This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft File: pQHIn0SCnHLyqVPSorpK4Le1DYo.mft (raw, json) Hash identifier: FW0IBD701CzfZb32aqphbJvkfoRvXhVtpcDLCUTkJgk= Subject key identifier: 9C:A4:A9:D3:61:9A:15:56:93:C0:25:E7:A2:D3:9F:11:B8:D6:86:4A Authority key identifier: A5:01:C8:9F:44:82:9C:72:F2:A9:53:D2:A2:BA:4A:E0:B7:B5:0D:8A Certificate issuer: /CN=a501c89f44829c72f2a953d2a2ba4ae0b7b50d8a Certificate serial: 019B544FF1683A240A4204E6F69C85897558 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQHIn0SCnHLyqVPSorpK4Le1DYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft Manifest number: 1796 Signing time: Thu 25 Dec 2025 07:01:23 +0000 Manifest this update: Thu 25 Dec 2025 07:01:23 +0000 Manifest next update: Fri 26 Dec 2025 07:01:23 +0000 Files and hashes: 1: D5U1j0YPEDas8bxMtDOehRJb48U.roa (hash: AkMtfy33YmmtJG2wcdM/0Qvh01UPoaXKoDXm68LNuus=) 2: pQHIn0SCnHLyqVPSorpK4Le1DYo.crl (hash: xuYs3WIzFLfOpoQhtDW+uHHSP/YBLIZ3P5GAQfTwIA8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft rsync://rpki.ripe.net/repository/DEFAULT/pQHIn0SCnHLyqVPSorpK4Le1DYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 07:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:4f:f1:68:3a:24:0a:42:04:e6:f6:9c:85:89:75:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a501c89f44829c72f2a953d2a2ba4ae0b7b50d8a Validity Not Before: Dec 25 07:01:23 2025 GMT Not After : Dec 26 07:01:23 2025 GMT Subject: CN=9ca4a9d3619a155693c025e7a2d39f11b8d6864a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8d:3d:ac:1a:7b:71:82:59:fb:61:0d:4a:a7: 2d:30:04:5b:7a:7f:b5:16:c3:80:ab:f8:a8:17:3b: 51:67:18:33:4b:0a:91:f5:76:4f:c0:05:61:a5:59: e1:1f:bc:d8:38:42:a7:f8:29:12:96:17:d8:5d:e9: 6b:8f:c1:f4:09:33:08:e4:15:2c:08:0a:ac:fe:d8: d4:90:00:5a:32:17:41:ec:c3:bb:5d:09:3d:8c:7f: 0a:e8:87:45:61:a9:43:92:b9:0c:66:43:2e:c1:4a: 97:b5:04:f6:d2:9d:fb:b9:96:fb:42:6e:8c:e2:56: e8:29:6e:40:7b:66:2e:c2:69:ce:4b:1a:57:37:c0: fc:fe:c8:da:83:1e:40:2f:27:f6:bb:fb:e4:50:bd: 01:f3:fa:c0:ce:0b:c7:5a:8d:7d:37:5c:22:a5:f1: 51:49:28:6e:eb:4f:39:fc:da:3b:1e:4d:22:8a:34: 7b:ea:f3:49:e6:b6:86:bf:ad:92:a8:97:af:90:5f: 4e:09:9d:b1:b6:b2:15:52:53:b9:d7:47:b9:e5:d7: e9:e3:38:ae:45:a7:74:75:e0:74:45:86:d7:e0:11: bf:15:9a:c5:0e:40:f8:e2:ff:b7:3c:e6:73:f1:4a: de:af:6e:80:d7:6e:5d:82:0e:06:8c:76:96:a9:a1: 86:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A4:A9:D3:61:9A:15:56:93:C0:25:E7:A2:D3:9F:11:B8:D6:86:4A X509v3 Authority Key Identifier: keyid:A5:01:C8:9F:44:82:9C:72:F2:A9:53:D2:A2:BA:4A:E0:B7:B5:0D:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQHIn0SCnHLyqVPSorpK4Le1DYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:6e:a9:0f:c4:37:20:60:87:7c:42:91:89:4d:51:e0:6f:c7: 3d:70:30:93:1f:06:95:a7:6b:ff:55:e0:09:4a:46:1a:48:1f: f6:4d:c7:da:f2:eb:3a:1f:a4:e8:d4:ec:14:54:2a:cd:5d:eb: cf:34:83:59:64:e3:c0:10:ba:c3:e4:76:33:0f:d7:4a:13:92: a6:48:83:1c:fa:e0:0e:d2:8e:8d:af:68:bc:6b:ba:3c:a0:d3: 3c:3c:80:e2:08:52:49:e4:fe:97:51:b8:53:73:ac:4a:82:0f: 8b:36:7e:75:12:4d:d8:d0:f3:22:c1:eb:ff:b8:4b:f5:46:1a: 1a:be:14:08:59:49:79:be:69:f3:48:37:26:52:72:65:4c:bf: 6a:32:8e:23:d2:9e:fe:ac:9d:bd:a8:68:a2:c8:59:f8:aa:b7: 39:ab:65:21:1a:64:13:36:8a:78:5e:d7:f0:a1:f2:7e:31:61: 0b:eb:51:24:f2:b9:c2:5a:a9:b7:3f:06:17:c2:03:64:10:b8: d7:0b:b2:ee:27:e4:e2:70:d4:78:8a:b5:a5:13:8d:f6:5d:3b: 54:43:d2:43:58:79:11:3d:62:a3:24:b3:06:b8:30:09:16:a5: 5c:1d:ee:42:b5:80:ad:8b:35:e2:09:a4:c0:61:d9:23:89:74: 81:e3:c2:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUT/FoOiQKQgTm9pyFiXVYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MDFjODlmNDQ4MjljNzJmMmE5NTNkMmEyYmE0YWUwYjdi NTBkOGEwHhcNMjUxMjI1MDcwMTIzWhcNMjUxMjI2MDcwMTIzWjAzMTEwLwYDVQQD Eyg5Y2E0YTlkMzYxOWExNTU2OTNjMDI1ZTdhMmQzOWYxMWI4ZDY4NjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyY09rBp7cYJZ+2ENSqctMARben+1 FsOAq/ioFztRZxgzSwqR9XZPwAVhpVnhH7zYOEKn+CkSlhfYXelrj8H0CTMI5BUs CAqs/tjUkABaMhdB7MO7XQk9jH8K6IdFYalDkrkMZkMuwUqXtQT20p37uZb7Qm6M 4lboKW5Ae2YuwmnOSxpXN8D8/sjagx5ALyf2u/vkUL0B8/rAzgvHWo19N1wipfFR SShu6085/No7Hk0iijR76vNJ5raGv62SqJevkF9OCZ2xtrIVUlO510e55dfp4ziu Rad0deB0RYbX4BG/FZrFDkD44v+3POZz8Urer26A125dgg4GjHaWqaGGCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJykqdNhmhVWk8Al56LTnxG41oZKMB8GA1UdIwQY MBaAFKUByJ9Egpxy8qlT0qK6SuC3tQ2KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFFISW4wU0NuSEx5cVZQU29ycEs0TGUxRFlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9kNWUxMDMtOTBiNS00NGYxLWI4NjQt MTRhMWViNTUxMmQ2LzEvcFFISW4wU0NuSEx5cVZQU29ycEs0TGUxRFlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9kNWUxMDMtOTBiNS00NGYxLWI4NjQtMTRhMWViNTUxMmQ2 LzEvcFFISW4wU0NuSEx5cVZQU29ycEs0TGUxRFlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASW6pD8Q3 IGCHfEKRiU1R4G/HPXAwkx8Gladr/1XgCUpGGkgf9k3H2vLrOh+k6NTsFFQqzV3r zzSDWWTjwBC6w+R2Mw/XShOSpkiDHPrgDtKOja9ovGu6PKDTPDyA4ghSSeT+l1G4 U3OsSoIPizZ+dRJN2NDzIsHr/7hL9UYaGr4UCFlJeb5p80g3JlJyZUy/ajKOI9Ke /qydvahooshZ+Kq3OatlIRpkEzaKeF7X8KHyfjFhC+tRJPK5wlqptz8GF8IDZBC4 1wuy7ifk4nDUeIq1pRON9l07VEPSQ1h5ET1ioySzBrgwCRalXB3uQrWArYs14gmk wGHZI4l0gePCMg== -----END CERTIFICATE-----Generated at Thu Dec 25 14:32:23 2025 by rpki-client