This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft File: Q9_AZs580-OCV0poZnlzsLRo3zw.mft (raw, json) Hash identifier: btUMi+OysrphtVi5sI40zLDL64+hpstrAzQx3YNqNvQ= Subject key identifier: 9E:A5:53:45:26:94:A0:B4:2D:62:5B:0B:6E:96:AF:76:A3:C8:E1:44 Authority key identifier: 43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C Certificate issuer: /CN=43dfc066ce7cd3e382574a68667973b0b468df3c Certificate serial: 019B4324A354A5929EAF635C11E594292FC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft Manifest number: 1715 Signing time: Sun 21 Dec 2025 23:00:33 +0000 Manifest this update: Sun 21 Dec 2025 23:00:33 +0000 Manifest next update: Mon 22 Dec 2025 23:00:33 +0000 Files and hashes: 1: Q2tZHxcnTfsijpne_PaEOT5dOKg.roa (hash: FVNO2p4hWZxlSs3+Rn7ouc28IBioq9Skdi74miEeHBs=) 2: Q9_AZs580-OCV0poZnlzsLRo3zw.crl (hash: doCvpce9lLbyRNmDAaxK5RNkpo3XeGNxIV0G2v1NRaw=) 3: UWeGIl_6VHcutFLK0L5MueAINMY.roa (hash: AVZtTMJBhtqap/729tRkybRSFR3yVa5RKP1aMlDfHfg=) 4: obC6Nt8k6sToBFUPijQUE-JEfbw.roa (hash: yOvP0SEgsV1LHmbEstQePJyjtcgM5eUQYScQpZCvC+g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:24:a3:54:a5:92:9e:af:63:5c:11:e5:94:29:2f:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43dfc066ce7cd3e382574a68667973b0b468df3c Validity Not Before: Dec 21 23:00:33 2025 GMT Not After : Dec 22 23:00:33 2025 GMT Subject: CN=9ea553452694a0b42d625b0b6e96af76a3c8e144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2d:22:e6:d8:db:a8:78:f7:1c:06:35:b2:d5: ed:53:24:5f:b3:df:0e:6d:50:57:f9:54:81:ca:60: 18:f4:50:b1:62:ef:d7:6a:33:77:f6:6e:ec:31:aa: 6c:c2:05:e0:2d:16:7f:e3:85:6e:f7:11:6a:58:6b: a9:f0:a8:70:a3:70:9c:b8:bc:82:10:a5:00:88:56: 8d:00:12:30:20:8e:46:24:76:67:1b:7e:e9:19:64: 39:d6:9c:20:a2:75:8e:bc:99:07:ad:ef:33:c6:20: b2:41:2c:28:a7:9b:9b:fe:e5:c8:14:79:7e:cf:0e: 85:66:22:1f:c8:18:cf:7b:60:33:96:86:b8:1e:7b: ad:bd:b8:f1:d1:25:7a:99:c0:2e:2c:c6:14:8e:26: b9:cc:e8:03:03:af:8f:5b:4e:e1:dd:ee:1a:9a:75: 00:a4:31:e2:db:45:1c:d2:c0:17:f9:e6:a9:75:51: b8:a9:0e:51:d1:8b:be:16:7e:f5:7a:87:8a:16:40: f0:c4:6d:56:25:ee:60:de:e9:97:a1:54:e8:1c:36: 21:d8:7c:47:12:aa:88:6b:8e:6d:3a:3f:67:d4:4f: 40:90:43:1a:e2:c1:1d:5b:05:ee:28:ec:19:f2:ac: dd:71:29:83:6a:95:df:53:87:72:78:ea:bd:05:56: 43:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A5:53:45:26:94:A0:B4:2D:62:5B:0B:6E:96:AF:76:A3:C8:E1:44 X509v3 Authority Key Identifier: keyid:43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:47:fa:62:b8:c5:00:5f:5a:2c:f5:d5:80:cf:48:fe:bc:09: