This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft File: Q-BF0CHUiuhhoM5n040VoGdlOjE.mft (raw, json) Hash identifier: DlvDw/dueSTeu/5bwh1WePPB0nrOnUsMtvmoPuSk5tA= Subject key identifier: E3:22:21:F7:71:E0:E2:35:CA:E7:06:0F:D4:CE:99:7E:60:39:DD:FF Authority key identifier: 43:E0:45:D0:21:D4:8A:E8:61:A0:CE:67:D3:8D:15:A0:67:65:3A:31 Certificate issuer: /CN=43e045d021d48ae861a0ce67d38d15a067653a31 Certificate serial: 019AF164169209EF3F87EA8F40113F7BCDC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft Manifest number: 0D4F Signing time: Sat 06 Dec 2025 02:00:59 +0000 Manifest this update: Sat 06 Dec 2025 02:00:59 +0000 Manifest next update: Sun 07 Dec 2025 02:00:59 +0000 Files and hashes: 1: Q-BF0CHUiuhhoM5n040VoGdlOjE.crl (hash: XVUz9e89W9agicvl5+lzfB0tvDfocN5GwYolSAaqW9M=) 2: XNqUza-1RrV34b84oczapxMF-Cs.roa (hash: Cr97r6Z1ePJazya6FJNCZUabXsw1/WFse2z8LJYuBQ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:16:92:09:ef:3f:87:ea:8f:40:11:3f:7b:cd:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43e045d021d48ae861a0ce67d38d15a067653a31 Validity Not Before: Dec 6 02:00:59 2025 GMT Not After : Dec 7 02:00:59 2025 GMT Subject: CN=e32221f771e0e235cae7060fd4ce997e6039ddff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b2:10:da:ab:72:07:b3:ff:6a:eb:fa:0b:cd: 89:88:76:16:d3:ad:a3:d7:ce:0e:b7:46:07:cf:aa: bb:a2:ce:4a:c3:5c:36:42:a3:d2:0e:b3:fb:a2:04: 96:b0:ef:16:c0:8c:42:17:75:64:13:e1:9b:6c:ea: 10:a7:b8:54:7a:72:8e:ef:cf:90:ef:a3:64:18:04: 50:aa:fe:94:9e:15:aa:d2:ef:e9:67:ab:f5:0a:2a: c4:74:ae:2b:f5:73:00:06:87:e7:26:d6:76:02:38: 56:90:05:ba:d4:98:66:09:35:82:45:0a:5c:c0:bb: c0:f3:2f:36:a2:75:16:fa:60:ff:01:4a:e7:e1:76: da:97:9c:60:60:2e:8b:1f:f1:f5:49:c1:36:34:8d: fa:cf:cb:92:7f:ab:c1:9a:a9:e1:c7:2a:85:5f:26: 38:c1:c1:37:ad:26:98:f1:05:e1:d5:b2:86:d6:6a: c3:66:fd:9f:8d:ae:c2:aa:54:11:e7:c7:02:d2:66: 6f:d5:97:cf:35:fb:e2:76:bb:ac:1a:5e:cb:cc:14: 96:74:0a:90:f9:3b:75:e0:8c:20:e4:c1:55:54:05: d2:3a:bf:88:8c:e4:bd:d1:9c:47:6e:ac:c0:0a:4e: 02:30:d9:47:6e:c2:1b:d5:2b:cc:67:5a:19:a9:55: fe:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:22:21:F7:71:E0:E2:35:CA:E7:06:0F:D4:CE:99:7E:60:39:DD:FF X509v3 Authority Key Identifier: keyid:43:E0:45:D0:21:D4:8A:E8:61:A0:CE:67:D3:8D:15:A0:67:65:3A:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:31:99:d7:7a:02:39:a1:2e:6c:28:7f:d5:ac:5f:a3:dc:70: 