This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft File: q9h7vvWUNUayqD0x7CuZrYg9Udc.mft (raw, json) Hash identifier: O0YTiar3t0+toy+YpIeAKLZ/7KXcy2y8qmaI6rAeTzM= Subject key identifier: 5F:4D:21:B0:1C:9F:FF:CB:DE:71:2F:BF:54:0A:AF:38:BF:E6:88:F3 Authority key identifier: AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7 Certificate issuer: /CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7 Certificate serial: 019AF6F99EB58D37214A6BBDBC9935999392 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft Manifest number: 0CCC Signing time: Sun 07 Dec 2025 04:02:25 +0000 Manifest this update: Sun 07 Dec 2025 04:02:25 +0000 Manifest next update: Mon 08 Dec 2025 04:02:25 +0000 Files and hashes: 1: 7d46OTwbNs5KuUyqdxKYkS8NBJI.roa (hash: 4Rn+6tq432h7x4Ge16LfuM8y8RGTaZzgBXirAxsJ5MM=) 2: W2NhW2V8Iexgd4nWoDLptnalys8.roa (hash: qN2oaoKEpYxm1heQ0tQCx/vfqwegOgZk4tzwgcNVmWg=) 3: XB2P8pqeFQE5V_wiPLEy8Uw8TL4.roa (hash: eEOspJ3pbx3Bzx3yuT7YUHqNvJo2s+nrBm58kVOY9b8=) 4: e70_76D8VUKzyOllsP-C6ko3aJ4.roa (hash: YSc6a0NAXpNIVXvLTAs9uQ9JjUM2SpjCK+qzw0/wRpY=) 5: q9h7vvWUNUayqD0x7CuZrYg9Udc.crl (hash: J61s7ZSMDiIybACL2uTHHdsWbhQ8BiiwD682SL5i9mo=) 6: r9AECsFfSl2im_ZX-xTBrlxOfD8.roa (hash: ULicRE/3nxP/zcRYRZJBN8ZiMjtTPhQz8NjZ7TncWXU=) 7: tsLbqC6GleedJxC9I3GCKnE32tM.roa (hash: q8OgS2zQAxO3r6wIDM4lb25MYLPFfkq3kdggEkr0ENk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 04:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f9:9e:b5:8d:37:21:4a:6b:bd:bc:99:35:99:93:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7 Validity Not Before: Dec 7 04:02:25 2025 GMT Not After : Dec 8 04:02:25 2025 GMT Subject: CN=5f4d21b01c9fffcbde712fbf540aaf38bfe688f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:76:6a:51:35:5d:3f:e9:e2:ed:ef:ba:4b:d5: bc:6c:91:4c:37:34:9c:24:bf:b1:07:cc:91:d4:7d: a1:f9:3e:32:e3:26:6e:6b:4f:6f:c6:0a:bd:75:65: aa:c4:fe:f4:5c:94:dc:5a:90:d6:d7:e1:32:50:28: 62:df:75:78:71:66:1a:c9:f4:67:8b:41:37:5d:2c: 1f:2b:11:b2:3b:22:47:0e:3b:42:7b:97:7d:2a:c7: 63:31:a8:5d:1c:2d:2f:8c:17:85:d7:5c:03:ab:47: b0:2a:ee:e0:0c:92:74:1d:0b:e4:d0:34:6e:27:b6: 49:fe:ba:13:87:1e:07:13:91:b8:98:18:2a:d8:a1: 64:ce:87:27:3b:a2:69:e1:2f:95:0a:dc:1c:fc:f2: ea:5a:15:75:8f:01:07:60:9c:b6:4e:6f:83:6f:ab: 0f:3e:3b:41:ba:11:72:ef:5f:dc:c6:45:f5:31:0e: 4b:73:0a:91:ad:99:97:9f:03:a8:37:61:a4:a2:e5: 80:4f:9e:8a:f2:7d:fd:04:ed:85:83:4c:67:0f:e1: d8:09:97:fb:46:ed:30:d3:47:3f:82:7e:34:71:0f: 09:6e:76:79:01:55:48:a6:77:5e:00:f5:ae:65:45: 38:67:78:da:2e:4e:bd:e7:7f:10:36:d1:cf:5e:9b: d0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:4D:21:B0:1C:9F:FF:CB:DE:71:2F:BF:54:0A:AF:38:BF:E6:88:F3 