This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft File: q9xALNU1_JEj6gJsYq6c8PgOlBg.mft (raw, json) Hash identifier: 8B8AFNnb/bXeuVp8vFValyJcXDGWheyRHg3Lpjkcm54= Subject key identifier: 71:10:35:76:32:5E:D3:41:83:D9:DD:5B:55:D3:F0:1F:DE:06:D7:B9 Authority key identifier: AB:DC:40:2C:D5:35:FC:91:23:EA:02:6C:62:AE:9C:F0:F8:0E:94:18 Certificate issuer: /CN=abdc402cd535fc9123ea026c62ae9cf0f80e9418 Certificate serial: 019B43C9A4D7C2BCBBB1BE0FB2217EAAE408 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft Manifest number: 178B Signing time: Mon 22 Dec 2025 02:00:46 +0000 Manifest this update: Mon 22 Dec 2025 02:00:46 +0000 Manifest next update: Tue 23 Dec 2025 02:00:46 +0000 Files and hashes: 1: LtPXIJBODsTgHOTG4NK5yVKpj5k.roa (hash: ITX8aC19jlc3FBy1kQN9LCE6ibXilzDMrJg98+CkzVM=) 2: q9xALNU1_JEj6gJsYq6c8PgOlBg.crl (hash: ghtlSROHu/LtcZGGlNa8FCZBzRnrarlwmcZj/NBFzjQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:c9:a4:d7:c2:bc:bb:b1:be:0f:b2:21:7e:aa:e4:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abdc402cd535fc9123ea026c62ae9cf0f80e9418 Validity Not Before: Dec 22 02:00:46 2025 GMT Not After : Dec 23 02:00:46 2025 GMT Subject: CN=71103576325ed34183d9dd5b55d3f01fde06d7b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b2:d9:87:a0:e0:4c:2d:75:68:e3:8c:f0:c7: bb:f9:6d:8f:9c:32:71:9a:a0:aa:31:e1:61:25:4f: 18:b1:2e:80:94:75:10:68:a0:7e:d3:f1:30:8a:2f: aa:31:2c:f3:6b:9e:5e:95:1f:c9:1f:77:0a:66:39: 11:66:e9:1c:ae:83:25:2f:fe:5e:d1:fa:94:b5:da: 84:c2:08:3c:8f:9d:cd:a9:9c:78:9b:e4:03:a8:0f: 81:07:ac:4b:04:ca:b6:69:45:0b:1a:0d:4f:d0:05: 5f:61:bb:bf:2a:1b:4a:c5:84:44:27:c5:ed:6e:d1: 64:f1:f2:13:29:e8:ff:cf:63:5f:47:b7:d7:01:bf: ca:26:3d:05:82:1b:c8:6f:62:bd:b6:10:20:21:5b: e1:92:ad:ac:61:ed:b2:ff:bf:7a:ce:de:8a:92:4c: 80:c0:b0:19:ac:82:13:0b:b0:a3:63:68:c7:12:29: 15:12:2b:f7:49:01:7a:af:d5:cb:21:6c:1f:f2:b7: d9:dd:9c:51:5b:e0:51:44:94:31:15:a4:f9:f6:96: 99:83:1c:84:b3:61:37:fb:59:af:db:01:c3:bb:46: ae:20:54:f4:4a:ca:f7:1b:0c:ed:5c:25:7d:64:b5: 5e:27:b7:97:0b:e2:05:76:97:bb:22:3d:a1:9b:79: b6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:10:35:76:32:5E:D3:41:83:D9:DD:5B:55:D3:F0:1F:DE:06:D7:B9 X509v3 Authority Key Identifier: keyid:AB:DC:40:2C:D5:35:FC:91:23:EA:02:6C:62:AE:9C:F0:F8:0E:94:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:cc:e0:6a:98:1b:41:c3:35:61:14:40:e1:bb:01:66:e6:23: 