79:9f:bb:af:77:c5:e0:16:44:40:21:5d:5a:20:4b:8d:fd:aa: 9a:80:f4:c8:91:4a:ce:60:cc:c0:d7:6a:3a:19:79:b7:eb:ff: e2:be:e5:67:1a:48:2e:97:79:2f:f8:87:75:03:b5:0d:27:d3: 16:31:c7:14:30:42:c1:6d:1f:39:99:0c:75:76:eb:60:6c:b8: 3b:ec:8b:52:16:80:75:7d:cc:45:fb:30:88:c2:5b:0f:56:0a: 81:20:c4:29:86:c9:20:74:70:f1:f1:fd:4d:d0:fc:5b:40:ed: a5:bc:25:69:bf:98:8e:53:11:d9:50:15:e4:04:8c:e9:6b:79: ed:e4:da:40:2c:c8:91:98:5b:b0:0a:9d:50:d6:ee:63:59:29: b1:2a:31:37:e4:d5:c2:d9:8a:fb:bb:19:9f:d8:a9:4d:ab:2b: b7:c7:21:6b:aa:85:66:86:18:4f:66:a8:ed:e8:4c:c3:c3:b2: d0:ed:0f:71:b0:e2:f4:9c:93:5a:f8:c0:9b:87:10:bb:cd:a6: 52:24:72:bc:17:12:c6:60:34:ba:4f:de:43:8b:54:ad:8c:6c: e5:92:b5:ba:6f:8d:b7:15:de:3c:ca:88:3a:58:9c:50:11:c3: 51:16:0d:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZBaSCe8/h+qPQBE/e83EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZTA0NWQwMjFkNDhhZTg2MWEwY2U2N2QzOGQxNWEwNjc2 NTNhMzEwHhcNMjUxMjA2MDIwMDU5WhcNMjUxMjA3MDIwMDU5WjAzMTEwLwYDVQQD EyhlMzIyMjFmNzcxZTBlMjM1Y2FlNzA2MGZkNGNlOTk3ZTYwMzlkZGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLIQ2qtyB7P/auv6C82JiHYW062j 184Ot0YHz6q7os5Kw1w2QqPSDrP7ogSWsO8WwIxCF3VkE+GbbOoQp7hUenKO78+Q 76NkGARQqv6UnhWq0u/pZ6v1CirEdK4r9XMABofnJtZ2AjhWkAW61JhmCTWCRQpc wLvA8y82onUW+mD/AUrn4Xbal5xgYC6LH/H1ScE2NI36z8uSf6vBmqnhxyqFXyY4 wcE3rSaY8QXh1bKG1mrDZv2fja7CqlQR58cC0mZv1ZfPNfvidrusGl7LzBSWdAqQ +Tt14Iwg5MFVVAXSOr+IjOS90ZxHbqzACk4CMNlHbsIb1SvMZ1oZqVX+0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOMiIfdx4OI1yucGD9TOmX5gOd3/MB8GA1UdIwQY MBaAFEPgRdAh1IroYaDOZ9ONFaBnZToxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUS1CRjBDSFVpdWhob001bjA0MFZvR2RsT2pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi84ZjU3M2ItZGM4ZC00ODc2LWJjYTIt M2IwMmM5OWM3MzNiLzEvUS1CRjBDSFVpdWhob001bjA0MFZvR2RsT2pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi84ZjU3M2ItZGM4ZC00ODc2LWJjYTItM2IwMmM5OWM3MzNi LzEvUS1CRjBDSFVpdWhob001bjA0MFZvR2RsT2pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQjGZ13oC OaEubCh/1axfo9xweZ+7r3fF4BZEQCFdWiBLjf2qmoD0yJFKzmDMwNdqOhl5t+v/ 4r7lZxpILpd5L/iHdQO1DSfTFjHHFDBCwW0fOZkMdXbrYGy4O+yLUhaAdX3MRfsw iMJbD1YKgSDEKYbJIHRw8fH9TdD8W0Dtpbwlab+YjlMR2VAV5ASM6Wt57eTaQCzI kZhbsAqdUNbuY1kpsSoxN+TVwtmK+7sZn9ipTasrt8cha6qFZoYYT2ao7ehMw8Oy 0O0PcbDi9JyTWvjAm4cQu82mUiRyvBcSxmA0uk/eQ4tUrYxs5ZK1um+NtxXePMqI OlicUBHDURYNqA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:25:46 2025 by rpki-client