This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft File: qT8yMceH9x3SSE7gAtpzpxdb0kk.mft (raw, json) Hash identifier: o25xmzz3wSVH3O74YkzBl/si19HKIfUOhwF6lUFKA2w= Subject key identifier: FF:DE:0A:34:08:60:E3:30:12:A8:7E:EF:DB:72:DF:9D:AF:DD:47:FF Authority key identifier: A9:3F:32:31:C7:87:F7:1D:D2:48:4E:E0:02:DA:73:A7:17:5B:D2:49 Certificate issuer: /CN=a93f3231c787f71dd2484ee002da73a7175bd249 Certificate serial: 019B5D5246A1CC8C12FEA4FEABD20C20343D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft Manifest number: 14E4 Signing time: Sat 27 Dec 2025 01:00:31 +0000 Manifest this update: Sat 27 Dec 2025 01:00:31 +0000 Manifest next update: Sun 28 Dec 2025 01:00:31 +0000 Files and hashes: 1: dAVSxn9A98KVLUy6EVl5K32SF7o.roa (hash: SrvH5FePM3edQXYJk2ogbac68Gns4DWibjSZvY3sGPk=) 2: qT8yMceH9x3SSE7gAtpzpxdb0kk.crl (hash: IuANVCWaOZk+1dm35HWIRyD8KA7RV+/oRXVtptHQgRw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:52:46:a1:cc:8c:12:fe:a4:fe:ab:d2:0c:20:34:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a93f3231c787f71dd2484ee002da73a7175bd249 Validity Not Before: Dec 27 01:00:31 2025 GMT Not After : Dec 28 01:00:31 2025 GMT Subject: CN=ffde0a340860e33012a87eefdb72df9dafdd47ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:eb:da:f2:29:8e:a3:c6:4c:46:11:f8:a8:13: 6c:4f:e1:16:d2:8d:03:09:e3:c5:ea:99:74:2c:2e: 9b:4b:b9:46:fd:53:ac:34:e4:8c:52:dd:43:ab:03: c6:01:e2:57:4d:8e:ae:e5:50:3c:44:c8:88:da:d5: a2:e6:b1:c1:fd:01:26:33:8b:f4:58:36:3e:13:e2: 7c:cb:3a:1c:3e:48:e7:a8:20:0c:c9:84:ce:8a:71: 73:36:49:07:74:f2:3e:90:05:f1:ed:27:92:13:0a: 2e:62:b6:51:84:68:6a:b0:46:57:dd:c3:d3:1e:18: 99:e1:cd:90:7e:7f:63:0e:92:e0:91:21:a7:01:49: cc:ab:2a:a3:5d:1c:6c:44:4d:92:85:4b:68:a3:ac: b5:86:1e:b6:19:f2:74:4b:24:58:f7:f6:5a:52:d3: d2:ed:96:7d:2f:87:07:3b:9d:3a:36:10:bd:77:cd: 05:1a:12:f5:34:d3:2b:45:72:af:89:6e:72:fa:f1: 0e:2a:93:f1:0d:87:6c:d3:5d:61:94:47:3f:5e:d4: 53:4a:0b:32:e0:db:67:9a:3a:81:6b:a2:68:19:d5: db:05:65:b2:52:55:1b:0c:26:09:71:c8:8e:58:27: 0d:1b:df:cc:b0:46:79:29:74:73:1d:b8:5f:df:b8: ee:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:DE:0A:34:08:60:E3:30:12:A8:7E:EF:DB:72:DF:9D:AF:DD:47:FF X509v3 Authority Key Identifier: keyid:A9:3F:32:31:C7:87:F7:1D:D2:48:4E:E0:02:DA:73:A7:17:5B:D2:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:a6:dd:ce:5b:97:3c:ed:fa:82:30:5a:42:70:e1:0e:d2:3f: 