This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft File: q3dzqhxxoCJlFGujNszC5Y3q24g.mft (raw, json) Hash identifier: OINQAz8+zbV1V2W9VPCIe8snds4bWF5SKkyNOz83UlY= Subject key identifier: D9:71:32:98:B7:D1:1D:85:3E:E2:D0:08:A0:8F:E0:70:69:C4:1F:C6 Authority key identifier: AB:77:73:AA:1C:71:A0:22:65:14:6B:A3:36:CC:C2:E5:8D:EA:DB:88 Certificate issuer: /CN=ab7773aa1c71a02265146ba336ccc2e58deadb88 Certificate serial: 019B56E35C967487607DFD38C699A8AD77AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft Manifest number: 1796 Signing time: Thu 25 Dec 2025 19:01:39 +0000 Manifest this update: Thu 25 Dec 2025 19:01:39 +0000 Manifest next update: Fri 26 Dec 2025 19:01:39 +0000 Files and hashes: 1: cyFUaiualt3wMiC5gtz5aMOvlGc.roa (hash: RoAUS0DbrFV1sDA69agJ/hjEE06MIOfXgztHL0bgXao=) 2: q3dzqhxxoCJlFGujNszC5Y3q24g.crl (hash: kJOF2fHRZbF946ZpdjzfsLrV3jDd/wP24j0QKRNjLEU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.crl rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:e3:5c:96:74:87:60:7d:fd:38:c6:99:a8:ad:77:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab7773aa1c71a02265146ba336ccc2e58deadb88 Validity Not Before: Dec 25 19:01:39 2025 GMT Not After : Dec 26 19:01:39 2025 GMT Subject: CN=d9713298b7d11d853ee2d008a08fe07069c41fc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:75:6c:7c:cf:20:75:ec:bc:c3:d8:af:51:51: 7e:02:f9:18:f9:7d:ff:4e:27:17:52:8a:75:ca:de: e4:ae:60:27:7e:4f:a0:06:b7:b6:08:13:1f:5d:60: 9a:a4:be:90:47:ca:74:e0:a5:58:b0:16:70:d4:79: ec:64:d6:04:08:b9:d7:dd:5a:a7:46:8b:5c:fc:71: c2:2a:d8:ea:c1:8b:31:d8:d1:2e:1e:46:b5:dc:5e: 82:44:4c:55:0a:17:47:1a:a3:38:fb:f5:59:1d:76: 96:f6:51:8a:03:f8:d0:20:73:c7:88:19:4e:95:a1: 67:80:45:e2:19:8f:d8:77:f4:40:27:49:f1:2e:6d: ae:93:d8:25:7b:c3:76:98:46:f7:6d:84:66:99:6a: 4a:60:50:f9:e2:9f:e7:34:19:02:d0:40:94:8c:ab: 61:07:c8:dc:48:25:68:d7:43:a0:6e:f2:d4:ab:8e: 68:84:c1:c0:b0:02:53:15:c9:ef:54:e9:76:16:c9: 03:a3:15:fe:75:08:81:16:b8:8a:d2:ac:62:99:48: 62:29:a2:43:d9:4f:a9:1d:79:4d:8c:91:73:5d:fb: bc:d2:21:76:65:2e:96:3e:a7:c5:dc:a1:18:9f:ba: bd:ec:86:b4:9d:e8:e6:3c:25:84:72:9f:8c:82:b3: 9a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:71:32:98:B7:D1:1D:85:3E:E2:D0:08:A0:8F:E0:70:69:C4:1F:C6 X509v3 Authority Key Identifier: keyid:AB:77:73:AA:1C:71:A0:22:65:14:6B:A3:36:CC:C2:E5:8D:EA:DB:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:d5:24:27:2e:42:12:a7:f1:b8:ed:88:03:45:02:77:42:a7: ea:a7:7b:96:b8:0c:bf:87:7d:a3:74:db:ce:1d:00:eb:98:80: c0:87:f6:f7:8f:f4:37:62:db:01:79:86:3d:82:8e:10:44:3c: 1b:0a:2a:b9:2d:16:6f:ab:5c:34:24:76:c4:d6:36:3e:a0:2f: 6b:50:96:db:e6:70:c4:dd:f5:25:7e:65:d0:1e:ad:48:48:e1: b8:39:d9:63:3c:66:7e:5f:68:ed:01:09:21:7f:2c:d4:e6:28: 3d:f8:f0:1e:e1:5c:6c:11:e8:59:b3:ab:0e:ad:d1:67:44:b4: 79:ce:82:16:dc:33:5b:19:18:7b:ef:66:55:97:df:08:04:81: bd:f2:de:4e:b1:47:69:d9:d7:b8:4f:c5:1d:97:b4:cf:71:a4: d0:50:99:ba:43:fc:0e:b7:c7:2a:1e:ef:ae:d2:4c:79:62:c3: b3:4a:cc:28:f0:d0:ed:fa:c8:ae:ac:62:53:d8:e0:08:11:25: 38:97:77:52:59:13:da:f2:7d:ee:25:a2:9c:27:46:1d:c5:97: 04:ed:32:fe:09:77:e1:9d:f5:c1:02:f2:91:d7:a7:df:be:f0: 53:c7:64:e9:20:30:3f:5d:5b:99:09:4a:9a:d3:5c:66:4d:99: a8:c7:50:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtW41yWdIdgff04xpmorXeqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiNzc3M2FhMWM3MWEwMjI2NTE0NmJhMzM2Y2NjMmU1OGRl YWRiODgwHhcNMjUxMjI1MTkwMTM5WhcNMjUxMjI2MTkwMTM5WjAzMTEwLwYDVQQD EyhkOTcxMzI5OGI3ZDExZDg1M2VlMmQwMDhhMDhmZTA3MDY5YzQxZmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnVsfM8gdey8w9ivUVF+AvkY+X3/ TicXUop1yt7krmAnfk+gBre2CBMfXWCapL6QR8p04KVYsBZw1HnsZNYECLnX3Vqn Rotc/HHCKtjqwYsx2NEuHka13F6CRExVChdHGqM4+/VZHXaW9lGKA/jQIHPHiBlO laFngEXiGY/Yd/RAJ0nxLm2uk9gle8N2mEb3bYRmmWpKYFD54p/nNBkC0ECUjKth B8jcSCVo10OgbvLUq45ohMHAsAJTFcnvVOl2FskDoxX+dQiBFriK0qximUhiKaJD 2U+pHXlNjJFzXfu80iF2ZS6WPqfF3KEYn7q97Ia0nejmPCWEcp+MgrOaZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNlxMpi30R2FPuLQCKCP4HBpxB/GMB8GA1UdIwQY MBaAFKt3c6occaAiZRRrozbMwuWN6tuIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTNkenFoeHhvQ0psRkd1ak5zekM1WTNxMjRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8wMWY5OTctZjAyNy00YTNhLTg1NTIt ZTZkZmJhMWRmMjMwLzEvcTNkenFoeHhvQ0psRkd1ak5zekM1WTNxMjRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8wMWY5OTctZjAyNy00YTNhLTg1NTItZTZkZmJhMWRmMjMw LzEvcTNkenFoeHhvQ0psRkd1ak5zekM1WTNxMjRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdNUkJy5C EqfxuO2IA0UCd0Kn6qd7lrgMv4d9o3Tbzh0A65iAwIf294/0N2LbAXmGPYKOEEQ8 GwoquS0Wb6tcNCR2xNY2PqAva1CW2+ZwxN31JX5l0B6tSEjhuDnZYzxmfl9o7QEJ IX8s1OYoPfjwHuFcbBHoWbOrDq3RZ0S0ec6CFtwzWxkYe+9mVZffCASBvfLeTrFH adnXuE/FHZe0z3Gk0FCZukP8DrfHKh7vrtJMeWLDs0rMKPDQ7frIrqxiU9jgCBEl OJd3UlkT2vJ97iWinCdGHcWXBO0y/gl34Z31wQLykden377wU8dk6SAwP11bmQlK mtNcZk2ZqMdQaA== -----END CERTIFICATE-----Generated at Thu Dec 25 23:57:35 2025 by rpki-client