This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft File: q9PisS9HkZgpT69gxuNqCht7_VQ.mft (raw, json) Hash identifier: eF35UxmJWP23BeagRkDYE7E62bRwsNEKRXBNtkKE+qs= Subject key identifier: 43:75:9F:A6:E2:25:B1:0D:5C:EE:96:F9:F6:EA:91:BD:D8:22:D7:95 Authority key identifier: AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54 Certificate issuer: /CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54 Certificate serial: 019B34FB8FB3060D2E30D6AC139D7E59E5EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 05:00:59 +0000 Manifest this update: Fri 19 Dec 2025 05:00:59 +0000 Manifest next update: Sat 20 Dec 2025 05:00:59 +0000 Files and hashes: 1: 30dF88R9p_cbRx6VSnFVxrOujdw.roa (hash: lDDyLH/2DtUX7Hay39PUf67OI+BeERX0NuLI6ZnhTnY=) 2: q9PisS9HkZgpT69gxuNqCht7_VQ.crl (hash: 0NuFqBnINuYyEbu9RqDTjWMehn1GZ5hSf4Iw3GKEF+g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.crl rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 05:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:8f:b3:06:0d:2e:30:d6:ac:13:9d:7e:59:e5:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54 Validity Not Before: Dec 19 05:00:59 2025 GMT Not After : Dec 20 05:00:59 2025 GMT Subject: CN=43759fa6e225b10d5cee96f9f6ea91bdd822d795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ea:98:b6:aa:d0:f6:8c:d1:c6:bf:12:b6:96: 8b:ac:50:2d:03:ab:ff:fa:b6:39:fe:af:26:0c:63: 32:43:9c:fe:e0:bc:29:46:78:a8:ea:cc:3b:48:fe: d4:0f:32:92:c2:7e:38:2a:8b:1c:a1:7e:3a:28:f0: e4:a0:e9:86:9c:54:84:ea:a3:a5:75:dd:62:a8:f4: d4:a9:ba:8f:05:25:a4:a2:71:8e:44:e9:c6:09:a3: 7e:e2:93:17:e0:60:e9:81:45:10:8f:2b:98:53:c2: 70:4b:9e:75:72:e5:04:5e:f9:38:bc:e4:b8:68:f1: b1:91:ce:94:e6:01:3b:7c:35:41:d2:04:b0:2b:c8: d3:6f:9c:18:83:f9:db:95:7e:8f:63:f3:4a:d4:86: d0:42:7a:3c:d0:60:af:54:ea:58:bf:99:a3:e1:5c: 78:07:38:bb:94:53:9c:11:ad:7e:80:3c:76:ee:ad: 17:7a:53:a2:10:47:7c:0c:40:60:c0:34:e9:c1:40: e1:ad:40:00:ed:cf:f2:eb:3e:92:32:cb:ab:f9:b2: 1f:ee:78:0d:1f:f0:f2:b5:cf:05:ae:31:3e:68:75: 25:3e:5d:2c:9b:65:1d:63:db:ea:49:c4:8d:3e:25: 78:ae:20:d4:88:c4:08:76:36:a1:81:0b:3a:2c:03: 19:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:75:9F:A6:E2:25:B1:0D:5C:EE:96:F9:F6:EA:91:BD:D8:22:D7:95 X509v3 Authority Key Identifier: keyid:AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:43:06:b6:6f:da:78:69:45:d1:3c:25:e6:d2:10:28:f2:ea: d2:15:44:41:a0:5e:4b:92:31:1d:f4:e6:cf:13:04:dc:6b:e3: ec:72:e3:29:5a:43:61:8b:15:e3:b0:3b:50:2a:89:00:22:ba: 11:71:c7:e9:fb:49:17:eb:8e:96:38:c5:57:34:a6:0e:1b:c2: a6:d6:37:37:60:72:b9:28:7e:0a:57:91:71:45:1c:4a:75:9e: 11:41:ee:ba:fc:2a:32:66:4f:18:0b:82:cc:12:3b:64:12:bd: fd:63:77:1d:20:15:36:2a:a9:b8:c8:12:91:c6:46:8f:ce:af: 2a:44:31:04:ac:48:ef:11:c5:c6:de:dc:01:e2:aa:04:f5:f2: 32:ca:3e:23:6d:45:60:c7:6c:82:28:0e:55:eb:07:08:c3:7d: 77:a0:33:7b:a6:b5:cb:52:c2:32:0f:a8:8b:6d:d4:5b:6f:b2: 0c:c1:9f:85:97:e5:b0:c5:b6:d2:0e:4d:cd:2a:54:31:98:0c: 0a:16:4a:49:65:ea:19:f2:b3:f8:66:1b:fc:fb:80:27:54:38: c9:55:bc:ff:77:af:20:da:e4:c1:67:69:2e:9e:c1:f1:b8:6b: 7b:b1:a7:e7:d9:18:56:f2:9a:27:de:7b:8c:68:02:15:03:a6: be:37:14:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+4+zBg0uMNasE51+WeXqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiZDNlMmIxMmY0NzkxOTgyOTRmYWY2MGM2ZTM2YTBhMWI3 YmZkNTQwHhcNMjUxMjE5MDUwMDU5WhcNMjUxMjIwMDUwMDU5WjAzMTEwLwYDVQQD Eyg0Mzc1OWZhNmUyMjViMTBkNWNlZTk2ZjlmNmVhOTFiZGQ4MjJkNzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOqYtqrQ9ozRxr8StpaLrFAtA6v/ +rY5/q8mDGMyQ5z+4LwpRnio6sw7SP7UDzKSwn44KoscoX46KPDkoOmGnFSE6qOl dd1iqPTUqbqPBSWkonGOROnGCaN+4pMX4GDpgUUQjyuYU8JwS551cuUEXvk4vOS4 aPGxkc6U5gE7fDVB0gSwK8jTb5wYg/nblX6PY/NK1IbQQno80GCvVOpYv5mj4Vx4 Bzi7lFOcEa1+gDx27q0XelOiEEd8DEBgwDTpwUDhrUAA7c/y6z6SMsur+bIf7ngN H/Dytc8FrjE+aHUlPl0sm2UdY9vqScSNPiV4riDUiMQIdjahgQs6LAMZbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEN1n6biJbENXO6W+fbqkb3YIteVMB8GA1UdIwQY MBaAFKvT4rEvR5GYKU+vYMbjagobe/1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTlQaXNTOUhrWmdwVDY5Z3h1TnFDaHQ3X1ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83OTFmYjUtYTVlYi00N2Y1LWFkOWEt OTk3ZjQ3YWI3ZGYyLzEvcTlQaXNTOUhrWmdwVDY5Z3h1TnFDaHQ3X1ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy83OTFmYjUtYTVlYi00N2Y1LWFkOWEtOTk3ZjQ3YWI3ZGYy LzEvcTlQaXNTOUhrWmdwVDY5Z3h1TnFDaHQ3X1ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeEMGtm/a eGlF0Twl5tIQKPLq0hVEQaBeS5IxHfTmzxME3Gvj7HLjKVpDYYsV47A7UCqJACK6 EXHH6ftJF+uOljjFVzSmDhvCptY3N2ByuSh+CleRcUUcSnWeEUHuuvwqMmZPGAuC zBI7ZBK9/WN3HSAVNiqpuMgSkcZGj86vKkQxBKxI7xHFxt7cAeKqBPXyMso+I21F YMdsgigOVesHCMN9d6Aze6a1y1LCMg+oi23UW2+yDMGfhZflsMW20g5NzSpUMZgM ChZKSWXqGfKz+GYb/PuAJ1Q4yVW8/3evINrkwWdpLp7B8bhre7Gn59kYVvKaJ957 jGgCFQOmvjcUAA== -----END CERTIFICATE-----Generated at Fri Dec 19 10:21:22 2025 by rpki-client