53:8b:ae:d9:38:ac:a0:11:33:4e:bf:3a:d5:2e:90:84:0b:38: 92:03:5c:d6:32:7e:3b:de:55:f6:ff:46:ba:38:b1:b9:9e:c0: ba:c5:98:a8:f4:8a:b4:16:5c:26:da:cb:96:94:f2:09:c1:57: a3:62:a7:87:ea:a6:5f:8a:ab:fa:e2:9b:5f:1b:68:81:ca:72: a8:55:f8:00:a6:c0:2b:5b:56:06:a5:ba:15:d0:b4:d3:36:5e: 85:d6:b2:c1:11:12:bf:09:a0:ab:19:47:2e:90:aa:8f:ce:09: 8a:09:f8:a0:ae:7b:0f:e5:98:c5:47:ce:08:6b:8c:ea:e8:81: ed:37:a1:75:fe:57:1e:98:3c:88:5e:fb:08:e3:e7:bb:71:6e: 7e:3e:db:5c:f9:db:5a:88:5d:48:86:73:e0:94:2e:04:66:aa: 70:d7:e2:f6:88:95:e1:59:85:e8:1d:24:f5:61:af:f2:97:e9: 14:73:36:6d:28:34:d4:7a:78:2a:3c:7c:f7:9d:2a:4d:9f:b5: 13:76:f5:49:2f:90:91:55:e9:b9:62:0e:b5:fa:1c:01:ea:ae: 03:d4:4e:76:e6:10:42:d3:4c:fa:d4:f8:19:93:14:fe:a5:61: 7f:81:56:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDyaTXwry7sb4PsiF+quQIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiZGM0MDJjZDUzNWZjOTEyM2VhMDI2YzYyYWU5Y2YwZjgw ZTk0MTgwHhcNMjUxMjIyMDIwMDQ2WhcNMjUxMjIzMDIwMDQ2WjAzMTEwLwYDVQQD Eyg3MTEwMzU3NjMyNWVkMzQxODNkOWRkNWI1NWQzZjAxZmRlMDZkN2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbLZh6DgTC11aOOM8Me7+W2PnDJx mqCqMeFhJU8YsS6AlHUQaKB+0/Ewii+qMSzza55elR/JH3cKZjkRZukcroMlL/5e 0fqUtdqEwgg8j53NqZx4m+QDqA+BB6xLBMq2aUULGg1P0AVfYbu/KhtKxYREJ8Xt btFk8fITKej/z2NfR7fXAb/KJj0FghvIb2K9thAgIVvhkq2sYe2y/796zt6KkkyA wLAZrIITC7CjY2jHEikVEiv3SQF6r9XLIWwf8rfZ3ZxRW+BRRJQxFaT59paZgxyE s2E3+1mv2wHDu0auIFT0Ssr3GwztXCV9ZLVeJ7eXC+IFdpe7Ij2hm3m2MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHEQNXYyXtNBg9ndW1XT8B/eBte5MB8GA1UdIwQY MBaAFKvcQCzVNfyRI+oCbGKunPD4DpQYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTl4QUxOVTFfSkVqNmdKc1lxNmM4UGdPbEJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS83NTIzZDktNDY0OC00MzVlLTk5NjEt NDA3MzViMmY4NDgxLzEvcTl4QUxOVTFfSkVqNmdKc1lxNmM4UGdPbEJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS83NTIzZDktNDY0OC00MzVlLTk5NjEtNDA3MzViMmY4NDgx LzEvcTl4QUxOVTFfSkVqNmdKc1lxNmM4UGdPbEJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdszgapgb QcM1YRRA4bsBZuYjU4uu2TisoBEzTr861S6QhAs4kgNc1jJ+O95V9v9GujixuZ7A usWYqPSKtBZcJtrLlpTyCcFXo2Knh+qmX4qr+uKbXxtogcpyqFX4AKbAK1tWBqW6 FdC00zZehdaywRESvwmgqxlHLpCqj84Jign4oK57D+WYxUfOCGuM6uiB7Tehdf5X Hpg8iF77COPnu3Fufj7bXPnbWohdSIZz4JQuBGaqcNfi9oiV4VmF6B0k9WGv8pfp FHM2bSg01Hp4Kjx8950qTZ+1E3b1SS+QkVXpuWIOtfocAequA9ROduYQQtNM+tT4 GZMU/qVhf4FWFg== -----END CERTIFICATE-----Generated at Mon Dec 22 08:31:46 2025 by rpki-client