This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft File: Q8FllZZq-wus8deTfyRdagUiIaM.mft (raw, json) Hash identifier: lmQDR+Dz2nVbCXorPF7MyplgMSjlMHqGnx7PMNOGVjU= Subject key identifier: 89:FB:74:CB:0A:AC:D1:49:63:EF:36:90:83:E0:24:18:15:6D:CB:E0 Authority key identifier: 43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3 Certificate issuer: /CN=43c16595966afb0bacf1d7937f245d6a052221a3 Certificate serial: 019AF208F079C8D2346FFFCBDD8EF9006D00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 05:01:03 +0000 Manifest this update: Sat 06 Dec 2025 05:01:03 +0000 Manifest next update: Sun 07 Dec 2025 05:01:03 +0000 Files and hashes: 1: 52v68hN6UT4PPJjjqq1uuE_KUSs.roa (hash: /ZapQrg7UEXSt0NcWwZ+kj+0zgSiaiRBd7g+qhPDHBg=) 2: 8S9ibO6esCTeLY2sD14WhmMZOvI.roa (hash: bmTNDF41Sq+c7Se/EWf8YA8iGIHNg20TI2zfC/lGrO0=) 3: Q8FllZZq-wus8deTfyRdagUiIaM.crl (hash: +xqpLnbxTWyZmbQ7SWBNBAAAyw2xn1zbIugq5Hett8o=) 4: WvCj9VbsFj7fqJOx6tk2wit_WpE.roa (hash: /cLe2CDT0v+6sDR4E14KbBpNPCZZWPI/9CgtItdZn+0=) 5: a5Civ4TQY8vU2rue9PuRjdGc5Mc.roa (hash: QP4yk7Jx/AL7wrs9Y5ybfTghTEkjk/U3Nsn5OFbBsqk=) 6: gqvKWohVcj0Z7jlOtSMQwdCwp3g.roa (hash: hvyUYeos7vf6+TZ2NgvLPFstgzyNO3xqXZO7/gB/Dow=) 7: i6WUIDE1FurqyNNZ1EYEHsIVqvc.roa (hash: n8PwD1+DrWnTVld/M9MqGCrSY8HTEouEds18pHnIKJc=) 8: wcgpIPyLYXjF-mxVtLsqKcIhJUw.roa (hash: fPxLKa63iRiB09wOZmOOW+AEuYUUjId9x8Px9btJcDE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:f0:79:c8:d2:34:6f:ff:cb:dd:8e:f9:00:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43c16595966afb0bacf1d7937f245d6a052221a3 Validity Not Before: Dec 6 05:01:03 2025 GMT Not After : Dec 7 05:01:03 2025 GMT Subject: CN=89fb74cb0aacd14963ef369083e02418156dcbe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:af:60:92:af:96:f4:62:a2:d9:e5:4c:ec:ea: 8d:f7:d7:0e:fc:5d:d7:35:ea:1a:cb:1c:32:3b:61: e8:8c:fd:4e:d8:ef:b8:09:f9:d0:1d:81:a0:b2:f5: 14:81:07:8f:65:79:f1:de:fb:5c:cc:d2:ad:03:cc: 64:33:82:99:9e:9e:fb:06:a1:a7:57:45:d0:2f:32: 4a:82:7f:13:28:93:bd:f7:8c:3b:d0:63:21:fc:22: 2d:3b:5d:bd:b8:fb:0d:84:33:29:24:75:96:0e:e9: 58:a8:72:07:74:51:aa:fa:d6:0f:4a:04:dd:00:ff: f5:be:56:a9:40:69:96:91:8e:b6:c8:52:04:0e:6a: 27:eb:bd:48:e3:de:87:2b:1f:e2:8c:8f:2b:dc:37: 82:10:5e:42:5f:97:d8:ff:5c:2c:4d:16:8b:72:c6: db:c1:c0:1c:74:ed:6c:2d:26:b3:67:45:9c:45:71: 59:d4:b5:bb:5b:b7:bf:d7:ca:33:73:e6:ce:92:14: 3f:a7:05:f5:e2:7b:e7:95:ea:62:26:88:d2:34:ba: 51:66:70:d4:b2:40:a0:84:7b:0c:c0:f5:cb:e8:d9: 18:9e:ae:d1:a7:bf:21:e0:8e:39:9f:b8:66:51:4b: c5:27:a2:ba:b3:b1:6e:37:d8:c9:2c:48:81:13:ef: d1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:FB:74:CB:0A:AC:D1:49:63:EF:36:90:83:E0:24:18:15:6D:CB:E0 