This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft File: q8GRjB9F5uwX2spnp60ZPK8Et7I.mft (raw, json) Hash identifier: kciaq/Ju8PWpx6muyBIkwcrbtgVznLKhU3acDhIy4kM= Subject key identifier: 8D:71:B9:3B:8F:3B:E1:51:9C:17:C5:C4:B4:D3:DA:B1:2D:1E:FB:E7 Authority key identifier: AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2 Certificate issuer: /CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2 Certificate serial: 019B3CB4D4598E668986D3D2157317FE3EEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft Manifest number: 0601 Signing time: Sat 20 Dec 2025 17:00:42 +0000 Manifest this update: Sat 20 Dec 2025 17:00:42 +0000 Manifest next update: Sun 21 Dec 2025 17:00:42 +0000 Files and hashes: 1: DYsiQqVjAuJI8byUG8mKd0jSQh4.asa (hash: YMrGSqc7KqHO4j1lgZTxY1WoFwm99rirLTct3gzShT0=) 2: HMmCdkpHTMLYze6qZGF-iwUAzmA.roa (hash: EsQLIbughOGxNVdEh2Tzb5JlJpT3ZvlB6qAeVifGGwk=) 3: L4RKq9blDuun-Ov7h4-EXCJDU7o.roa (hash: rV2ghgo1vc0bF0beR2sZL8zKS4novhD+fyLSyA4fGEk=) 4: TKYCIQIu4F23JxsEDfGIzBctkEc.roa (hash: EAnr/9lW4r6/S4hhnfhRdmsx8JCo45r2zRW9cF9kcLo=) 5: _HpIO26oTlp3ah6eb8LpZJn4sZU.asa (hash: rNwAJLoUrEajetBo8sWHQzmyDtFszLMTuAjSH9z1rL4=) 6: iLSgImJKA6sfcvh2C5H8MSiXYgc.roa (hash: i6Q1/zgekWcF03q/uHf2eJzbB2A8g+6dH//zgAn+ods=) 7: q8GRjB9F5uwX2spnp60ZPK8Et7I.crl (hash: eWrKb1qWteR1lsXouoT2FZZBC6MdrAJY9FBJgLdT1kg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:d4:59:8e:66:89:86:d3:d2:15:73:17:fe:3e:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2 Validity Not Before: Dec 20 17:00:42 2025 GMT Not After : Dec 21 17:00:42 2025 GMT Subject: CN=8d71b93b8f3be1519c17c5c4b4d3dab12d1efbe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:63:85:c2:89:ec:93:e4:c2:2b:a0:f5:dc:ae: 77:56:77:74:db:49:f2:d1:df:89:9f:5f:46:30:2f: 0f:f9:da:99:94:f8:bb:04:bf:fa:5d:db:46:ae:40: 53:b6:73:18:1f:4b:ca:10:c5:2c:cc:44:9f:27:01: ef:ec:ef:ca:f7:fa:fa:36:88:a5:9c:e9:a1:a9:0a: 9b:b7:01:62:35:58:b9:e9:54:f7:f3:6b:b2:01:93: 41:40:c4:1d:fd:85:c8:37:d6:4f:00:1b:da:5b:0a: 18:88:3b:05:95:9a:ae:0c:8e:65:64:86:c9:7a:73: 9e:0c:2d:e5:f7:72:5d:d3:50:e0:16:af:d1:0d:97: 05:ee:0c:b2:0d:3e:b8:92:cc:6a:a4:70:d5:d5:7e: 9b:74:06:36:56:42:8d:41:da:c0:46:1c:1f:29:c6: 33:7b:c5:7b:a0:4a:e2:19:60:e3:4c:3b:48:ea:99: 7b:6f:1a:5d:f5:ca:b7:13:29:b1:09:60:4d:06:76: cb:d0:db:af:d7:40:99:96:3d:e3:05:66:aa:da:84: a0:3f:88:1e:09:3a:2b:8b:b7:63:e6:39:fd:1a:77: 69:3b:6d:71:da:be:c2:a9:e3:b1:f3:c0:e2:a1:64: b7:5d:d0:df:de:af:e2:4c:c8:9a:34:78:9d:4b:94: 74:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:71:B9:3B:8F:3B:E1:51:9C:17:C5:C4:B4:D3:DA:B1:2D:1E:FB:E7 