This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.mft File: qLq2HDYOoQjNGSx856ftVWW9--A.mft (raw, json) Hash identifier: oa5Cu1xACl9zrJRNUquMdZwKRczFgOp9aSLzpOzPjrE= Subject key identifier: 09:A3:E6:78:14:C1:BD:32:89:ED:FE:7C:95:AE:7A:DD:64:6E:28:AC Authority key identifier: A8:BA:B6:1C:36:0E:A1:08:CD:19:2C:7C:E7:A7:ED:55:65:BD:FB:E0 Certificate issuer: /CN=a8bab61c360ea108cd192c7ce7a7ed5565bdfbe0 Certificate serial: 019B334407D16867813D03DF8955C657CF9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLq2HDYOoQjNGSx856ftVWW9--A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.mft Manifest number: 0EF9 Signing time: Thu 18 Dec 2025 21:00:55 +0000 Manifest this update: Thu 18 Dec 2025 21:00:55 +0000 Manifest next update: Fri 19 Dec 2025 21:00:55 +0000 Files and hashes: 1: llKmEV0JVzIG0_MZWPlP8ygpeC0.roa (hash: jPaOJ8ND+JyHLtdhEIszWBX4EhT8804ihxPfOvX+M6g=) 2: qLq2HDYOoQjNGSx856ftVWW9--A.crl (hash: Q4YT4TwDHgoCPC3orkO5Eyu4Z6h7VsUXK8dr+2Kzk7s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.crl rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.mft rsync://rpki.ripe.net/repository/DEFAULT/qLq2HDYOoQjNGSx856ftVWW9--A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:07:d1:68:67:81:3d:03:df:89:55:c6:57:cf:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8bab61c360ea108cd192c7ce7a7ed5565bdfbe0 Validity Not Before: Dec 18 21:00:55 2025 GMT Not After : Dec 19 21:00:55 2025 GMT Subject: CN=09a3e67814c1bd3289edfe7c95ae7add646e28ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:56:76:bc:24:c1:4e:50:8a:cf:53:3d:fa:c9: 17:39:53:4c:6e:45:60:47:71:19:4b:2d:cf:c5:0b: ad:13:10:74:2d:00:b9:0f:e5:2b:ab:e4:3c:da:5a: f0:15:f7:22:77:f9:15:00:88:75:79:35:9d:95:3d: 5f:f8:8a:2e:24:ac:58:d1:1d:7a:9c:56:27:58:11: b1:4e:bd:c2:31:fd:d4:d0:25:54:5f:81:30:c4:87: b3:2f:30:ec:bf:4f:b2:13:18:23:04:a6:5f:42:23: 66:c4:fe:20:44:af:a3:c0:27:0b:f1:34:06:53:ed: 4c:08:3c:f4:6e:26:29:ac:fc:3b:05:23:fe:e1:e0: 67:ec:02:5f:da:23:8c:28:81:8e:58:88:43:4e:98: 3b:21:14:f1:c7:ba:33:48:e5:34:0d:4b:81:87:b3: ae:86:9f:43:41:c9:12:2c:bd:e0:cf:b1:84:d2:ef: d3:21:44:38:35:85:15:00:0a:e1:10:69:50:4c:6a: e2:ef:7e:16:e2:45:e9:71:31:ff:c5:6f:23:06:d8: bf:f3:ef:3f:86:0f:30:cf:bc:55:8a:24:44:4e:f3: 0c:7e:c1:20:c0:99:34:ed:9a:34:7c:e2:62:b9:e4: 02:0e:d7:94:0d:2a:20:55:b7:ac:fc:b3:33:30:16: 40:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A3:E6:78:14:C1:BD:32:89:ED:FE:7C:95:AE:7A:DD:64:6E:28:AC X509v3 Authority Key Identifier: