This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft File: Q9CWU4TcREh6gxcabV0FqUpq1nw.mft (raw, json) Hash identifier: b4384UisUjK/bnZem71LT6KzYAjRZUaDFxPVM2MtTjw= Subject key identifier: 2B:FD:57:3E:0C:47:D2:50:0B:C3:C3:A4:A1:E2:25:5E:BF:27:C7:E6 Authority key identifier: 43:D0:96:53:84:DC:44:48:7A:83:17:1A:6D:5D:05:A9:4A:6A:D6:7C Certificate issuer: /CN=43d0965384dc44487a83171a6d5d05a94a6ad67c Certificate serial: 019B3A907095D22978FEC3CD208382012849 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft Manifest number: 0227 Signing time: Sat 20 Dec 2025 07:01:43 +0000 Manifest this update: Sat 20 Dec 2025 07:01:43 +0000 Manifest next update: Sun 21 Dec 2025 07:01:43 +0000 Files and hashes: 1: Q9CWU4TcREh6gxcabV0FqUpq1nw.crl (hash: FI2y8Vnih8kBErnl5w/licEbOeHD0L/pghkIZSteEYQ=) 2: is8rJFkIshJvtMPQsNBVoFxTKBY.roa (hash: eXPJhyZn1FuLC+ECVYIsChabU+UtFgCuyBkgvqoFbIk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:70:95:d2:29:78:fe:c3:cd:20:83:82:01:28:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43d0965384dc44487a83171a6d5d05a94a6ad67c Validity Not Before: Dec 20 07:01:43 2025 GMT Not After : Dec 21 07:01:43 2025 GMT Subject: CN=2bfd573e0c47d2500bc3c3a4a1e2255ebf27c7e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ec:20:3e:61:62:70:dd:24:d5:99:a1:c4:9c: f0:ab:e8:c0:5e:b7:29:86:12:6a:c3:81:7e:80:8e: f5:db:7d:ce:7c:e8:65:e9:fa:4d:62:f3:b2:c7:0e: b4:fa:8e:74:90:9f:de:f6:a0:17:5a:e1:29:0f:ed: 64:d0:8e:a8:8b:4c:b0:07:c1:58:d1:4e:65:a3:a1: ce:dc:33:1d:f0:5b:1b:c3:59:66:15:e1:98:fd:61: f3:e6:82:db:b5:e4:36:bb:aa:9e:5a:19:30:05:77: 8f:d5:5b:26:91:24:88:36:8c:d8:5e:18:f0:f0:07: 6d:36:bf:18:a8:c3:79:62:d2:0e:81:48:2d:f1:55: 76:4b:3c:10:00:9b:cf:45:86:68:f3:27:ca:0f:dd: 4b:81:5b:95:5e:8d:26:e9:42:15:f0:32:de:96:26: 7d:f1:9d:10:9c:37:36:1d:7f:58:d6:8f:42:18:03: 74:a0:e7:a4:07:00:ab:0b:2e:4e:a3:d9:44:03:74: 8c:63:f9:05:6c:ec:5d:a2:03:51:e7:a6:a2:7e:0e: 7f:85:46:58:d4:67:89:5a:0a:19:d3:4f:37:47:9f: 28:21:d7:4e:98:09:a6:c4:61:31:b7:29:98:17:6b: b5:92:b1:80:86:6a:cc:fa:44:98:ed:79:4a:6e:c5: 03:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:FD:57:3E:0C:47:D2:50:0B:C3:C3:A4:A1:E2:25:5E:BF:27:C7:E6 X509v3 Authority Key Identifier: keyid:43:D0:96:53:84:DC:44:48:7A:83:17:1A:6D:5D:05:A9:4A:6A:D6:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:ec:31:4d:f3:3b:82:7b:07:f4:8e:21:65:29:98:dc:af:ab: 