This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft File: q9PisS9HkZgpT69gxuNqCht7_VQ.mft (raw, json) Hash identifier: NNTDXUA/u9UKy6hXqtXOSUqnykcCiDoJlDfr5c+CWP8= Subject key identifier: CE:E2:06:DC:65:83:76:4E:4F:56:20:F7:23:CF:05:44:D8:74:CA:3C Authority key identifier: AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54 Certificate issuer: /CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54 Certificate serial: 019B2F308CB110B57601CD34B7A1CDB7A5C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 02:01:09 +0000 Manifest this update: Thu 18 Dec 2025 02:01:09 +0000 Manifest next update: Fri 19 Dec 2025 02:01:09 +0000 Files and hashes: 1: 30dF88R9p_cbRx6VSnFVxrOujdw.roa (hash: lDDyLH/2DtUX7Hay39PUf67OI+BeERX0NuLI6ZnhTnY=) 2: q9PisS9HkZgpT69gxuNqCht7_VQ.crl (hash: C0B87kChIsnF/+bhRaFRiRbwDtAICdVGGoMA+clQuEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.crl rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 02:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:30:8c:b1:10:b5:76:01:cd:34:b7:a1:cd:b7:a5:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54 Validity Not Before: Dec 18 02:01:09 2025 GMT Not After : Dec 19 02:01:09 2025 GMT Subject: CN=cee206dc6583764e4f5620f723cf0544d874ca3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c2:23:70:a0:66:7b:a7:47:d6:d5:e4:a4:18: 75:58:e9:45:b3:66:b6:94:2f:af:24:76:c9:c2:78: cd:b6:cf:12:22:86:50:7d:99:84:7d:81:2f:22:0e: b9:96:9b:ab:9c:1a:1f:0c:55:d6:10:78:a3:a3:19: c0:23:a0:85:5f:fd:d2:c7:2a:bd:47:9a:b1:df:de: 8e:77:0f:3d:59:96:fc:d7:6a:fe:f4:3d:74:e7:88: 41:11:98:a6:32:4f:52:3b:0f:03:ba:69:1b:55:63: 57:5e:d3:5b:2f:99:5e:76:68:7b:a6:e2:81:c1:e7: dd:36:46:14:39:d2:4c:45:8d:dd:ca:da:86:b1:17: df:6a:b2:d9:f5:66:c0:87:6a:7f:d9:88:87:8d:5e: 7b:eb:b0:56:45:e0:6f:cc:f1:92:e6:85:c2:bf:58: a8:73:3f:de:9d:fd:7b:04:1e:28:1a:47:4c:41:5b: d6:3a:e2:52:0d:8f:62:32:e9:b4:d6:fc:70:39:bd: 62:4e:3a:f4:20:59:7a:aa:b6:b9:df:6c:00:9a:3f: 48:31:b4:2f:0b:09:4b:2a:a5:64:63:4e:27:45:3e: 1c:10:1e:b3:ee:96:61:d3:21:3b:33:8e:3d:07:8a: 41:09:b6:40:d9:43:94:1d:72:cb:24:50:35:f7:fe: fd:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:E2:06:DC:65:83:76:4E:4F:56:20:F7:23:CF:05:44:D8:74:CA:3C X509v3 Authority Key Identifier: keyid:AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:7f:c1:e9:ea:70:a0:79:0a:3f:28:cb:2d:ef:ec:8b:a6:08: 