This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft File: q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft (raw, json) Hash identifier: ayfNUavjkAqCoDzVTUBF1eFx2sC7+acw0Hp8QJ5G1PM= Subject key identifier: 60:8C:BD:28:EE:69:0C:ED:38:77:F3:72:F0:85:B7:7E:76:0C:F6:6E Authority key identifier: AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30 Certificate issuer: /CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330 Certificate serial: 019B115CD1935A2542B42DDE1CE80B87EB16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft Manifest number: 1773 Signing time: Fri 12 Dec 2025 07:00:54 +0000 Manifest this update: Fri 12 Dec 2025 07:00:54 +0000 Manifest next update: Sat 13 Dec 2025 07:00:54 +0000 Files and hashes: 1: S0sJgeFKsSQM_Y24-bMbEEazWOE.roa (hash: y7ujKOOyPaVjZL4Z2dl77e4qeqFzdcjNTXADyZzs44w=) 2: q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl (hash: y0MosiNJBri3VWm76O5/lE4NNnYQ4EQqT4V8GnJ3YSg=) 3: r-ygRbjtxxgO3t3aGjdEJ1nnCcw.roa (hash: WR2yF8mNXvC7JDBK3ZnnxThACZnLlRj8L9WEQd6jnY4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 07:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:5c:d1:93:5a:25:42:b4:2d:de:1c:e8:0b:87:eb:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330 Validity Not Before: Dec 12 07:00:54 2025 GMT Not After : Dec 13 07:00:54 2025 GMT Subject: CN=608cbd28ee690ced3877f372f085b77e760cf66e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:5f:cc:47:f7:a0:9a:9c:6b:c3:8b:bd:c7:87: c1:d6:dd:df:91:70:9d:e3:21:fb:8f:1a:af:5f:c1: a1:c9:13:70:bf:3d:58:61:91:1a:5a:52:9a:79:46: a2:ca:bf:62:60:54:0e:b4:76:6d:b2:e9:77:23:bd: 65:2b:96:0b:0b:51:d0:c2:3f:29:05:a5:b0:1e:b5: 38:d5:24:30:4e:5e:e2:c6:8f:4c:b2:16:83:3a:ee: 08:1b:20:af:08:c5:cd:84:dc:0f:6e:37:3a:ff:e2: 3c:87:84:bf:d5:af:75:a3:f0:a9:25:38:d6:b0:da: b1:40:b2:a4:cd:7d:0d:65:ce:bd:a5:22:e3:07:b3: b2:36:54:87:de:9e:ab:d1:6d:f0:7b:f0:fe:98:11: be:57:c6:64:9f:a5:05:db:9a:fe:2c:e5:b2:9b:b6: 60:51:8f:9c:32:ee:81:34:42:ca:71:5f:4d:79:08: a7:80:1e:3e:1a:ba:e4:c7:e7:e9:52:84:80:f6:46: 2d:10:bc:16:14:5d:44:9f:28:2d:f3:4c:9f:f0:ed: 2a:64:da:f1:b4:33:c7:93:56:ef:b0:11:02:cc:7b: 25:0b:d2:b8:93:ad:7c:9f:7f:14:61:47:23:f9:ab: 07:0c:19:21:2a:31:92:29:ca:51:a4:8a:9c:40:df: e0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:8C:BD:28:EE:69:0C:ED:38:77:F3:72:F0:85:B7:7E:76:0C:F6:6E X509v3 Authority Key Identifier: keyid:AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:88:d4:68:4f:e6:eb:a5:19:6f:d1:c0:d2:50:17:c4:60:72: 