This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft File: qIAb4jY_IRvS9XgYrer5wNvhS9s.mft (raw, json) Hash identifier: Fdi9BiBXPKhkFwHtk063iTuuhPHmonm8xVZmt6suAiU= Subject key identifier: 98:CD:4F:8E:0F:63:F7:15:13:C5:06:CA:8E:AB:B5:7A:F0:E4:C0:D3 Authority key identifier: A8:80:1B:E2:36:3F:21:1B:D2:F5:78:18:AD:EA:F9:C0:DB:E1:4B:DB Certificate issuer: /CN=a8801be2363f211bd2f57818adeaf9c0dbe14bdb Certificate serial: 019B2FD52214B23B0D4C81664BCE8500BF33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 05:00:55 +0000 Manifest this update: Thu 18 Dec 2025 05:00:55 +0000 Manifest next update: Fri 19 Dec 2025 05:00:55 +0000 Files and hashes: 1: Ioovps5s613OBdQzBzryR2Ja3A0.roa (hash: ATzykv0spHuFN9BLvq9b09tLyJhBjFr/aCEbExY3CKs=) 2: aQTW2xIeYuZvcEH7gsYJNqz73Xs.roa (hash: ga2DmH5h7HfJ0XIXHVbsof3jQ3Sa9KHt/wMuvsxWtEk=) 3: qIAb4jY_IRvS9XgYrer5wNvhS9s.crl (hash: FSDxucSlVUVvBy1m26iLRQlDsM17Ho5E4AxyLqIHfUA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.crl rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d5:22:14:b2:3b:0d:4c:81:66:4b:ce:85:00:bf:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8801be2363f211bd2f57818adeaf9c0dbe14bdb Validity Not Before: Dec 18 05:00:55 2025 GMT Not After : Dec 19 05:00:55 2025 GMT Subject: CN=98cd4f8e0f63f71513c506ca8eabb57af0e4c0d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:07:64:5c:3f:6e:22:0b:56:de:f2:6f:ed:aa: 30:42:d1:d7:ac:02:09:14:47:40:cb:41:e1:d9:88: e1:34:58:09:d3:cc:88:8a:e2:30:17:6e:db:d5:ad: 4c:44:40:be:19:20:3e:24:63:1d:90:4c:74:89:b3: 5d:13:dd:81:21:f8:15:7c:b8:01:8d:b8:5f:d7:87: 76:6a:81:21:10:1e:4f:89:13:73:be:6a:a7:78:4d: 56:be:d5:32:04:b6:de:b3:01:3f:17:10:10:31:d0: c8:4f:06:d4:86:6f:56:65:10:60:c7:57:bd:1c:6a: 87:58:77:a5:32:a3:1d:f6:72:ee:f5:6e:e8:53:89: c2:bd:c1:ff:65:f4:8e:5f:78:05:22:35:0d:c6:6a: d6:e4:a1:82:5a:ae:d6:ba:95:f2:61:20:2b:59:a7: a6:51:b7:3c:e4:cd:16:42:39:e8:20:19:af:ca:68: 08:ba:ae:e2:17:37:2b:29:c1:fa:a4:d1:f8:b3:bc: 31:5a:13:39:e1:04:8c:3d:40:80:3e:eb:5c:56:67: 72:d5:ba:02:e8:92:42:f4:47:6b:59:ef:b1:17:92: 5a:dc:b9:e3:ee:67:d0:dd:67:8c:d6:7a:9f:b3:0a: 56:e3:cd:88:e4:35:32:c3:5e:a3:b8:0b:75:ab:39: aa:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:CD:4F:8E:0F:63:F7:15:13:C5:06:CA:8E:AB:B5:7A:F0:E4:C0:D3 X509v3 Authority Key Identifier: keyid:A8:80:1B:E2:36:3F:21:1B:D2:F5:78:18:AD:EA:F9:C0:DB:E1:4B:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:a6:50:0a:ea:94:be:3c:5a:4e:c7:fb:2c:b7:08:a1:e5:f2: 