This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft File: Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft (raw, json) Hash identifier: Bm6ohngFwM6PA86Yidw7ArJ4dc9cBRsUE9uMtUePSUY= Subject key identifier: 0F:F2:B3:91:18:40:BD:45:F7:6B:ED:20:3B:A5:E9:69:56:26:33:4D Authority key identifier: 43:D9:4E:06:87:16:09:CC:1F:81:5A:56:DE:5C:9F:AF:6D:57:D5:84 Certificate issuer: /CN=43d94e06871609cc1f815a56de5c9faf6d57d584 Certificate serial: 019B47DD32A4A3074A8CD4FDA5A21D829245 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 21:00:37 +0000 Manifest this update: Mon 22 Dec 2025 21:00:37 +0000 Manifest next update: Tue 23 Dec 2025 21:00:37 +0000 Files and hashes: 1: Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl (hash: ahz21kHpoLz5o8BkIARzZuQh0BeOdXGuJCZM0mZFAu8=) 2: pFcInvEW15iKWvoPMx5EVwuCano.roa (hash: nE+nXG0xZdbwspGUmTTrOhLDVrJyA6M8TZL//6qKpZc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 21:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:dd:32:a4:a3:07:4a:8c:d4:fd:a5:a2:1d:82:92:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43d94e06871609cc1f815a56de5c9faf6d57d584 Validity Not Before: Dec 22 21:00:37 2025 GMT Not After : Dec 23 21:00:37 2025 GMT Subject: CN=0ff2b3911840bd45f76bed203ba5e9695626334d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:aa:0d:eb:03:34:50:62:0e:65:bf:66:ad:d7: 30:9b:19:61:e8:5c:23:4e:c3:30:f0:bb:bf:0d:61: 59:7f:32:91:11:46:2d:b4:65:14:91:e8:f6:f7:1a: 19:b9:af:d5:c0:05:c0:3f:39:f0:58:f4:a2:0d:06: bb:a4:8e:e8:b3:0e:c9:d7:c5:f6:73:52:ee:de:c9: f3:a9:f2:04:f4:97:69:68:30:d2:c0:54:81:0e:c1: e6:0e:ed:2a:12:51:e1:af:b3:78:5f:4d:39:96:87: 2f:e3:ec:ef:41:0b:d7:36:73:3a:71:d5:96:82:b9: 0c:d7:f4:a9:4d:fb:bc:b3:c1:63:fe:5e:99:41:b3: ff:6f:4a:aa:ae:d0:db:a9:91:60:ae:55:fa:8e:e2: 4e:94:9b:c1:70:2e:1c:2d:ce:22:9c:f1:11:08:4e: 79:79:60:66:3a:c9:ed:54:17:27:c0:f7:39:24:47: 0c:64:26:46:33:97:8b:a9:83:2b:60:47:fb:f2:40: 7a:95:51:bf:cc:d8:22:6b:19:6a:39:bf:fe:e7:dc: 84:83:11:6d:15:23:75:83:e1:1d:53:93:0c:35:86: 3c:b3:2f:c6:ab:4e:cd:78:24:c3:50:c0:68:36:58: 7f:6d:98:e8:8b:60:10:5e:b8:6e:e0:aa:78:ba:ee: 28:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F2:B3:91:18:40:BD:45:F7:6B:ED:20:3B:A5:E9:69:56:26:33:4D X509v3 Authority Key Identifier: keyid:43:D9:4E:06:87:16:09:CC:1F:81:5A:56:DE:5C:9F:AF:6D:57:D5:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:21:c1:ec:2d:48:bc:5b:85:86:84:5f:47:a4:88:f8:88:58: 