This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft File: qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft (raw, json) Hash identifier: vqMIyzVc2AXxyDrwUWDGOFSR9SdTJw35YjI6ABdGMhE= Subject key identifier: 19:BB:67:3A:C4:F1:EF:20:48:8A:D6:9C:59:8B:E2:07:59:89:B5:58 Authority key identifier: A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42 Certificate issuer: /CN=a9d988d1df0a6ccab2e93614951059960bad4342 Certificate serial: 019B2741343EDAB1C3FA56D33CBECDD68CF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft Manifest number: 1587 Signing time: Tue 16 Dec 2025 13:02:23 +0000 Manifest this update: Tue 16 Dec 2025 13:02:23 +0000 Manifest next update: Wed 17 Dec 2025 13:02:23 +0000 Files and hashes: 1: NX8Ag0pA74LGhUL_oaE0Kzx7aAU.roa (hash: LYvjPxPyW03jv1kHAAP+K13/fh1ywtNoDmOlSYUCweg=) 2: gAnTD0iNr7m1r1pYRaaA5fXHh-s.roa (hash: Cw97eXSR4+iVCR14Tmpd8X95xlXnCaFcwxnubQAt8e8=) 3: qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl (hash: sVebSA0EM2DlSF+K6kFtvdocf9FzKh++M3pA8bDD2Rw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 13:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:41:34:3e:da:b1:c3:fa:56:d3:3c:be:cd:d6:8c:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9d988d1df0a6ccab2e93614951059960bad4342 Validity Not Before: Dec 16 13:02:23 2025 GMT Not After : Dec 17 13:02:23 2025 GMT Subject: CN=19bb673ac4f1ef20488ad69c598be2075989b558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8e:5b:3f:c9:3d:a1:af:20:3b:64:29:b5:c9: d0:e8:54:c4:65:ab:e6:2c:9b:85:5b:d0:03:7d:ef: 2a:94:0d:40:bf:03:2b:0c:dc:08:2f:01:f4:71:d5: d1:f3:82:12:91:fc:4d:8f:29:4f:e8:ac:a2:59:46: fe:7d:e1:5b:7b:b5:84:25:c3:11:55:78:15:ce:61: 88:5e:0e:96:c3:9e:5e:a8:39:77:64:c1:f4:79:0b: f2:df:95:2f:84:c3:25:b6:02:25:68:b2:d3:08:2d: 0f:c6:38:39:de:34:02:b0:f9:4e:c0:da:2f:7d:78: a5:7c:63:1b:1a:cd:2d:b6:d5:f7:4f:e2:21:08:60: 7f:10:31:33:20:17:95:01:6d:f8:c0:6b:81:97:4f: 23:e4:f4:a2:5c:25:46:ca:87:1d:df:b7:5c:08:9c: 33:cf:41:17:61:03:d2:4c:3f:27:be:fe:d7:2c:89: 41:9a:d6:20:4f:b7:a2:f1:94:ed:8e:a9:31:9f:3d: 8f:b1:8b:44:fd:87:e2:94:40:dc:2e:25:f1:e2:49: 5c:40:3f:55:62:ea:ac:3a:3d:d9:10:57:64:e3:19: 53:64:9d:af:9f:9d:b2:73:5f:94:35:0e:8e:a6:b1: 2e:73:89:f8:ee:a2:fd:c3:47:24:d4:98:db:e7:5f: f8:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:BB:67:3A:C4:F1:EF:20:48:8A:D6:9C:59:8B:E2:07:59:89:B5:58 X509v3 Authority Key Identifier: keyid:A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:04:15:0e:81:ec:de:00:1c:22:af:2c:a0:bc:93:5e:eb:76: ce:99:ef:9f:69:93:e6:e1:f0:ef:09:de:b4:3f:3a:58:11:dd: 91:1d:0a:72:65:15:98:c3:25:3b:7c:bc:2c:ac:09:d1:32:40: 8a:fd:47:a3:7e:8a:66:5f:53:74:1d:1f:ad:b9:07:29:01:36: c2:22:2c:80:39:4f:5d:af:78:f3:88:54:c1:14:60:0d:e4:13: bb:0d:06:4b:c4:52:b3:76:13:84:54:02:05:b5:0c:41:c9:6b: 91:76:90:f6:90:b8:41:d5:db:d0:ea:98:fe:e0:c3:b2:20:d6: 46:96:f0:d6:3c:4d:37:00:25:f0:f9:de:fe:c8:e7:68:2a:71: e5:67:cd:b8:cb:58:10:b4:91:c7:52:14:f4:36:24:bd:51:39: a2:13:51:b1:f6:52:63:8a:56:bc:4c:38:71:7d:1a:f2:89:b1: 17:f5:a6:aa:8d:20:dd:e4:99:ab:2d:a9:05:5b:21:2a:5e:b8: 17:9e:05:fb:4e:33:f3:ea:c4:e4:83:5e:a1:e4:9d:92:3f:d5: e9:18:ed:a1:c9:40:cf:3d:d1:8c:ae:57:b4:9c:80:8b:dc:67: 23:e4:09:d9:a3:2b:d1:25:13:e8:74:45:8c:4b:04:04:79:c3: 32:0e:4c:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnQTQ+2rHD+lbTPL7N1oz3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ZDk4OGQxZGYwYTZjY2FiMmU5MzYxNDk1MTA1OTk2MGJh ZDQzNDIwHhcNMjUxMjE2MTMwMjIzWhcNMjUxMjE3MTMwMjIzWjAzMTEwLwYDVQQD EygxOWJiNjczYWM0ZjFlZjIwNDg4YWQ2OWM1OThiZTIwNzU5ODliNTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjI5bP8k9oa8gO2QptcnQ6FTEZavm LJuFW9ADfe8qlA1AvwMrDNwILwH0cdXR84ISkfxNjylP6KyiWUb+feFbe7WEJcMR VXgVzmGIXg6Ww55eqDl3ZMH0eQvy35UvhMMltgIlaLLTCC0Pxjg53jQCsPlOwNov fXilfGMbGs0tttX3T+IhCGB/EDEzIBeVAW34wGuBl08j5PSiXCVGyocd37dcCJwz z0EXYQPSTD8nvv7XLIlBmtYgT7ei8ZTtjqkxnz2PsYtE/YfilEDcLiXx4klcQD9V YuqsOj3ZEFdk4xlTZJ2vn52yc1+UNQ6OprEuc4n47qL9w0ck1Jjb51/4bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBm7ZzrE8e8gSIrWnFmL4gdZibVYMB8GA1UdIwQY MBaAFKnZiNHfCmzKsuk2FJUQWZYLrUNCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWRtSTBkOEtiTXF5NlRZVWxSQlpsZ3V0UTBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi82NGNlOGItZmY3YS00NzQ0LTk3MTIt ZDk3MzBmNWI1ODY3LzEvcWRtSTBkOEtiTXF5NlRZVWxSQlpsZ3V0UTBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi82NGNlOGItZmY3YS00NzQ0LTk3MTItZDk3MzBmNWI1ODY3 LzEvcWRtSTBkOEtiTXF5NlRZVWxSQlpsZ3V0UTBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfQQVDoHs 3gAcIq8soLyTXut2zpnvn2mT5uHw7wnetD86WBHdkR0KcmUVmMMlO3y8LKwJ0TJA iv1Ho36KZl9TdB0frbkHKQE2wiIsgDlPXa9484hUwRRgDeQTuw0GS8RSs3YThFQC BbUMQclrkXaQ9pC4QdXb0OqY/uDDsiDWRpbw1jxNNwAl8Pne/sjnaCpx5WfNuMtY ELSRx1IU9DYkvVE5ohNRsfZSY4pWvEw4cX0a8omxF/Wmqo0g3eSZqy2pBVshKl64 F54F+04z8+rE5INeoeSdkj/V6RjtoclAzz3RjK5XtJyAi9xnI+QJ2aMr0SUT6HRF jEsEBHnDMg5MPw== -----END CERTIFICATE-----Generated at Tue Dec 16 18:59:39 2025 by rpki-client