This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft File: Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft (raw, json) Hash identifier: f6uhF9m4guJwZjyKhTQLn/XnjkciMgqcBjU0GI0nAUY= Subject key identifier: BA:FE:C6:C4:37:CA:E8:16:9A:E5:A0:13:92:22:52:CF:6D:7C:DB:22 Authority key identifier: 43:AC:C2:F2:BE:1A:36:B0:89:21:65:44:D2:3C:95:AC:E2:32:E1:43 Certificate issuer: /CN=43acc2f2be1a36b089216544d23c95ace232e143 Certificate serial: 019AF12DACD72B0299300B66D286BBC64677 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft Manifest number: 0AB5 Signing time: Sat 06 Dec 2025 01:01:33 +0000 Manifest this update: Sat 06 Dec 2025 01:01:33 +0000 Manifest next update: Sun 07 Dec 2025 01:01:33 +0000 Files and hashes: 1: KKb3movEaRK5uooL7CLlRng9BxI.roa (hash: QF2heUsD9ZCfGN4fGvk2RN46irWE6FgEYevma5ik6/E=) 2: Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl (hash: T2cCr1tZ5gq8L0XHTgctq4Yn8Qu3WQ27MyDm5hI8dSc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:ac:d7:2b:02:99:30:0b:66:d2:86:bb:c6:46:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43acc2f2be1a36b089216544d23c95ace232e143 Validity Not Before: Dec 6 01:01:33 2025 GMT Not After : Dec 7 01:01:33 2025 GMT Subject: CN=bafec6c437cae8169ae5a013922252cf6d7cdb22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:82:51:22:44:91:e9:0a:d3:98:3a:44:8e:96: ab:61:57:04:6a:d1:26:ec:b4:02:82:16:43:6e:72: 5c:0a:f9:39:dd:37:8f:e2:c6:4c:db:23:d1:1a:97: aa:a0:af:9c:fd:27:94:fc:23:1f:b0:6e:a5:8f:06: 39:bf:73:36:86:29:8e:ca:ba:67:f9:f4:2b:64:01: bd:74:f7:3a:d3:53:27:3b:f8:be:74:14:1a:7e:0a: ab:6f:9f:94:a3:df:b6:40:03:2e:49:c6:9c:f7:fd: d9:3d:f2:6a:ba:a6:f0:1a:cd:5a:0f:69:da:7b:9c: a0:0d:59:51:34:6e:a3:00:5c:b0:ef:82:6b:5d:5c: da:2c:fa:14:14:91:cc:6c:ab:c4:80:79:c5:f0:13: 70:47:fa:99:46:0d:99:4a:0b:95:5a:c2:60:98:e9: 16:90:79:9d:3d:ce:4a:0f:9b:cd:ec:41:85:5f:c6: 4a:3f:68:a6:f4:ce:eb:56:84:1d:81:44:00:e4:7e: bd:25:8c:5d:57:65:10:ec:79:81:a9:b0:7e:4a:8a: 46:a8:55:39:c0:32:ac:75:9b:92:b1:8b:26:02:18: 80:f8:d0:d4:62:5b:10:56:03:9c:36:78:38:10:6a: ac:a9:3a:8a:1b:8c:97:05:59:20:b6:02:7f:9a:37: da:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:FE:C6:C4:37:CA:E8:16:9A:E5:A0:13:92:22:52:CF:6D:7C:DB:22 X509v3 Authority Key Identifier: keyid:43:AC:C2:F2:BE:1A:36:B0:89:21:65:44:D2:3C:95:AC:E2:32:E1:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:fb:64:59:c9:35:83:a9:6b:d8:78:e5:53:54:03:51:c3:8d: 