This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft File: Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft (raw, json) Hash identifier: 7BPAedY0FgSFCi6R06rmR0iwphkzTbIT28OMJZTwXMs= Subject key identifier: 22:26:63:98:FD:9C:8C:0D:C7:C5:A4:AA:01:2A:D1:DC:67:22:F7:51 Authority key identifier: 43:D9:4E:06:87:16:09:CC:1F:81:5A:56:DE:5C:9F:AF:6D:57:D5:84 Certificate issuer: /CN=43d94e06871609cc1f815a56de5c9faf6d57d584 Certificate serial: 019AF0F5EFD890731EBD9AB21EA0F3A683C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 00:00:40 +0000 Manifest this update: Sat 06 Dec 2025 00:00:40 +0000 Manifest next update: Sun 07 Dec 2025 00:00:40 +0000 Files and hashes: 1: Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl (hash: SDMe7ahqmA3tC6Pvgxq/bJ+Erf1eROOF/+i7SVfvRhU=) 2: pFcInvEW15iKWvoPMx5EVwuCano.roa (hash: nE+nXG0xZdbwspGUmTTrOhLDVrJyA6M8TZL//6qKpZc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:ef:d8:90:73:1e:bd:9a:b2:1e:a0:f3:a6:83:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43d94e06871609cc1f815a56de5c9faf6d57d584 Validity Not Before: Dec 6 00:00:40 2025 GMT Not After : Dec 7 00:00:40 2025 GMT Subject: CN=22266398fd9c8c0dc7c5a4aa012ad1dc6722f751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:51:b8:44:1f:3b:86:f9:ce:b4:79:74:f1:79: 10:b1:d8:0b:d7:ff:54:62:5d:86:bb:14:8e:46:26: d5:2f:57:59:8c:bf:d8:89:24:5e:c0:f2:2a:01:02: f1:73:39:d8:a5:ab:94:05:73:17:f9:50:a2:da:3d: 30:00:73:e0:b7:7b:58:ee:d8:75:b9:81:63:d9:5b: 3f:97:66:57:65:e2:ee:74:c4:90:05:18:07:ef:26: fa:6e:d9:33:7e:c5:ed:30:73:15:b3:79:fe:09:61: 36:8d:27:81:5d:35:05:0a:8c:3e:3b:b6:1c:fc:b5: 13:5a:df:26:2e:59:18:08:bf:05:0a:fb:ac:0e:96: 3a:08:9a:db:74:a4:d9:14:3e:3f:85:df:04:bc:60: 4f:29:a6:30:79:a3:8b:7c:21:b5:0c:d5:48:76:d7: 91:42:df:2b:fa:ab:16:7a:ec:a3:27:87:28:91:89: a8:b8:a0:58:2d:13:79:40:a1:ae:a0:f7:54:74:0f: de:ad:50:2e:83:7d:fe:82:76:eb:b3:5e:fb:41:c2: b2:c3:03:a8:72:ed:9a:53:2d:72:f4:77:d8:8f:4e: 52:10:13:3a:20:3a:4d:18:3d:5e:85:c0:02:c6:8b: a5:ac:0e:1e:c2:51:6d:b9:ef:7c:12:b0:8b:95:08: 1a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:26:63:98:FD:9C:8C:0D:C7:C5:A4:AA:01:2A:D1:DC:67:22:F7:51 X509v3 Authority Key Identifier: keyid:43:D9:4E:06:87:16:09:CC:1F:81:5A:56:DE:5C:9F:AF:6D:57:D5:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:24:34:2d:f7:2d:d0:5d:09:a5:8e:ca:42:06:78:39:a4:a1: