This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft File: q29qNuwpYNTQXz2dyxh7m5BOpZs.mft (raw, json) Hash identifier: jC5bZHBYU0wnhZy1Sdnhc8F7MN/3mgkqj0uGdIISyb4= Subject key identifier: D2:CC:07:12:CB:EE:45:81:9E:D6:37:5E:76:49:6B:E8:9C:23:D5:DB Authority key identifier: AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B Certificate issuer: /CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b Certificate serial: 019B35A06ED15BF8410B400CAF4EDD097B00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft Manifest number: 077F Signing time: Fri 19 Dec 2025 08:01:05 +0000 Manifest this update: Fri 19 Dec 2025 08:01:05 +0000 Manifest next update: Sat 20 Dec 2025 08:01:05 +0000 Files and hashes: 1: DcoOphnBv0Z-r0DRs1Wzn6GO5g8.roa (hash: /C9jr7QH16ykeDGqHdZ0LLAVK74Wkvu3hj1t3uV43yA=) 2: Nq6xP1ML7pMOmt1I4z-fGnkBjbQ.roa (hash: eP8YWZy4BtRcpeOrILokYjbMpuSFUnV4sCVcpAqWhwM=) 3: XmMK1HZ3DcPkTMV2el117ysMhn8.roa (hash: 4EKgTSdeFZXBlalCvjDw36pJD0WP5d5sVK8uLLXyrbI=) 4: q29qNuwpYNTQXz2dyxh7m5BOpZs.crl (hash: m0ewNGALjIWgaf4UaszgfK3eKekHqHP1Fq9lzBMKxQA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:6e:d1:5b:f8:41:0b:40:0c:af:4e:dd:09:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b Validity Not Before: Dec 19 08:01:05 2025 GMT Not After : Dec 20 08:01:05 2025 GMT Subject: CN=d2cc0712cbee45819ed6375e76496be89c23d5db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a3:2d:09:41:d7:97:29:5c:43:bf:f1:88:75: 3d:0c:ea:95:36:d8:7a:ee:85:af:0e:8a:9a:39:f8: d0:c3:4a:78:b5:01:49:e7:68:ea:df:45:24:76:0c: 04:df:90:1c:33:84:dc:b9:ad:bb:e7:c7:6c:99:26: 5c:3c:1a:a8:f8:1f:bf:14:a5:5b:72:bd:9f:86:97: 2d:3c:15:09:95:f8:f0:f1:f1:ab:5d:6b:04:d5:33: da:e3:b0:60:70:cf:c2:70:e8:a2:2f:b1:f6:56:60: 62:82:2c:b7:84:e2:b6:7a:a0:6f:db:ab:8a:6b:93: f3:ff:6f:b6:44:a8:12:41:24:d4:c9:34:f5:1d:c8: 07:84:8b:3e:37:01:71:ce:08:23:97:4c:0e:f2:d0: 5b:6b:eb:6e:21:34:da:d9:9a:4a:56:84:1a:ab:0b: 1e:9b:87:7d:99:0d:87:af:2e:45:1e:1d:03:9a:14: 88:20:a4:e4:b1:58:33:8a:62:fb:58:36:38:97:db: 42:82:bf:eb:5c:89:d5:d8:10:1a:82:6e:78:1b:8a: 5a:a7:14:4e:2c:e4:b9:f1:7d:9d:41:ab:c0:f6:a9: 15:a9:15:f2:5e:85:9e:bb:4f:11:73:fa:b9:ce:d3: ed:3a:95:13:9c:4b:e0:b4:a1:88:0a:ac:cc:18:5a: d8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:CC:07:12:CB:EE:45:81:9E:D6:37:5E:76:49:6B:E8:9C:23:D5:DB X509v3 Authority Key Identifier: keyid:AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:76:a8:e7:af:cb:60:ff:78:4f:03:de:84:fe:39:4d:56:29: c6:4f:a2:c6:48:24:d1:cd:c7:b3:47:d7:bc:ca:6a:6f:c9:c8: 25:49:75:76:9b:e2:5b:8e:22:98:92:c6:3c:c4:e8:af:e5:83: 1a:f2:77:3f:1e:b7:83:d8:97:91:a1:6c:b8:1c:64:bb:d6:ab: 4b:ce:c6:9d:21:d5:34:24:f6:80:b0:82:e8:fa:e3:dd:e3:7a: 9e:e1:5b:a1:76:06:d2:e9:3e:31:14:e1:0c:85:47:19:bb:30: 15:59:4d:f5:cd:61:ce:d5:c0:94:ad:f2:3d:9d:9b:a1:36:f1: 4c:6a:e6:44:5f:7e:eb:d3:2c:c7:28:13:f0:83:50:d0:ac:96: af:b4:2b:da:45:19:9a:26:77:46:da:40:a9:97:aa:6e:4d:29: cc:0d:10:79:7d:f1:d3:35:6d:22:1c:82:e6:fc:0c:e9:49:7c: 43:2a:c8:bb:25:10:96:fc:eb:5b:fa:81:13:6f:dc:1d:5c:f6: 77:39:29:64:1d:ff:40:a0:ea:94:c5:63:e6:8d:d3:3b:5c:7c: 7a:0b:66:ef:b2:cf:e0:8e:63:1f:9e:0a:89:2c:4c:45:51:06: a9:fe:93:8e:5d:e6:32:c7:28:f0:3a:a1:f4:69:f8:c1:e8:d9: db:b0:33:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oG7RW/hBC0AMr07dCXsAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiNmY2YTM2ZWMyOTYwZDRkMDVmM2Q5ZGNiMTg3YjliOTA0 ZWE1OWIwHhcNMjUxMjE5MDgwMTA1WhcNMjUxMjIwMDgwMTA1WjAzMTEwLwYDVQQD EyhkMmNjMDcxMmNiZWU0NTgxOWVkNjM3NWU3NjQ5NmJlODljMjNkNWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqMtCUHXlylcQ7/xiHU9DOqVNth6 7oWvDoqaOfjQw0p4tQFJ52jq30UkdgwE35AcM4Tcua2758dsmSZcPBqo+B+/FKVb cr2fhpctPBUJlfjw8fGrXWsE1TPa47BgcM/CcOiiL7H2VmBigiy3hOK2eqBv26uK a5Pz/2+2RKgSQSTUyTT1HcgHhIs+NwFxzggjl0wO8tBba+tuITTa2ZpKVoQaqwse m4d9mQ2Hry5FHh0DmhSIIKTksVgzimL7WDY4l9tCgr/rXInV2BAagm54G4papxRO LOS58X2dQavA9qkVqRXyXoWeu08Rc/q5ztPtOpUTnEvgtKGICqzMGFrYpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNLMBxLL7kWBntY3XnZJa+icI9XbMB8GA1UdIwQY MBaAFKtvajbsKWDU0F89ncsYe5uQTqWbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTI5cU51d3BZTlRRWHoyZHl4aDdtNUJPcFpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy80ZDliYWQtZDJhYy00MTc5LTg5NDUt OTRiYjgzYTIwMDI5LzEvcTI5cU51d3BZTlRRWHoyZHl4aDdtNUJPcFpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy80ZDliYWQtZDJhYy00MTc5LTg5NDUtOTRiYjgzYTIwMDI5 LzEvcTI5cU51d3BZTlRRWHoyZHl4aDdtNUJPcFpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOnao56/L YP94TwPehP45TVYpxk+ixkgk0c3Hs0fXvMpqb8nIJUl1dpviW44imJLGPMTor+WD GvJ3Px63g9iXkaFsuBxku9arS87GnSHVNCT2gLCC6Prj3eN6nuFboXYG0uk+MRTh DIVHGbswFVlN9c1hztXAlK3yPZ2boTbxTGrmRF9+69MsxygT8INQ0KyWr7Qr2kUZ miZ3RtpAqZeqbk0pzA0QeX3x0zVtIhyC5vwM6Ul8QyrIuyUQlvzrW/qBE2/cHVz2 dzkpZB3/QKDqlMVj5o3TO1x8egtm77LP4I5jH54KiSxMRVEGqf6Tjl3mMsco8Dqh 9Gn4wejZ27Azag== -----END CERTIFICATE-----Generated at Fri Dec 19 11:23:14 2025 by rpki-client