This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft File: q29qNuwpYNTQXz2dyxh7m5BOpZs.mft (raw, json) Hash identifier: 66sdBnEGNMutQlE4gw9SyL5FJKpw3rUi1Q9BR8IOkFQ= Subject key identifier: A5:FF:47:D3:4A:13:77:31:05:93:0B:85:CC:1D:AC:D9:58:5B:8A:C8 Authority key identifier: AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B Certificate issuer: /CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b Certificate serial: 019B3D5A472B1554F9F5B81D30D26F362037 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft Manifest number: 0783 Signing time: Sat 20 Dec 2025 20:01:25 +0000 Manifest this update: Sat 20 Dec 2025 20:01:25 +0000 Manifest next update: Sun 21 Dec 2025 20:01:25 +0000 Files and hashes: 1: DcoOphnBv0Z-r0DRs1Wzn6GO5g8.roa (hash: /C9jr7QH16ykeDGqHdZ0LLAVK74Wkvu3hj1t3uV43yA=) 2: Nq6xP1ML7pMOmt1I4z-fGnkBjbQ.roa (hash: eP8YWZy4BtRcpeOrILokYjbMpuSFUnV4sCVcpAqWhwM=) 3: XmMK1HZ3DcPkTMV2el117ysMhn8.roa (hash: 4EKgTSdeFZXBlalCvjDw36pJD0WP5d5sVK8uLLXyrbI=) 4: q29qNuwpYNTQXz2dyxh7m5BOpZs.crl (hash: fY6C+ij/XX2D7ylv/9QBBjpTzM49PCh9ALMaPQ0BvYE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:47:2b:15:54:f9:f5:b8:1d:30:d2:6f:36:20:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b Validity Not Before: Dec 20 20:01:25 2025 GMT Not After : Dec 21 20:01:25 2025 GMT Subject: CN=a5ff47d34a13773105930b85cc1dacd9585b8ac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fd:fa:67:97:14:9e:2e:54:41:bd:7f:df:ad: 2c:d8:3b:a0:d9:11:19:26:08:7f:af:1a:63:64:19: 4d:07:a5:e3:4e:21:55:b6:5d:7f:68:6d:eb:b3:cd: d7:ab:fc:9a:79:72:30:8e:1a:9e:5e:20:f4:6a:01: 09:89:65:aa:f4:1b:f4:98:07:d1:d9:c6:ca:dd:a3: 76:5e:e5:de:4d:b9:92:26:f8:79:70:19:3c:5e:1e: 1e:6a:ca:dd:47:7c:20:32:f9:6b:e0:61:a2:0d:f2: 45:47:ea:fd:ce:40:c2:6f:3b:21:91:10:a9:17:88: 97:aa:49:c6:00:56:59:81:c5:21:df:64:ff:89:37: 51:dc:9b:6a:8f:5c:7f:4c:61:9f:1a:70:85:33:ca: 4e:9e:3f:b7:e0:df:5d:fe:f8:ca:d8:ad:da:a1:d6: aa:e3:43:c5:5b:36:49:21:a0:7a:00:90:a3:2b:56: a6:9e:65:ee:af:ed:b6:f7:23:36:1e:06:5e:15:47: f9:9f:7c:c8:87:c6:9c:86:2a:e5:92:bf:ec:1b:29: 2c:20:4b:bd:93:1d:c3:68:4f:19:4c:06:49:a1:61: ad:1b:d8:0f:b5:28:87:b3:4a:0e:d9:5b:7d:8e:34: 5c:1e:31:d5:f9:b9:7c:de:8e:12:90:46:7e:63:bd: 20:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:FF:47:D3:4A:13:77:31:05:93:0B:85:CC:1D:AC:D9:58:5B:8A:C8 X509v3 Authority Key Identifier: keyid:AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:b5:de:fe:ac:3a:47:ac:06:67:f2:cf:20:e6:2c:31:72:cb: 