bb:59:59:60:e6:6d:04:66:fd:c8:77:72:93:0c:d1:68:47:d0: e5:1c:b4:c7:1c:af:f0:2e:ae:af:04:d0:85:89:70:74:41:26: 24:72:e0:b9:0d:32:83:69:f0:72:a7:6d:27:1d:0f:cb:da:fa: fe:4f:00:96:86:8e:ca:b5:ac:b0:86:35:d0:f3:f3:3f:63:2f: fa:62:b6:da:4e:31:6e:0f:cd:c8:76:9c:75:5b:52:03:31:92: 3c:39:e9:2c:d2:24:75:31:f4:43:12:cb:1d:0b:56:44:85:f0: 2a:f6:ea:4c:aa:4b:a0:08:fc:f7:35:2e:55:6e:af:07:ba:d4: de:5d:c6:c2:36:1a:b9:9d:be:83:7e:37:90:51:f8:9e:58:30: f2:63:24:c9:6f:0e:97:dd:be:e0:00:45:5e:38:13:67:df:66: cd:77:42:4d:95:49:d8:62:3d:f6:5a:ec:4e:25:ce:e4:ff:32: ce:06:24:5f:8f:ea:7c:44:05:4b:44:89:98:7d:d4:ab:dc:ff: 9a:8b:fb:5d:dd:a9:f4:65:7f:a8:10:27:39:a5:2d:7a:13:20: ed:ba:68:33:c1:16:ae:1f:20:08:f7:a2:f7:7a:82:63:59:67: d8:8a:3c:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJKNUpZKer2NcEeWUKS/CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZGZjMDY2Y2U3Y2QzZTM4MjU3NGE2ODY2Nzk3M2IwYjQ2 OGRmM2MwHhcNMjUxMjIxMjMwMDMzWhcNMjUxMjIyMjMwMDMzWjAzMTEwLwYDVQQD Eyg5ZWE1NTM0NTI2OTRhMGI0MmQ2MjViMGI2ZTk2YWY3NmEzYzhlMTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAli0i5tjbqHj3HAY1stXtUyRfs98O bVBX+VSBymAY9FCxYu/XajN39m7sMapswgXgLRZ/44Vu9xFqWGup8Khwo3CcuLyC EKUAiFaNABIwII5GJHZnG37pGWQ51pwgonWOvJkHre8zxiCyQSwop5ub/uXIFHl+ zw6FZiIfyBjPe2Azloa4Hnutvbjx0SV6mcAuLMYUjia5zOgDA6+PW07h3e4amnUA pDHi20Uc0sAX+eapdVG4qQ5R0Yu+Fn71eoeKFkDwxG1WJe5g3umXoVToHDYh2HxH EqqIa45tOj9n1E9AkEMa4sEdWwXuKOwZ8qzdcSmDapXfU4dyeOq9BVZDtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ6lU0UmlKC0LWJbC26Wr3ajyOFEMB8GA1UdIwQY MBaAFEPfwGbOfNPjgldKaGZ5c7C0aN88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTlfQVpzNTgwLU9DVjBwb1pubHpzTFJvM3p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8xNjM2ZjgtNTAyNi00MDRlLWExYWUt MjUwOTc0M2FkMjllLzEvUTlfQVpzNTgwLU9DVjBwb1pubHpzTFJvM3p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8xNjM2ZjgtNTAyNi00MDRlLWExYWUtMjUwOTc0M2FkMjll LzEvUTlfQVpzNTgwLU9DVjBwb1pubHpzTFJvM3p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa0f6YrjF AF9aLPXVgM9I/rwJu1lZYOZtBGb9yHdykwzRaEfQ5Ry0xxyv8C6urwTQhYlwdEEm JHLguQ0yg2nwcqdtJx0Py9r6/k8AloaOyrWssIY10PPzP2Mv+mK22k4xbg/NyHac dVtSAzGSPDnpLNIkdTH0QxLLHQtWRIXwKvbqTKpLoAj89zUuVW6vB7rU3l3GwjYa uZ2+g343kFH4nlgw8mMkyW8Ol92+4ABFXjgTZ99mzXdCTZVJ2GI99lrsTiXO5P8y zgYkX4/qfEQFS0SJmH3Uq9z/mov7Xd2p9GV/qBAnOaUtehMg7bpoM8EWrh8gCPei 93qCY1ln2Io87w== -----END CERTIFICATE-----Generated at Mon Dec 22 03:50:06 2025 by rpki-client