5e:c6:66:df:4e:cf:23:d8:99:4c:1b:3e:71:5a:6a:4b:0e:a7: 8f:22:50:ac:5b:3c:4a:cb:4c:43:6e:73:8a:77:29:93:33:21: fe:29:7c:6a:5e:5e:49:42:1c:23:67:12:a3:2e:15:35:ce:a4: a1:3e:99:16:e2:ae:a9:fc:65:b9:e3:b2:4e:d0:cf:19:8b:de: ab:96:fd:f1:ac:9c:d9:e1:8d:83:bf:95:a6:09:d0:ee:19:cb: 25:7e:b3:6e:80:47:2d:81:b1:45:44:f5:0d:4b:cc:ee:29:2c: 10:16:95:83:5a:15:eb:67:cb:51:ff:cd:6a:2c:87:8b:4a:75: 44:c7:4c:29:b5:91:8d:bf:3e:b4:1b:11:b2:dd:35:ce:ec:f8: cb:21:85:aa:07:86:3f:a7:ae:b5:70:6a:ef:cb:42:d2:da:b4: d8:35:5e:f7:35:f7:cd:30:08:b4:eb:c3:93:9a:80:65:8e:b5: 28:6b:8f:25:23:72:8a:58:36:67:7f:54:3b:70:0c:ee:4f:e1: 0d:01:63:5c:cf:5d:93:8b:72:12:46:91:cf:b1:41:7a:5e:fc: f9:35:10:65:b6:6c:66:6e:d8:44:2a:0a:2e:c0:6c:52:92:43: a3:aa:a7:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvMIyxELV2Ac00t6HNt6XGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiZDNlMmIxMmY0NzkxOTgyOTRmYWY2MGM2ZTM2YTBhMWI3 YmZkNTQwHhcNMjUxMjE4MDIwMTA5WhcNMjUxMjE5MDIwMTA5WjAzMTEwLwYDVQQD EyhjZWUyMDZkYzY1ODM3NjRlNGY1NjIwZjcyM2NmMDU0NGQ4NzRjYTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8IjcKBme6dH1tXkpBh1WOlFs2a2 lC+vJHbJwnjNts8SIoZQfZmEfYEvIg65lpurnBofDFXWEHijoxnAI6CFX/3Sxyq9 R5qx396Odw89WZb812r+9D1054hBEZimMk9SOw8DumkbVWNXXtNbL5ledmh7puKB wefdNkYUOdJMRY3dytqGsRffarLZ9WbAh2p/2YiHjV5767BWReBvzPGS5oXCv1io cz/enf17BB4oGkdMQVvWOuJSDY9iMum01vxwOb1iTjr0IFl6qra532wAmj9IMbQv CwlLKqVkY04nRT4cEB6z7pZh0yE7M449B4pBCbZA2UOUHXLLJFA19/79lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM7iBtxlg3ZOT1Yg9yPPBUTYdMo8MB8GA1UdIwQY MBaAFKvT4rEvR5GYKU+vYMbjagobe/1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTlQaXNTOUhrWmdwVDY5Z3h1TnFDaHQ3X1ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83OTFmYjUtYTVlYi00N2Y1LWFkOWEt OTk3ZjQ3YWI3ZGYyLzEvcTlQaXNTOUhrWmdwVDY5Z3h1TnFDaHQ3X1ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy83OTFmYjUtYTVlYi00N2Y1LWFkOWEtOTk3ZjQ3YWI3ZGYy LzEvcTlQaXNTOUhrWmdwVDY5Z3h1TnFDaHQ3X1ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcn/B6epw oHkKPyjLLe/si6YIXsZm307PI9iZTBs+cVpqSw6njyJQrFs8SstMQ25zincpkzMh /il8al5eSUIcI2cSoy4VNc6koT6ZFuKuqfxlueOyTtDPGYveq5b98ayc2eGNg7+V pgnQ7hnLJX6zboBHLYGxRUT1DUvM7iksEBaVg1oV62fLUf/NaiyHi0p1RMdMKbWR jb8+tBsRst01zuz4yyGFqgeGP6eutXBq78tC0tq02DVe9zX3zTAItOvDk5qAZY61 KGuPJSNyilg2Z39UO3AM7k/hDQFjXM9dk4tyEkaRz7FBel78+TUQZbZsZm7YRCoK LsBsUpJDo6qnYg== -----END CERTIFICATE-----Generated at Thu Dec 18 09:53:49 2025 by rpki-client