This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft File: Q1lOVdyWy5uYClKqY35IqNhzicA.mft (raw, json) Hash identifier: JmwQoiysyPkD9Cynscqm9LEWpZnc3y4I9azAjvJvhcU= Subject key identifier: DD:2B:F5:83:D9:33:5D:69:A0:AA:BE:8B:5E:C0:55:36:FC:26:08:23 Authority key identifier: 43:59:4E:55:DC:96:CB:9B:98:0A:52:AA:63:7E:48:A8:D8:73:89:C0 Certificate issuer: /CN=43594e55dc96cb9b980a52aa637e48a8d87389c0 Certificate serial: 019AF38A0F07B36094D0C5BAEEBC0581E399 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1lOVdyWy5uYClKqY35IqNhzicA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 12:01:42 +0000 Manifest this update: Sat 06 Dec 2025 12:01:42 +0000 Manifest next update: Sun 07 Dec 2025 12:01:42 +0000 Files and hashes: 1: Hw_YSikfvPxyjT0Axd5BlNhcASU.roa (hash: r5NiDKMzZzkd/HZAp6j3JOaexr/ITFnq6zXIPbUaL0k=) 2: Q1lOVdyWy5uYClKqY35IqNhzicA.crl (hash: pc/m8/+WJxkEy1hXY3uHGRf7vXfvtkKyld7LRjq7wzM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft rsync://rpki.ripe.net/repository/DEFAULT/Q1lOVdyWy5uYClKqY35IqNhzicA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:8a:0f:07:b3:60:94:d0:c5:ba:ee:bc:05:81:e3:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43594e55dc96cb9b980a52aa637e48a8d87389c0 Validity Not Before: Dec 6 12:01:42 2025 GMT Not After : Dec 7 12:01:42 2025 GMT Subject: CN=dd2bf583d9335d69a0aabe8b5ec05536fc260823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:53:c1:1c:e5:aa:01:d1:b6:31:f5:5e:88:16: f5:d1:af:32:fe:57:c4:8d:c5:79:2c:af:b5:67:f9: f4:10:cc:de:3f:7a:31:c5:73:b2:6d:a5:aa:65:a4: 5f:63:7c:d9:b9:61:db:24:1c:48:d3:e1:01:fc:f2: 8f:bc:9b:29:13:a4:98:98:88:27:07:37:77:9a:0e: 29:21:90:16:d1:a2:f9:7d:d4:f6:5a:e0:ef:12:b2: 73:57:c4:21:f2:3e:11:11:69:0e:61:ca:8a:33:7b: f2:96:86:df:cc:fe:be:e1:e0:ff:8e:60:fd:c3:d2: 32:fd:36:1f:f4:bf:84:f0:04:6a:eb:96:fa:3c:e2: 0b:fb:e5:c4:8f:ae:fb:f7:dc:51:8e:4c:f7:d3:e4: 2b:c2:fd:e3:a8:03:65:cf:42:6e:45:33:fc:3f:c6: 23:63:b9:7a:42:e0:7a:1c:fb:34:30:4f:42:9a:44: f6:27:6a:bd:d0:9f:71:25:cc:d0:dc:8e:03:cd:e1: e9:28:ac:83:bc:7d:dd:94:12:b4:be:f8:16:4c:24: e4:d6:4f:2f:d7:ad:1f:88:9e:5b:12:18:59:be:14: fd:9f:ad:2d:4f:91:a3:ba:c5:c0:a5:e4:f1:11:18: fa:b4:00:69:9f:b4:e3:59:55:93:9a:51:04:1e:58: 8a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:2B:F5:83:D9:33:5D:69:A0:AA:BE:8B:5E:C0:55:36:FC:26:08:23 X509v3 Authority Key Identifier: keyid:43:59:4E:55:DC:96:CB:9B:98:0A:52:AA:63:7E:48:A8:D8:73:89:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1lOVdyWy5uYClKqY35IqNhzicA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:b7:50:a5:7b:a4:f2:27:f6:94:61:6f:bb:5b:7d:8d:c5:2b: 