da:65:43:ba:f0:a9:88:0b:f8:45:2a:cc:89:41:0c:cc:2b:cb: 62:a9:46:4f:f7:e4:e0:94:2c:b9:6b:ba:17:c5:a8:11:00:af: 91:74:ff:c1:20:de:f9:a5:4b:fd:d1:aa:f9:4b:0c:26:64:c2: 4c:c9:0d:5e:80:26:ed:28:d8:90:01:9c:60:02:f3:ef:76:88: 6e:01:c6:74:a2:7a:09:f1:4d:fd:40:52:b9:7b:11:35:1d:65: c1:e2:a0:87:14:6c:fd:e9:4f:16:88:41:38:19:da:7b:c3:9a: 3a:78:5d:cf:ea:47:c9:4c:77:33:07:57:e4:48:00:7b:58:d6: be:03:62:0d:ee:ab:9f:32:6f:d0:14:10:d1:29:52:b9:01:83: 3c:fa:20:e4:fa:7a:64:df:06:60:9e:46:df:92:28:0c:e9:cf: 49:28:00:5e:05:25:29:7b:aa:18:fe:62:d7:01:57:5e:98:bc: 37:d0:a5:5c:b0:d3:32:ae:63:d2:41:c0:a4:b7:1e:8c:a1:fd: 6a:45:3b:82:8e:c1:c6:a6:73:e7:d5:79:30:80:8e:89:68:2d: e3:f5:38:6b:02:48:7c:2d:a8:49:de:f6:9d:4f:1c:d6:68:5f: c0:44:29:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9e/YkHMevZqyHqDzpoPGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZDk0ZTA2ODcxNjA5Y2MxZjgxNWE1NmRlNWM5ZmFmNmQ1 N2Q1ODQwHhcNMjUxMjA2MDAwMDQwWhcNMjUxMjA3MDAwMDQwWjAzMTEwLwYDVQQD EygyMjI2NjM5OGZkOWM4YzBkYzdjNWE0YWEwMTJhZDFkYzY3MjJmNzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolG4RB87hvnOtHl08XkQsdgL1/9U Yl2GuxSORibVL1dZjL/YiSRewPIqAQLxcznYpauUBXMX+VCi2j0wAHPgt3tY7th1 uYFj2Vs/l2ZXZeLudMSQBRgH7yb6btkzfsXtMHMVs3n+CWE2jSeBXTUFCow+O7Yc /LUTWt8mLlkYCL8FCvusDpY6CJrbdKTZFD4/hd8EvGBPKaYweaOLfCG1DNVIdteR Qt8r+qsWeuyjJ4cokYmouKBYLRN5QKGuoPdUdA/erVAug33+gnbrs177QcKywwOo cu2aUy1y9HfYj05SEBM6IDpNGD1ehcACxoulrA4ewlFtue98ErCLlQgarQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCImY5j9nIwNx8WkqgEq0dxnIvdRMB8GA1UdIwQY MBaAFEPZTgaHFgnMH4FaVt5cn69tV9WEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTlsT0JvY1dDY3dmZ1ZwVzNseWZyMjFYMVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8zMjEzZDMtY2QxYS00NjRkLTkxOGQt MmQ2MjZhY2I3ODMzLzEvUTlsT0JvY1dDY3dmZ1ZwVzNseWZyMjFYMVlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8zMjEzZDMtY2QxYS00NjRkLTkxOGQtMmQ2MjZhY2I3ODMz LzEvUTlsT0JvY1dDY3dmZ1ZwVzNseWZyMjFYMVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKyQ0Lfct 0F0JpY7KQgZ4OaSh2mVDuvCpiAv4RSrMiUEMzCvLYqlGT/fk4JQsuWu6F8WoEQCv kXT/wSDe+aVL/dGq+UsMJmTCTMkNXoAm7SjYkAGcYALz73aIbgHGdKJ6CfFN/UBS uXsRNR1lweKghxRs/elPFohBOBnae8OaOnhdz+pHyUx3MwdX5EgAe1jWvgNiDe6r nzJv0BQQ0SlSuQGDPPog5Pp6ZN8GYJ5G35IoDOnPSSgAXgUlKXuqGP5i1wFXXpi8 N9ClXLDTMq5j0kHApLcejKH9akU7go7BxqZz59V5MICOiWgt4/U4awJIfC2oSd72 nU8c1mhfwEQp2w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:03:22 2025 by rpki-client