This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft File: qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft (raw, json) Hash identifier: jTYTFWaHAAF75++0uY/EnkKluLHF1GMZu7/RNJJKDG4= Subject key identifier: C9:22:62:74:DB:C6:5C:B5:CF:22:BD:A0:50:64:83:06:BD:53:A4:9F Authority key identifier: A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD Certificate issuer: /CN=a9a28417c1e1b68f69be1d3ec812037097619ccd Certificate serial: 019B59E38126CEDEA442AB5FF83CCB9B3A1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft Manifest number: 0E2C Signing time: Fri 26 Dec 2025 09:00:40 +0000 Manifest this update: Fri 26 Dec 2025 09:00:40 +0000 Manifest next update: Sat 27 Dec 2025 09:00:40 +0000 Files and hashes: 1: O_hdcVHlxOZo_l-7xdIRhesWw_A.roa (hash: mfR5DtCjLIjJTqw++nVFAPPeJtIg5fCaC2S+CCvWR50=) 2: XwnrCE6pmPQ_ODmEcUdfJGretx8.roa (hash: 5lKgnXAmcufifa9qAWfP1aELwyqHVzg1TzDHW6nCY9c=) 3: qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl (hash: ooihtklyw4ruodwcbWkaB+SIzCZzngoU5qfeFBRU8tQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:81:26:ce:de:a4:42:ab:5f:f8:3c:cb:9b:3a:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9a28417c1e1b68f69be1d3ec812037097619ccd Validity Not Before: Dec 26 09:00:40 2025 GMT Not After : Dec 27 09:00:40 2025 GMT Subject: CN=c9226274dbc65cb5cf22bda050648306bd53a49f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:95:81:01:c9:3d:b8:e1:11:a6:b3:75:28:34: 6f:fd:d3:25:28:a4:a7:2f:66:46:0c:79:80:99:2e: 7a:42:5f:8f:71:21:a5:e3:1f:01:b4:7b:ee:e2:c7: 38:08:3e:71:7f:84:37:00:b0:21:d1:92:88:2b:08: 97:50:6d:12:c9:7a:9f:d1:d2:e2:53:5b:f2:bf:d0: 6f:0e:90:50:a4:31:ed:7d:51:e4:5c:78:f1:fe:60: 01:18:b2:75:0a:cf:df:15:eb:5d:d6:cb:b8:9e:b6: 23:b8:d3:88:67:1d:83:b6:3e:b1:e4:d0:62:ae:bb: 60:bb:a5:ca:df:b0:b0:61:d4:4a:91:c2:13:32:86: f0:08:aa:3b:69:ba:29:eb:f1:18:ad:e3:f5:b5:2d: 8e:ea:72:4d:1b:8c:ef:36:67:57:09:7c:17:ae:d6: 3e:80:22:31:6a:e0:8f:b6:66:18:6f:73:84:78:e0: aa:67:c0:37:2f:02:7a:d0:ab:3f:ce:95:8b:bf:46: ae:09:68:4b:9a:39:43:b0:2d:e3:ee:17:da:a5:8b: 1b:e0:c6:03:f5:b7:65:5e:56:8e:25:7b:51:83:08: da:07:e3:c6:2b:b0:55:77:c6:f1:d4:bb:bb:34:db: 3e:f0:bc:92:49:bc:4f:52:77:d7:01:c5:aa:d8:06: b8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:22:62:74:DB:C6:5C:B5:CF:22:BD:A0:50:64:83:06:BD:53:A4:9F X509v3 Authority Key Identifier: keyid:A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:f2:8c:6c:1e:32:e1:b2:1f:39:18:32:6c:08:07:10:c7:e6: 