This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft File: q9PisS9HkZgpT69gxuNqCht7_VQ.mft (raw, json) Hash identifier: ERuxHl4wvQv9a/WAu080WHZUXaOGtASbDEVDOddeMf8= Subject key identifier: 7F:05:D6:CD:C1:A7:F6:FF:8D:4F:46:53:8E:FF:1A:A3:F0:93:0B:DB Authority key identifier: AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54 Certificate issuer: /CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54 Certificate serial: 019B1804062636298F46388A6BACBBE1B585 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft Manifest number: 1776 Signing time: Sat 13 Dec 2025 14:01:15 +0000 Manifest this update: Sat 13 Dec 2025 14:01:15 +0000 Manifest next update: Sun 14 Dec 2025 14:01:15 +0000 Files and hashes: 1: 30dF88R9p_cbRx6VSnFVxrOujdw.roa (hash: lDDyLH/2DtUX7Hay39PUf67OI+BeERX0NuLI6ZnhTnY=) 2: q9PisS9HkZgpT69gxuNqCht7_VQ.crl (hash: eaCZakf4LGM+EK5cb+lcm82TNAOWxFM83Dase19Hwn8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.crl rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:04:06:26:36:29:8f:46:38:8a:6b:ac:bb:e1:b5:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54 Validity Not Before: Dec 13 14:01:15 2025 GMT Not After : Dec 14 14:01:15 2025 GMT Subject: CN=7f05d6cdc1a7f6ff8d4f46538eff1aa3f0930bdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9b:0b:df:53:5f:0e:fe:93:71:83:2e:9b:0c: 2b:6f:54:af:ae:37:59:61:7e:f9:d4:e7:42:96:bd: 3a:e2:c8:54:93:6b:f8:7d:c3:41:1e:b1:8a:62:bd: dd:78:3c:34:1e:1a:ab:d2:83:0b:ac:a9:a0:81:9a: 37:f4:94:c6:fb:81:6b:03:ed:46:6b:08:a6:8a:3f: cc:2c:66:00:1b:bd:9a:62:e1:01:4d:ef:e1:e2:1f: f8:54:47:ee:63:e7:91:4b:ea:27:c8:44:1a:0b:a1: 0b:c2:0d:6f:ac:20:f0:e1:e4:18:3d:85:a1:62:27: 91:b9:8a:55:a2:a7:65:41:e8:a9:94:a7:03:a7:d5: 1e:f3:94:5e:7b:cc:4b:24:75:9e:6d:99:b2:2a:03: bc:e3:63:ea:0e:f4:95:43:27:a0:23:3f:96:d5:93: 4c:ac:d1:dc:2e:18:5e:66:df:e0:ee:b7:ae:7f:3d: dd:57:5f:14:06:eb:03:1a:3e:81:04:2a:83:22:10: bc:ed:80:02:05:62:87:67:bf:b0:30:70:e1:4a:da: 5e:eb:89:98:9c:af:f1:51:e3:60:9e:bd:dc:b7:3c: 45:01:6f:89:db:4e:6c:43:38:6a:08:18:64:c9:37: 26:ca:92:e1:2f:5b:04:78:d2:4b:c1:d2:d2:bf:54: 83:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:05:D6:CD:C1:A7:F6:FF:8D:4F:46:53:8E:FF:1A:A3:F0:93:0B:DB X509v3 Authority Key Identifier: keyid:AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:f8:6c:12:df:8d:7b:71:f5:74:28:69:72:68:93:2c:89:82: e5:2a:2e:02:56:eb:82:ca:a7:99:9e:ce:a8:e1:0b:c0:fe:90: 34:71:b2:1b:0c:7c:87:59:d1:73:5c:1d:00:3c:2b:d3:e4:8b: 85:1a:b3:16:e3:71:76:08:ab:bb:24:b9:44:7e:21:ec:ae:6a: e1:f3:f0:c7:9a:96:ec:bf:2c:3a:24:c7:ce:c9:80:a6:7a:2b: b8:aa:c5:7b:95:61:53:ce:43:6e:3b:0d:62:a4:4d:38:fb:26: bd:e0:83:98:12:46:4a:e5:f5:58:e3:fc:51:70:45:ac:f4:b4: d6:cf:6d:ef:6a:76:d0:2e:fc:5e:b9:3d:db:45:b8:00:a2:7c: 76:bd:1b:9d:08:e7:6d:3a:0f:d7:1c:88:da:a9:b7:d5:ce:ea: 89:f7:bb:a9:f5:88:68:72:b0:30:3d:2c:a6:5a:29:9f:4e:68: 43:22:78:0e:58:ab:88:ce:0f:37:d9:85:fb:93:a4:f6:7e:f4: c1:70:3d:87:7e:e4:45:d0:d9:04:a3:3f:27:a6:2c:c3:37:07: 9b:dc:19:39:13:bb:07:6f:b7:6c:00:2f:14:b7:1c:4a:90:39: 1b:89:68:6d:de:ee:97:e1:8c:6e:e1:c6:85:a9:2a:f9:19:5a: 83:3c:57:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYBAYmNimPRjiKa6y74bWFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiZDNlMmIxMmY0NzkxOTgyOTRmYWY2MGM2ZTM2YTBhMWI3 YmZkNTQwHhcNMjUxMjEzMTQwMTE1WhcNMjUxMjE0MTQwMTE1WjAzMTEwLwYDVQQD Eyg3ZjA1ZDZjZGMxYTdmNmZmOGQ0ZjQ2NTM4ZWZmMWFhM2YwOTMwYmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJsL31NfDv6TcYMumwwrb1SvrjdZ YX751OdClr064shUk2v4fcNBHrGKYr3deDw0Hhqr0oMLrKmggZo39JTG+4FrA+1G awimij/MLGYAG72aYuEBTe/h4h/4VEfuY+eRS+onyEQaC6ELwg1vrCDw4eQYPYWh YieRuYpVoqdlQeiplKcDp9Ue85Ree8xLJHWebZmyKgO842PqDvSVQyegIz+W1ZNM rNHcLhheZt/g7reufz3dV18UBusDGj6BBCqDIhC87YACBWKHZ7+wMHDhStpe64mY nK/xUeNgnr3ctzxFAW+J205sQzhqCBhkyTcmypLhL1sEeNJLwdLSv1SDBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH8F1s3Bp/b/jU9GU47/GqPwkwvbMB8GA1UdIwQY MBaAFKvT4rEvR5GYKU+vYMbjagobe/1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTlQaXNTOUhrWmdwVDY5Z3h1TnFDaHQ3X1ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83OTFmYjUtYTVlYi00N2Y1LWFkOWEt OTk3ZjQ3YWI3ZGYyLzEvcTlQaXNTOUhrWmdwVDY5Z3h1TnFDaHQ3X1ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy83OTFmYjUtYTVlYi00N2Y1LWFkOWEtOTk3ZjQ3YWI3ZGYy LzEvcTlQaXNTOUhrWmdwVDY5Z3h1TnFDaHQ3X1ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASPhsEt+N e3H1dChpcmiTLImC5SouAlbrgsqnmZ7OqOELwP6QNHGyGwx8h1nRc1wdADwr0+SL hRqzFuNxdgiruyS5RH4h7K5q4fPwx5qW7L8sOiTHzsmApnoruKrFe5VhU85DbjsN YqRNOPsmveCDmBJGSuX1WOP8UXBFrPS01s9t72p20C78Xrk920W4AKJ8dr0bnQjn bToP1xyI2qm31c7qife7qfWIaHKwMD0splopn05oQyJ4DliriM4PN9mF+5Ok9n70 wXA9h37kRdDZBKM/J6YswzcHm9wZORO7B2+3bAAvFLccSpA5G4lobd7ul+GMbuHG hakq+RlagzxXdQ== -----END CERTIFICATE-----Generated at Sat Dec 13 17:15:03 2025 by rpki-client