2c:4d:dd:d8:1d:a8:c5:37:6d:22:a3:9e:7e:b9:5f:03:ed:60: cd:c4:07:70:d4:5d:7e:e3:00:10:a0:f1:0a:4b:a8:c8:bb:a2: 7f:82:a4:8f:95:a1:e5:d6:af:c1:10:9a:a9:72:68:a9:e5:a4: 56:94:f9:e5:b3:ab:0b:1b:82:1d:ee:08:ce:20:53:85:9c:c9: e1:fc:f1:e5:52:25:da:1b:8b:12:83:a8:0f:d4:2f:9c:c3:31: f0:9b:35:15:81:ae:ad:d0:49:0f:eb:a9:12:c4:ea:e6:5e:33: b4:fc:6a:53:55:6e:61:ec:c9:6b:1a:a5:a9:20:00:b3:50:ba: ac:53:bb:03:78:16:b4:86:75:bd:05:b2:4a:45:b6:66:26:0a: 03:93:61:a7:6e:a0:0d:59:3c:a7:77:cd:db:91:6c:e7:8d:77: 38:17:ab:44:ee:bb:ba:7a:b3:b3:cb:a5:00:ab:b9:84:75:ec: f1:e2:4e:f8:b5:64:7f:bf:cb:5b:e2:f3:ee:e5:09:16:bd:42: 02:3a:44:28:13:31:ed:7b:11:c3:2d:09:72:cb:34:40:41:2b: ba:a2:71:24:2e:0d:69:67:f4:17:27:07:27:d8:00:3a:ab:99: cf:39:ec:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdUkahzIwS/qT+q9IMIDQ9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5M2YzMjMxYzc4N2Y3MWRkMjQ4NGVlMDAyZGE3M2E3MTc1 YmQyNDkwHhcNMjUxMjI3MDEwMDMxWhcNMjUxMjI4MDEwMDMxWjAzMTEwLwYDVQQD EyhmZmRlMGEzNDA4NjBlMzMwMTJhODdlZWZkYjcyZGY5ZGFmZGQ0N2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+va8imOo8ZMRhH4qBNsT+EW0o0D CePF6pl0LC6bS7lG/VOsNOSMUt1DqwPGAeJXTY6u5VA8RMiI2tWi5rHB/QEmM4v0 WDY+E+J8yzocPkjnqCAMyYTOinFzNkkHdPI+kAXx7SeSEwouYrZRhGhqsEZX3cPT HhiZ4c2Qfn9jDpLgkSGnAUnMqyqjXRxsRE2ShUtoo6y1hh62GfJ0SyRY9/ZaUtPS 7ZZ9L4cHO506NhC9d80FGhL1NNMrRXKviW5y+vEOKpPxDYds011hlEc/XtRTSgsy 4NtnmjqBa6JoGdXbBWWyUlUbDCYJcciOWCcNG9/MsEZ5KXRzHbhf37jumQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/eCjQIYOMwEqh+79ty352v3Uf/MB8GA1UdIwQY MBaAFKk/MjHHh/cd0khO4ALac6cXW9JJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVQ4eU1jZUg5eDNTU0U3Z0F0cHpweGRiMGtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80ZGM3OTUtODk1Ni00NDA4LWE1Y2Mt YjU0YmNhZTE3ZDQwLzEvcVQ4eU1jZUg5eDNTU0U3Z0F0cHpweGRiMGtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80ZGM3OTUtODk1Ni00NDA4LWE1Y2MtYjU0YmNhZTE3ZDQw LzEvcVQ4eU1jZUg5eDNTU0U3Z0F0cHpweGRiMGtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ6bdzluX PO36gjBaQnDhDtI/LE3d2B2oxTdtIqOefrlfA+1gzcQHcNRdfuMAEKDxCkuoyLui f4Kkj5Wh5davwRCaqXJoqeWkVpT55bOrCxuCHe4IziBThZzJ4fzx5VIl2huLEoOo D9QvnMMx8Js1FYGurdBJD+upEsTq5l4ztPxqU1VuYezJaxqlqSAAs1C6rFO7A3gW tIZ1vQWySkW2ZiYKA5Nhp26gDVk8p3fN25Fs5413OBerRO67unqzs8ulAKu5hHXs 8eJO+LVkf7/LW+Lz7uUJFr1CAjpEKBMx7XsRwy0Jcss0QEEruqJxJC4NaWf0FycH J9gAOquZzznsBQ== -----END CERTIFICATE-----Generated at Sat Dec 27 06:27:36 2025 by rpki-client