X509v3 Authority Key Identifier: keyid:AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:63:51:0b:58:13:d4:c1:b7:94:bc:c8:f5:74:f3:28:01:0d: 99:cf:11:4b:16:f2:90:33:84:5a:43:27:d7:24:a9:97:f9:fa: f6:59:f6:70:c8:2f:1e:43:f5:d9:34:f0:fa:cd:bd:1a:8a:0b: 3d:6c:ae:b9:f1:34:e9:0f:0d:65:5e:13:d7:67:81:d1:41:92: 27:a2:4c:09:d9:9a:22:a7:ce:d7:bc:ae:e0:16:d0:b4:6c:95: ab:0b:1f:2b:68:3c:da:7e:d9:3d:c5:fa:ed:17:3f:d4:fe:6a: 07:5c:32:e0:40:dd:9d:bb:01:7d:1e:ff:35:a4:e7:ef:19:d0: d8:1e:ff:4f:19:21:2d:67:0c:d7:40:09:9d:d2:26:53:a0:03: 47:0a:8d:37:0e:8e:12:d4:22:48:b8:d2:de:d1:93:16:04:3a: 56:a3:2d:b8:6e:f4:d6:ca:f2:5f:da:ab:60:f4:63:cc:03:fc: 61:5c:34:5b:f1:e3:90:be:15:a1:a8:ef:7d:d7:42:e1:93:81: a6:86:3e:0a:ec:8e:82:b0:cb:ff:7d:0c:10:3f:38:a5:ee:15: 97:6c:15:40:71:5b:b3:b5:48:e0:da:78:57:a2:e6:88:1f:70: 98:37:79:10:2d:82:43:65:c5:2d:0f:8f:a9:ed:d0:c5:77:47: 35:e6:31:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tNRZjmaJhtPSFXMX/j7sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYzE5MThjMWY0NWU2ZWMxN2RhY2E2N2E3YWQxOTNjYWYw NGI3YjIwHhcNMjUxMjIwMTcwMDQyWhcNMjUxMjIxMTcwMDQyWjAzMTEwLwYDVQQD Eyg4ZDcxYjkzYjhmM2JlMTUxOWMxN2M1YzRiNGQzZGFiMTJkMWVmYmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGOFwonsk+TCK6D13K53Vnd020ny 0d+Jn19GMC8P+dqZlPi7BL/6XdtGrkBTtnMYH0vKEMUszESfJwHv7O/K9/r6Noil nOmhqQqbtwFiNVi56VT382uyAZNBQMQd/YXIN9ZPABvaWwoYiDsFlZquDI5lZIbJ enOeDC3l93Jd01DgFq/RDZcF7gyyDT64ksxqpHDV1X6bdAY2VkKNQdrARhwfKcYz e8V7oEriGWDjTDtI6pl7bxpd9cq3EymxCWBNBnbL0Nuv10CZlj3jBWaq2oSgP4ge CTori7dj5jn9GndpO21x2r7CqeOx88DioWS3XdDf3q/iTMiaNHidS5R03QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI1xuTuPO+FRnBfFxLTT2rEtHvvnMB8GA1UdIwQY MBaAFKvBkYwfRebsF9rKZ6etGTyvBLeyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcThHUmpCOUY1dXdYMnNwbnA2MFpQSzhFdDdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84Zjg4ZGUtZGFlZC00OGQyLWI3MDEt NmJiNWZlNjY1NzUwLzEvcThHUmpCOUY1dXdYMnNwbnA2MFpQSzhFdDdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi84Zjg4ZGUtZGFlZC00OGQyLWI3MDEtNmJiNWZlNjY1NzUw LzEvcThHUmpCOUY1dXdYMnNwbnA2MFpQSzhFdDdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABWNRC1gT 1MG3lLzI9XTzKAENmc8RSxbykDOEWkMn1ySpl/n69ln2cMgvHkP12TTw+s29GooL PWyuufE06Q8NZV4T12eB0UGSJ6JMCdmaIqfO17yu4BbQtGyVqwsfK2g82n7ZPcX6 7Rc/1P5qB1wy4EDdnbsBfR7/NaTn7xnQ2B7/TxkhLWcM10AJndImU6ADRwqNNw6O EtQiSLjS3tGTFgQ6VqMtuG701sryX9qrYPRjzAP8YVw0W/HjkL4VoajvfddC4ZOB poY+CuyOgrDL/30MED84pe4Vl2wVQHFbs7VI4Np4V6LmiB9wmDd5EC2CQ2XFLQ+P qe3QxXdHNeYxSw== -----END CERTIFICATE-----Generated at Sat Dec 20 21:09:05 2025 by rpki-client