This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft File: Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft (raw, json) Hash identifier: pljUMDyRWxymNEFA3cf5xzyyQIZ/vyRHndUDcx9QIAs= Subject key identifier: 7A:0B:94:EB:B9:AB:D4:B9:87:41:AF:65:C6:0C:BD:1E:90:AD:6B:69 Authority key identifier: 43:FA:D7:95:48:AF:C5:C8:3E:59:BB:FE:38:8C:64:49:2C:B5:50:13 Certificate issuer: /CN=43fad79548afc5c83e59bbfe388c64492cb55013 Certificate serial: 019AF08817B9011FEF3FA589D4409C9B86AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft Manifest number: 175F Signing time: Fri 05 Dec 2025 22:00:41 +0000 Manifest this update: Fri 05 Dec 2025 22:00:41 +0000 Manifest next update: Sat 06 Dec 2025 22:00:41 +0000 Files and hashes: 1: 2cU_Yyosgv72VzuSZ-lEPM4bEA0.roa (hash: rOVsbZQ+258/yYvznSDjCoRvmCP4xDAfS/95mmV0VJ8=) 2: KhZxCrijEh6I5tUjdOiH08SDAlU.roa (hash: d7J/i0PvapKbq1ZXNQfO7tB9y3eyZqeGbgRInR/S46w=) 3: Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl (hash: EvqC0H3qtdE0FDvn7L15rssIWi5pn7ZHHHUHpXZ+zoU=) 4: sG_rr6I8pDA92eA5vBpgqLHPlcc.roa (hash: VBbgkzxs+YQuemItqSI61ff6E1GX47Q0q9j9ZQDjYJM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:17:b9:01:1f:ef:3f:a5:89:d4:40:9c:9b:86:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43fad79548afc5c83e59bbfe388c64492cb55013 Validity Not Before: Dec 5 22:00:41 2025 GMT Not After : Dec 6 22:00:41 2025 GMT Subject: CN=7a0b94ebb9abd4b98741af65c60cbd1e90ad6b69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:d9:1b:93:9c:bd:16:15:cb:c1:06:ba:10:50: d6:c6:7e:53:78:98:3f:78:6b:07:fa:48:0a:8f:18: f7:e7:7a:7d:20:73:8c:7c:68:7b:96:ce:6c:25:aa: bc:e0:35:98:9b:1f:c7:30:07:2c:94:60:76:f5:d4: 47:a5:42:4a:12:6d:71:b0:99:51:9d:e6:4d:c8:09: 47:98:83:b1:50:17:98:23:97:66:74:94:56:f3:17: 6b:26:1a:d4:63:4c:25:d3:c0:93:11:52:ad:8c:76: 8a:bc:76:24:32:d5:82:f9:3f:42:89:85:58:c1:eb: 8a:a7:df:e8:51:52:b3:4a:2b:24:56:85:d0:b1:29: 99:7b:1c:d7:91:e5:d1:e7:9f:ae:eb:1f:4c:e8:27: e7:fe:b1:7c:92:8d:70:b3:ac:71:44:c9:85:50:7a: f7:f8:16:25:7b:92:24:e9:d1:ea:e4:10:5b:4c:71: 78:26:46:e5:60:d7:41:a8:90:34:f0:03:79:f3:70: 43:05:50:d4:32:7b:ad:25:55:e6:e6:b3:9d:05:67: d6:0f:01:c0:15:a1:12:ff:31:54:45:2e:7c:60:8e: 79:e3:79:83:89:6b:fc:b1:d8:e8:09:e6:f5:9a:92: b6:4f:bb:5f:6b:b3:fa:05:b7:ac:d0:0b:e6:b5:a5: ea:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:0B:94:EB:B9:AB:D4:B9:87:41:AF:65:C6:0C:BD:1E:90:AD:6B:69 X509v3 Authority Key Identifier: keyid:43:FA:D7:95:48:AF:C5:C8:3E:59:BB:FE:38:8C:64:49:2C:B5:50:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:f5:a3:43:0b:34:95:d2:f2:e5:ad:cb:8b:38:0d:20:e2:d6: 14:76:86:e0:77:03:b4:20:ae:ac:b3:39:ba:7e:72:5d:c7:61: 34:cf:77:48:ac:65:24:3e:b4:28:87:9b:53:97:96:26:f7:4a: 6e:47:6d:ff:b0:45:d7:ae:61:1c:6b:e3:01:c7:9b:71:d5:e0: 1f:1b:3c:22:ba:d4:5c:e0:f6:60:d5:a5:20:45:44:0d:ac:11: 21:5c:95:c4:c5:8f:64:9e:94:ca:62:54:95:ba:6c:72:92:43: fd:72:41:42:f9:83:1b:a2:91:8f:95:32:7a:c9:c2:bb:75:7b: 90:e7:d5:51:4a:e0:9b:e4:d1:34:73:cd:d5:10:e6:3a:30:05: b6:f0:2d:1a:4e:db:c8:b5:f5:e1:72:5e:dd:5c:dc:5e:45:b5: 0b:e5:e9:08:ad:a0:15:1e:65:4d:ac:9d:33:f6:f2:b0:5f:30: b1:ab:e4:96:7a:11:ff:77:dd:e0:45:6d:b7:0a:97:8c:12:7f: e1:f4:a6:5d:ec:cf:4a:60:bf:68:a9:5b:69:a8:e0:6e:90:d9: 94:2c:d9:e3:1d:8d:7f:f7:45:53:50:96:b7:7f:dc:8a:f1:14: d3:8b:75:aa:be:f1:e4:77:be:92:a8:b9:f1:33:b8:36:5d:49: 7c:2a:73:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiBe5AR/vP6WJ1ECcm4aqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZmFkNzk1NDhhZmM1YzgzZTU5YmJmZTM4OGM2NDQ5MmNi NTUwMTMwHhcNMjUxMjA1MjIwMDQxWhcNMjUxMjA2MjIwMDQxWjAzMTEwLwYDVQQD Eyg3YTBiOTRlYmI5YWJkNGI5ODc0MWFmNjVjNjBjYmQxZTkwYWQ2YjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7dkbk5y9FhXLwQa6EFDWxn5TeJg/ eGsH+kgKjxj353p9IHOMfGh7ls5sJaq84DWYmx/HMAcslGB29dRHpUJKEm1xsJlR neZNyAlHmIOxUBeYI5dmdJRW8xdrJhrUY0wl08CTEVKtjHaKvHYkMtWC+T9CiYVY weuKp9/oUVKzSiskVoXQsSmZexzXkeXR55+u6x9M6Cfn/rF8ko1ws6xxRMmFUHr3 +BYle5Ik6dHq5BBbTHF4JkblYNdBqJA08AN583BDBVDUMnutJVXm5rOdBWfWDwHA FaES/zFURS58YI5543mDiWv8sdjoCeb1mpK2T7tfa7P6Bbes0AvmtaXqSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHoLlOu5q9S5h0GvZcYMvR6QrWtpMB8GA1UdIwQY MBaAFEP615VIr8XIPlm7/jiMZEkstVATMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUV9yWGxVaXZ4Y2ctV2J2LU9JeGtTU3kxVUJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8yY2YyYzEtMTk2Mi00YjcwLTllNWIt ZmU4NTVkYWJiNzVlLzEvUV9yWGxVaXZ4Y2ctV2J2LU9JeGtTU3kxVUJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8yY2YyYzEtMTk2Mi00YjcwLTllNWItZmU4NTVkYWJiNzVl LzEvUV9yWGxVaXZ4Y2ctV2J2LU9JeGtTU3kxVUJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAavWjQws0 ldLy5a3LizgNIOLWFHaG4HcDtCCurLM5un5yXcdhNM93SKxlJD60KIebU5eWJvdK bkdt/7BF165hHGvjAcebcdXgHxs8IrrUXOD2YNWlIEVEDawRIVyVxMWPZJ6UymJU lbpscpJD/XJBQvmDG6KRj5UyesnCu3V7kOfVUUrgm+TRNHPN1RDmOjAFtvAtGk7b yLX14XJe3VzcXkW1C+XpCK2gFR5lTaydM/bysF8wsavklnoR/3fd4EVttwqXjBJ/ 4fSmXezPSmC/aKlbaajgbpDZlCzZ4x2Nf/dFU1CWt3/civEU04t1qr7x5He+kqi5 8TO4Nl1JfCpzeA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:01:15 2025 by rpki-client