This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft File: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json) Hash identifier: qxl7DBh9MW9+XDZm9w7iW0GTqexxsKaVbMB0qPUSxgI= Subject key identifier: 16:59:A3:32:F1:6D:D7:93:F1:A3:CD:1C:BD:A5:37:75:DD:75:C7:60 Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51 Certificate issuer: /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051 Certificate serial: 019B793772F44ABFA8E58DD2101B79C53576 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft Manifest number: 17C9 Signing time: Thu 01 Jan 2026 11:00:35 +0000 Manifest this update: Thu 01 Jan 2026 11:00:35 +0000 Manifest next update: Fri 02 Jan 2026 11:00:35 +0000 Files and hashes: 1: 19QpkXgghLM3Nv0nEMVJTVhhYlk.roa (hash: J5AzJxFSrkUz6NEqgZpKHFp1Qkuuq+hf2j4tyd26uK8=) 2: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: f4rEWoI3ymAa1OpmkAvITlQ71tjKHkrKx9cDkqN46c8=) 3: aUt9STDYB4WpJzoIeOhkBXlmRGY.roa (hash: OBmceRN0cnIIMX2WS5mLBG1wMtaz4OUFUqNkNJhbrA8=) 4: c9sXvnnFKQwKh05j0TaYAQugLQM.roa (hash: eyB+ysjYhGow5lnf5FUGFEiyTh1wZN2qzaaHi/6zhTQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:37:72:f4:4a:bf:a8:e5:8d:d2:10:1b:79:c5:35:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051 Validity Not Before: Jan 1 11:00:35 2026 GMT Not After : Jan 2 11:00:35 2026 GMT Subject: CN=1659a332f16dd793f1a3cd1cbda53775dd75c760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4b:e0:7f:39:04:5a:1b:ab:d8:ed:dc:c4:83: 69:6d:b4:bf:fe:b6:d3:4e:0e:d1:4b:a8:7e:29:d9: 70:bc:6c:75:81:7b:d0:14:1b:02:d3:f3:49:da:bc: 44:e8:9f:e0:84:16:38:39:6e:3d:43:60:9f:05:d5: 2c:0a:34:11:a3:2a:ad:ae:c2:b1:93:23:21:68:9f: 52:46:9d:62:43:1a:df:e5:94:77:e4:ce:f0:e8:f2: 0e:b4:46:f9:4c:43:83:61:07:3b:3f:d3:b3:d0:ad: 78:2d:e8:89:ac:ba:35:31:90:cf:1b:c7:ac:01:07: 5a:e3:07:14:0d:54:24:f4:cb:99:16:42:b3:8a:e0: 87:1f:b7:32:73:21:52:68:47:db:db:1f:c9:ca:8c: 5d:d6:08:37:3e:5f:39:4d:8b:bd:45:5f:7f:30:47: ac:ba:3c:24:57:be:36:6d:20:12:4d:94:16:f8:5e: a0:4f:5f:a2:7f:05:1e:e0:bc:b2:77:ce:0d:3a:4f: dc:8e:2c:36:96:5d:d3:5d:02:d5:31:b2:b0:b4:4a: 99:64:89:47:5e:e3:b8:80:a2:5f:76:5e:4f:d7:ab: 39:bc:a9:12:d8:22:24:93:68:97:a2:b1:08:b3:73: 97:03:a8:b5:13:39:88:f9:05:0f:3e:ec:1f:35:97: 8f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:59:A3:32:F1:6D:D7:93:F1:A3:CD:1C:BD:A5:37:75:DD:75:C7:60 X509v3 Authority Key Identifier: keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:67:b2:8d:07:ee:50:23:b8:c5:0f:b6:24:9c:32:97:17:49: 3f:ab:33:58:97:5e:06:9e:b0:cb:4c:0c:83:a6:53:40:07:49: 82:98:2c:d9:01:f4:af:5f:b7:d6:2f:6e:4f:df:81:2b:d8:d7: 10:0d:ac:0e:df:75:96:d9:99:78:b6:ed:9b:f3:55:5e:5f:ed: 25:3d:93:d7:a0:c4:5d:c6:2a:b7:c3:17:6b:cb:ea:45:32:27: 09:3d:dd:2c:47:a2:34:96:57:d9:fc:00:6a:4f:48:bb:8c:d0: 09:31:c8:3c:53:cf:93:be:01:db:94:92:0b:c3:d9:e8:62:9f: 66:b5:d5:cc:f0:63:b6:a8:df:71:a3:e8:4d:42:cd:1d:49:a7: 4b:29:c2:b2:32:5c:ec:ea:5b:34:00:a7:0d:32:68:3d:91:66: 24:a3:83:6a:c2:bf:d3:51:2f:7c:e6:be:1c:80:df:f2:b7:22: 80:40:41:13:3f:60:5e:1b:65:80:83:c5:95:4f:4a:a9:a6:b5: d5:1b:e1:9f:21:00:19:a5:9b:89:b6:ae:85:f9:ab:a7:49:a1: d6:c4:c7:72:ff:3d:0b:38:28:d5:50:df:32:c4:e9:02:e8:dd: 1f:b1:ea:18:07:bf:5e:73:e1:e8:12:8c:45:1b:77:ef:5c:5f: 41:60:f8:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt5N3L0Sr+o5Y3SEBt5xTV2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzYzMzZTQzZWY1NjUyN2ExNjlkNmFjNmQ3ZTYyYzYzZDE5 NzMwNTEwHhcNMjYwMTAxMTEwMDM1WhcNMjYwMTAyMTEwMDM1WjAzMTEwLwYDVQQD EygxNjU5YTMzMmYxNmRkNzkzZjFhM2NkMWNiZGE1Mzc3NWRkNzVjNzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkvgfzkEWhur2O3cxINpbbS//rbT Tg7RS6h+KdlwvGx1gXvQFBsC0/NJ2rxE6J/ghBY4OW49Q2CfBdUsCjQRoyqtrsKx kyMhaJ9SRp1iQxrf5ZR35M7w6PIOtEb5TEODYQc7P9Oz0K14LeiJrLo1MZDPG8es AQda4wcUDVQk9MuZFkKziuCHH7cycyFSaEfb2x/Jyoxd1gg3Pl85TYu9RV9/MEes ujwkV742bSASTZQW+F6gT1+ifwUe4Lyyd84NOk/cjiw2ll3TXQLVMbKwtEqZZIlH XuO4gKJfdl5P16s5vKkS2CIkk2iXorEIs3OXA6i1EzmI+QUPPuwfNZeP3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBZZozLxbdeT8aPNHL2lN3XddcdgMB8GA1UdIwQY MBaAFAPDPkPvVlJ6Fp1qxtfmLGPRlzBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jMTdjMTUtYTE0Mi00YjM3LWI4ZmUt YTNhM2ViODc5ZjJiLzEvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jMTdjMTUtYTE0Mi00YjM3LWI4ZmUtYTNhM2ViODc5ZjJi LzEvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfWeyjQfu UCO4xQ+2JJwylxdJP6szWJdeBp6wy0wMg6ZTQAdJgpgs2QH0r1+31i9uT9+BK9jX EA2sDt91ltmZeLbtm/NVXl/tJT2T16DEXcYqt8MXa8vqRTInCT3dLEeiNJZX2fwA ak9Iu4zQCTHIPFPPk74B25SSC8PZ6GKfZrXVzPBjtqjfcaPoTULNHUmnSynCsjJc 7OpbNACnDTJoPZFmJKODasK/01EvfOa+HIDf8rcigEBBEz9gXhtlgIPFlU9Kqaa1 1RvhnyEAGaWbibauhfmrp0mh1sTHcv89Czgo1VDfMsTpAujdH7HqGAe/XnPh6BKM RRt371xfQWD4jA== -----END CERTIFICATE-----Generated at Thu Jan 1 12:48:56 2026 by rpki-client