This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft File: qJbB4UyG5u9bFnJPcRdnbschSVc.mft (raw, json) Hash identifier: MC0UKvgyw4nkIIjjifc95t+d5Z+EYTFJn/W+BF6TeeU= Subject key identifier: EB:DB:CD:71:CE:2E:63:84:A6:34:C2:3E:0B:39:AB:63:CD:AD:49:2C Authority key identifier: A8:96:C1:E1:4C:86:E6:EF:5B:16:72:4F:71:17:67:6E:C7:21:49:57 Certificate issuer: /CN=a896c1e14c86e6ef5b16724f7117676ec7214957 Certificate serial: 019B42EE284D090A9A1BD705C784D57724C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft Manifest number: 178E Signing time: Sun 21 Dec 2025 22:01:02 +0000 Manifest this update: Sun 21 Dec 2025 22:01:02 +0000 Manifest next update: Mon 22 Dec 2025 22:01:02 +0000 Files and hashes: 1: nHAl3SgY4EfLu7utGVmeJZcr1_s.roa (hash: lrIHVcXwhi/Eq6CWKi+Aq4ByD1FHp2btPHqZK4Ez+BE=) 2: qJbB4UyG5u9bFnJPcRdnbschSVc.crl (hash: LGJME8ywfFc1sivWJKa6+FKKTC+OsNEJFMIvLIJuhr0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.crl rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:28:4d:09:0a:9a:1b:d7:05:c7:84:d5:77:24:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a896c1e14c86e6ef5b16724f7117676ec7214957 Validity Not Before: Dec 21 22:01:02 2025 GMT Not After : Dec 22 22:01:02 2025 GMT Subject: CN=ebdbcd71ce2e6384a634c23e0b39ab63cdad492c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:79:ca:ec:45:d9:91:c1:44:b8:78:eb:e4:23: be:b2:5e:99:d6:ba:31:5e:7c:55:c4:9c:85:31:be: 2b:0c:c0:1b:f9:d8:eb:35:05:98:f3:19:4f:ee:15: 8c:c6:f9:33:31:97:01:6d:2d:a7:87:0b:ab:a3:ce: 58:c8:3f:86:09:4f:54:8f:1c:e8:91:73:2d:e6:63: 4e:55:7a:41:d6:19:c6:db:0a:d1:66:cb:66:69:da: 7d:81:34:8d:5a:c4:ca:35:d1:44:0e:f8:2e:7e:55: c3:ec:b3:c2:f5:61:16:10:ce:32:aa:0f:d7:46:63: 20:70:02:de:bc:9d:6c:74:cb:cf:ce:d1:52:40:4d: e1:93:22:4a:c2:d8:97:e1:87:13:fe:a5:4b:01:ad: 8d:f3:b0:98:3d:5e:01:cd:1b:6c:de:44:39:23:5c: 7e:ab:7b:5c:f6:48:96:fc:5c:a4:24:65:7b:e3:63: 79:f5:49:5e:95:2a:03:ac:22:e3:ca:3d:b5:c9:e9: 3c:7e:d9:fe:f8:b0:d2:aa:65:75:3a:c1:39:31:3a: 2b:87:1a:89:ec:4a:da:12:8a:ac:24:a8:78:be:63: 08:37:e7:1f:82:fc:b2:1f:f7:8e:f9:26:00:c0:f5: c6:5c:04:55:3d:ed:6d:4e:4c:0d:28:2c:ff:84:a4: c6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:DB:CD:71:CE:2E:63:84:A6:34:C2:3E:0B:39:AB:63:CD:AD:49:2C X509v3 Authority Key Identifier: keyid:A8:96:C1:E1:4C:86:E6:EF:5B:16:72:4F:71:17:67:6E:C7:21:49:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:5f:42:d2:3c:54:de:78:6d:33:f9:c5:bd:92:1f:ed:5f:e7: bc:77:7e:28:ec:cb:6b:b5:26:ae:f4:d8:9a:b5:83:d5:ff:b4: b6:5d:fb:7e:25:ca:66:29:e4:f7:53:17:5d:d0:52:d0:a7:62: 5a:d5:c5:06:55:31:4e:9d:e6:79:26:19:d6:3b:6e:c3:64:4c: dc:e5:e6:f7:fa:3c:ea:e5:58:40:09:3d:10:0b:f8:d5:1a:d7: 30:7b:71:24:4c:16:cf:66:34:bd:86:c7:ab:d4:01:1a:1f:7d: 5a:e7:74:c8:26:0c:72:5d:26:87:65:d0:84:ae:3b:2c:df:d1: 0e:46:a5:b2:a5:84:52:95:07:1a:b7:b4:7f:92:45:cc:23:34: bc:67:41:90:f0:09:f1:9d:ae:f6:37:12:15:ee:2e:3d:64:e5: 4c:92:c2:96:37:87:ee:3b:bd:2c:04:fa:05:d2:5e:eb:51:3e: cd:cc:b6:51:30:6a:3e:d5:37:29:a4:7e:35:38:6f:ea:3c:52: d6:ea:31:b2:ef:3e:9b:f7:84:58:41:14:ab:21:40:5d:de:1f: bc:76:e8:67:75:b2:fe:6e:bf:60:28:2c:95:53:86:58:44:c5: 5d:d0:cf:92:10:48:12:de:66:be:35:1b:ab:70:72:d3:85:3c: cb:3c:d7:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7ihNCQqaG9cFx4TVdyTAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4OTZjMWUxNGM4NmU2ZWY1YjE2NzI0ZjcxMTc2NzZlYzcy MTQ5NTcwHhcNMjUxMjIxMjIwMTAyWhcNMjUxMjIyMjIwMTAyWjAzMTEwLwYDVQQD EyhlYmRiY2Q3MWNlMmU2Mzg0YTYzNGMyM2UwYjM5YWI2M2NkYWQ0OTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53nK7EXZkcFEuHjr5CO+sl6Z1rox XnxVxJyFMb4rDMAb+djrNQWY8xlP7hWMxvkzMZcBbS2nhwuro85YyD+GCU9Ujxzo kXMt5mNOVXpB1hnG2wrRZstmadp9gTSNWsTKNdFEDvguflXD7LPC9WEWEM4yqg/X RmMgcALevJ1sdMvPztFSQE3hkyJKwtiX4YcT/qVLAa2N87CYPV4BzRts3kQ5I1x+ q3tc9kiW/FykJGV742N59UlelSoDrCLjyj21yek8ftn++LDSqmV1OsE5MTorhxqJ 7EraEoqsJKh4vmMIN+cfgvyyH/eO+SYAwPXGXARVPe1tTkwNKCz/hKTGlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOvbzXHOLmOEpjTCPgs5q2PNrUksMB8GA1UdIwQY MBaAFKiWweFMhubvWxZyT3EXZ27HIUlXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUpiQjRVeUc1dTliRm5KUGNSZG5ic2NoU1ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS8wODk2YjItZjgwOS00ZjFkLTliOTQt MTRhMDgyNWI1MjkxLzEvcUpiQjRVeUc1dTliRm5KUGNSZG5ic2NoU1ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS8wODk2YjItZjgwOS00ZjFkLTliOTQtMTRhMDgyNWI1Mjkx LzEvcUpiQjRVeUc1dTliRm5KUGNSZG5ic2NoU1ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlF9C0jxU 3nhtM/nFvZIf7V/nvHd+KOzLa7UmrvTYmrWD1f+0tl37fiXKZink91MXXdBS0Kdi WtXFBlUxTp3meSYZ1jtuw2RM3OXm9/o86uVYQAk9EAv41RrXMHtxJEwWz2Y0vYbH q9QBGh99Wud0yCYMcl0mh2XQhK47LN/RDkalsqWEUpUHGre0f5JFzCM0vGdBkPAJ 8Z2u9jcSFe4uPWTlTJLCljeH7ju9LAT6BdJe61E+zcy2UTBqPtU3KaR+NThv6jxS 1uoxsu8+m/eEWEEUqyFAXd4fvHboZ3Wy/m6/YCgslVOGWETFXdDPkhBIEt5mvjUb q3By04U8yzzXRQ== -----END CERTIFICATE-----Generated at Mon Dec 22 05:49:25 2025 by rpki-client