64:0f:f0:ae:97:16:a9:3a:dc:ee:4c:e2:b7:2d:8c:c0:a5:92: f9:cf:5c:c7:cc:73:04:d3:9f:dc:26:f8:07:2c:cb:21:9a:f1: 8d:9e:a3:ef:8e:2b:25:e4:10:6b:72:33:2c:ad:39:ed:2a:71: 17:68:f7:87:08:5d:46:16:d7:b9:68:3e:88:4f:8f:da:22:22: ee:2a:0e:d6:b3:68:78:7f:96:0b:34:f5:68:fa:3f:cf:32:2a: 11:3b:2b:d0:a5:e0:bb:b2:d1:06:59:53:35:eb:b8:c7:f9:cb: 90:1c:89:2d:f7:40:07:2d:5b:a1:77:98:75:72:f0:6d:26:66: 92:7b:e2:1d:83:cf:a7:d1:c2:67:cb:75:cb:a3:8f:15:5f:15: ad:41:4a:f5:a8:6b:d3:64:4f:ad:c6:3c:8b:4b:10:20:de:f9: 21:2e:32:39:ef:e0:93:20:88:bd:b9:0d:93:f4:31:63:e6:23: 71:8c:37:2b:bf:5b:0c:6a:3c:73:ab:21:7e:1b:69:5e:45:d4: 11:c1:a3:64:27:90:3f:46:8d:9a:81:77:a0:1d:44:d1:98:e9: a9:12:1a:88:34:39:4a:50:8d:40:81:67:00:e6:e2:6b:93:a1: aa:7b:f8:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzig8Hs2CU0MW67rwFgeOZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzNTk0ZTU1ZGM5NmNiOWI5ODBhNTJhYTYzN2U0OGE4ZDg3 Mzg5YzAwHhcNMjUxMjA2MTIwMTQyWhcNMjUxMjA3MTIwMTQyWjAzMTEwLwYDVQQD EyhkZDJiZjU4M2Q5MzM1ZDY5YTBhYWJlOGI1ZWMwNTUzNmZjMjYwODIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVPBHOWqAdG2MfVeiBb10a8y/lfE jcV5LK+1Z/n0EMzeP3oxxXOybaWqZaRfY3zZuWHbJBxI0+EB/PKPvJspE6SYmIgn Bzd3mg4pIZAW0aL5fdT2WuDvErJzV8Qh8j4REWkOYcqKM3vylobfzP6+4eD/jmD9 w9Iy/TYf9L+E8ARq65b6POIL++XEj67799xRjkz30+Qrwv3jqANlz0JuRTP8P8Yj Y7l6QuB6HPs0ME9CmkT2J2q90J9xJczQ3I4DzeHpKKyDvH3dlBK0vvgWTCTk1k8v 160fiJ5bEhhZvhT9n60tT5GjusXApeTxERj6tABpn7TjWVWTmlEEHliKNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN0r9YPZM11poKq+i17AVTb8JggjMB8GA1UdIwQY MBaAFENZTlXclsubmApSqmN+SKjYc4nAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTFsT1ZkeVd5NXVZQ2xLcVkzNUlxTmh6aWNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84NWUxMjUtODVkNi00M2YwLTk4YmYt ZDhmYTBlZGEzYWJlLzEvUTFsT1ZkeVd5NXVZQ2xLcVkzNUlxTmh6aWNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS84NWUxMjUtODVkNi00M2YwLTk4YmYtZDhmYTBlZGEzYWJl LzEvUTFsT1ZkeVd5NXVZQ2xLcVkzNUlxTmh6aWNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT7dQpXuk 8if2lGFvu1t9jcUrZA/wrpcWqTrc7kzity2MwKWS+c9cx8xzBNOf3Cb4ByzLIZrx jZ6j744rJeQQa3IzLK057SpxF2j3hwhdRhbXuWg+iE+P2iIi7ioO1rNoeH+WCzT1 aPo/zzIqETsr0KXgu7LRBllTNeu4x/nLkByJLfdABy1boXeYdXLwbSZmknviHYPP p9HCZ8t1y6OPFV8VrUFK9ahr02RPrcY8i0sQIN75IS4yOe/gkyCIvbkNk/QxY+Yj cYw3K79bDGo8c6shfhtpXkXUEcGjZCeQP0aNmoF3oB1E0ZjpqRIaiDQ5SlCNQIFn AObia5Ohqnv48w== -----END CERTIFICATE-----Generated at Sat Dec 6 21:20:00 2025 by rpki-client