This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft File: Q9CWU4TcREh6gxcabV0FqUpq1nw.mft (raw, json) Hash identifier: kaJupZYG2qte7bjSaGUq0ycuZp+5yxsUmXRMLIkCmCk= Subject key identifier: FC:0E:63:DD:8C:90:5E:AA:EC:F8:B5:25:65:0D:D4:D6:D2:B4:E9:FE Authority key identifier: 43:D0:96:53:84:DC:44:48:7A:83:17:1A:6D:5D:05:A9:4A:6A:D6:7C Certificate issuer: /CN=43d0965384dc44487a83171a6d5d05a94a6ad67c Certificate serial: 019B59769B4A4D9F70115589D0A3F34AD3B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft Manifest number: 0237 Signing time: Fri 26 Dec 2025 07:01:43 +0000 Manifest this update: Fri 26 Dec 2025 07:01:43 +0000 Manifest next update: Sat 27 Dec 2025 07:01:43 +0000 Files and hashes: 1: Q9CWU4TcREh6gxcabV0FqUpq1nw.crl (hash: BUEs2yofETq1N6yfsEM5jAZQD9tAUb6nbUSz0Lk4YM0=) 2: is8rJFkIshJvtMPQsNBVoFxTKBY.roa (hash: eXPJhyZn1FuLC+ECVYIsChabU+UtFgCuyBkgvqoFbIk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 07:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:9b:4a:4d:9f:70:11:55:89:d0:a3:f3:4a:d3:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43d0965384dc44487a83171a6d5d05a94a6ad67c Validity Not Before: Dec 26 07:01:43 2025 GMT Not After : Dec 27 07:01:43 2025 GMT Subject: CN=fc0e63dd8c905eaaecf8b525650dd4d6d2b4e9fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b1:0c:c0:55:49:3c:94:c5:30:4d:84:6d:6b: 60:40:08:c6:fa:47:24:6c:49:77:d3:7c:78:e5:00: be:c1:a1:41:f1:72:f7:b3:45:51:5e:f1:6a:60:f3: d5:76:ce:ba:8a:47:6f:52:7c:e3:14:ad:57:35:52: 34:7e:dc:7c:6c:06:f2:6a:34:53:4d:88:6e:59:c7: 2f:a3:eb:24:69:76:15:a0:ad:69:f7:6e:f7:d8:de: fd:d3:f0:44:b0:b2:4d:1d:64:63:7c:73:91:97:41: 4d:b0:04:b6:d0:d5:e6:6a:75:b0:8f:4d:bc:89:db: 6b:35:f6:b8:92:b9:ff:bc:91:d3:31:70:e5:1f:b0: d0:76:f8:ae:b1:9a:e0:c8:de:85:87:57:14:d4:b8: b2:e4:54:8c:a8:aa:6f:60:65:e0:b8:7c:fa:64:fa: 70:2b:34:fa:bd:b0:20:9b:33:05:ce:ec:40:67:12: 28:a1:7c:67:2d:aa:2c:5e:5d:39:18:0e:c3:b2:68: e1:5a:bf:43:ec:d0:cb:bf:ad:b7:3c:c3:fa:fa:2a: 09:b6:11:1c:aa:95:e1:f3:d2:28:6b:c4:da:70:51: bc:37:7d:83:c7:15:4f:dd:e4:91:92:43:f0:da:6d: 51:90:3a:02:9d:1a:90:0a:77:e1:a6:89:88:a6:0d: 81:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:0E:63:DD:8C:90:5E:AA:EC:F8:B5:25:65:0D:D4:D6:D2:B4:E9:FE X509v3 Authority Key Identifier: keyid:43:D0:96:53:84:DC:44:48:7A:83:17:1A:6D:5D:05:A9:4A:6A:D6:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:47:af:e8:60:6a:98:e3:22:63:49:25:ec:86:27:a3:63:48: 