This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.mft File: qLq2HDYOoQjNGSx856ftVWW9--A.mft (raw, json) Hash identifier: PWH1H36MkiLapcDjoC9LAMWe/ZWEoiCjFNiBn1tNXI8= Subject key identifier: CA:2F:1D:7F:BE:BB:B5:74:4A:74:7D:72:6A:75:57:2D:93:94:AD:AC Authority key identifier: A8:BA:B6:1C:36:0E:A1:08:CD:19:2C:7C:E7:A7:ED:55:65:BD:FB:E0 Certificate issuer: /CN=a8bab61c360ea108cd192c7ce7a7ed5565bdfbe0 Certificate serial: 019B59E3B9E602C1CB64BD5389509FD1D481 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLq2HDYOoQjNGSx856ftVWW9--A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.mft Manifest number: 0F0D Signing time: Fri 26 Dec 2025 09:00:54 +0000 Manifest this update: Fri 26 Dec 2025 09:00:54 +0000 Manifest next update: Sat 27 Dec 2025 09:00:54 +0000 Files and hashes: 1: llKmEV0JVzIG0_MZWPlP8ygpeC0.roa (hash: jPaOJ8ND+JyHLtdhEIszWBX4EhT8804ihxPfOvX+M6g=) 2: qLq2HDYOoQjNGSx856ftVWW9--A.crl (hash: /yWTfyDiHE16R5XvEl0WC59L4nBqTd+9X12qa48P1Lw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.crl rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.mft rsync://rpki.ripe.net/repository/DEFAULT/qLq2HDYOoQjNGSx856ftVWW9--A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:b9:e6:02:c1:cb:64:bd:53:89:50:9f:d1:d4:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8bab61c360ea108cd192c7ce7a7ed5565bdfbe0 Validity Not Before: Dec 26 09:00:54 2025 GMT Not After : Dec 27 09:00:54 2025 GMT Subject: CN=ca2f1d7fbebbb5744a747d726a75572d9394adac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7e:24:c8:28:54:29:6a:08:03:ed:3d:f4:de: ec:28:b7:9a:6b:ef:f7:6b:4b:43:83:20:00:52:84: 0c:cc:5e:d0:c5:54:98:3d:e7:8d:43:18:6d:fb:e1: 47:3b:d9:e9:b7:b9:0d:16:c3:36:5a:cc:ed:17:b4: b8:57:e6:c6:e6:ae:7a:2c:b8:e4:f7:61:ab:fa:09: 22:54:04:7c:65:82:d0:0d:9a:07:b7:27:4b:91:ac: b3:7f:f9:64:a5:bc:86:94:3f:68:20:fb:59:8d:6b: 48:82:99:35:fe:5d:99:72:38:17:34:74:24:42:70: 1f:e0:d7:1f:03:f6:c5:5c:4b:59:e3:64:49:50:2b: 5c:12:c0:f3:bd:f5:9e:fe:af:b8:43:16:56:e1:f0: e8:78:18:6c:6a:d0:8d:1b:03:80:57:13:48:03:93: e9:6e:74:be:bb:b3:ea:8f:15:01:bb:24:59:e6:19: 3a:d4:74:72:cf:7c:85:7a:7e:fc:59:3e:b1:e3:3a: 4b:8d:51:77:84:48:16:89:4e:a5:35:17:9b:59:f6: 25:ed:80:56:97:7e:c4:3f:20:ab:e4:3a:a0:94:2b: 2e:54:5b:c1:cd:b9:31:97:7d:ee:0b:2e:5b:96:c2: d0:a5:c0:53:4c:b0:89:3a:f5:a3:a8:9f:0c:74:a3: 13:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:2F:1D:7F:BE:BB:B5:74:4A:74:7D:72:6A:75:57:2D:93:94:AD:AC X509v3 Authority Key Identifier: keyid:A8:BA:B6:1C:36:0E:A1:08:CD:19:2C:7C:E7:A7:ED:55:65:BD:FB:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLq2HDYOoQjNGSx856ftVWW9--A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:55:33:ce:84:c5:bf:bb:de:fd:ca:5f:1c:21:b0:93:57:12: 76:c4:5d:f3:97:38:00:71:14:8a:de:63:07:f6:a7:bb:3d:dc: ea:87:21:29:ec:ef:2d:b8:43:df:98:dd:b5:fb:b0:15:23:e3: e9:b8:10:99:34:ec:80:14:d5:e8:0d:c6:eb:20:05:a5:b6:7f: 33:61:1b:6b:d7:a3:23:cd:91:87:a5:7e:7c:fc:bd:2a:78:1a: c6:05:fd:69:b9:23:4d:81:4b:25:61:8d:b3:60:f0:12:9f:8e: 20:90:3b:ea:24:2f:fc:5a:0d:2c:7e:d4:e2:62:cb:b4:88:5e: 33:02:ea:88:b8:eb:84:10:5d:e5:78:92:18:23:82:f6:e2:22: f7:1a:e6:e7:bc:73:67:23:0f:36:43:7d:eb:51:ee:70:52:74: a1:54:8a:d1:88:2b:22:38:76:ce:ac:23:4f:ee:20:65:df:d2: 55:7d:66:47:64:8f:05:20:0e:ff:bc:c1:ab:c0:37:d5:61:05: e5:82:21:18:aa:28:bf:ee:e2:13:41:16:4a:26:e3:56:5a:89: f3:51:b8:83:ec:8a:6e:b4:32:ac:d2:13:5a:b5:20:4d:f8:c1: 13:af:7f:f2:bd:f8:ee:cd:4f:c2:0c:30:ac:4c:c0:a7:b6:59: ac:30:21:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ47nmAsHLZL1TiVCf0dSBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4YmFiNjFjMzYwZWExMDhjZDE5MmM3Y2U3YTdlZDU1NjVi ZGZiZTAwHhcNMjUxMjI2MDkwMDU0WhcNMjUxMjI3MDkwMDU0WjAzMTEwLwYDVQQD EyhjYTJmMWQ3ZmJlYmJiNTc0NGE3NDdkNzI2YTc1NTcyZDkzOTRhZGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzX4kyChUKWoIA+099N7sKLeaa+/3 a0tDgyAAUoQMzF7QxVSYPeeNQxht++FHO9npt7kNFsM2WsztF7S4V+bG5q56LLjk 92Gr+gkiVAR8ZYLQDZoHtydLkayzf/lkpbyGlD9oIPtZjWtIgpk1/l2ZcjgXNHQk QnAf4NcfA/bFXEtZ42RJUCtcEsDzvfWe/q+4QxZW4fDoeBhsatCNGwOAVxNIA5Pp bnS+u7PqjxUBuyRZ5hk61HRyz3yFen78WT6x4zpLjVF3hEgWiU6lNRebWfYl7YBW l37EPyCr5DqglCsuVFvBzbkxl33uCy5blsLQpcBTTLCJOvWjqJ8MdKMTswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMovHX++u7V0SnR9cmp1Vy2TlK2sMB8GA1UdIwQY MBaAFKi6thw2DqEIzRksfOen7VVlvfvgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUxxMkhEWU9vUWpOR1N4ODU2ZnRWV1c5LS1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC85YjM5YjktODJjOC00YzdkLWIyNjgt NzY2ZTU0NjA1N2E3LzEvcUxxMkhEWU9vUWpOR1N4ODU2ZnRWV1c5LS1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC85YjM5YjktODJjOC00YzdkLWIyNjgtNzY2ZTU0NjA1N2E3 LzEvcUxxMkhEWU9vUWpOR1N4ODU2ZnRWV1c5LS1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF1UzzoTF v7ve/cpfHCGwk1cSdsRd85c4AHEUit5jB/anuz3c6ochKezvLbhD35jdtfuwFSPj 6bgQmTTsgBTV6A3G6yAFpbZ/M2Eba9ejI82Rh6V+fPy9KngaxgX9abkjTYFLJWGN s2DwEp+OIJA76iQv/FoNLH7U4mLLtIheMwLqiLjrhBBd5XiSGCOC9uIi9xrm57xz ZyMPNkN961HucFJ0oVSK0YgrIjh2zqwjT+4gZd/SVX1mR2SPBSAO/7zBq8A31WEF 5YIhGKoov+7iE0EWSibjVlqJ81G4g+yKbrQyrNITWrUgTfjBE69/8r347s1Pwgww rEzAp7ZZrDAhnA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:14 2025 by rpki-client