This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft File: p2q9qQNG0MrSXcpvdFC8z40I53E.mft (raw, json) Hash identifier: hmlGMe/8NXGb+4QH0eml5Y9TIuixTbr56prZgCQmmkU= Subject key identifier: 9C:45:81:64:F5:38:01:54:97:4E:81:5C:03:24:60:8A:67:60:A3:CB Authority key identifier: A7:6A:BD:A9:03:46:D0:CA:D2:5D:CA:6F:74:50:BC:CF:8D:08:E7:71 Certificate issuer: /CN=a76abda90346d0cad25dca6f7450bccf8d08e771 Certificate serial: 019B59ACAB2AD5F8148F2441340B1F005FF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft Manifest number: 0E79 Signing time: Fri 26 Dec 2025 08:00:46 +0000 Manifest this update: Fri 26 Dec 2025 08:00:46 +0000 Manifest next update: Sat 27 Dec 2025 08:00:46 +0000 Files and hashes: 1: MzC4INKIsgRwDzo9x7bkUxRAB1c.roa (hash: Uid11k3HN0TXoHFcev6gIuzNP6/XOwG1nE/1TIUrcps=) 2: p2q9qQNG0MrSXcpvdFC8z40I53E.crl (hash: RSQLcmP7uRT1qmSjFkoheiKKK/x+ySwwomCywBBwhhA=) 3: qo2a4lO3f4INhuJwHg-a_kb1Uw0.roa (hash: Mq/0MPb+8DLoVQSsA/LmGY9yMeYe1hfS1EX+C5wkfg0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.crl rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 08:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:ab:2a:d5:f8:14:8f:24:41:34:0b:1f:00:5f:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a76abda90346d0cad25dca6f7450bccf8d08e771 Validity Not Before: Dec 26 08:00:46 2025 GMT Not After : Dec 27 08:00:46 2025 GMT Subject: CN=9c458164f5380154974e815c0324608a6760a3cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:61:93:c8:f0:9c:4c:50:7a:21:ce:be:79:81: 10:e1:b7:ec:21:a1:36:2d:fb:37:3f:0f:f8:64:4b: 85:79:32:2e:ce:f2:44:2f:66:93:e0:53:e3:34:b2: 85:6d:cb:32:5d:03:e2:29:00:2d:3d:d4:85:de:d9: e3:b1:57:04:0a:8d:37:33:3a:93:3d:f2:3b:89:9c: 6e:f1:ed:19:36:38:f9:37:16:01:69:3a:06:00:3f: 54:8d:d3:2d:e5:74:01:27:07:ad:09:53:f7:40:98: a9:e3:74:7b:59:37:20:20:9f:fd:86:df:62:05:41: 7d:23:c7:d6:03:ed:6a:47:f2:e7:6c:4c:10:8a:69: 67:83:e1:59:6f:d3:fa:44:1d:37:63:20:15:b6:75: c1:b3:12:63:17:18:be:8f:69:5e:00:b0:60:61:bc: bb:b4:5a:46:a6:2d:e8:cf:c0:a9:40:da:de:c1:88: 94:cb:a3:2a:fb:c2:f3:7f:ee:0c:1e:d0:bc:d1:19: 08:f7:f1:2a:2d:af:86:ff:58:fd:8b:87:d2:38:0e: ce:ef:d8:3f:bb:20:06:fe:77:16:66:4f:88:80:4e: 95:b3:cc:05:2b:e6:ed:52:7a:d2:f7:be:c9:c8:37: 13:0f:6d:e5:b8:38:cd:64:a0:c7:bd:0c:09:de:48: 88:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:45:81:64:F5:38:01:54:97:4E:81:5C:03:24:60:8A:67:60:A3:CB X509v3 Authority Key Identifier: keyid:A7:6A:BD:A9:03:46:D0:CA:D2:5D:CA:6F:74:50:BC:CF:8D:08:E7:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:2f:16:c5:a5:e6:bb:2e:03:8a:25:a1:d2:b6:1d:a5:68:fb: 14:cf:8e:2d:72:a6:3f:cf:d7:17:fb:3c:27:65:bf:45:67:d0: 83:58:a9:23:f9:d2:24:7e:60:ab:34:e5:e5:f9:56:00:a3:f5: 53:36:f5:f7:c5:20:42:ce:d3:df:51:1e:b4:d1:bc:30:20:e3: 9d:b3:72:0f:63:7d:6f:28:95:14:3e:8e:37:ec:52:82:0e:b5: 90:d5:9f:64:73:9e:79:67:e6:9c:db:31:58:a8:94:4f:56:b6: 58:f1:69:cc:8e:5d:d0:a6:70:57:53:ff:c4:02:d1:f4:96:0a: 6e:79:da:6a:1f:fb:2d:85:a7:af:68:f4:9d:8f:eb:64:a4:22: 6a:ab:85:66:dd:c9:c3:1e:1f:d2:0c:a8:96:25:65:59:45:e4: 3e:2d:11:87:c9:ff:94:08:58:e5:00:cb:29:97:cd:de:25:b5: b3:4a:24:de:8a:a3:9a:e0:19:7b:b2:a7:75:e6:6a:bf:bc:68: 90:57:bd:a7:db:fe:fd:c8:fe:fd:5e:12:01:03:b9:b1:47:58: ac:9f:a4:b0:4d:7c:cb:0d:a6:eb:9d:f3:74:96:f4:1d:43:0f: ff:a6:0b:6f:37:8a:66:60:f7:b9:48:7c:ee:84:bf:db:9a:3f: 35:b6:7f:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrKsq1fgUjyRBNAsfAF/zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NmFiZGE5MDM0NmQwY2FkMjVkY2E2Zjc0NTBiY2NmOGQw OGU3NzEwHhcNMjUxMjI2MDgwMDQ2WhcNMjUxMjI3MDgwMDQ2WjAzMTEwLwYDVQQD Eyg5YzQ1ODE2NGY1MzgwMTU0OTc0ZTgxNWMwMzI0NjA4YTY3NjBhM2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWGTyPCcTFB6Ic6+eYEQ4bfsIaE2 Lfs3Pw/4ZEuFeTIuzvJEL2aT4FPjNLKFbcsyXQPiKQAtPdSF3tnjsVcECo03MzqT PfI7iZxu8e0ZNjj5NxYBaToGAD9UjdMt5XQBJwetCVP3QJip43R7WTcgIJ/9ht9i BUF9I8fWA+1qR/LnbEwQimlng+FZb9P6RB03YyAVtnXBsxJjFxi+j2leALBgYby7 tFpGpi3oz8CpQNrewYiUy6Mq+8Lzf+4MHtC80RkI9/EqLa+G/1j9i4fSOA7O79g/ uyAG/ncWZk+IgE6Vs8wFK+btUnrS977JyDcTD23luDjNZKDHvQwJ3kiIxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJxFgWT1OAFUl06BXAMkYIpnYKPLMB8GA1UdIwQY MBaAFKdqvakDRtDK0l3Kb3RQvM+NCOdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDJxOXFRTkcwTXJTWGNwdmRGQzh6NDBJNTNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8zNDVjOWItN2I0YS00YjIxLTliMDAt NGQzMDE2ODRjM2JjLzEvcDJxOXFRTkcwTXJTWGNwdmRGQzh6NDBJNTNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8zNDVjOWItN2I0YS00YjIxLTliMDAtNGQzMDE2ODRjM2Jj LzEvcDJxOXFRTkcwTXJTWGNwdmRGQzh6NDBJNTNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABi8WxaXm uy4DiiWh0rYdpWj7FM+OLXKmP8/XF/s8J2W/RWfQg1ipI/nSJH5gqzTl5flWAKP1 Uzb198UgQs7T31EetNG8MCDjnbNyD2N9byiVFD6ON+xSgg61kNWfZHOeeWfmnNsx WKiUT1a2WPFpzI5d0KZwV1P/xALR9JYKbnnaah/7LYWnr2j0nY/rZKQiaquFZt3J wx4f0gyoliVlWUXkPi0Rh8n/lAhY5QDLKZfN3iW1s0ok3oqjmuAZe7KndeZqv7xo kFe9p9v+/cj+/V4SAQO5sUdYrJ+ksE18yw2m653zdJb0HUMP/6YLbzeKZmD3uUh8 7oS/25o/NbZ/uA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:37 2025 by rpki-client