7f:c0:6f:c6:5c:e1:22:c5:2c:8b:7b:97:6f:68:5e:cd:de:60: e7:29:47:e9:e9:d4:59:25:d0:2c:2c:ff:27:c1:d0:75:32:24: c9:1a:d7:81:06:7d:b5:9c:58:4a:f5:9b:39:5d:ba:3e:07:b7: 55:63:b4:0e:ca:35:ab:12:a2:56:27:a2:93:4e:18:a1:c4:5e: a3:ee:0a:6e:db:d7:4e:52:28:fa:c9:40:e2:26:fa:c0:e6:65: 2f:1c:ab:69:a0:bd:4a:9f:ef:65:41:57:da:cf:4c:8f:69:19: a0:c0:8a:21:4f:96:a7:c7:1c:a1:e6:64:62:ec:bd:be:8e:6d: 32:9a:a9:a2:56:28:99:d1:e1:56:05:f3:d1:4b:1b:0f:ab:58: 7f:34:2a:2c:88:d0:36:66:df:d3:f2:b0:1f:f1:43:1a:3b:29: a9:70:97:26:ca:2c:63:af:0a:41:cc:a7:30:17:0c:a7:d3:74: 0a:3d:b0:e1:99:eb:7a:62:11:5c:9c:a2:aa:65:39:0d:f0:f6: 59:73:39:85:47:f2:4f:eb:29:72:44:37:be:c1:2d:09:6b:88: 18:c2:f6:8f:c6:8c:c7:ca:49:83:4c:93:3d:c1:1a:f9:51:68: bf:bf:50:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1SIUsjsNTIFmS86FAL8zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4ODAxYmUyMzYzZjIxMWJkMmY1NzgxOGFkZWFmOWMwZGJl MTRiZGIwHhcNMjUxMjE4MDUwMDU1WhcNMjUxMjE5MDUwMDU1WjAzMTEwLwYDVQQD Eyg5OGNkNGY4ZTBmNjNmNzE1MTNjNTA2Y2E4ZWFiYjU3YWYwZTRjMGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQdkXD9uIgtW3vJv7aowQtHXrAIJ FEdAy0Hh2YjhNFgJ08yIiuIwF27b1a1MREC+GSA+JGMdkEx0ibNdE92BIfgVfLgB jbhf14d2aoEhEB5PiRNzvmqneE1WvtUyBLbeswE/FxAQMdDITwbUhm9WZRBgx1e9 HGqHWHelMqMd9nLu9W7oU4nCvcH/ZfSOX3gFIjUNxmrW5KGCWq7WupXyYSArWaem Ubc85M0WQjnoIBmvymgIuq7iFzcrKcH6pNH4s7wxWhM54QSMPUCAPutcVmdy1boC 6JJC9EdrWe+xF5Ja3Lnj7mfQ3WeM1nqfswpW482I5DUyw16juAt1qzmqvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJjNT44PY/cVE8UGyo6rtXrw5MDTMB8GA1UdIwQY MBaAFKiAG+I2PyEb0vV4GK3q+cDb4UvbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUlBYjRqWV9JUnZTOVhnWXJlcjV3TnZoUzlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS84MTFlNzMtY2YzMC00OTRkLWFjYWMt ODQyMGFlOWUwNjIyLzEvcUlBYjRqWV9JUnZTOVhnWXJlcjV3TnZoUzlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS84MTFlNzMtY2YzMC00OTRkLWFjYWMtODQyMGFlOWUwNjIy LzEvcUlBYjRqWV9JUnZTOVhnWXJlcjV3TnZoUzlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANKZQCuqU vjxaTsf7LLcIoeXyf8BvxlzhIsUsi3uXb2hezd5g5ylH6enUWSXQLCz/J8HQdTIk yRrXgQZ9tZxYSvWbOV26Pge3VWO0Dso1qxKiVieik04YocReo+4KbtvXTlIo+slA 4ib6wOZlLxyraaC9Sp/vZUFX2s9Mj2kZoMCKIU+Wp8ccoeZkYuy9vo5tMpqpolYo mdHhVgXz0UsbD6tYfzQqLIjQNmbf0/KwH/FDGjspqXCXJsosY68KQcynMBcMp9N0 Cj2w4ZnremIRXJyiqmU5DfD2WXM5hUfyT+spckQ3vsEtCWuIGML2j8aMx8pJg0yT PcEa+VFov79QMw== -----END CERTIFICATE-----Generated at Thu Dec 18 09:30:20 2025 by rpki-client