This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft File: qPAjGPLOly5yQIzMx9MgrzDNKw0.mft (raw, json) Hash identifier: 9MNzYfOSyKvi7QK+13Fk7aKi/DqsVkJKcvO+Jm63uzU= Subject key identifier: B9:EB:7D:2B:B8:AD:FF:C4:BB:49:F3:43:56:9F:3C:5B:D1:43:70:5B Authority key identifier: A8:F0:23:18:F2:CE:97:2E:72:40:8C:CC:C7:D3:20:AF:30:CD:2B:0D Certificate issuer: /CN=a8f02318f2ce972e72408cccc7d320af30cd2b0d Certificate serial: 019B5A1A8E0DB667839685329098309DCC9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPAjGPLOly5yQIzMx9MgrzDNKw0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft Manifest number: 168C Signing time: Fri 26 Dec 2025 10:00:48 +0000 Manifest this update: Fri 26 Dec 2025 10:00:48 +0000 Manifest next update: Sat 27 Dec 2025 10:00:48 +0000 Files and hashes: 1: _RYA60WhNQpChcuS-ZhpeHNn3Ro.roa (hash: /o7/5SeEgngQyysQsPfhFgp/4dtDLAhE3JTXwNG/WOo=) 2: qPAjGPLOly5yQIzMx9MgrzDNKw0.crl (hash: RS8QoP6ts+0y5DG9l+U6ZX8rMnPRPc6TIF1gyR5iY2Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft rsync://rpki.ripe.net/repository/DEFAULT/qPAjGPLOly5yQIzMx9MgrzDNKw0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 10:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:8e:0d:b6:67:83:96:85:32:90:98:30:9d:cc:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8f02318f2ce972e72408cccc7d320af30cd2b0d Validity Not Before: Dec 26 10:00:48 2025 GMT Not After : Dec 27 10:00:48 2025 GMT Subject: CN=b9eb7d2bb8adffc4bb49f343569f3c5bd143705b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:21:9e:5c:7d:cd:50:5c:02:6e:d8:27:35:48: 07:1c:fd:f2:07:f2:f8:d1:d0:be:d1:8f:12:dd:3b: e5:f4:00:60:f8:26:58:e7:1c:20:04:7f:29:b6:0d: 1e:3a:ee:58:ce:f1:ff:d0:1f:3d:ed:32:55:4e:3a: 30:e9:69:9b:4a:55:5b:9a:68:e7:39:3f:3e:de:b4: d3:e5:16:73:24:60:e7:a1:28:f6:c6:77:99:f8:1e: 25:21:4a:0a:bb:ce:7b:70:b1:7d:79:f0:0f:2e:44: c6:09:36:9d:e8:1c:32:6d:15:f7:30:bb:68:97:2c: bd:f8:f2:ea:c1:be:91:e2:2f:6a:f8:ab:07:c3:a0: 2c:37:58:10:26:8c:0f:53:87:79:2c:75:62:cd:af: 80:30:7f:05:c9:7c:d2:f5:1c:7d:49:e9:75:2d:f0: f8:a3:fd:7c:bf:fb:87:67:c4:e5:04:c0:bf:ea:ab: 17:cc:fd:c0:42:d9:f7:8b:c3:c2:03:4d:d9:69:4b: 6b:74:98:25:69:60:90:23:81:40:fc:f1:8f:19:fd: 80:57:1f:04:06:6a:ca:42:60:8c:18:41:d5:aa:31: 72:0b:8b:c8:fd:10:16:d1:a1:f0:01:0c:a7:21:4a: 25:fb:fa:07:07:e2:69:93:64:47:da:14:aa:43:14: d3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:EB:7D:2B:B8:AD:FF:C4:BB:49:F3:43:56:9F:3C:5B:D1:43:70:5B X509v3 Authority Key Identifier: keyid:A8:F0:23:18:F2:CE:97:2E:72:40:8C:CC:C7:D3:20:AF:30:CD:2B:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPAjGPLOly5yQIzMx9MgrzDNKw0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:47:b5:f1:4a:a0:c9:c0:eb:3a:56:82:94:c2:81:ba:89:bd: a8:ce:53:b3:2f:b6:6f:97:29:28:94:1f:00:d2:74:68:73:39: ad:3d:33:d5:ab:9a:a1:7a:c2:0d:2d:ed:8c:a6:73:75:2d:22: 60:6e:70:4e:a2:bb:f9:ed:26:68:ba:f5:b5:35:43:43:b8:45: 37:1f:88:1c:73:a3:b2:f3:84:d1:ce:ea:aa:e3:89:f6:59:52: 82:eb:bb:57:9e:9d:5c:fd:59:cd:83:1e:d0:cc:16:74:1e:ae: 6d:a9:70:00:6d:bf:d3:33:5c:43:84:d4:95:5d:18:5b:a0:4b: ee:62:c8:0e:f5:17:d4:41:e4:86:9f:2c:b9:2d:1a:8b:a1:c5: b5:79:54:9e:6a:4d:03:6a:11:ae:39:14:33:7e:2e:91:ee:04: 89:ca:84:09:cb:60:0f:53:f7:2d:c5:5b:42:e6:58:16:54:a9: bc:bf:9c:40:87:5a:3d:4a:80:d8:0f:9b:84:18:2b:df:9d:c5: a0:e6:52:48:ed:74:d4:58:88:e8:6d:6d:2c:7b:c5:47:10:d0: d0:bf:5c:91:54:f2:88:5d:06:4d:83:e7:d8:71:aa:08:f5:e2: 52:b9:1f:24:34:af:8c:85:dc:98:01:9b:0c:3f:96:cd:85:7d: 4b:18:51:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGo4NtmeDloUykJgwncyeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4ZjAyMzE4ZjJjZTk3MmU3MjQwOGNjY2M3ZDMyMGFmMzBj ZDJiMGQwHhcNMjUxMjI2MTAwMDQ4WhcNMjUxMjI3MTAwMDQ4WjAzMTEwLwYDVQQD EyhiOWViN2QyYmI4YWRmZmM0YmI0OWYzNDM1NjlmM2M1YmQxNDM3MDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7iGeXH3NUFwCbtgnNUgHHP3yB/L4 0dC+0Y8S3Tvl9ABg+CZY5xwgBH8ptg0eOu5YzvH/0B897TJVTjow6WmbSlVbmmjn OT8+3rTT5RZzJGDnoSj2xneZ+B4lIUoKu857cLF9efAPLkTGCTad6BwybRX3MLto lyy9+PLqwb6R4i9q+KsHw6AsN1gQJowPU4d5LHViza+AMH8FyXzS9Rx9Sel1LfD4 o/18v/uHZ8TlBMC/6qsXzP3AQtn3i8PCA03ZaUtrdJglaWCQI4FA/PGPGf2AVx8E BmrKQmCMGEHVqjFyC4vI/RAW0aHwAQynIUol+/oHB+Jpk2RH2hSqQxTTnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLnrfSu4rf/Eu0nzQ1afPFvRQ3BbMB8GA1UdIwQY MBaAFKjwIxjyzpcuckCMzMfTIK8wzSsNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVBBakdQTE9seTV5UUl6TXg5TWdyekROS3cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iNDRhMDMtNDQ3Mi00MzE1LTg3NTgt NzU0NGRmMzAwNGIyLzEvcVBBakdQTE9seTV5UUl6TXg5TWdyekROS3cwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9iNDRhMDMtNDQ3Mi00MzE1LTg3NTgtNzU0NGRmMzAwNGIy LzEvcVBBakdQTE9seTV5UUl6TXg5TWdyekROS3cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJke18Uqg ycDrOlaClMKBuom9qM5Tsy+2b5cpKJQfANJ0aHM5rT0z1auaoXrCDS3tjKZzdS0i YG5wTqK7+e0maLr1tTVDQ7hFNx+IHHOjsvOE0c7qquOJ9llSguu7V56dXP1ZzYMe 0MwWdB6ubalwAG2/0zNcQ4TUlV0YW6BL7mLIDvUX1EHkhp8suS0ai6HFtXlUnmpN A2oRrjkUM34uke4EicqECctgD1P3LcVbQuZYFlSpvL+cQIdaPUqA2A+bhBgr353F oOZSSO101FiI6G1tLHvFRxDQ0L9ckVTyiF0GTYPn2HGqCPXiUrkfJDSvjIXcmAGb DD+WzYV9SxhRZQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:57 2025 by rpki-client