10:4f:4a:1c:4f:42:a0:48:c0:7c:94:70:eb:e0:29:99:43:35: b0:b6:6e:e6:c4:1f:80:1e:e9:1d:d1:aa:31:a6:7a:ee:99:83: 0a:8b:e7:7e:0e:2f:54:8a:d8:69:d8:1d:cc:d9:1e:22:2e:eb: 6a:48:55:7a:97:7a:c1:d4:6c:82:1b:cd:a8:52:c3:59:a3:74: f8:34:5e:da:78:1d:d4:21:27:1c:4a:ea:80:69:a1:2a:47:6b: dd:d3:74:d3:ca:3d:ce:e8:f7:ed:14:9b:b4:5c:13:62:39:74: 43:60:bc:41:4c:5c:7a:59:5e:85:74:57:28:f2:39:e2:48:b3: 9d:d1:fc:2f:1c:23:34:8c:15:8c:95:7c:4f:d0:0b:f3:36:f1: 11:56:d7:10:77:b4:e1:cd:68:1f:a9:30:af:1a:c1:bd:be:aa: 24:9a:11:99:4a:3d:a9:60:c3:94:94:a8:c9:23:77:5f:3e:d6: 29:3e:d4:26:85:da:10:df:17:70:1a:2e:20:fd:75:e3:9c:e9: 8f:ec:06:23:6d:38:34:25:b0:06:23:5a:21:11:04:f3:17:6d: 1c:b7:75:db:79:83:17:bc:1b:97:1d:01:e1:0b:0a:83:03:21: 13:c7:08:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdptKTZ9wEVWJ0KPzStO2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZDA5NjUzODRkYzQ0NDg3YTgzMTcxYTZkNWQwNWE5NGE2 YWQ2N2MwHhcNMjUxMjI2MDcwMTQzWhcNMjUxMjI3MDcwMTQzWjAzMTEwLwYDVQQD EyhmYzBlNjNkZDhjOTA1ZWFhZWNmOGI1MjU2NTBkZDRkNmQyYjRlOWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrEMwFVJPJTFME2EbWtgQAjG+kck bEl303x45QC+waFB8XL3s0VRXvFqYPPVds66ikdvUnzjFK1XNVI0ftx8bAbyajRT TYhuWccvo+skaXYVoK1p92732N790/BEsLJNHWRjfHORl0FNsAS20NXmanWwj028 idtrNfa4krn/vJHTMXDlH7DQdviusZrgyN6Fh1cU1Liy5FSMqKpvYGXguHz6ZPpw KzT6vbAgmzMFzuxAZxIooXxnLaosXl05GA7DsmjhWr9D7NDLv623PMP6+ioJthEc qpXh89Ioa8TacFG8N32DxxVP3eSRkkPw2m1RkDoCnRqQCnfhpomIpg2BNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPwOY92MkF6q7Pi1JWUN1NbStOn+MB8GA1UdIwQY MBaAFEPQllOE3ERIeoMXGm1dBalKatZ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTlDV1U0VGNSRWg2Z3hjYWJWMEZxVXBxMW53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9jZjc2MTctOTI2ZC00YzRiLTk5NzYt ODFhNzgzMTlmZDZhLzEvUTlDV1U0VGNSRWg2Z3hjYWJWMEZxVXBxMW53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9jZjc2MTctOTI2ZC00YzRiLTk5NzYtODFhNzgzMTlmZDZh LzEvUTlDV1U0VGNSRWg2Z3hjYWJWMEZxVXBxMW53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkUev6GBq mOMiY0kl7IYno2NIEE9KHE9CoEjAfJRw6+ApmUM1sLZu5sQfgB7pHdGqMaZ67pmD Covnfg4vVIrYadgdzNkeIi7rakhVepd6wdRsghvNqFLDWaN0+DRe2ngd1CEnHErq gGmhKkdr3dN008o9zuj37RSbtFwTYjl0Q2C8QUxcellehXRXKPI54kizndH8Lxwj NIwVjJV8T9AL8zbxEVbXEHe04c1oH6kwrxrBvb6qJJoRmUo9qWDDlJSoySN3Xz7W KT7UJoXaEN8XcBouIP1145zpj+wGI204NCWwBiNaIREE8xdtHLd123mDF7wblx0B 4QsKgwMhE8cI0w== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:41 2025 by rpki-client