This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft File: Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft (raw, json) Hash identifier: BxAHrdy3kecDc47QY1aR9n9OFe/OUPRsVecBPP9AWdc= Subject key identifier: 10:F6:83:EF:03:63:53:1C:7E:1C:A2:77:D0:78:F8:B9:4F:38:5E:07 Authority key identifier: 43:AC:C2:F2:BE:1A:36:B0:89:21:65:44:D2:3C:95:AC:E2:32:E1:43 Certificate issuer: /CN=43acc2f2be1a36b089216544d23c95ace232e143 Certificate serial: 019B42495526ADB360DB83A6E9AF1506BEFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft Manifest number: 0ADF Signing time: Sun 21 Dec 2025 19:01:00 +0000 Manifest this update: Sun 21 Dec 2025 19:01:00 +0000 Manifest next update: Mon 22 Dec 2025 19:01:00 +0000 Files and hashes: 1: KKb3movEaRK5uooL7CLlRng9BxI.roa (hash: QF2heUsD9ZCfGN4fGvk2RN46irWE6FgEYevma5ik6/E=) 2: Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl (hash: n7uHxD2h0eI7c7ccKnXRoXyjeNN2kV6nqZN5OdZt/DA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:55:26:ad:b3:60:db:83:a6:e9:af:15:06:be:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43acc2f2be1a36b089216544d23c95ace232e143 Validity Not Before: Dec 21 19:01:00 2025 GMT Not After : Dec 22 19:01:00 2025 GMT Subject: CN=10f683ef0363531c7e1ca277d078f8b94f385e07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6b:84:35:24:17:40:af:70:e9:19:9f:63:6d: e5:8c:3b:4e:a0:4f:82:82:61:73:fe:46:15:98:8b: 69:51:de:25:20:d2:10:00:36:0f:61:d6:b2:7c:39: d0:98:f7:c6:04:1c:a4:b9:16:d4:88:aa:42:7b:f7: 1f:f7:f7:02:a6:3d:cf:e0:ae:ab:0a:e9:b6:67:b0: b3:d4:3d:85:ff:32:3c:e1:d8:a5:bf:12:c4:e3:54: 3d:a8:7f:d4:cf:bb:a1:eb:d1:60:1c:6c:e7:e5:8a: 4c:6b:33:44:23:df:70:41:2c:2a:d3:ea:d5:dd:31: 47:22:6d:0b:ee:ac:92:ad:6f:45:c3:53:02:2d:85: 4a:30:42:5b:35:75:4b:9a:4d:ac:c6:0c:b4:90:0b: db:7b:2f:fc:e5:73:51:2e:ee:fe:02:1b:dc:07:74: 39:12:ca:b0:26:c9:dc:6b:d3:95:1d:e3:e8:3f:99: 4d:17:0f:df:4d:66:f8:16:ce:6e:a0:57:1c:2e:35: d9:61:8d:d9:8c:79:df:48:3e:9b:54:10:a9:19:bf: e6:bc:2e:5e:8e:7f:03:d8:ba:21:21:51:61:27:5d: 6f:13:a4:7c:26:87:02:37:13:85:cb:5b:29:62:31: 32:a1:fc:e6:7a:82:c4:1e:ed:5f:62:d7:5b:78:76: ca:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:F6:83:EF:03:63:53:1C:7E:1C:A2:77:D0:78:F8:B9:4F:38:5E:07 X509v3 Authority Key Identifier: keyid:43:AC:C2:F2:BE:1A:36:B0:89:21:65:44:D2:3C:95:AC:E2:32:E1:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:a8:7c:4e:41:5d:f1:6d:a3:7c:a5:de:89:6b:eb:7c:4c:b0: bb:9f:9a:9e:f7:8c:74:86:ad:b0:b2:74:53:c7:fe:de:c0:f6: 22:1c:98:6e:d5:6a:85:85:f4:69:fd:e5:86:c5:72:17:57:aa: 9b:67:97:36:7f:d3:26:b0:00:7d:da:d4:2d:a7:e0:94:32:9b: 99:35:4f:32:25:cb:88:b1:2b:93:c3:38:b0:50:4f:fb:8d:ae: ad:a3:02:b2:07:46:f5:05:7d:88:27:76:39:6f:df:3c:ea:1d: 00:66:04:3f:f3:9c:8c:d3:11:e7:05:31:1e:ee:41:f1:6f:41: 52:aa:7d:75:11:3b:bd:a3:e3:df:fa:dd:41:45:28:06:8f:53: fa:00:24:14:05:1c:14:2f:fc:8a:42:f9:5d:56:c9:c7:49:1b: 22:da:6e:b4:40:0f:4c:d7:19:e9:92:72:fb:10:03:94:cb:c4: 0b:08:cf:1a:32:45:38:d6:a3:b1:97:a9:f3:d2:49:66:20:63: f5:36:e0:aa:6d:66:84:2d:86:ea:c9:e9:69:9b:54:70:a6:ba: a1:db:8c:c8:15:b9:a5:25:6a:dc:20:ef:59:74:cd:65:e5:3f: cd:30:48:7e:fe:88:93:1f:29:08:25:40:b2:58:22:08:f3:43: ba:cf:06:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSVUmrbNg24Om6a8VBr76MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzYWNjMmYyYmUxYTM2YjA4OTIxNjU0NGQyM2M5NWFjZTIz MmUxNDMwHhcNMjUxMjIxMTkwMTAwWhcNMjUxMjIyMTkwMTAwWjAzMTEwLwYDVQQD EygxMGY2ODNlZjAzNjM1MzFjN2UxY2EyNzdkMDc4ZjhiOTRmMzg1ZTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0muENSQXQK9w6RmfY23ljDtOoE+C gmFz/kYVmItpUd4lINIQADYPYdayfDnQmPfGBBykuRbUiKpCe/cf9/cCpj3P4K6r Cum2Z7Cz1D2F/zI84dilvxLE41Q9qH/Uz7uh69FgHGzn5YpMazNEI99wQSwq0+rV 3TFHIm0L7qySrW9Fw1MCLYVKMEJbNXVLmk2sxgy0kAvbey/85XNRLu7+AhvcB3Q5 EsqwJsnca9OVHePoP5lNFw/fTWb4Fs5uoFccLjXZYY3ZjHnfSD6bVBCpGb/mvC5e jn8D2LohIVFhJ11vE6R8JocCNxOFy1spYjEyofzmeoLEHu1fYtdbeHbKAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBD2g+8DY1Mcfhyid9B4+LlPOF4HMB8GA1UdIwQY MBaAFEOswvK+GjawiSFlRNI8laziMuFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTZ6QzhyNGFOckNKSVdWRTBqeVZyT0l5NFVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9lYWNkNDgtNzZlYS00ZWM3LWExNDEt ZjUyMDE2NThmYTE0LzEvUTZ6QzhyNGFOckNKSVdWRTBqeVZyT0l5NFVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9lYWNkNDgtNzZlYS00ZWM3LWExNDEtZjUyMDE2NThmYTE0 LzEvUTZ6QzhyNGFOckNKSVdWRTBqeVZyT0l5NFVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFah8TkFd 8W2jfKXeiWvrfEywu5+anveMdIatsLJ0U8f+3sD2IhyYbtVqhYX0af3lhsVyF1eq m2eXNn/TJrAAfdrULafglDKbmTVPMiXLiLErk8M4sFBP+42uraMCsgdG9QV9iCd2 OW/fPOodAGYEP/OcjNMR5wUxHu5B8W9BUqp9dRE7vaPj3/rdQUUoBo9T+gAkFAUc FC/8ikL5XVbJx0kbItputEAPTNcZ6ZJy+xADlMvECwjPGjJFONajsZep89JJZiBj 9Tbgqm1mhC2G6snpaZtUcKa6oduMyBW5pSVq3CDvWXTNZeU/zTBIfv6Ikx8pCCVA slgiCPNDus8G3Q== -----END CERTIFICATE-----Generated at Mon Dec 22 01:08:41 2025 by rpki-client