This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft File: q8GRjB9F5uwX2spnp60ZPK8Et7I.mft (raw, json) Hash identifier: aJFY6r1m20KX2gagPsACX0wGCl3Uca0+oOUOUVZS65o= Subject key identifier: 87:74:E9:78:55:BC:DF:4E:4A:6D:B2:7D:C9:18:F4:6F:27:2E:FE:8E Authority key identifier: AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2 Certificate issuer: /CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2 Certificate serial: 019B2588393C5AB81E6E8FF23C9D05AB7784 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft Manifest number: 05F5 Signing time: Tue 16 Dec 2025 05:00:43 +0000 Manifest this update: Tue 16 Dec 2025 05:00:43 +0000 Manifest next update: Wed 17 Dec 2025 05:00:43 +0000 Files and hashes: 1: DYsiQqVjAuJI8byUG8mKd0jSQh4.asa (hash: YMrGSqc7KqHO4j1lgZTxY1WoFwm99rirLTct3gzShT0=) 2: HMmCdkpHTMLYze6qZGF-iwUAzmA.roa (hash: EsQLIbughOGxNVdEh2Tzb5JlJpT3ZvlB6qAeVifGGwk=) 3: L4RKq9blDuun-Ov7h4-EXCJDU7o.roa (hash: rV2ghgo1vc0bF0beR2sZL8zKS4novhD+fyLSyA4fGEk=) 4: TKYCIQIu4F23JxsEDfGIzBctkEc.roa (hash: EAnr/9lW4r6/S4hhnfhRdmsx8JCo45r2zRW9cF9kcLo=) 5: _HpIO26oTlp3ah6eb8LpZJn4sZU.asa (hash: rNwAJLoUrEajetBo8sWHQzmyDtFszLMTuAjSH9z1rL4=) 6: iLSgImJKA6sfcvh2C5H8MSiXYgc.roa (hash: i6Q1/zgekWcF03q/uHf2eJzbB2A8g+6dH//zgAn+ods=) 7: q8GRjB9F5uwX2spnp60ZPK8Et7I.crl (hash: Ipw8RfPJqxNy8+M2bEPEHqUtdqysSjI0sIgCnkktrqs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:88:39:3c:5a:b8:1e:6e:8f:f2:3c:9d:05:ab:77:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2 Validity Not Before: Dec 16 05:00:43 2025 GMT Not After : Dec 17 05:00:43 2025 GMT Subject: CN=8774e97855bcdf4e4a6db27dc918f46f272efe8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:30:14:2a:8a:b9:6a:da:22:bf:54:49:83:09: 46:35:b4:44:ca:26:76:29:4a:d2:ec:11:46:00:d3: 57:4a:ab:3d:6a:e7:c4:ce:d1:6a:9c:a0:f1:fb:62: 9b:18:a0:18:13:c9:02:c0:d7:80:ac:e0:4c:b0:da: 74:ab:b9:62:e9:d3:fb:cf:49:21:2e:02:a0:4d:05: 9e:10:4f:ec:27:25:a2:dd:6e:15:e0:b4:51:98:43: ee:6c:42:f5:6f:49:ee:3b:69:3a:5f:f9:e7:eb:c2: 13:3a:17:b2:df:09:e7:dc:f1:9d:84:8a:13:b2:66: 8a:f1:dd:a3:62:c8:34:f3:8c:51:34:db:40:e7:d3: d6:47:09:ff:42:76:22:88:53:f1:9a:53:58:2c:bb: 7b:e0:d5:d8:30:d1:c8:33:2e:3b:45:77:f1:d5:2f: 49:7a:90:92:4b:1c:04:5b:1b:3c:e7:d3:4b:c7:6f: 1e:1c:98:4f:e6:51:12:af:d5:9b:2f:38:43:2b:b7: f4:d9:79:d4:62:f1:27:59:dd:94:03:18:a4:31:7c: d9:12:c1:3f:22:92:c8:bc:65:b4:8d:97:40:e4:4e: 5a:86:1c:b9:b9:41:be:da:43:67:fb:0d:12:e3:83: 4e:77:67:1c:1a:75:1b:cd:13:95:df:d0:3c:f6:cb: a3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:74:E9:78:55:BC:DF:4E:4A:6D:B2:7D:C9:18:F4:6F:27:2E:FE:8E