This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft File: Q8d7RzY2gTePrORmFB1UzIg5nPU.mft (raw, json) Hash identifier: zm7vvtofSEodc4soiEk+qQ2k5oO9yzxUsA7QGODKjuo= Subject key identifier: 63:EB:1B:F8:5D:46:B4:D6:97:5E:31:39:00:E4:CE:91:93:EF:8B:C4 Authority key identifier: 43:C7:7B:47:36:36:81:37:8F:AC:E4:66:14:1D:54:CC:88:39:9C:F5 Certificate issuer: /CN=43c77b47363681378face466141d54cc88399cf5 Certificate serial: 019AF12D148D4A2AA8BB6FF917EB7047C5F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft Manifest number: 16F2 Signing time: Sat 06 Dec 2025 01:00:54 +0000 Manifest this update: Sat 06 Dec 2025 01:00:54 +0000 Manifest next update: Sun 07 Dec 2025 01:00:54 +0000 Files and hashes: 1: LhVPheiP2Wbqe7xFjCy9IQ_CSc0.roa (hash: Jd5k/N8+tstl7PIZFFMbIYM8R6nDjGK5pnVrR8G85AA=) 2: Q8d7RzY2gTePrORmFB1UzIg5nPU.crl (hash: gTri18waQl/1DLONry3ZHRl598qo2YP2rxP9Z3XR6Sg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:14:8d:4a:2a:a8:bb:6f:f9:17:eb:70:47:c5:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43c77b47363681378face466141d54cc88399cf5 Validity Not Before: Dec 6 01:00:54 2025 GMT Not After : Dec 7 01:00:54 2025 GMT Subject: CN=63eb1bf85d46b4d6975e313900e4ce9193ef8bc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:43:3e:26:64:13:77:41:90:90:6c:31:0f:63: 10:03:46:8b:79:20:dd:7d:5f:13:5b:57:1e:a5:c2: 2a:0d:db:dd:fc:cd:1b:57:ab:ff:2e:6b:fd:01:38: 6c:48:8f:cc:5c:da:61:c1:79:a5:9c:4d:69:95:94: 0d:d1:cb:4b:74:12:f5:04:82:0c:e6:68:9f:61:88: 08:06:dc:b0:74:82:80:bc:08:60:99:eb:de:11:e6: b9:9a:e0:64:2f:44:97:28:16:2b:d2:f3:23:7a:1b: d3:9a:1f:2d:9c:2f:54:b0:0b:cf:99:29:8b:42:e5: af:bf:9e:c3:04:8e:88:b9:cd:f7:82:bf:d2:44:34: 5a:79:75:f9:d6:fc:4a:37:fe:ff:a4:92:95:5b:7a: d1:8a:f6:e9:46:f5:a5:cb:c9:c3:3a:3d:88:4b:30: 54:2a:d9:a7:5a:7d:90:76:b5:b8:ca:cd:5b:f8:94: 4f:76:f5:95:23:f8:3b:32:32:c9:c3:77:4c:dd:2f: 34:29:df:55:6d:be:a8:7d:ae:75:a6:af:34:4c:f9: b8:41:f1:a2:ee:25:57:a3:63:17:72:e6:a2:92:c2: 23:75:d2:26:90:49:0e:d4:5c:54:90:d6:2c:36:cc: 35:6e:9b:a0:09:6f:12:6b:01:6c:d3:f9:38:93:76: e1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:EB:1B:F8:5D:46:B4:D6:97:5E:31:39:00:E4:CE:91:93:EF:8B:C4 X509v3 Authority Key Identifier: keyid:43:C7:7B:47:36:36:81:37:8F:AC:E4:66:14:1D:54:CC:88:39:9C:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:66:f5:43:69:9b:75:11:55:0f:20:e4:84:8f:00:72:d0:79: b0:90:0e:4b:99:de:3d:0c:7e:7f:2d:19:f6:c4:3e:15:33:d4: 8e:a9:3f:d7:6a:d7:9e:b8:df:46:1c:6a:d4:c8:1f:3f:4d:b9: af:bb:58:d0:b4:56:b9:d9:99:34:ae:8c:ec:a0:80:2f:6f:fd: 90:a4:22:d4:ab:13:13:fb:07:a8:c9:08:a4:16:bb:cd:45:f2: c4:8f:38:51:dc:5b:71:0e:52:ba:4b:98:b3:31:ad:56:cf:70: 4c:91:95:be:b4:a1:94:36:26:1a:3a:6d:ae:52:ef:3d:da:5d: da:9e:94:52:a4:08:6a:e9:d8:65:ce:58:72:93:b1:ad:0a:8e: 26:fa:28:6d:1e:6b:bc:b2:a1:d8:fe:6f:99:9b:f8:20:61:63: b8:94:4c:c6:68:a9:d9:ee:9c:94:d2:9b:a7:fa:69:e9:fc:64: cb:f8:94:fb:0d:b5:b6:8a:32:78:8c:ca:e3:b6:19:06:64:32: e8:43:c7:1c:cb:2c:e6:64:34:2e:4f:40:0b:f8:fa:3f:03:b7: 46:7c:6d:66:8e:68:25:12:ab:07:d7:ef:4a:da:2f:de:48:7e: 84:f4:aa:db:c7:4e:ce:09:5d:3c:a9:68:36:ab:d4:c3:b7:d5: 1c:be:73:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLRSNSiqou2/5F+twR8XzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzYzc3YjQ3MzYzNjgxMzc4ZmFjZTQ2NjE0MWQ1NGNjODgz OTljZjUwHhcNMjUxMjA2MDEwMDU0WhcNMjUxMjA3MDEwMDU0WjAzMTEwLwYDVQQD Eyg2M2ViMWJmODVkNDZiNGQ2OTc1ZTMxMzkwMGU0Y2U5MTkzZWY4YmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEM+JmQTd0GQkGwxD2MQA0aLeSDd fV8TW1cepcIqDdvd/M0bV6v/Lmv9AThsSI/MXNphwXmlnE1plZQN0ctLdBL1BIIM 5mifYYgIBtywdIKAvAhgmeveEea5muBkL0SXKBYr0vMjehvTmh8tnC9UsAvPmSmL QuWvv57DBI6Iuc33gr/SRDRaeXX51vxKN/7/pJKVW3rRivbpRvWly8nDOj2ISzBU KtmnWn2QdrW4ys1b+JRPdvWVI/g7MjLJw3dM3S80Kd9Vbb6ofa51pq80TPm4QfGi 7iVXo2MXcuaiksIjddImkEkO1FxUkNYsNsw1bpugCW8SawFs0/k4k3bhpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGPrG/hdRrTWl14xOQDkzpGT74vEMB8GA1UdIwQY MBaAFEPHe0c2NoE3j6zkZhQdVMyIOZz1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUThkN1J6WTJnVGVQck9SbUZCMVV6SWc1blBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8wMTgwOWItNDJkZC00MTM2LTk2YjEt MWZkMTBkOGUwNzVmLzEvUThkN1J6WTJnVGVQck9SbUZCMVV6SWc1blBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8wMTgwOWItNDJkZC00MTM2LTk2YjEtMWZkMTBkOGUwNzVm LzEvUThkN1J6WTJnVGVQck9SbUZCMVV6SWc1blBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWmb1Q2mb dRFVDyDkhI8ActB5sJAOS5nePQx+fy0Z9sQ+FTPUjqk/12rXnrjfRhxq1MgfP025 r7tY0LRWudmZNK6M7KCAL2/9kKQi1KsTE/sHqMkIpBa7zUXyxI84UdxbcQ5SukuY szGtVs9wTJGVvrShlDYmGjptrlLvPdpd2p6UUqQIaunYZc5YcpOxrQqOJvoobR5r vLKh2P5vmZv4IGFjuJRMxmip2e6clNKbp/pp6fxky/iU+w21tooyeIzK47YZBmQy 6EPHHMss5mQ0Lk9AC/j6PwO3RnxtZo5oJRKrB9fvStov3kh+hPSq28dOzgldPKlo NqvUw7fVHL5zNw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:15 2025 by rpki-client