46:2b:f5:58:53:b0:8c:8c:65:40:63:1e:72:3e:c5:9b:65:e3: 19:fd:e6:77:a6:9a:fc:d8:c7:69:86:ff:eb:46:a7:6f:1b:74: 82:a2:5e:98:15:15:f1:a4:e1:9e:16:2c:46:b5:4f:1c:a4:94: c6:9e:51:f7:06:6e:cd:26:13:4a:32:52:28:0b:a4:9c:fd:1d: 99:bd:64:08:c3:18:81:20:93:8e:23:06:99:9f:c3:6a:78:be: db:6d:05:d8:81:40:92:c9:aa:76:8d:6a:92:f4:78:f6:6d:74: 2e:9c:67:95:95:f5:d9:de:f5:cd:30:02:cc:36:6e:b5:9a:6e: 67:5a:68:da:02:b0:09:d0:de:25:dd:3f:87:33:b3:5b:7d:a8: 76:50:82:7e:6a:84:6d:18:4a:a5:16:69:5d:5a:1c:54:f8:e0: db:70:b9:fb:ad:45:7d:f1:1d:93:d4:3f:b3:49:f3:6e:d7:da: 05:5a:49:fe:fa:77:04:81:c0:25:46:2c:6d:d2:2b:ce:38:19: b8:1d:59:4f:76:49:aa:69:8f:db:4c:de:b5:fb:a8:26:67:40: b3:b4:e7:72:e7:cf:5a:64:fa:20:ca:b7:c2:a3:b1:de:ef:e9: 3f:52:1d:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kHCV0il4/sPNIIOCAShJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZDA5NjUzODRkYzQ0NDg3YTgzMTcxYTZkNWQwNWE5NGE2 YWQ2N2MwHhcNMjUxMjIwMDcwMTQzWhcNMjUxMjIxMDcwMTQzWjAzMTEwLwYDVQQD EygyYmZkNTczZTBjNDdkMjUwMGJjM2MzYTRhMWUyMjU1ZWJmMjdjN2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuewgPmFicN0k1ZmhxJzwq+jAXrcp hhJqw4F+gI71233OfOhl6fpNYvOyxw60+o50kJ/e9qAXWuEpD+1k0I6oi0ywB8FY 0U5lo6HO3DMd8Fsbw1lmFeGY/WHz5oLbteQ2u6qeWhkwBXeP1VsmkSSINozYXhjw 8AdtNr8YqMN5YtIOgUgt8VV2SzwQAJvPRYZo8yfKD91LgVuVXo0m6UIV8DLeliZ9 8Z0QnDc2HX9Y1o9CGAN0oOekBwCrCy5Oo9lEA3SMY/kFbOxdogNR56aifg5/hUZY 1GeJWgoZ0083R58oIddOmAmmxGExtymYF2u1krGAhmrM+kSY7XlKbsUDxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCv9Vz4MR9JQC8PDpKHiJV6/J8fmMB8GA1UdIwQY MBaAFEPQllOE3ERIeoMXGm1dBalKatZ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTlDV1U0VGNSRWg2Z3hjYWJWMEZxVXBxMW53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9jZjc2MTctOTI2ZC00YzRiLTk5NzYt ODFhNzgzMTlmZDZhLzEvUTlDV1U0VGNSRWg2Z3hjYWJWMEZxVXBxMW53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9jZjc2MTctOTI2ZC00YzRiLTk5NzYtODFhNzgzMTlmZDZh LzEvUTlDV1U0VGNSRWg2Z3hjYWJWMEZxVXBxMW53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ+wxTfM7 gnsH9I4hZSmY3K+rRiv1WFOwjIxlQGMecj7Fm2XjGf3md6aa/NjHaYb/60anbxt0 gqJemBUV8aThnhYsRrVPHKSUxp5R9wZuzSYTSjJSKAuknP0dmb1kCMMYgSCTjiMG mZ/Dani+220F2IFAksmqdo1qkvR49m10LpxnlZX12d71zTACzDZutZpuZ1po2gKw CdDeJd0/hzOzW32odlCCfmqEbRhKpRZpXVocVPjg23C5+61FffEdk9Q/s0nzbtfa BVpJ/vp3BIHAJUYsbdIrzjgZuB1ZT3ZJqmmP20zetfuoJmdAs7TncufPWmT6IMq3 wqOx3u/pP1Idkg== -----END CERTIFICATE-----Generated at Sat Dec 20 16:16:18 2025 by rpki-client