This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.mft File: q4PmT3LdWIn7E9whjGg_bi-s9bI.mft (raw, json) Hash identifier: wakNW6Hbvv6A6cSkvj/e/hx6PRcCVjHLMlynschjDyA= Subject key identifier: 97:8E:E6:BB:78:66:73:B7:8E:94:7C:EC:EE:13:B6:7D:69:2C:F0:D0 Authority key identifier: AB:83:E6:4F:72:DD:58:89:FB:13:DC:21:8C:68:3F:6E:2F:AC:F5:B2 Certificate issuer: /CN=ab83e64f72dd5889fb13dc218c683f6e2facf5b2 Certificate serial: 019B41A42EC204EA962BEB12256E8EB8111A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4PmT3LdWIn7E9whjGg_bi-s9bI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.mft Manifest number: 1792 Signing time: Sun 21 Dec 2025 16:00:37 +0000 Manifest this update: Sun 21 Dec 2025 16:00:37 +0000 Manifest next update: Mon 22 Dec 2025 16:00:37 +0000 Files and hashes: 1: XXoZOakmJlvXmGLWUcpo0gQIMX0.roa (hash: pmwXibQwTAqNCSY5Q6bAlM3gdp8aduabThZ3TyryXdc=) 2: q4PmT3LdWIn7E9whjGg_bi-s9bI.crl (hash: bYk4IzGCY+csWCCdAJUY6lkwZ4e1EE84YaA5T5XcDXs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.crl rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.mft rsync://rpki.ripe.net/repository/DEFAULT/q4PmT3LdWIn7E9whjGg_bi-s9bI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:2e:c2:04:ea:96:2b:eb:12:25:6e:8e:b8:11:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab83e64f72dd5889fb13dc218c683f6e2facf5b2 Validity Not Before: Dec 21 16:00:37 2025 GMT Not After : Dec 22 16:00:37 2025 GMT Subject: CN=978ee6bb786673b78e947cecee13b67d692cf0d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:85:8c:05:8d:db:7f:3c:ac:ff:39:6b:fe:34: 70:34:d2:a4:70:d3:e5:b0:fb:eb:60:25:a0:5e:58: 2f:cf:6c:27:be:69:37:8f:49:79:2d:20:2e:75:2a: 00:00:67:5a:e4:41:e6:3d:89:cd:54:c8:a1:79:15: 66:98:fb:17:01:3f:c9:fc:6c:0d:3e:eb:79:7a:33: 57:54:8a:e5:0b:c2:18:86:7d:59:ca:9a:d7:97:83: 5f:2b:45:19:42:b7:ad:fe:b0:db:63:64:36:3f:70: a4:09:ab:55:b8:61:d8:72:20:cc:0f:54:9b:a0:64: 41:39:48:55:a9:14:02:bb:d9:f9:c6:d2:9c:54:00: c9:21:f5:19:79:65:61:66:c0:a1:37:6e:ca:de:d7: 7e:dd:f3:56:c2:b5:3b:47:70:fb:3b:d1:1d:4b:cd: e8:d9:93:d2:59:88:c8:b2:95:cf:45:e3:7c:f3:05: e4:01:2c:24:b1:e7:1a:eb:d9:83:fc:d6:c8:a2:c4: 9d:99:8d:bd:32:1e:ec:7c:53:b9:88:dd:75:b6:b1: 93:c8:90:3e:37:d1:ea:bc:a9:4a:66:8f:7b:16:23: fc:ea:4e:a3:24:0f:0e:bd:04:f9:b4:8e:f9:87:87: e2:7d:6f:03:91:5e:27:f0:10:0e:d6:0c:a7:ec:10: f3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:8E:E6:BB:78:66:73:B7:8E:94:7C:EC:EE:13:B6:7D:69:2C:F0:D0 X509v3 Authority Key Identifier: keyid:AB:83:E6:4F:72:DD:58:89:FB:13:DC:21:8C:68:3F:6E:2F:AC:F5:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4PmT3LdWIn7E9whjGg_bi-s9bI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:b7:b9:80:6f:2c:50:7e:c3:67:4f:e4:03:5d:b2:0c:7d:5c: 88:e3:2d:1c:35:ba:d4:04:ea:a7:11:d6:0e:e4:4b:d7:c4:ae: fa:5d:4f:89:c8:69:34:0a:e8:10:61:cf:d0:99:f7:f8:31:76: 46:07:e6:13:62:eb:f0:dc:10:82:45:d1:fa:a4:28:54:b7:ff: 67:c3:8d:c2:f1:5d:d3:80:6f:c0:71:9a:99:ae:62:83:5a:48: d1:7a:fb:42:25:cf:e7:2e:27:30:9f:56:c8:84:96:0e:65:76: e8:e2:9d:b8:75:8b:71:48:c8:02:94:ce:5a:e5:0e:85:ff:24: f4:33:de:98:5e:f0:16:83:19:ca:35:76:79:ce:6e:49:fb:58: a3:6b:f0:cb:9c:d3:89:d6:d3:0e:97:29:4a:21:90:cd:9b:15: 4c:f8:68:2b:69:9e:a7:40:3a:f1:23:0a:7b:41:45:98:b0:56: 11:e4:d2:17:4a:94:4a:3c:28:d5:a0:3e:85:08:99:0e:5b:dc: 87:6f:a7:65:73:73:8e:77:17:1e:75:6a:da:cf:7e:0e:96:f5: 14:96:45:8c:05:70:88:69:1f:db:4a:b5:d2:79:69:c8:22:a9: 62:79:dd:23:23:bd:22:46:89:76:d2:84:7c:48:72:4a:47:5c: 8e:a1:ab:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpC7CBOqWK+sSJW6OuBEaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiODNlNjRmNzJkZDU4ODlmYjEzZGMyMThjNjgzZjZlMmZh Y2Y1YjIwHhcNMjUxMjIxMTYwMDM3WhcNMjUxMjIyMTYwMDM3WjAzMTEwLwYDVQQD Eyg5NzhlZTZiYjc4NjY3M2I3OGU5NDdjZWNlZTEzYjY3ZDY5MmNmMGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYWMBY3bfzys/zlr/jRwNNKkcNPl sPvrYCWgXlgvz2wnvmk3j0l5LSAudSoAAGda5EHmPYnNVMiheRVmmPsXAT/J/GwN Put5ejNXVIrlC8IYhn1ZyprXl4NfK0UZQret/rDbY2Q2P3CkCatVuGHYciDMD1Sb oGRBOUhVqRQCu9n5xtKcVADJIfUZeWVhZsChN27K3td+3fNWwrU7R3D7O9EdS83o 2ZPSWYjIspXPReN88wXkASwkseca69mD/NbIosSdmY29Mh7sfFO5iN11trGTyJA+ N9HqvKlKZo97FiP86k6jJA8OvQT5tI75h4fifW8DkV4n8BAO1gyn7BDzDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJeO5rt4ZnO3jpR87O4Ttn1pLPDQMB8GA1UdIwQY MBaAFKuD5k9y3ViJ+xPcIYxoP24vrPWyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTRQbVQzTGRXSW43RTl3aGpHZ19iaS1zOWJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS85ZDY2ZmMtMzFkNC00YWIxLThlYWUt NTQxZjQ4OTI0OTUyLzEvcTRQbVQzTGRXSW43RTl3aGpHZ19iaS1zOWJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS85ZDY2ZmMtMzFkNC00YWIxLThlYWUtNTQxZjQ4OTI0OTUy LzEvcTRQbVQzTGRXSW43RTl3aGpHZ19iaS1zOWJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVLe5gG8s UH7DZ0/kA12yDH1ciOMtHDW61ATqpxHWDuRL18Su+l1PichpNAroEGHP0Jn3+DF2 RgfmE2Lr8NwQgkXR+qQoVLf/Z8ONwvFd04BvwHGama5ig1pI0Xr7QiXP5y4nMJ9W yISWDmV26OKduHWLcUjIApTOWuUOhf8k9DPemF7wFoMZyjV2ec5uSftYo2vwy5zT idbTDpcpSiGQzZsVTPhoK2mep0A68SMKe0FFmLBWEeTSF0qUSjwo1aA+hQiZDlvc h2+nZXNzjncXHnVq2s9+Dpb1FJZFjAVwiGkf20q10nlpyCKpYnndIyO9IkaJdtKE fEhySkdcjqGrjA== -----END CERTIFICATE-----Generated at Sun Dec 21 20:32:54 2025 by rpki-client