This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft File: q9xALNU1_JEj6gJsYq6c8PgOlBg.mft (raw, json) Hash identifier: nYfuaGHBA0E1xeL33WxJpeZ+f28R/ILNMv+NWgZEaOY= Subject key identifier: F5:0A:26:9C:BF:2B:64:C6:BE:8A:8D:53:1B:DD:1B:B7:D8:73:5C:9B Authority key identifier: AB:DC:40:2C:D5:35:FC:91:23:EA:02:6C:62:AE:9C:F0:F8:0E:94:18 Certificate issuer: /CN=abdc402cd535fc9123ea026c62ae9cf0f80e9418 Certificate serial: 019B364567FFD205A83181F47C68E8ED7793 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 11:01:16 +0000 Manifest this update: Fri 19 Dec 2025 11:01:16 +0000 Manifest next update: Sat 20 Dec 2025 11:01:16 +0000 Files and hashes: 1: LtPXIJBODsTgHOTG4NK5yVKpj5k.roa (hash: ITX8aC19jlc3FBy1kQN9LCE6ibXilzDMrJg98+CkzVM=) 2: q9xALNU1_JEj6gJsYq6c8PgOlBg.crl (hash: O8crv5ss2GrDgSd06Zst18M/kFIbSDNcmJixhJRCygE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 11:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:45:67:ff:d2:05:a8:31:81:f4:7c:68:e8:ed:77:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abdc402cd535fc9123ea026c62ae9cf0f80e9418 Validity Not Before: Dec 19 11:01:16 2025 GMT Not After : Dec 20 11:01:16 2025 GMT Subject: CN=f50a269cbf2b64c6be8a8d531bdd1bb7d8735c9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5d:e1:67:06:22:9e:b3:f8:d4:14:71:65:f2: 16:04:09:27:5c:48:8c:d1:d9:86:4d:ce:3d:85:60: 37:fb:c2:27:bd:35:d7:b5:2b:bc:c6:b1:31:f2:27: c7:1a:7b:70:7f:84:2b:68:92:1c:f3:bd:9b:d0:70: 04:ac:7a:6e:1b:99:4b:ab:ea:27:f9:83:17:27:10: e5:fa:a7:9d:96:49:69:80:2d:5b:b7:cc:36:75:86: c7:37:09:7f:a6:9b:2d:24:87:9a:a5:52:0e:47:89: 67:a4:18:f8:1d:e4:b6:12:97:65:bb:8d:f7:93:01: d6:65:7e:8a:e0:eb:50:aa:d1:10:e3:b7:58:1a:19: 69:20:e3:52:71:2d:5e:51:1a:e4:4f:c2:0c:42:1b: 8a:cc:dc:51:1c:f1:41:35:9a:e3:e8:6b:14:e2:4c: 91:10:b2:66:f0:dd:0e:13:2f:6e:76:54:d2:f0:ef: 93:08:f8:90:7b:65:b1:4d:1a:db:11:ef:ee:6a:45: 0e:4c:bb:34:a1:c1:1e:42:37:9a:66:29:2e:a2:76: 45:27:63:74:56:e2:13:a8:d5:84:4f:a6:35:d0:e0: a5:e7:98:40:99:28:63:5a:f3:51:3d:83:28:a4:9c: aa:c5:98:26:a4:bd:b2:c1:28:4a:bb:f8:15:e4:aa: a4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:0A:26:9C:BF:2B:64:C6:BE:8A:8D:53:1B:DD:1B:B7:D8:73:5C:9B X509v3 Authority Key Identifier: keyid:AB:DC:40:2C:D5:35:FC:91:23:EA:02:6C:62:AE:9C:F0:F8:0E:94:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:a3:32:b6:27:51:0d:0d:2d:a8:67:1e:aa:4f:08:6f:6a:71: 