X509v3 Authority Key Identifier: keyid:AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:c3:9a:e3:9b:52:10:fc:6e:c7:a1:09:a6:52:73:93:65:46: 3e:e7:75:7f:d3:a8:11:2e:1b:b0:bf:84:a9:09:22:ec:95:93: d0:d8:0a:66:87:6f:cf:26:0b:f6:e0:73:2a:b2:0d:89:0a:37: 36:e4:c4:be:aa:e4:b8:62:45:bd:71:c4:f8:7e:d5:8f:a2:b1: 9f:6f:f7:b9:1c:fe:05:fc:bb:7c:da:6b:61:78:f3:5c:aa:ae: 21:c4:d9:f0:73:5f:b2:49:aa:9c:d7:af:90:8e:47:50:8c:6e: cb:cb:12:5a:a9:67:91:1f:41:08:64:5f:88:29:88:10:fc:d7: c4:db:a8:a1:ba:e4:f5:dd:70:12:a1:23:01:a5:c6:a1:18:13: 0e:3e:99:d6:30:2c:fd:65:51:eb:89:e0:06:6c:f3:55:d0:0e: f5:4e:55:24:d3:19:7b:9f:12:b4:14:ef:7b:70:b0:9b:1f:39: cd:91:09:a0:e8:a5:7b:a6:14:6b:4f:1d:6c:6b:dd:6f:34:a5: 8e:69:58:9f:9c:a5:f1:e9:1f:05:06:45:ad:c8:be:bb:35:56: 80:d9:31:c9:93:bc:9b:35:e2:4d:fe:87:36:63:4d:16:64:ab: 6e:c2:fc:1e:da:51:08:77:e0:d4:87:4a:dd:d7:1a:10:05:a5: 47:de:b3:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+Z61jTchSmu9vJk1mZOSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiZDg3YmJlZjU5NDM1NDZiMmE4M2QzMWVjMmI5OWFkODgz ZDUxZDcwHhcNMjUxMjA3MDQwMjI1WhcNMjUxMjA4MDQwMjI1WjAzMTEwLwYDVQQD Eyg1ZjRkMjFiMDFjOWZmZmNiZGU3MTJmYmY1NDBhYWYzOGJmZTY4OGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunZqUTVdP+ni7e+6S9W8bJFMNzSc JL+xB8yR1H2h+T4y4yZua09vxgq9dWWqxP70XJTcWpDW1+EyUChi33V4cWYayfRn i0E3XSwfKxGyOyJHDjtCe5d9KsdjMahdHC0vjBeF11wDq0ewKu7gDJJ0HQvk0DRu J7ZJ/roThx4HE5G4mBgq2KFkzocnO6Jp4S+VCtwc/PLqWhV1jwEHYJy2Tm+Db6sP PjtBuhFy71/cxkX1MQ5LcwqRrZmXnwOoN2GkouWAT56K8n39BO2Fg0xnD+HYCZf7 Ru0w00c/gn40cQ8JbnZ5AVVIpndeAPWuZUU4Z3jaLk69538QNtHPXpvQCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF9NIbAcn//L3nEvv1QKrzi/5ojzMB8GA1UdIwQY MBaAFKvYe771lDVGsqg9Mewrma2IPVHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTloN3Z2V1VOVWF5cUQweDdDdVpyWWc5VWRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84YWQyZTAtZTNmMC00YWJlLWJjYjYt MmY1Yzc0YzY5YWUxLzEvcTloN3Z2V1VOVWF5cUQweDdDdVpyWWc5VWRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC84YWQyZTAtZTNmMC00YWJlLWJjYjYtMmY1Yzc0YzY5YWUx LzEvcTloN3Z2V1VOVWF5cUQweDdDdVpyWWc5VWRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGsOa45tS EPxux6EJplJzk2VGPud1f9OoES4bsL+EqQki7JWT0NgKZodvzyYL9uBzKrINiQo3 NuTEvqrkuGJFvXHE+H7Vj6Kxn2/3uRz+Bfy7fNprYXjzXKquIcTZ8HNfskmqnNev kI5HUIxuy8sSWqlnkR9BCGRfiCmIEPzXxNuoobrk9d1wEqEjAaXGoRgTDj6Z1jAs /WVR64ngBmzzVdAO9U5VJNMZe58StBTve3Cwmx85zZEJoOile6YUa08dbGvdbzSl jmlYn5yl8ekfBQZFrci+uzVWgNkxyZO8mzXiTf6HNmNNFmSrbsL8HtpRCHfg1IdK 3dcaEAWlR96zAA== -----END CERTIFICATE-----Generated at Sun Dec 7 10:44:01 2025 by rpki-client