This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft File: q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft (raw, json) Hash identifier: ft6BNaORKJegFwLC84xwuG9BGBBzGxtO/z+nQmsh1Rg= Subject key identifier: 44:C8:CC:1D:2A:2C:8F:11:42:E4:E1:55:31:C2:9A:AD:98:DF:1E:2E Authority key identifier: AB:F5:87:57:1C:0C:69:84:58:C3:85:B1:5D:60:C7:F0:8C:70:B6:FE Certificate issuer: /CN=abf587571c0c698458c385b15d60c7f08c70b6fe Certificate serial: 019B39B428310EA24FB8222ACBB319398905 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft Manifest number: 0B0A Signing time: Sat 20 Dec 2025 03:01:06 +0000 Manifest this update: Sat 20 Dec 2025 03:01:06 +0000 Manifest next update: Sun 21 Dec 2025 03:01:06 +0000 Files and hashes: 1: J83vR5DpFwQeOzZ3QWcMbb8635o.roa (hash: iKjeQjYNy9qFyGrhW5tTdYxo05LYCK/XsNtUNF1Tfbg=) 2: q_WHVxwMaYRYw4WxXWDH8Ixwtv4.crl (hash: BAj9zPZ41e94vPfAU7Az/9OMtnRqyYpHltGH8//rG8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.crl rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft rsync://rpki.ripe.net/repository/DEFAULT/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:28:31:0e:a2:4f:b8:22:2a:cb:b3:19:39:89:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf587571c0c698458c385b15d60c7f08c70b6fe Validity Not Before: Dec 20 03:01:06 2025 GMT Not After : Dec 21 03:01:06 2025 GMT Subject: CN=44c8cc1d2a2c8f1142e4e15531c29aad98df1e2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:b6:9c:31:59:11:95:38:70:5c:ef:b8:5d:de: c5:f3:4b:39:c4:1d:ed:41:96:93:e9:19:05:cd:4b: 69:00:fb:01:78:1e:8b:0d:13:c0:c8:80:4e:47:11: f5:6b:1b:43:fc:d5:3e:50:df:c7:25:cd:e2:21:d6: 51:0b:fc:1a:eb:cb:b8:ab:fd:a7:cc:39:da:e5:10: 39:b9:1a:f4:f7:b5:35:01:fe:a7:fb:66:9d:5e:2c: ed:b9:62:cb:bc:14:d1:16:b4:5f:76:84:28:64:f4: ad:fe:eb:9a:4c:c3:ff:fd:6f:4b:c9:b4:c4:57:de: f3:ed:84:3b:4d:8a:dd:aa:fc:6c:47:e5:34:52:b9: 49:69:71:1a:f1:d3:28:78:41:59:5a:31:57:f9:14: d9:17:82:52:21:28:97:0d:96:1c:6a:51:1f:5f:de: a0:d3:7f:a3:f9:81:87:2f:49:a8:88:5c:c6:f4:3d: 73:19:06:2d:26:4d:7d:91:a0:67:e2:6c:44:8e:5c: 44:ae:b1:d2:3f:d8:74:fb:4a:dc:ce:6d:69:cd:ca: 02:2a:1b:2e:e9:98:a9:ec:4b:d7:58:4a:16:07:b1: d2:05:3a:8f:49:33:e5:1c:32:e6:3d:86:01:22:11: 06:10:4f:6e:d7:60:7b:b4:f1:0d:9d:a1:09:df:f2: 25:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C8:CC:1D:2A:2C:8F:11:42:E4:E1:55:31:C2:9A:AD:98:DF:1E:2E X509v3 Authority Key Identifier: keyid:AB:F5:87:57:1C:0C:69:84:58:C3:85:B1:5D:60:C7:F0:8C:70:B6:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:c4:3a:64:dc:fd:cf:21:11:80:10:17:97:d8:9a:38:06:d8: 