This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft File: qT8yMceH9x3SSE7gAtpzpxdb0kk.mft (raw, json) Hash identifier: fuYY1wwZQ+s4bvHYm5pSwsNLtzs1evaxwp4WDd/H8ig= Subject key identifier: 85:1F:D7:56:87:79:6B:3E:05:E7:D1:CB:DF:E7:03:F9:5B:ED:7E:4E Authority key identifier: A9:3F:32:31:C7:87:F7:1D:D2:48:4E:E0:02:DA:73:A7:17:5B:D2:49 Certificate issuer: /CN=a93f3231c787f71dd2484ee002da73a7175bd249 Certificate serial: 019B3E6C7BDAA9BBCE9CADB68AACD44F384A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft Manifest number: 14D4 Signing time: Sun 21 Dec 2025 01:00:55 +0000 Manifest this update: Sun 21 Dec 2025 01:00:55 +0000 Manifest next update: Mon 22 Dec 2025 01:00:55 +0000 Files and hashes: 1: dAVSxn9A98KVLUy6EVl5K32SF7o.roa (hash: SrvH5FePM3edQXYJk2ogbac68Gns4DWibjSZvY3sGPk=) 2: qT8yMceH9x3SSE7gAtpzpxdb0kk.crl (hash: vynBwqgdEsR5e1BKKq2jAMCD8ynMnu3VX3VlgtxXJC0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:7b:da:a9:bb:ce:9c:ad:b6:8a:ac:d4:4f:38:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a93f3231c787f71dd2484ee002da73a7175bd249 Validity Not Before: Dec 21 01:00:55 2025 GMT Not After : Dec 22 01:00:55 2025 GMT Subject: CN=851fd75687796b3e05e7d1cbdfe703f95bed7e4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:14:74:6c:96:29:48:f4:8d:3b:06:e3:0c:b5: 3f:b3:8e:69:d8:e4:fb:41:6a:47:40:48:65:41:71: 6c:70:e3:65:05:eb:57:88:e7:e6:de:e1:3b:39:6a: aa:a3:be:4b:e0:74:96:0c:74:08:35:f7:0c:71:e0: 7f:23:2b:6b:b2:09:e2:4b:82:81:7e:f9:b1:65:b9: ef:b3:f5:8f:1d:37:26:a6:24:fc:ef:87:87:88:2d: 52:1f:3b:77:54:6f:51:fc:91:c9:14:a1:ab:ec:51: 2a:ed:ac:b8:e2:ce:8c:3f:74:be:f8:93:bc:7c:e3: 0f:5f:55:5c:6b:be:c6:4f:0a:23:82:0e:aa:1e:58: 3b:ad:19:f7:bd:1a:bd:0b:ec:da:9d:2c:d3:7c:d2: 7a:76:c5:f6:da:ed:f2:67:1e:7f:0f:a5:fb:3f:81: 6c:0f:3d:b0:ac:47:65:cc:25:08:22:74:46:d9:9a: d9:10:7a:af:ed:60:c2:16:c9:4a:1a:d4:48:f1:a4: cf:96:0e:5a:6c:99:5b:ed:0e:d7:2c:55:cc:05:f6: 42:a2:2f:80:a4:d2:4c:58:bf:f0:2f:be:77:b7:7e: 58:d8:5b:b5:0f:8e:0b:b4:c0:71:d1:5d:51:94:f1: 40:d7:38:3f:c8:f2:c8:bb:17:81:f9:67:50:50:55: f6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:1F:D7:56:87:79:6B:3E:05:E7:D1:CB:DF:E7:03:F9:5B:ED:7E:4E X509v3 Authority Key Identifier: keyid:A9:3F:32:31:C7:87:F7:1D:D2:48:4E:E0:02:DA:73:A7:17:5B:D2:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:0f:e6:7c:fe:cf:e2:bd:82:3e:0a:ec:be:46:98:55:2f:c1: 