This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft File: q29qNuwpYNTQXz2dyxh7m5BOpZs.mft (raw, json) Hash identifier: /jRx1tqQmsDm9eet7qeOuH4CX0I1l+vUsEgW+Av6JLI= Subject key identifier: 9B:92:80:81:F3:E1:E1:29:F1:5C:9D:CA:6B:83:D5:E0:A1:87:D8:D1 Authority key identifier: AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B Certificate issuer: /CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b Certificate serial: 019B43254AC524D2EBFEB8310DEFB7841B33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft Manifest number: 0786 Signing time: Sun 21 Dec 2025 23:01:15 +0000 Manifest this update: Sun 21 Dec 2025 23:01:15 +0000 Manifest next update: Mon 22 Dec 2025 23:01:15 +0000 Files and hashes: 1: DcoOphnBv0Z-r0DRs1Wzn6GO5g8.roa (hash: /C9jr7QH16ykeDGqHdZ0LLAVK74Wkvu3hj1t3uV43yA=) 2: Nq6xP1ML7pMOmt1I4z-fGnkBjbQ.roa (hash: eP8YWZy4BtRcpeOrILokYjbMpuSFUnV4sCVcpAqWhwM=) 3: XmMK1HZ3DcPkTMV2el117ysMhn8.roa (hash: 4EKgTSdeFZXBlalCvjDw36pJD0WP5d5sVK8uLLXyrbI=) 4: q29qNuwpYNTQXz2dyxh7m5BOpZs.crl (hash: OTbZezIIfKksr/WpOY8wzz/MuE0/AUIx/g4pzfP4gEU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:25:4a:c5:24:d2:eb:fe:b8:31:0d:ef:b7:84:1b:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b Validity Not Before: Dec 21 23:01:15 2025 GMT Not After : Dec 22 23:01:15 2025 GMT Subject: CN=9b928081f3e1e129f15c9dca6b83d5e0a187d8d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:48:2b:72:87:68:e0:33:3a:66:c7:32:2b:3c: 48:42:8b:3f:98:75:f4:bb:c0:fd:74:69:fe:ed:10: 25:54:41:b6:07:13:65:5e:f2:e1:2b:f8:0d:0e:eb: 9e:66:b2:63:2b:d4:0a:31:2a:cf:33:b9:d6:3f:92: a0:5d:7d:32:71:0a:a5:fc:17:98:a7:b6:a3:c7:11: 7f:37:b3:3d:bf:c5:09:bc:ad:cb:2e:28:a0:ae:8b: cf:29:8a:dd:34:d1:59:44:c0:f1:8e:7f:b5:af:98: c2:b3:6a:3c:45:89:0d:fb:a2:10:d1:f5:5f:4f:9f: 9b:69:bd:5e:c7:d2:17:71:9c:a3:54:e4:15:8b:be: 60:e3:84:ee:32:88:f7:01:5f:7c:b8:91:f8:1e:dd: f2:e3:34:9d:51:4c:5f:06:c5:fe:e0:ec:53:6b:27: db:05:fa:04:71:ad:05:e9:db:db:56:cd:8c:2a:f5: fc:ef:dc:5e:fe:17:1c:29:1e:fc:9f:0e:70:20:2a: e1:60:6e:fe:e6:b1:2b:0f:7c:41:fa:f8:77:03:10: 40:16:ea:ec:68:1f:49:98:ee:e1:99:92:5d:19:0b: 15:7f:72:4b:8b:0d:42:ed:99:c7:67:8d:c6:82:d9: 33:6f:8e:03:28:e5:b8:cb:be:a2:0a:ae:53:69:b8: 9a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:92:80:81:F3:E1:E1:29:F1:5C:9D:CA:6B:83:D5:E0:A1:87:D8:D1 X509v3 Authority Key Identifier: keyid:AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:22:d0:a1:47:47:2e:a8:3e:7b:71:40:a6:8b:7b:78:ff:51: 