4a:3e:94:05:6a:0b:65:05:a7:ee:1b:e3:5a:fc:50:4c:ab:e6: cc:b6:c0:12:ec:47:60:8a:79:d5:62:fa:76:f7:df:7b:32:b9: dd:89:76:9a:eb:fb:a5:3f:dd:ff:cf:3a:ec:c9:60:c6:24:6a: 78:37:0c:85:81:b8:5d:2c:4d:2c:12:84:0d:cb:e6:5b:f1:d5: f2:10:74:d8:c8:49:e1:ef:4e:e4:10:72:20:5c:56:b0:a9:8f: 1b:03:72:5c:96:99:a9:b8:f6:99:c2:92:79:e9:ae:e1:83:5a: 4c:8a:56:58:fd:76:f1:f2:1b:a3:41:00:5a:0d:c7:4a:49:3e: 12:0f:6d:be:06:cc:44:56:50:59:03:53:9c:51:fe:0b:3a:20: 44:8b:23:6b:0f:d6:db:4c:b7:ff:5a:ca:20:16:07:54:75:c9: 1e:10:d2:dc:5f:f5:20:1b:42:a2:5c:e4:08:e8:fb:30:e9:b1: 1f:f3:9f:c1:21:e7:ee:f4:c7:d1:98:74:48:bc:18:e3:b0:9f: 59:91:71:9e:12:c7:b6:db:0a:34:03:f7:9c:47:6c:87:8d:bf: c9:c5:11:aa:ec:70:e1:8a:c7:a5:43:4c:1e:77:e2:01:81:17: 97:0b:24:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5tCgxDqJPuCIqy7MZOYkFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiZjU4NzU3MWMwYzY5ODQ1OGMzODViMTVkNjBjN2YwOGM3 MGI2ZmUwHhcNMjUxMjIwMDMwMTA2WhcNMjUxMjIxMDMwMTA2WjAzMTEwLwYDVQQD Eyg0NGM4Y2MxZDJhMmM4ZjExNDJlNGUxNTUzMWMyOWFhZDk4ZGYxZTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA67acMVkRlThwXO+4Xd7F80s5xB3t QZaT6RkFzUtpAPsBeB6LDRPAyIBORxH1axtD/NU+UN/HJc3iIdZRC/wa68u4q/2n zDna5RA5uRr097U1Af6n+2adXiztuWLLvBTRFrRfdoQoZPSt/uuaTMP//W9LybTE V97z7YQ7TYrdqvxsR+U0UrlJaXEa8dMoeEFZWjFX+RTZF4JSISiXDZYcalEfX96g 03+j+YGHL0moiFzG9D1zGQYtJk19kaBn4mxEjlxErrHSP9h0+0rczm1pzcoCKhsu 6Zip7EvXWEoWB7HSBTqPSTPlHDLmPYYBIhEGEE9u12B7tPENnaEJ3/IlmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFETIzB0qLI8RQuThVTHCmq2Y3x4uMB8GA1UdIwQY MBaAFKv1h1ccDGmEWMOFsV1gx/CMcLb+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcV9XSFZ4d01hWVJZdzRXeFhXREg4SXh3dHY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi85ZDhiODItNDdhZS00ZTEyLTlhNGQt NzgyZmU3MDkyMDEwLzEvcV9XSFZ4d01hWVJZdzRXeFhXREg4SXh3dHY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi85ZDhiODItNDdhZS00ZTEyLTlhNGQtNzgyZmU3MDkyMDEw LzEvcV9XSFZ4d01hWVJZdzRXeFhXREg4SXh3dHY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlMQ6ZNz9 zyERgBAXl9iaOAbYSj6UBWoLZQWn7hvjWvxQTKvmzLbAEuxHYIp51WL6dvffezK5 3Yl2muv7pT/d/8867MlgxiRqeDcMhYG4XSxNLBKEDcvmW/HV8hB02MhJ4e9O5BBy IFxWsKmPGwNyXJaZqbj2mcKSeemu4YNaTIpWWP128fIbo0EAWg3HSkk+Eg9tvgbM RFZQWQNTnFH+CzogRIsjaw/W20y3/1rKIBYHVHXJHhDS3F/1IBtColzkCOj7MOmx H/OfwSHn7vTH0Zh0SLwY47CfWZFxnhLHttsKNAP3nEdsh42/ycURquxw4YrHpUNM HnfiAYEXlwskcQ== -----END CERTIFICATE-----Generated at Sat Dec 20 05:30:43 2025 by rpki-client