21:a7:d6:24:c2:8e:8b:20:8a:2f:c6:c1:4b:9c:05:09:29:1b: 81:73:33:10:f5:b8:ff:d2:f4:3d:ae:6e:67:18:cc:b2:92:9e: 13:ed:d4:de:0b:cb:d8:36:e0:71:b0:90:73:b4:46:6c:22:1c: f0:41:f6:3e:6c:02:a7:02:bc:d4:41:64:5a:03:48:84:7e:dc: be:86:18:5c:a1:20:b1:af:83:1e:6a:45:4e:89:75:a6:2e:96: ea:f6:32:49:3d:fa:0b:39:bf:8b:3f:6b:5f:83:ca:77:93:69: 38:d4:13:3c:68:84:2c:c8:1e:f6:bd:1d:fc:50:64:1e:e3:b6: 5e:9d:b9:3e:34:d2:0b:5a:31:7c:1b:89:f4:b5:26:e7:90:e6: 7e:f3:4b:09:0f:95:41:61:8d:a3:c1:cf:b8:d9:51:71:95:4b: 43:f8:6d:98:52:ca:e1:26:8b:b8:3f:fb:7f:93:52:c0:83:23: f4:ba:be:ef:9e:76:e4:ad:17:8a:6a:50:d1:c7:cc:50:33:58: 70:a8:bb:33:06:59:94:c5:df:b1:f0:70:2c:f1:ec:33:a3:0d: 5d:ef:a0:4b:af:bb:36:6e:65:44:b2:2f:ab:bd:1f:b2:a4:5e: 43:76:75:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bHvaqbvOnK22iqzUTzhKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5M2YzMjMxYzc4N2Y3MWRkMjQ4NGVlMDAyZGE3M2E3MTc1 YmQyNDkwHhcNMjUxMjIxMDEwMDU1WhcNMjUxMjIyMDEwMDU1WjAzMTEwLwYDVQQD Eyg4NTFmZDc1Njg3Nzk2YjNlMDVlN2QxY2JkZmU3MDNmOTViZWQ3ZTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBR0bJYpSPSNOwbjDLU/s45p2OT7 QWpHQEhlQXFscONlBetXiOfm3uE7OWqqo75L4HSWDHQINfcMceB/IytrsgniS4KB fvmxZbnvs/WPHTcmpiT874eHiC1SHzt3VG9R/JHJFKGr7FEq7ay44s6MP3S++JO8 fOMPX1Vca77GTwojgg6qHlg7rRn3vRq9C+zanSzTfNJ6dsX22u3yZx5/D6X7P4Fs Dz2wrEdlzCUIInRG2ZrZEHqv7WDCFslKGtRI8aTPlg5abJlb7Q7XLFXMBfZCoi+A pNJMWL/wL753t35Y2Fu1D44LtMBx0V1RlPFA1zg/yPLIuxeB+WdQUFX2+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIUf11aHeWs+BefRy9/nA/lb7X5OMB8GA1UdIwQY MBaAFKk/MjHHh/cd0khO4ALac6cXW9JJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVQ4eU1jZUg5eDNTU0U3Z0F0cHpweGRiMGtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80ZGM3OTUtODk1Ni00NDA4LWE1Y2Mt YjU0YmNhZTE3ZDQwLzEvcVQ4eU1jZUg5eDNTU0U3Z0F0cHpweGRiMGtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80ZGM3OTUtODk1Ni00NDA4LWE1Y2MtYjU0YmNhZTE3ZDQw LzEvcVQ4eU1jZUg5eDNTU0U3Z0F0cHpweGRiMGtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJw/mfP7P 4r2CPgrsvkaYVS/BIafWJMKOiyCKL8bBS5wFCSkbgXMzEPW4/9L0Pa5uZxjMspKe E+3U3gvL2DbgcbCQc7RGbCIc8EH2PmwCpwK81EFkWgNIhH7cvoYYXKEgsa+DHmpF Tol1pi6W6vYyST36Czm/iz9rX4PKd5NpONQTPGiELMge9r0d/FBkHuO2Xp25PjTS C1oxfBuJ9LUm55DmfvNLCQ+VQWGNo8HPuNlRcZVLQ/htmFLK4SaLuD/7f5NSwIMj 9Lq+75525K0XimpQ0cfMUDNYcKi7MwZZlMXfsfBwLPHsM6MNXe+gS6+7Nm5lRLIv q70fsqReQ3Z1GA== -----END CERTIFICATE-----Generated at Sun Dec 21 10:21:51 2025 by rpki-client