This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft File: Q9_AZs580-OCV0poZnlzsLRo3zw.mft (raw, json) Hash identifier: XBNc2FTO02m10WERS4CWbsEuvHUVMGDJV5r3QHB+Uk8= Subject key identifier: 5E:C4:62:B0:64:1D:6E:ED:99:3D:8F:C5:D0:61:E2:53:3C:FE:86:DC Authority key identifier: 43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C Certificate issuer: /CN=43dfc066ce7cd3e382574a68667973b0b468df3c Certificate serial: 019B397CE55FE2A0A5439AB0A56AE8AFEAE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft Manifest number: 1710 Signing time: Sat 20 Dec 2025 02:00:44 +0000 Manifest this update: Sat 20 Dec 2025 02:00:44 +0000 Manifest next update: Sun 21 Dec 2025 02:00:44 +0000 Files and hashes: 1: Q2tZHxcnTfsijpne_PaEOT5dOKg.roa (hash: FVNO2p4hWZxlSs3+Rn7ouc28IBioq9Skdi74miEeHBs=) 2: Q9_AZs580-OCV0poZnlzsLRo3zw.crl (hash: 0WOLGiOdThq99sgExf7XnItoXSa99CGIAqdHp1FPUms=) 3: UWeGIl_6VHcutFLK0L5MueAINMY.roa (hash: AVZtTMJBhtqap/729tRkybRSFR3yVa5RKP1aMlDfHfg=) 4: obC6Nt8k6sToBFUPijQUE-JEfbw.roa (hash: yOvP0SEgsV1LHmbEstQePJyjtcgM5eUQYScQpZCvC+g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7c:e5:5f:e2:a0:a5:43:9a:b0:a5:6a:e8:af:ea:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43dfc066ce7cd3e382574a68667973b0b468df3c Validity Not Before: Dec 20 02:00:44 2025 GMT Not After : Dec 21 02:00:44 2025 GMT Subject: CN=5ec462b0641d6eed993d8fc5d061e2533cfe86dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d4:b4:62:51:19:88:12:e1:90:2e:08:6a:75: 90:ce:49:f3:0a:8c:35:be:12:36:78:51:35:6c:47: c7:32:a0:ca:a3:eb:d3:e5:79:10:1e:79:ff:43:d7: 99:eb:6a:ca:29:a7:d1:d0:dd:67:d0:4c:45:f9:b6: df:2c:b4:9f:26:33:3f:fd:13:70:2a:d2:a9:bf:3e: d0:47:29:46:fb:70:f4:d4:6d:50:27:fd:88:6e:93: 46:e2:ba:e1:cb:34:98:81:f6:b6:ec:b8:02:88:90: 93:30:6d:50:08:74:d0:36:27:25:a5:22:da:ae:a2: e7:5a:cc:24:13:e0:c9:92:e2:20:1f:72:55:bd:67: ab:15:ec:16:6d:de:2d:3f:9c:63:ff:94:c3:51:a6: d6:1e:4d:66:8c:45:71:b2:96:eb:6e:79:49:52:23: fc:4d:08:ae:9a:3a:c6:e8:c3:11:f3:46:7e:73:7d: 60:93:cf:b7:44:51:6c:86:8b:87:87:e0:eb:9d:43: cb:c2:89:ed:c5:d2:54:5d:89:5b:6c:04:f8:87:06: fd:6c:a2:3c:6b:a2:7b:ea:5f:e0:78:b2:f4:71:67: cb:b6:fa:19:77:6e:69:2d:40:b4:c2:33:41:93:ff: 9c:10:d8:58:b6:89:22:a9:42:f8:ac:42:b5:6c:38: 45:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C4:62:B0:64:1D:6E:ED:99:3D:8F:C5:D0:61:E2:53:3C:FE:86:DC X509v3 Authority Key Identifier: keyid:43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:45:81:d3:30:11:0e:3f:90:63:d2:7f:99:79:b0:72:40:a9: 