4d:86:30:21:8b:e5:8a:da:77:1a:0c:31:2c:e9:27:23:44:87: ae:ed:6a:6b:62:22:6b:f4:7b:e1:8e:aa:47:f0:5f:1e:60:1a: 5b:e9:30:b2:84:1d:ec:25:31:8b:4e:80:17:3b:15:7e:d9:d3: 13:0d:14:46:a0:95:d9:c2:48:cb:0c:8c:4b:8b:ee:5f:24:91: 0e:4f:a1:2f:49:ba:f3:95:e1:29:4d:6b:b5:4f:6e:da:e7:55: eb:0b:0c:5e:2b:cb:d6:f0:8f:0d:dd:2f:5a:82:c5:84:ca:7b: 7a:43:5c:48:63:59:40:1d:1b:56:7d:ae:b8:d5:a9:29:94:d0: 93:3f:e1:ad:3b:6d:8b:ce:d3:2d:2c:00:61:ac:62:74:fb:41: 6d:b5:4c:5c:67:18:ae:fe:6f:04:f3:ec:8a:d3:72:e9:93:50: 89:2e:71:9e:8c:34:19:cf:ee:45:b0:a7:d1:c1:8a:6f:91:15: 7b:79:e6:88:36:83:bd:c5:58:5c:91:15:d0:9f:d4:2f:1f:fd: 4c:27:76:75:c3:c6:f5:08:e2:42:aa:c0:23:ec:df:c6:1a:3f: cb:5e:d7:d7:bf:b1:58:32:26:d4:80:19:d3:73:f6:dd:5f:66: 34:9b:3e:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRXNGTWiVCtC3eHOgLh+sWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYzQ1YjY1OGIxZWMwZmRlYjQ1OWU2ZmYyNTc3ZGI4Y2E2 YTkzMzAwHhcNMjUxMjEyMDcwMDU0WhcNMjUxMjEzMDcwMDU0WjAzMTEwLwYDVQQD Eyg2MDhjYmQyOGVlNjkwY2VkMzg3N2YzNzJmMDg1Yjc3ZTc2MGNmNjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6F/MR/egmpxrw4u9x4fB1t3fkXCd 4yH7jxqvX8GhyRNwvz1YYZEaWlKaeUaiyr9iYFQOtHZtsul3I71lK5YLC1HQwj8p BaWwHrU41SQwTl7ixo9MshaDOu4IGyCvCMXNhNwPbjc6/+I8h4S/1a91o/CpJTjW sNqxQLKkzX0NZc69pSLjB7OyNlSH3p6r0W3we/D+mBG+V8Zkn6UF25r+LOWym7Zg UY+cMu6BNELKcV9NeQingB4+Grrkx+fpUoSA9kYtELwWFF1Enygt80yf8O0qZNrx tDPHk1bvsBECzHslC9K4k618n38UYUcj+asHDBkhKjGSKcpRpIqcQN/g5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGCMvSjuaQztOHfzcvCFt352DPZuMB8GA1UdIwQY MBaAFKvEW2WLHsD960Web/JXfbjKapMwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcThSYlpZc2V3UDNyUlo1djhsZDl1TXBxa3pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9jNWMxYjMtZTVjYS00YTgzLTgzOTAt OTE3OTMzYjE1MDJlLzEvcThSYlpZc2V3UDNyUlo1djhsZDl1TXBxa3pBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9jNWMxYjMtZTVjYS00YTgzLTgzOTAtOTE3OTMzYjE1MDJl LzEvcThSYlpZc2V3UDNyUlo1djhsZDl1TXBxa3pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoYjUaE/m 66UZb9HA0lAXxGByTYYwIYvlitp3GgwxLOknI0SHru1qa2Iia/R74Y6qR/BfHmAa W+kwsoQd7CUxi06AFzsVftnTEw0URqCV2cJIywyMS4vuXySRDk+hL0m685XhKU1r tU9u2udV6wsMXivL1vCPDd0vWoLFhMp7ekNcSGNZQB0bVn2uuNWpKZTQkz/hrTtt i87TLSwAYaxidPtBbbVMXGcYrv5vBPPsitNy6ZNQiS5xnow0Gc/uRbCn0cGKb5EV e3nmiDaDvcVYXJEV0J/ULx/9TCd2dcPG9QjiQqrAI+zfxho/y17X17+xWDIm1IAZ 03P23V9mNJs+TQ== -----END CERTIFICATE-----Generated at Fri Dec 12 14:39:38 2025 by rpki-client