9f:59:d2:33:ef:fb:c3:c2:5b:88:6b:ff:a5:33:5a:ec:d6:2d: 92:05:91:66:f5:23:c2:a2:51:73:de:7e:8b:63:fc:f7:14:13: 12:3a:ac:a1:f6:b5:e0:59:af:f6:f0:ea:56:a9:5c:82:c0:e3: b0:d9:51:49:d5:8b:d7:83:33:c4:4e:60:50:28:3b:d3:7f:b0: a9:74:bb:25:c5:51:04:f7:4b:75:b1:cc:8e:1f:79:96:0b:6c: 8c:6a:ed:fc:da:6c:a0:03:aa:42:f9:66:bb:49:6d:3b:f8:1c: 55:a7:bb:d6:4a:42:51:7c:14:dc:f9:13:52:f3:a7:02:c8:9d: e4:d0:8e:be:4d:fd:6c:d2:bc:ec:ae:d3:ca:0b:f1:e4:1e:38: 5b:ae:5b:14:28:e8:a9:42:9e:b2:f4:d3:23:23:2e:46:c6:12: 2b:96:95:b6:83:a7:2c:50:f6:7c:02:2b:99:15:41:38:7e:b3: c0:30:31:29:49:d5:ea:56:38:c3:2f:da:3e:e5:ef:2a:3e:61: ce:a2:73:79:de:e0:dd:f3:96:3e:5d:fc:e7:28:95:e8:b1:fe: 2d:74:f0:05:57:fa:c8:0e:f8:21:31:3f:7e:72:d3:0f:5d:67: ce:b3:80:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WkcrFVT59bgdMNJvNiA3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiNmY2YTM2ZWMyOTYwZDRkMDVmM2Q5ZGNiMTg3YjliOTA0 ZWE1OWIwHhcNMjUxMjIwMjAwMTI1WhcNMjUxMjIxMjAwMTI1WjAzMTEwLwYDVQQD EyhhNWZmNDdkMzRhMTM3NzMxMDU5MzBiODVjYzFkYWNkOTU4NWI4YWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvP36Z5cUni5UQb1/360s2Dug2REZ Jgh/rxpjZBlNB6XjTiFVtl1/aG3rs83Xq/yaeXIwjhqeXiD0agEJiWWq9Bv0mAfR 2cbK3aN2XuXeTbmSJvh5cBk8Xh4easrdR3wgMvlr4GGiDfJFR+r9zkDCbzshkRCp F4iXqknGAFZZgcUh32T/iTdR3Jtqj1x/TGGfGnCFM8pOnj+34N9d/vjK2K3aodaq 40PFWzZJIaB6AJCjK1amnmXur+229yM2HgZeFUf5n3zIh8achirlkr/sGyksIEu9 kx3DaE8ZTAZJoWGtG9gPtSiHs0oO2Vt9jjRcHjHV+bl83o4SkEZ+Y70gVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKX/R9NKE3cxBZMLhcwdrNlYW4rIMB8GA1UdIwQY MBaAFKtvajbsKWDU0F89ncsYe5uQTqWbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTI5cU51d3BZTlRRWHoyZHl4aDdtNUJPcFpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy80ZDliYWQtZDJhYy00MTc5LTg5NDUt OTRiYjgzYTIwMDI5LzEvcTI5cU51d3BZTlRRWHoyZHl4aDdtNUJPcFpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy80ZDliYWQtZDJhYy00MTc5LTg5NDUtOTRiYjgzYTIwMDI5 LzEvcTI5cU51d3BZTlRRWHoyZHl4aDdtNUJPcFpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANLXe/qw6 R6wGZ/LPIOYsMXLLn1nSM+/7w8JbiGv/pTNa7NYtkgWRZvUjwqJRc95+i2P89xQT Ejqsofa14Fmv9vDqVqlcgsDjsNlRSdWL14MzxE5gUCg703+wqXS7JcVRBPdLdbHM jh95lgtsjGrt/NpsoAOqQvlmu0ltO/gcVae71kpCUXwU3PkTUvOnAsid5NCOvk39 bNK87K7Tygvx5B44W65bFCjoqUKesvTTIyMuRsYSK5aVtoOnLFD2fAIrmRVBOH6z wDAxKUnV6lY4wy/aPuXvKj5hzqJzed7g3fOWPl385yiV6LH+LXTwBVf6yA74ITE/ fnLTD11nzrOA9w== -----END CERTIFICATE-----Generated at Sun Dec 21 03:02:19 2025 by rpki-client