8c:df:cc:4e:be:8d:52:1c:f6:f0:ba:33:05:56:14:b5:b9:59: 1c:a1:e0:05:72:fc:e8:07:da:ae:57:b6:f9:91:ba:4f:e9:3a: 49:be:bd:9b:7d:c0:4a:70:23:c2:3b:a3:5c:fe:9a:79:a3:74: 1d:01:e2:ed:50:6d:1b:d3:76:af:80:2b:33:a2:a6:da:b2:9b: 37:54:a2:9f:ff:67:78:e8:29:97:34:06:10:62:10:f6:7c:43: c7:97:37:ab:ff:fa:97:67:f0:b6:51:35:66:67:be:47:b8:00: 3e:34:7f:12:a8:fd:2a:48:97:a9:1f:ff:a4:f2:47:b6:52:78: d8:89:10:5d:c0:a3:1c:17:89:ae:03:ec:60:87:86:8c:8d:66: 9d:61:f9:5e:90:15:38:51:26:8c:a4:28:f4:da:3a:e3:59:b4: ef:58:90:ec:a1:af:1d:e8:f2:71:95:22:8d:e4:f9:a2:66:1f: a3:53:01:bb:97:b8:01:09:a2:43:bd:9f:e7:0e:0f:8e:e2:a3: a5:da:d9:d1:c1:a9:b7:53:99:d4:67:71:de:c9:01:0d:7f:b9: 15:1e:27:b5:3d:bf:25:ca:2c:35:e0:2a:38:f8:d8:35:ff:5b: e3:81:7a:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtH3TKkowdKjNT9paIdgpJFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZDk0ZTA2ODcxNjA5Y2MxZjgxNWE1NmRlNWM5ZmFmNmQ1 N2Q1ODQwHhcNMjUxMjIyMjEwMDM3WhcNMjUxMjIzMjEwMDM3WjAzMTEwLwYDVQQD EygwZmYyYjM5MTE4NDBiZDQ1Zjc2YmVkMjAzYmE1ZTk2OTU2MjYzMzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKoN6wM0UGIOZb9mrdcwmxlh6Fwj TsMw8Lu/DWFZfzKREUYttGUUkej29xoZua/VwAXAPznwWPSiDQa7pI7osw7J18X2 c1Lu3snzqfIE9JdpaDDSwFSBDsHmDu0qElHhr7N4X005locv4+zvQQvXNnM6cdWW grkM1/SpTfu8s8Fj/l6ZQbP/b0qqrtDbqZFgrlX6juJOlJvBcC4cLc4inPERCE55 eWBmOsntVBcnwPc5JEcMZCZGM5eLqYMrYEf78kB6lVG/zNgiaxlqOb/+59yEgxFt FSN1g+EdU5MMNYY8sy/Gq07NeCTDUMBoNlh/bZjoi2AQXrhu4Kp4uu4oKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/ys5EYQL1F92vtIDul6WlWJjNNMB8GA1UdIwQY MBaAFEPZTgaHFgnMH4FaVt5cn69tV9WEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTlsT0JvY1dDY3dmZ1ZwVzNseWZyMjFYMVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8zMjEzZDMtY2QxYS00NjRkLTkxOGQt MmQ2MjZhY2I3ODMzLzEvUTlsT0JvY1dDY3dmZ1ZwVzNseWZyMjFYMVlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8zMjEzZDMtY2QxYS00NjRkLTkxOGQtMmQ2MjZhY2I3ODMz LzEvUTlsT0JvY1dDY3dmZ1ZwVzNseWZyMjFYMVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbyHB7C1I vFuFhoRfR6SI+IhYjN/MTr6NUhz28LozBVYUtblZHKHgBXL86Afarle2+ZG6T+k6 Sb69m33ASnAjwjujXP6aeaN0HQHi7VBtG9N2r4ArM6Km2rKbN1Sin/9neOgplzQG EGIQ9nxDx5c3q//6l2fwtlE1Zme+R7gAPjR/Eqj9KkiXqR//pPJHtlJ42IkQXcCj HBeJrgPsYIeGjI1mnWH5XpAVOFEmjKQo9No641m071iQ7KGvHejycZUijeT5omYf o1MBu5e4AQmiQ72f5w4PjuKjpdrZ0cGpt1OZ1Gdx3skBDX+5FR4ntT2/JcosNeAq OPjYNf9b44F6Ow== -----END CERTIFICATE-----Generated at Tue Dec 23 05:03:17 2025 by rpki-client