This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft File: Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft (raw, json) Hash identifier: GMCG+WamrwDCcJmIftP7IwDxv3BspgrB1cxFxyouj7k= Subject key identifier: 8B:9B:0F:40:6D:AD:7B:3F:D9:95:31:6A:C8:36:C3:00:C3:FA:0D:9F Authority key identifier: 43:CF:41:61:93:A1:C2:ED:30:56:B6:47:E5:A4:65:03:14:8E:38:24 Certificate issuer: /CN=43cf416193a1c2ed3056b647e5a46503148e3824 Certificate serial: 019B5A1A58CFF71E73C11B68DD1C729E6B6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft Manifest number: 0857 Signing time: Fri 26 Dec 2025 10:00:34 +0000 Manifest this update: Fri 26 Dec 2025 10:00:34 +0000 Manifest next update: Sat 27 Dec 2025 10:00:34 +0000 Files and hashes: 1: EVfs3Ty5us2kONM9lNbKxeOpQy4.roa (hash: XNAy20rJW1bN/SCZtyAydEWkC3qMnBorsPnV2qCqZ6A=) 2: Q89BYZOhwu0wVrZH5aRlAxSOOCQ.crl (hash: 72SXPUwJQSUyUa9CuZQ/HFHmRF+aJIDus9VYa86Uf1U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:58:cf:f7:1e:73:c1:1b:68:dd:1c:72:9e:6b:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43cf416193a1c2ed3056b647e5a46503148e3824 Validity Not Before: Dec 26 10:00:34 2025 GMT Not After : Dec 27 10:00:34 2025 GMT Subject: CN=8b9b0f406dad7b3fd995316ac836c300c3fa0d9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:32:20:3d:85:37:4e:8c:e8:55:13:2c:4a:94: d4:5b:e4:62:f9:7d:ff:fa:e2:ae:9e:95:88:13:de: 5f:3e:55:35:f5:10:8e:2a:11:d6:de:28:1c:e5:5b: 1f:b6:25:2c:64:35:74:af:89:af:59:a9:46:cc:27: 83:4a:bc:32:33:de:a7:64:70:3a:19:90:49:90:6c: 2c:a4:03:eb:d5:63:3c:1c:9d:84:08:d7:bb:44:37: f4:b9:6c:7d:7a:15:81:fd:fb:59:c9:ec:db:0b:6f: 85:64:0c:16:ac:a8:d8:d5:d0:a7:25:05:52:a6:dc: 67:4c:ed:7f:89:d9:f3:20:42:fc:2f:7f:28:ef:2c: 18:82:84:4d:bb:0b:1d:14:34:0d:50:3f:10:46:55: fa:99:7f:8f:4e:8b:ab:2d:0e:bd:42:0d:66:c7:42: 74:88:37:8f:90:38:06:aa:e3:8a:a3:c4:42:22:94: 73:d8:31:73:4f:97:2b:ab:f9:2c:11:e9:d9:da:40: e4:9f:55:61:b6:00:19:01:d8:23:7f:8a:91:71:c4: 74:b3:69:6f:de:56:b6:eb:f8:84:d7:44:86:41:43: 75:31:66:2f:eb:fd:a3:1b:69:d3:76:49:c2:3c:e2: ba:2e:aa:4e:e0:10:f1:9d:d7:f5:1e:88:0b:94:e4: 5f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:9B:0F:40:6D:AD:7B:3F:D9:95:31:6A:C8:36:C3:00:C3:FA:0D:9F X509v3 Authority Key Identifier: keyid:43:CF:41:61:93:A1:C2:ED:30:56:B6:47:E5:A4:65:03:14:8E:38:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:3c:ac:b6:fd:8a:60:d7:41:f7:0e:30:9c:f5:0c:7a:42:28: 