86:86:c5:26:fd:3b:03:d9:8e:71:e1:6f:84:be:58:eb:c2:ca: a8:8c:7b:36:03:c3:cf:05:0c:10:55:e1:f8:4d:27:9b:ad:ba: 52:4e:33:6c:58:53:fc:03:12:26:b8:21:fb:03:ef:f4:66:94: 70:07:86:a2:55:3b:e4:47:64:22:2d:35:cc:10:cc:88:34:7d: 78:60:74:ed:f3:1a:d0:cc:86:8b:33:26:53:a3:9e:5f:b0:7e: 48:92:43:ce:ce:9c:1e:4d:e2:43:99:2a:50:d9:50:cf:fa:51: 83:c0:df:54:5b:b9:77:e5:c0:00:59:c7:d0:0d:fa:7e:a5:77: cd:4f:4a:9d:f1:6b:1a:f7:28:82:96:b0:9b:ba:ef:16:8e:bf: bf:34:18:3e:d5:83:ed:e6:2a:5c:aa:20:51:db:95:b8:8c:dc: c3:40:c0:00:f0:92:86:55:78:ba:e7:62:10:c1:79:f3:15:96: 1d:f5:b7:45:4f:06:3c:7a:77:70:32:4a:6f:b3:4c:f2:93:fb: a8:82:6a:bb:1d:bf:3b:61:fb:7e:b0:4e:1d:45:ae:7c:4c:86: 90:68:ad:2c:6f:a6:86:3b:85:dd:5e:87:b1:a0:3e:f5:8f:de: 59:01:f5:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fOVf4qClQ5qwpWror+rgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZGZjMDY2Y2U3Y2QzZTM4MjU3NGE2ODY2Nzk3M2IwYjQ2 OGRmM2MwHhcNMjUxMjIwMDIwMDQ0WhcNMjUxMjIxMDIwMDQ0WjAzMTEwLwYDVQQD Eyg1ZWM0NjJiMDY0MWQ2ZWVkOTkzZDhmYzVkMDYxZTI1MzNjZmU4NmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNS0YlEZiBLhkC4IanWQzknzCow1 vhI2eFE1bEfHMqDKo+vT5XkQHnn/Q9eZ62rKKafR0N1n0ExF+bbfLLSfJjM//RNw KtKpvz7QRylG+3D01G1QJ/2IbpNG4rrhyzSYgfa27LgCiJCTMG1QCHTQNiclpSLa rqLnWswkE+DJkuIgH3JVvWerFewWbd4tP5xj/5TDUabWHk1mjEVxspbrbnlJUiP8 TQiumjrG6MMR80Z+c31gk8+3RFFshouHh+DrnUPLwontxdJUXYlbbAT4hwb9bKI8 a6J76l/geLL0cWfLtvoZd25pLUC0wjNBk/+cENhYtokiqUL4rEK1bDhFiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF7EYrBkHW7tmT2PxdBh4lM8/obcMB8GA1UdIwQY MBaAFEPfwGbOfNPjgldKaGZ5c7C0aN88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTlfQVpzNTgwLU9DVjBwb1pubHpzTFJvM3p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8xNjM2ZjgtNTAyNi00MDRlLWExYWUt MjUwOTc0M2FkMjllLzEvUTlfQVpzNTgwLU9DVjBwb1pubHpzTFJvM3p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8xNjM2ZjgtNTAyNi00MDRlLWExYWUtMjUwOTc0M2FkMjll LzEvUTlfQVpzNTgwLU9DVjBwb1pubHpzTFJvM3p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgEWB0zAR Dj+QY9J/mXmwckCphobFJv07A9mOceFvhL5Y68LKqIx7NgPDzwUMEFXh+E0nm626 Uk4zbFhT/AMSJrgh+wPv9GaUcAeGolU75EdkIi01zBDMiDR9eGB07fMa0MyGizMm U6OeX7B+SJJDzs6cHk3iQ5kqUNlQz/pRg8DfVFu5d+XAAFnH0A36fqV3zU9KnfFr Gvcogpawm7rvFo6/vzQYPtWD7eYqXKogUduVuIzcw0DAAPCShlV4uudiEMF58xWW HfW3RU8GPHp3cDJKb7NM8pP7qIJqux2/O2H7frBOHUWufEyGkGitLG+mhjuF3V6H saA+9Y/eWQH1qg== -----END CERTIFICATE-----Generated at Sat Dec 20 06:15:02 2025 by rpki-client