0e:f0:f5:d5:c4:d3:d2:6e:14:17:1b:6b:b0:70:36:df:dd:f3: 65:4a:8d:62:47:b2:74:a3:05:25:32:2d:2c:00:5e:5a:14:3a: 9c:2b:51:a7:32:4e:55:15:58:d5:fe:9f:f3:65:5a:87:92:72: 18:db:68:d6:07:47:07:57:a9:30:43:ac:cf:47:fb:54:03:4c: 64:2d:b2:d0:d0:f5:c6:4f:34:ff:f1:4f:96:11:49:42:78:4f: ac:55:d2:47:05:01:6a:be:83:45:e6:49:fc:21:86:26:94:f7: 65:b5:3c:59:e8:20:74:55:bb:ae:a3:45:3a:70:2d:b3:d4:15: e1:e7:37:d8:05:40:4c:5e:80:65:34:5f:a1:63:b0:97:fb:df: b6:ff:96:fd:d8:cc:41:53:a5:01:2b:da:e9:53:34:24:0b:f3: bc:c8:47:a3:64:17:a4:20:8a:3a:01:ff:13:61:98:9c:d8:e6: ea:c3:a1:f7:a1:88:06:04:b6:f6:b7:5d:49:e9:61:d1:9b:ac: b4:ae:50:15:e6:90:00:6c:ad:b9:9a:ce:89:23:ea:51:90:b5: b7:b8:f8:cb:43:cc:68:a2:7d:dd:2a:5f:dd:7e:45:83:36:f2: e1:cf:67:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ44Emzt6kQqtf+DzLmzofMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5YTI4NDE3YzFlMWI2OGY2OWJlMWQzZWM4MTIwMzcwOTc2 MTljY2QwHhcNMjUxMjI2MDkwMDQwWhcNMjUxMjI3MDkwMDQwWjAzMTEwLwYDVQQD EyhjOTIyNjI3NGRiYzY1Y2I1Y2YyMmJkYTA1MDY0ODMwNmJkNTNhNDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+pWBAck9uOERprN1KDRv/dMlKKSn L2ZGDHmAmS56Ql+PcSGl4x8BtHvu4sc4CD5xf4Q3ALAh0ZKIKwiXUG0SyXqf0dLi U1vyv9BvDpBQpDHtfVHkXHjx/mABGLJ1Cs/fFetd1su4nrYjuNOIZx2Dtj6x5NBi rrtgu6XK37CwYdRKkcITMobwCKo7abop6/EYreP1tS2O6nJNG4zvNmdXCXwXrtY+ gCIxauCPtmYYb3OEeOCqZ8A3LwJ60Ks/zpWLv0auCWhLmjlDsC3j7hfapYsb4MYD 9bdlXlaOJXtRgwjaB+PGK7BVd8bx1Lu7NNs+8LySSbxPUnfXAcWq2Aa49QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMkiYnTbxly1zyK9oFBkgwa9U6SfMB8GA1UdIwQY MBaAFKmihBfB4baPab4dPsgSA3CXYZzNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWFLRUY4SGh0bzlwdmgwLXlCSURjSmRobk0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zMDljMzYtN2MxZC00YTMzLTljZjUt ZWQzNjQ3N2I5NDgwLzEvcWFLRUY4SGh0bzlwdmgwLXlCSURjSmRobk0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8zMDljMzYtN2MxZC00YTMzLTljZjUtZWQzNjQ3N2I5NDgw LzEvcWFLRUY4SGh0bzlwdmgwLXlCSURjSmRobk0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP/KMbB4y 4bIfORgybAgHEMfmDvD11cTT0m4UFxtrsHA2393zZUqNYkeydKMFJTItLABeWhQ6 nCtRpzJOVRVY1f6f82Vah5JyGNto1gdHB1epMEOsz0f7VANMZC2y0ND1xk80//FP lhFJQnhPrFXSRwUBar6DReZJ/CGGJpT3ZbU8WeggdFW7rqNFOnAts9QV4ec32AVA TF6AZTRfoWOwl/vftv+W/djMQVOlASva6VM0JAvzvMhHo2QXpCCKOgH/E2GYnNjm 6sOh96GIBgS29rddSelh0ZustK5QFeaQAGytuZrOiSPqUZC1t7j4y0PMaKJ93Spf 3X5Fgzby4c9nPA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:16 2025 by rpki-client