46:14:6f:cc:33:b5:12:01:80:73:8e:60:de:93:63:d8:e0:70: a1:d3:5a:30:d3:a5:36:9d:78:97:02:77:23:bb:cf:03:5c:2d: 80:36:e6:85:f6:cb:c4:6e:c1:1e:42:24:9b:69:b3:90:58:11: bc:58:08:33:7a:99:f7:d5:8f:71:96:31:48:4d:a6:49:6e:b8: 87:26:3a:14:08:2a:25:3a:ae:bb:38:26:08:23:5e:e8:90:92: b4:5e:9f:9d:d3:20:de:37:53:77:96:5a:0a:68:7c:05:58:1b: 6a:59:00:ac:c1:55:36:c9:13:c0:24:ec:34:11:ba:bd:39:64: 4c:e2:d3:7b:93:cc:f7:15:b4:b6:dd:e8:0d:55:ea:89:07:e2: fb:c6:5e:bb:7a:f0:3b:19:05:26:db:ab:b0:ad:f6:50:26:16: d3:fb:64:9f:3e:86:a7:8a:bf:c4:b9:0e:e3:e3:8b:0a:87:a9: 41:96:1c:37:ea:0b:e4:08:8a:39:c4:e4:c3:de:7f:b0:e6:ec: 00:fb:b5:ae:ae:eb:2e:78:b5:87:e5:72:81:b6:d6:e3:d7:22: db:45:3f:6c:d7:b8:dd:30:54:89:2f:8f:0a:2e:b0:9d:1e:4b: 80:6c:ad:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGljP9x5zwRto3RxynmtqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzY2Y0MTYxOTNhMWMyZWQzMDU2YjY0N2U1YTQ2NTAzMTQ4 ZTM4MjQwHhcNMjUxMjI2MTAwMDM0WhcNMjUxMjI3MTAwMDM0WjAzMTEwLwYDVQQD Eyg4YjliMGY0MDZkYWQ3YjNmZDk5NTMxNmFjODM2YzMwMGMzZmEwZDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDIgPYU3TozoVRMsSpTUW+Ri+X3/ +uKunpWIE95fPlU19RCOKhHW3igc5VsftiUsZDV0r4mvWalGzCeDSrwyM96nZHA6 GZBJkGwspAPr1WM8HJ2ECNe7RDf0uWx9ehWB/ftZyezbC2+FZAwWrKjY1dCnJQVS ptxnTO1/idnzIEL8L38o7ywYgoRNuwsdFDQNUD8QRlX6mX+PTourLQ69Qg1mx0J0 iDePkDgGquOKo8RCIpRz2DFzT5crq/ksEenZ2kDkn1VhtgAZAdgjf4qRccR0s2lv 3la26/iE10SGQUN1MWYv6/2jG2nTdknCPOK6LqpO4BDxndf1HogLlORfvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIubD0BtrXs/2ZUxasg2wwDD+g2fMB8GA1UdIwQY MBaAFEPPQWGTocLtMFa2R+WkZQMUjjgkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTg5QllaT2h3dTB3VnJaSDVhUmxBeFNPT0NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9hYTMxY2YtYmIzMS00OTdjLWE1Nzct MDliOTY5ZDE2MGZlLzEvUTg5QllaT2h3dTB3VnJaSDVhUmxBeFNPT0NRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9hYTMxY2YtYmIzMS00OTdjLWE1NzctMDliOTY5ZDE2MGZl LzEvUTg5QllaT2h3dTB3VnJaSDVhUmxBeFNPT0NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMTystv2K YNdB9w4wnPUMekIoRhRvzDO1EgGAc45g3pNj2OBwodNaMNOlNp14lwJ3I7vPA1wt gDbmhfbLxG7BHkIkm2mzkFgRvFgIM3qZ99WPcZYxSE2mSW64hyY6FAgqJTquuzgm CCNe6JCStF6fndMg3jdTd5ZaCmh8BVgbalkArMFVNskTwCTsNBG6vTlkTOLTe5PM 9xW0tt3oDVXqiQfi+8Zeu3rwOxkFJtursK32UCYW0/tknz6Gp4q/xLkO4+OLCoep QZYcN+oL5AiKOcTkw95/sObsAPu1rq7rLni1h+VygbbW49ci20U/bNe43TBUiS+P Ci6wnR5LgGyt7A== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:57 2025 by rpki-client