86:e0:86:c6:38:a0:07:0f:ac:c0:a3:46:70:5c:b5:09:d5:27: 57:90:9d:7d:5a:0e:e7:a1:a5:e1:5e:53:f9:b4:10:ce:4a:e8: fd:8a:28:1e:f3:47:74:05:b0:05:8c:f9:28:ed:d7:65:4d:87: 9e:0f:47:90:45:a3:dc:e3:0e:60:73:a0:a1:02:a3:c4:d3:83: e2:71:26:11:b2:16:ee:8b:b3:d8:4a:0c:2d:fd:a0:63:9b:57: b4:9b:7d:a8:0a:67:71:39:ef:0c:14:31:33:7f:6e:b6:d4:ee: d9:23:2e:1c:c1:7d:e9:74:ea:9d:e1:a6:9a:35:27:ac:99:cd: 40:80:ec:c0:b4:46:23:94:a7:e7:20:94:7e:2c:58:38:f3:15: 7f:99:a2:ec:5c:2f:30:9c:5d:c8:d9:6e:c3:51:c3:1d:47:42: 09:c4:ff:7a:7d:67:ad:c0:2b:b8:ec:47:bb:fb:f1:b7:00:1b: 04:0e:47:99:76:bf:41:9b:3d:55:ee:6f:a8:a4:9f:1f:05:58: a3:f4:74:ea:d1:41:ac:ca:db:b4:25:b0:ae:16:06:0b:0f:25: f1:41:c2:37:f6:eb:51:35:f5:20:5b:70:fe:69:f7:ab:dc:41: 86:92:8c:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJUrFJNLr/rgxDe+3hBszMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiNmY2YTM2ZWMyOTYwZDRkMDVmM2Q5ZGNiMTg3YjliOTA0 ZWE1OWIwHhcNMjUxMjIxMjMwMTE1WhcNMjUxMjIyMjMwMTE1WjAzMTEwLwYDVQQD Eyg5YjkyODA4MWYzZTFlMTI5ZjE1YzlkY2E2YjgzZDVlMGExODdkOGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEgrcodo4DM6ZscyKzxIQos/mHX0 u8D9dGn+7RAlVEG2BxNlXvLhK/gNDuueZrJjK9QKMSrPM7nWP5KgXX0ycQql/BeY p7ajxxF/N7M9v8UJvK3LLiigrovPKYrdNNFZRMDxjn+1r5jCs2o8RYkN+6IQ0fVf T5+bab1ex9IXcZyjVOQVi75g44TuMoj3AV98uJH4Ht3y4zSdUUxfBsX+4OxTayfb BfoEca0F6dvbVs2MKvX879xe/hccKR78nw5wICrhYG7+5rErD3xB+vh3AxBAFurs aB9JmO7hmZJdGQsVf3JLiw1C7ZnHZ43Ggtkzb44DKOW4y76iCq5TabiarwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJuSgIHz4eEp8VydymuD1eChh9jRMB8GA1UdIwQY MBaAFKtvajbsKWDU0F89ncsYe5uQTqWbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTI5cU51d3BZTlRRWHoyZHl4aDdtNUJPcFpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy80ZDliYWQtZDJhYy00MTc5LTg5NDUt OTRiYjgzYTIwMDI5LzEvcTI5cU51d3BZTlRRWHoyZHl4aDdtNUJPcFpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy80ZDliYWQtZDJhYy00MTc5LTg5NDUtOTRiYjgzYTIwMDI5 LzEvcTI5cU51d3BZTlRRWHoyZHl4aDdtNUJPcFpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKyLQoUdH Lqg+e3FApot7eP9RhuCGxjigBw+swKNGcFy1CdUnV5CdfVoO56Gl4V5T+bQQzkro /YooHvNHdAWwBYz5KO3XZU2Hng9HkEWj3OMOYHOgoQKjxNOD4nEmEbIW7ouz2EoM Lf2gY5tXtJt9qApncTnvDBQxM39uttTu2SMuHMF96XTqneGmmjUnrJnNQIDswLRG I5Sn5yCUfixYOPMVf5mi7FwvMJxdyNluw1HDHUdCCcT/en1nrcAruOxHu/vxtwAb BA5HmXa/QZs9Ve5vqKSfHwVYo/R06tFBrMrbtCWwrhYGCw8l8UHCN/brUTX1IFtw /mn3q9xBhpKMfg== -----END CERTIFICATE-----Generated at Mon Dec 22 02:21:38 2025 by rpki-client