X509v3 Authority Key Identifier: keyid:43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:df:b7:1b:99:1e:21:85:8d:7a:74:a4:4d:0e:ce:d7:ca:39: 17:8f:90:c0:67:30:b0:14:3b:c4:c7:df:b9:e0:4b:98:50:b5: 9e:9f:dc:50:91:17:d9:bf:a5:ba:ed:da:5d:6c:e8:03:47:b8: 2c:d9:b4:9e:3d:e7:7e:10:1c:e9:23:83:df:00:45:da:59:a1: fd:21:72:01:a1:3d:a6:ea:f5:7d:05:72:5f:a3:f2:c0:2c:3a: ab:ef:93:ca:68:f4:51:67:1d:d4:aa:b3:69:3c:66:0b:64:41: 16:55:1d:64:01:eb:52:a5:46:31:24:a8:ae:fe:fd:37:64:a6: 8a:8e:fa:f6:ba:de:e2:07:f8:9a:d0:7a:c9:26:7f:7d:e5:f9: fa:7d:dc:26:66:cc:ff:28:b0:ce:3d:47:30:19:a1:be:67:50: d5:b7:c7:40:10:78:57:78:9f:6e:ee:98:40:51:53:94:4a:e6: 99:f1:c2:16:95:07:0b:75:ae:ac:b5:6c:20:5e:96:8a:16:72: a6:83:a1:a4:02:3d:f1:33:82:62:d7:dd:8f:a1:fa:87:db:27: 4a:28:9d:08:68:cc:8f:29:36:bb:83:d9:eb:f3:af:6d:b5:76: f1:9e:17:d1:3d:1c:92:22:0a:be:6b:b4:cb:c4:73:1d:3c:5e: 8e:2a:33:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCPB5yNI0b//L3Y75AG0AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzYzE2NTk1OTY2YWZiMGJhY2YxZDc5MzdmMjQ1ZDZhMDUy MjIxYTMwHhcNMjUxMjA2MDUwMTAzWhcNMjUxMjA3MDUwMTAzWjAzMTEwLwYDVQQD Eyg4OWZiNzRjYjBhYWNkMTQ5NjNlZjM2OTA4M2UwMjQxODE1NmRjYmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA469gkq+W9GKi2eVM7OqN99cO/F3X NeoayxwyO2HojP1O2O+4CfnQHYGgsvUUgQePZXnx3vtczNKtA8xkM4KZnp77BqGn V0XQLzJKgn8TKJO994w70GMh/CItO129uPsNhDMpJHWWDulYqHIHdFGq+tYPSgTd AP/1vlapQGmWkY62yFIEDmon671I496HKx/ijI8r3DeCEF5CX5fY/1wsTRaLcsbb wcAcdO1sLSazZ0WcRXFZ1LW7W7e/18ozc+bOkhQ/pwX14nvnlepiJojSNLpRZnDU skCghHsMwPXL6NkYnq7Rp78h4I45n7hmUUvFJ6K6s7FuN9jJLEiBE+/RbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIn7dMsKrNFJY+82kIPgJBgVbcvgMB8GA1UdIwQY MBaAFEPBZZWWavsLrPHXk38kXWoFIiGjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUThGbGxaWnEtd3VzOGRlVGZ5UmRhZ1VpSWFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9kOTI5MTktOTYyYi00NDhkLTk4ZGIt NTk5MGVhNThlMDMwLzEvUThGbGxaWnEtd3VzOGRlVGZ5UmRhZ1VpSWFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9kOTI5MTktOTYyYi00NDhkLTk4ZGItNTk5MGVhNThlMDMw LzEvUThGbGxaWnEtd3VzOGRlVGZ5UmRhZ1VpSWFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADd+3G5ke IYWNenSkTQ7O18o5F4+QwGcwsBQ7xMffueBLmFC1np/cUJEX2b+luu3aXWzoA0e4 LNm0nj3nfhAc6SOD3wBF2lmh/SFyAaE9pur1fQVyX6PywCw6q++Tymj0UWcd1Kqz aTxmC2RBFlUdZAHrUqVGMSSorv79N2Smio769rre4gf4mtB6ySZ/feX5+n3cJmbM /yiwzj1HMBmhvmdQ1bfHQBB4V3ifbu6YQFFTlErmmfHCFpUHC3WurLVsIF6WihZy poOhpAI98TOCYtfdj6H6h9snSiidCGjMjyk2u4PZ6/OvbbV28Z4X0T0ckiIKvmu0 y8RzHTxejiozqQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:20:54 2025 by rpki-client