This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft File: q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft (raw, json) Hash identifier: tZZMqvrfJNmjRS5rQjBPnQzG+z3nOoN64RAND3gOhM4= Subject key identifier: 8F:70:07:A5:7F:FE:7E:07:2D:08:D0:CA:C7:84:C9:4A:EA:F0:4D:70 Authority key identifier: AB:C3:A3:09:1C:3B:1A:8C:9E:82:A0:9D:37:40:90:F6:D7:30:0B:20 Certificate issuer: /CN=abc3a3091c3b1a8c9e82a09d374090f6d7300b20 Certificate serial: 019B57893290F7EB770BDD23A82A911F9E04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft Manifest number: 13D8 Signing time: Thu 25 Dec 2025 22:02:47 +0000 Manifest this update: Thu 25 Dec 2025 22:02:47 +0000 Manifest next update: Fri 26 Dec 2025 22:02:47 +0000 Files and hashes: 1: U0noiLh-k1UXMkIIKBzlJl8anFA.roa (hash: elwLD+4HU2f37SzvunJF3t0pDH8qA22yevc6clLdIHM=) 2: q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl (hash: xw/ZEAz9xugkJFgaNfzPL5mDPoKxfGQ87+WHafmrGQY=) 3: yWfF0scZVTP5CTfvSN5AZLRV8Wo.roa (hash: lubmpITrOYefbF4JNbcAm7bQPDyIFYxHEuPyUf330UI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:57:89:32:90:f7:eb:77:0b:dd:23:a8:2a:91:1f:9e:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abc3a3091c3b1a8c9e82a09d374090f6d7300b20 Validity Not Before: Dec 25 22:02:47 2025 GMT Not After : Dec 26 22:02:47 2025 GMT Subject: CN=8f7007a57ffe7e072d08d0cac784c94aeaf04d70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9c:f3:85:8b:cc:56:56:07:61:84:db:0d:47: 4e:34:20:fd:19:e0:0d:7f:af:bc:78:24:94:fc:9e: 3b:8a:55:ab:67:cb:99:02:70:37:e3:1e:dc:db:a5: f1:54:74:40:e4:73:3f:9d:43:54:fa:34:56:24:3b: 02:3b:18:8b:97:56:6b:1c:ef:38:6b:e7:c3:d9:4a: 15:af:27:e2:1a:39:36:c6:eb:04:c9:70:71:eb:52: 39:a6:69:53:5c:fa:c7:2b:78:01:aa:32:f3:5a:49: 4d:02:15:52:3b:bc:06:3d:b3:bf:8c:5e:68:57:1e: 02:13:e1:1f:60:0c:e9:f7:00:ea:7e:2d:a9:56:56: ac:c5:af:1c:1e:a2:ea:5e:e4:66:1b:cd:69:7d:7b: 29:09:4d:c8:da:21:18:48:45:a8:25:d8:4a:b7:8b: 59:c7:4a:49:73:db:e4:02:46:e9:8e:99:b8:eb:54: 6a:3d:da:81:87:3b:b1:f0:53:aa:d1:62:70:a4:8e: 01:3a:4b:3b:a3:62:f7:fd:79:34:45:c7:a3:25:8e: c0:c7:6e:0f:ed:16:1d:29:6f:5b:d8:d4:8f:5e:72: 33:ba:e6:01:de:92:5a:28:df:f0:70:16:36:32:c5: 7c:b3:80:48:04:45:e0:bf:06:99:82:fe:06:7e:51: bc:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:70:07:A5:7F:FE:7E:07:2D:08:D0:CA:C7:84:C9:4A:EA:F0:4D:70 X509v3 Authority Key Identifier: keyid:AB:C3:A3:09:1C:3B:1A:8C:9E:82:A0:9D:37:40:90:F6:D7:30:0B:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:cb:f5:c0:11:ee:da:77:86:19:9d:c5:2c:86:d0:8a:ba:52: ec:92:20:fa:a6:e3:0c:17:67:0c:b7:b0:70:f1:f1:39:ec:30: a8:b4:d7:55:a7:71:6b:f3:2e:c3:a2:8a:65:c9:31:b8:f8:fc: c9:a9:e4:3b:58:43:da:39:11:6d:5e:c3:9c:14:71:9d:ab:af: 84:ac:af:a1:bf:10:fe:05:ad:18:02:48:c5:fa:98:6f:66:7b: 02:68:f6:69:79:b1:db:dc:35:96:c4:c4:78:57:69:cd:0b:ba: 38:17:36:ee:02:a7:5b:0c:65:1f:9f:79:04:d5:bd:65:c5:c2: 06:b0:69:b2:f5:d4:24:af:6e:cc:d6:08:0d:2f:09:f1:c6:75: 26:d7:4e:74:25:48:d7:cb:5e:de:68:96:e0:e0:bd:7f:8b:c4: a4:11:ef:93:4a:40:ca:22:16:16:f9:3b:5e:41:71:69:0c:a8: 14:69:75:44:65:23:3b:b6:d9:72:fb:bf:a3:56:13:d5:52:d6: de:23:fe:7e:7b:35:9a:4d:65:be:a7:58:9b:d1:65:db:be:4c: be:e1:fe:7a:0a:70:75:0b:b1:d6:b5:af:df:26:1d:bb:bc:e3: 2d:b6:78:69:7c:f4:56:13:6c:66:27:87:47:83:ee:20:1c:26: af:f9:95:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtXiTKQ9+t3C90jqCqRH54EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYzNhMzA5MWMzYjFhOGM5ZTgyYTA5ZDM3NDA5MGY2ZDcz MDBiMjAwHhcNMjUxMjI1MjIwMjQ3WhcNMjUxMjI2MjIwMjQ3WjAzMTEwLwYDVQQD Eyg4ZjcwMDdhNTdmZmU3ZTA3MmQwOGQwY2FjNzg0Yzk0YWVhZjA0ZDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5zzhYvMVlYHYYTbDUdONCD9GeAN f6+8eCSU/J47ilWrZ8uZAnA34x7c26XxVHRA5HM/nUNU+jRWJDsCOxiLl1ZrHO84 a+fD2UoVryfiGjk2xusEyXBx61I5pmlTXPrHK3gBqjLzWklNAhVSO7wGPbO/jF5o Vx4CE+EfYAzp9wDqfi2pVlasxa8cHqLqXuRmG81pfXspCU3I2iEYSEWoJdhKt4tZ x0pJc9vkAkbpjpm461RqPdqBhzux8FOq0WJwpI4BOks7o2L3/Xk0RcejJY7Ax24P 7RYdKW9b2NSPXnIzuuYB3pJaKN/wcBY2MsV8s4BIBEXgvwaZgv4GflG8oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI9wB6V//n4HLQjQyseEyUrq8E1wMB8GA1UdIwQY MBaAFKvDowkcOxqMnoKgnTdAkPbXMAsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcThPakNSdzdHb3llZ3FDZE4wQ1E5dGN3Q3lBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9iNzM5ZTktMTZhOC00MmRmLTgyMGMt MThhNzY4YjYwZmNkLzEvcThPakNSdzdHb3llZ3FDZE4wQ1E5dGN3Q3lBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9iNzM5ZTktMTZhOC00MmRmLTgyMGMtMThhNzY4YjYwZmNk LzEvcThPakNSdzdHb3llZ3FDZE4wQ1E5dGN3Q3lBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfsv1wBHu 2neGGZ3FLIbQirpS7JIg+qbjDBdnDLewcPHxOewwqLTXVadxa/Muw6KKZckxuPj8 yankO1hD2jkRbV7DnBRxnauvhKyvob8Q/gWtGAJIxfqYb2Z7Amj2aXmx29w1lsTE eFdpzQu6OBc27gKnWwxlH595BNW9ZcXCBrBpsvXUJK9uzNYIDS8J8cZ1JtdOdCVI 18te3miW4OC9f4vEpBHvk0pAyiIWFvk7XkFxaQyoFGl1RGUjO7bZcvu/o1YT1VLW 3iP+fns1mk1lvqdYm9Fl275MvuH+egpwdQux1rWv3yYdu7zjLbZ4aXz0VhNsZieH R4PuIBwmr/mV+Q== -----END CERTIFICATE-----Generated at Fri Dec 26 03:28:22 2025 by rpki-client