keyid:A8:BA:B6:1C:36:0E:A1:08:CD:19:2C:7C:E7:A7:ED:55:65:BD:FB:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLq2HDYOoQjNGSx856ftVWW9--A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:1d:0e:b6:86:86:08:9e:12:d6:4c:c6:6c:fd:2d:09:90:10: e6:51:bc:5e:d7:9d:61:00:d5:07:4d:7b:87:b1:b6:3d:23:53: ca:59:88:a4:0a:59:81:a2:8a:be:d2:06:ab:e0:2a:90:fb:84: 55:1f:56:00:98:d9:e9:fb:53:fb:1f:f2:08:0c:1c:04:bc:9a: 99:78:e3:d2:db:a0:97:e4:c5:91:60:06:5a:f1:7a:95:5c:14: a6:89:c6:f0:06:25:05:ce:13:f5:68:9a:65:d0:30:ba:b3:ef: e8:50:c7:48:6a:0a:e8:ca:bd:3a:b2:e7:e7:bb:d8:3a:96:8e: e1:19:e4:44:6e:3b:54:d5:66:e2:01:cd:33:b9:9f:8c:05:04: 00:15:1c:b8:c6:28:9b:8f:6a:26:c5:d6:ab:74:01:98:e4:e5: 04:03:2c:38:ae:e6:b9:80:5d:80:04:b3:13:02:63:d9:bc:cf: 29:d4:2b:97:28:71:9e:65:06:38:d4:44:45:6a:0f:58:25:65: 11:63:e9:b4:99:94:17:0f:42:49:3f:59:6c:b8:e7:a9:d3:1e: 88:9c:42:9c:84:cb:78:f4:21:38:c7:bd:6a:0d:25:f4:14:82: ba:43:95:f6:da:13:f2:16:bc:db:e7:bc:21:11:4b:fc:d7:15: f9:49:32:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRAfRaGeBPQPfiVXGV8+eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4YmFiNjFjMzYwZWExMDhjZDE5MmM3Y2U3YTdlZDU1NjVi ZGZiZTAwHhcNMjUxMjE4MjEwMDU1WhcNMjUxMjE5MjEwMDU1WjAzMTEwLwYDVQQD EygwOWEzZTY3ODE0YzFiZDMyODllZGZlN2M5NWFlN2FkZDY0NmUyOGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1Z2vCTBTlCKz1M9+skXOVNMbkVg R3EZSy3PxQutExB0LQC5D+Urq+Q82lrwFfcid/kVAIh1eTWdlT1f+IouJKxY0R16 nFYnWBGxTr3CMf3U0CVUX4EwxIezLzDsv0+yExgjBKZfQiNmxP4gRK+jwCcL8TQG U+1MCDz0biYprPw7BSP+4eBn7AJf2iOMKIGOWIhDTpg7IRTxx7ozSOU0DUuBh7Ou hp9DQckSLL3gz7GE0u/TIUQ4NYUVAArhEGlQTGri734W4kXpcTH/xW8jBti/8+8/ hg8wz7xViiRETvMMfsEgwJk07Zo0fOJiueQCDteUDSogVbes/LMzMBZAxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAmj5ngUwb0yie3+fJWuet1kbiisMB8GA1UdIwQY MBaAFKi6thw2DqEIzRksfOen7VVlvfvgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUxxMkhEWU9vUWpOR1N4ODU2ZnRWV1c5LS1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC85YjM5YjktODJjOC00YzdkLWIyNjgt NzY2ZTU0NjA1N2E3LzEvcUxxMkhEWU9vUWpOR1N4ODU2ZnRWV1c5LS1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC85YjM5YjktODJjOC00YzdkLWIyNjgtNzY2ZTU0NjA1N2E3 LzEvcUxxMkhEWU9vUWpOR1N4ODU2ZnRWV1c5LS1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArR0OtoaG CJ4S1kzGbP0tCZAQ5lG8XtedYQDVB017h7G2PSNTylmIpApZgaKKvtIGq+AqkPuE VR9WAJjZ6ftT+x/yCAwcBLyamXjj0tugl+TFkWAGWvF6lVwUponG8AYlBc4T9Wia ZdAwurPv6FDHSGoK6Mq9OrLn57vYOpaO4RnkRG47VNVm4gHNM7mfjAUEABUcuMYo m49qJsXWq3QBmOTlBAMsOK7muYBdgASzEwJj2bzPKdQrlyhxnmUGONRERWoPWCVl EWPptJmUFw9CST9ZbLjnqdMeiJxCnITLePQhOMe9ag0l9BSCukOV9toT8ha82+e8 IRFL/NcV+UkyeQ== -----END CERTIFICATE-----Generated at Fri Dec 19 01:27:59 2025 by rpki-client