X509v3 Authority Key Identifier: keyid:AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:53:86:b4:91:5c:61:20:25:96:e5:df:92:cd:23:3a:8f:d6: 82:1e:22:50:0d:45:53:fc:95:a8:e5:54:03:98:9b:25:d5:e9: 1b:1b:96:d9:d0:60:e6:d7:ef:67:e0:e6:91:eb:c2:43:da:3f: 42:1c:b3:b1:32:d2:4e:d4:60:3e:70:84:5a:77:c9:0e:1e:d8: a4:bc:3c:08:43:a9:42:a9:53:b3:93:71:e5:1c:df:ac:21:9c: bc:26:41:45:6b:50:47:41:2e:29:11:83:60:62:70:03:c0:74: c5:f6:8c:df:97:be:7f:df:0d:e1:a4:ab:c0:05:ba:18:4d:ae: cc:99:d6:e0:9a:91:09:ba:08:b7:34:93:33:ca:c3:aa:2c:a7: ec:2c:bf:78:f8:93:90:a8:02:f9:c9:24:ff:1f:ae:27:7c:76: c6:05:66:17:e2:d5:cb:fc:58:8d:77:f0:cb:a1:89:1a:61:55: d7:90:49:54:45:2a:1c:e5:16:af:5b:d7:3e:65:aa:fc:a1:fa: c0:7a:76:8c:bf:73:85:2b:f7:70:df:a8:ab:61:9b:82:08:0b: 44:8a:5f:84:b2:9e:d8:e3:76:22:e2:1f:1b:f2:3d:c4:19:34: 22:f0:99:70:e1:c3:f4:dd:6d:c0:63:a2:93:a7:d7:a0:b0:b5: 67:b5:98:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsliDk8Wrgebo/yPJ0Fq3eEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYzE5MThjMWY0NWU2ZWMxN2RhY2E2N2E3YWQxOTNjYWYw NGI3YjIwHhcNMjUxMjE2MDUwMDQzWhcNMjUxMjE3MDUwMDQzWjAzMTEwLwYDVQQD Eyg4Nzc0ZTk3ODU1YmNkZjRlNGE2ZGIyN2RjOTE4ZjQ2ZjI3MmVmZThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjAUKoq5atoiv1RJgwlGNbREyiZ2 KUrS7BFGANNXSqs9aufEztFqnKDx+2KbGKAYE8kCwNeArOBMsNp0q7li6dP7z0kh LgKgTQWeEE/sJyWi3W4V4LRRmEPubEL1b0nuO2k6X/nn68ITOhey3wnn3PGdhIoT smaK8d2jYsg084xRNNtA59PWRwn/QnYiiFPxmlNYLLt74NXYMNHIMy47RXfx1S9J epCSSxwEWxs859NLx28eHJhP5lESr9WbLzhDK7f02XnUYvEnWd2UAxikMXzZEsE/ IpLIvGW0jZdA5E5ahhy5uUG+2kNn+w0S44NOd2ccGnUbzROV39A89suj+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFId06XhVvN9OSm2yfckY9G8nLv6OMB8GA1UdIwQY MBaAFKvBkYwfRebsF9rKZ6etGTyvBLeyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcThHUmpCOUY1dXdYMnNwbnA2MFpQSzhFdDdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84Zjg4ZGUtZGFlZC00OGQyLWI3MDEt NmJiNWZlNjY1NzUwLzEvcThHUmpCOUY1dXdYMnNwbnA2MFpQSzhFdDdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi84Zjg4ZGUtZGFlZC00OGQyLWI3MDEtNmJiNWZlNjY1NzUw LzEvcThHUmpCOUY1dXdYMnNwbnA2MFpQSzhFdDdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc1OGtJFc YSAlluXfks0jOo/Wgh4iUA1FU/yVqOVUA5ibJdXpGxuW2dBg5tfvZ+DmkevCQ9o/ QhyzsTLSTtRgPnCEWnfJDh7YpLw8CEOpQqlTs5Nx5RzfrCGcvCZBRWtQR0EuKRGD YGJwA8B0xfaM35e+f98N4aSrwAW6GE2uzJnW4JqRCboItzSTM8rDqiyn7Cy/ePiT kKgC+ckk/x+uJ3x2xgVmF+LVy/xYjXfwy6GJGmFV15BJVEUqHOUWr1vXPmWq/KH6 wHp2jL9zhSv3cN+oq2GbgggLRIpfhLKe2ON2IuIfG/I9xBk0IvCZcOHD9N1twGOi k6fXoLC1Z7WYag== -----END CERTIFICATE-----Generated at Tue Dec 16 09:28:47 2025 by rpki-client