bb:cb:7d:17:9a:40:79:ab:ed:d3: a3:33:7c:2e:e1:d5:eb:7e:51:83:6a:06:d7:95:42:7c:55:75: a6:48:c3:7b:45:4e:b3:ba:ea:49:66:8e:78:99:ad:3e:3e:3b: 94:98:52:4c:ec:05:3e:ee:96:f3:aa:27:51:d5:9c:b8:0e:84: f4:7a:fe:da:ab:b3:a7:48:24:0f:48:3c:b8:b8:55:36:41:06: 58:85:f0:66:d6:05:e5:ca:87:47:ea:7f:8c:bf:81:ad:fd:84: 35:9c:ff:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsx+tkPKvCPcD2mtZ/HZxKTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzYWYyZTk4N2QyYjYzYWRkYWE1YWRjMTc4ZjMxZTkwZDg3 NmFhYTcwHhcNMjUxMjE4MTUwMTIxWhcNMjUxMjE5MTUwMTIxWjAzMTEwLwYDVQQD Eyg4NWU0ZjJkMDEzNTI1YTE5MDM5YzRmZGI1YjA3ODQ0YmY2MGU0YzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHuUyhl7H4D5ugMbrc8GGbqBl5Ll I/Uy63OT0H/iMcchUw8zmPxXkOEoitZMnd7LE7XJV5PFGYFfFd9sQN7lcxW+Hul+ GtS92V+0ocfpIS/PdfV2l8OPpUvEKEITisq1Tv3vls4Fi1QtF71/ecNMN6lAtLBH 3DvlYrd/GNaUWj52/1fv1HeIblFvITr9azUhsAKX09ugWDVTouyTmnzYRDc4692p y+gZkKgGzOU8r/zAustpLW90oOgalD6VTYfiIr0f7jfZ5nM/iaVd7U6/A9odxxQ/ vCJ0FS7eSpvW/ck9FVILzYXpBdPuuOquOozw0kZrBaFOSAnhCB6ZnKLsHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIXk8tATUloZA5xP21sHhEv2DkwGMB8GA1UdIwQY MBaAFEOvLph9K2Ot2qWtwXjzHpDYdqqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTY4dW1IMHJZNjNhcGEzQmVQTWVrTmgycXFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82Njg0MzctOTdjMi00OGMyLWI3Yzgt Y2M3NzQ2NzE5NDA2LzEvUTY4dW1IMHJZNjNhcGEzQmVQTWVrTmgycXFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi82Njg0MzctOTdjMi00OGMyLWI3YzgtY2M3NzQ2NzE5NDA2 LzEvUTY4dW1IMHJZNjNhcGEzQmVQTWVrTmgycXFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX44AqjHE yxGmeUkx9ZF5z8lh/G6+1qYUxWqB1LLAE1NspL4RvB2zGET458rmgQfoWGEXhZjE rpjyynRIHG8UjLyesueqL1xHdR3ZiFuHt5WjrUAJkGNGkw+Ysx2Wrsc3MnL4NUMo LhoGHxna3HHXwXCHY7J/VqB7NGAeq/kCT2KCbge+MwbvudzkZ+lyzVvxrl8ZbnO2 CEC7y30XmkB5q+3TozN8LuHV635Rg2oG15VCfFV1pkjDe0VOs7rqSWaOeJmtPj47 lJhSTOwFPu6W86onUdWcuA6E9Hr+2quzp0gkD0g8uLhVNkEGWIXwZtYF5cqHR+p/ jL+Brf2ENZz//w== -----END CERTIFICATE-----Generated at Thu Dec 18 22:06:59 2025 by rpki-client