59:b6:d4:41:5b:5b:98:6a:20:29:47:8e:c5:6f:9e:b1:90:94: 65:c4:a6:31:d7:52:aa:0d:5b:27:2f:d0:34:d8:12:b1:74:f5: 43:85:e4:f0:0f:5d:30:c1:c4:70:07:1f:52:f4:6f:d4:80:d8: b2:80:2b:c0:53:af:d3:92:be:dc:80:98:61:f7:03:61:10:8f: 18:13:db:fa:43:dd:03:0c:bb:bc:b3:b5:7e:72:1a:8c:10:b7: 8e:35:eb:cd:52:ce:61:4e:80:cd:23:ac:83:12:ad:a5:d6:5e: f2:6a:ed:f8:85:86:4c:25:12:d4:3f:d0:af:c0:dc:5f:54:0b: 86:a8:09:42:9c:14:6f:39:3f:d7:fb:37:c3:2c:62:f6:84:38: f0:c6:c0:5c:87:3a:7a:43:54:8b:50:1f:41:55:3a:fe:2f:10: ae:da:d6:a2:17:bd:29:2b:27:e3:87:2f:48:83:45:20:64:68: 1e:3c:69:48:e9:6e:ef:3d:31:66:16:32:01:23:48:fd:a8:06: 08:37:b7:80:ac:58:b2:18:57:50:55:be:7b:12:3d:83:eb:c6: 40:93:f2:3f:62:0c:15:7e:30:0e:56:c5:0f:23:42:82:ed:1a: 60:1c:54:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLazXKwKZMAtm0oa7xkZ3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzYWNjMmYyYmUxYTM2YjA4OTIxNjU0NGQyM2M5NWFjZTIz MmUxNDMwHhcNMjUxMjA2MDEwMTMzWhcNMjUxMjA3MDEwMTMzWjAzMTEwLwYDVQQD EyhiYWZlYzZjNDM3Y2FlODE2OWFlNWEwMTM5MjIyNTJjZjZkN2NkYjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIJRIkSR6QrTmDpEjparYVcEatEm 7LQCghZDbnJcCvk53TeP4sZM2yPRGpeqoK+c/SeU/CMfsG6ljwY5v3M2himOyrpn +fQrZAG9dPc601MnO/i+dBQafgqrb5+Uo9+2QAMuScac9/3ZPfJquqbwGs1aD2na e5ygDVlRNG6jAFyw74JrXVzaLPoUFJHMbKvEgHnF8BNwR/qZRg2ZSguVWsJgmOkW kHmdPc5KD5vN7EGFX8ZKP2im9M7rVoQdgUQA5H69JYxdV2UQ7HmBqbB+SopGqFU5 wDKsdZuSsYsmAhiA+NDUYlsQVgOcNng4EGqsqTqKG4yXBVkgtgJ/mjfa3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLr+xsQ3yugWmuWgE5IiUs9tfNsiMB8GA1UdIwQY MBaAFEOswvK+GjawiSFlRNI8laziMuFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTZ6QzhyNGFOckNKSVdWRTBqeVZyT0l5NFVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9lYWNkNDgtNzZlYS00ZWM3LWExNDEt ZjUyMDE2NThmYTE0LzEvUTZ6QzhyNGFOckNKSVdWRTBqeVZyT0l5NFVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9lYWNkNDgtNzZlYS00ZWM3LWExNDEtZjUyMDE2NThmYTE0 LzEvUTZ6QzhyNGFOckNKSVdWRTBqeVZyT0l5NFVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo/tkWck1 g6lr2HjlU1QDUcONWbbUQVtbmGogKUeOxW+esZCUZcSmMddSqg1bJy/QNNgSsXT1 Q4Xk8A9dMMHEcAcfUvRv1IDYsoArwFOv05K+3ICYYfcDYRCPGBPb+kPdAwy7vLO1 fnIajBC3jjXrzVLOYU6AzSOsgxKtpdZe8mrt+IWGTCUS1D/Qr8DcX1QLhqgJQpwU bzk/1/s3wyxi9oQ48MbAXIc6ekNUi1AfQVU6/i8QrtrWohe9KSsn44cvSINFIGRo HjxpSOlu7z0xZhYyASNI/agGCDe3gKxYshhXUFW+exI9g+vGQJPyP2IMFX4wDlbF DyNCgu0aYBxUOg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:59 2025 by rpki-client