5b:ca:fd:b6:45:7a:36:4b:35:f5:e4:fc:bd:32:93:fd:31:d5: f3:eb:ff:08:c9:0b:78:52:74:5c:82:cd:d8:64:fa:07:63:3f: 08:9b:22:8b:5c:6a:e3:09:85:aa:5c:8c:72:de:a0:e3:60:6e: 44:52:26:00:fa:1f:2b:cf:7d:ea:64:8d:e3:da:44:ca:4c:b7: cc:fe:82:0a:42:af:71:c0:67:ec:79:2e:2d:a9:29:66:ae:58: 8e:66:92:f2:d5:16:6a:56:6b:f9:a0:4b:c6:df:a9:43:c0:85: 86:3e:a5:d5:43:58:17:35:de:5d:cd:ed:a7:63:35:eb:d7:92: ac:a1:cd:4a:c4:6b:30:53:6c:d0:d3:71:5f:0f:dc:4c:60:0a: 0e:c5:24:30:06:4a:20:9d:14:7b:33:06:d6:eb:bf:01:3b:f6: 2b:ea:26:31:7a:83:c3:0a:89:64:6f:7d:f7:61:9f:a1:ec:53: ad:94:10:a4:7c:c1:4e:33:e9:d7:8d:65:c5:81:fa:d9:29:44: 96:77:19:d5:60:fa:22:d6:aa:1d:06:e6:3b:77:16:e6:22:10: b8:5d:21:9a:db:39:6d:1d:74:e8:95:47:28:6a:f5:dd:78:b3: cc:08:55:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2RWf/0gWoMYH0fGjo7XeTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiZGM0MDJjZDUzNWZjOTEyM2VhMDI2YzYyYWU5Y2YwZjgw ZTk0MTgwHhcNMjUxMjE5MTEwMTE2WhcNMjUxMjIwMTEwMTE2WjAzMTEwLwYDVQQD EyhmNTBhMjY5Y2JmMmI2NGM2YmU4YThkNTMxYmRkMWJiN2Q4NzM1YzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyV3hZwYinrP41BRxZfIWBAknXEiM 0dmGTc49hWA3+8InvTXXtSu8xrEx8ifHGntwf4QraJIc872b0HAErHpuG5lLq+on +YMXJxDl+qedlklpgC1bt8w2dYbHNwl/ppstJIeapVIOR4lnpBj4HeS2Epdlu433 kwHWZX6K4OtQqtEQ47dYGhlpIONScS1eURrkT8IMQhuKzNxRHPFBNZrj6GsU4kyR ELJm8N0OEy9udlTS8O+TCPiQe2WxTRrbEe/uakUOTLs0ocEeQjeaZikuonZFJ2N0 VuITqNWET6Y10OCl55hAmShjWvNRPYMopJyqxZgmpL2ywShKu/gV5KqkyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPUKJpy/K2TGvoqNUxvdG7fYc1ybMB8GA1UdIwQY MBaAFKvcQCzVNfyRI+oCbGKunPD4DpQYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTl4QUxOVTFfSkVqNmdKc1lxNmM4UGdPbEJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS83NTIzZDktNDY0OC00MzVlLTk5NjEt NDA3MzViMmY4NDgxLzEvcTl4QUxOVTFfSkVqNmdKc1lxNmM4UGdPbEJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS83NTIzZDktNDY0OC00MzVlLTk5NjEtNDA3MzViMmY4NDgx LzEvcTl4QUxOVTFfSkVqNmdKc1lxNmM4UGdPbEJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANaMytidR DQ0tqGceqk8Ib2pxW8r9tkV6Nks19eT8vTKT/THV8+v/CMkLeFJ0XILN2GT6B2M/ CJsii1xq4wmFqlyMct6g42BuRFImAPofK8996mSN49pEyky3zP6CCkKvccBn7Hku LakpZq5YjmaS8tUWalZr+aBLxt+pQ8CFhj6l1UNYFzXeXc3tp2M169eSrKHNSsRr MFNs0NNxXw/cTGAKDsUkMAZKIJ0UezMG1uu/ATv2K+omMXqDwwqJZG9992GfoexT rZQQpHzBTjPp141lxYH62SlElncZ1WD6ItaqHQbmO3cW5iIQuF0hmts5bR106JVH KGr13XizzAhVxQ== -----END CERTIFICATE-----Generated at Fri Dec 19 19:12:39 2025 by rpki-client