This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft File: Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft (raw, json) Hash identifier: QJI7aYKkuilcMPki1lzmdCdQeEUrAxXoSmzD63L6acw= Subject key identifier: 8B:36:C5:2F:8F:1E:39:BF:20:2C:B7:72:D2:3F:7B:54:28:D0:34:AA Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49 Certificate issuer: /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849 Certificate serial: 019B39B452CBFA996E3193960C71EC84DAE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft Manifest number: 17A4 Signing time: Sat 20 Dec 2025 03:01:17 +0000 Manifest this update: Sat 20 Dec 2025 03:01:17 +0000 Manifest next update: Sun 21 Dec 2025 03:01:17 +0000 Files and hashes: 1: Bt_BJ_rJvQ-dhFs_SCmV1G3Ogsk.roa (hash: MRBJocdcxttyraiCxJuRCmX4CgQbJJdUodQ85Hkwc4U=) 2: JyxghoeF6hDC8N6SVjWRhYxsMBM.roa (hash: xPNYZdV7e7Lg6hC+x9cwa/uaXPSCMeE53FUH9lU5TIM=) 3: OYF94ILNmc9IGZCl0trT_vCrveA.roa (hash: uj8o2STwQYQOQKO9jHh+UgR4tdLDjqQa9LhPcW5B4qI=) 4: Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl (hash: 9qjK8Ccqeb5X45+nXS4q8DKGtLWoHvyQH4Wr7rmXV4Q=) 5: a2-Ak-XNzMq87nGfxm17NNrDD-w.roa (hash: oobPnpb12mxX5CV2sXI30Is1iiyb45x/TVEFVdIFWQ0=) 6: bDUFsRxvOWilElkS5MfCCIWk1XQ.roa (hash: mAKIKAHs72Ncw5cLpVcqx2omnJ6e82AfVTrRpnwNpJU=) 7: bkFu5lpbMCNQfDrUwHK85noTE8w.roa (hash: LF7GIBSOnpzm9vehsDsQICT9UHecDF3rayxCzLBTmJc=) 8: i4BvPEbIU0LE_KGbaw2Du_jwtCU.roa (hash: /Y2NvzZtZ5IYW3kWzP26GGHk2SWDVIrWTwCk4pyyB7E=) 9: tyWKDUVqC5IzOiqKJqRpStnyBMA.roa (hash: qWagwXDRFIv38+Ji9vgNoeMWS7OrJF0vAZgWVKNUl5M=) 10: xXPje22kQWotZEDmug62wH0gDiA.roa (hash: agsgwd8NBBgzTmUw5oBm+qVdc/ai59WAMmo29EAFg6c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 03:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:52:cb:fa:99:6e:31:93:96:0c:71:ec:84:da:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849 Validity Not Before: Dec 20 03:01:17 2025 GMT Not After : Dec 21 03:01:17 2025 GMT Subject: CN=8b36c52f8f1e39bf202cb772d23f7b5428d034aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:55:12:b7:6b:bb:0d:7e:77:03:2d:25:96:9a: c1:81:c6:52:a6:1c:54:f1:f3:6b:b2:fd:5f:5a:07: 3e:c8:56:cc:e2:73:86:c2:2b:12:10:fa:6e:cf:a3: ad:85:da:8c:5f:fd:81:1d:54:fb:6c:bb:b5:2f:12: 50:19:b2:37:43:2a:c2:02:89:6b:c2:0c:e0:5d:78: e5:ff:23:0b:8f:6c:74:11:23:03:1e:09:68:8b:c4: da:e8:b8:16:2c:f5:c7:7b:4b:4b:84:c3:eb:d8:ce: 67:4c:8c:0e:dd:59:d6:5f:3f:fd:94:32:8b:20:79: f8:9d:8d:7d:5d:52:a8:37:c4:87:42:ab:2c:ad:e4: 08:92:60:e0:3d:a6:4b:f5:4a:7e:be:4b:20:86:29: f1:7b:88:c9:e5:4d:bd:1b:d0:cd:ab:b8:fb:2f:e4: a1:46:b5:4a:03:5b:7e:d6:55:42:34:d4:91:b6:ff: 41:91:e0:95:79:21:72:5f:56:77:7d:4a:39:a3:fa: 96:bd:d0:1a:40:9b:75:2e:19:d8:b2:91:2d:8a:3d: 1e:86:23:93:0c:b8:9a:f8:1c:8b:ec:9a:8b:54:a4: d5:60:32:43:05:7b:d4:45:b1:f0:cb:ab:b7:da:b3: e5:18:47:da:5f:2d:59:11:74:c8:6c:4a:6c:a1:61: fa:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:36:C5:2F:8F:1E:39:BF:20:2C:B7:72:D2:3F:7B:54:28:D0:34:AA X509v3 Authority Key Identifier: keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:f9:57:11:8f:86:40:cc:8c:ab:1a:bd:22:94:1f:b1:01:33: e6:1a:90:66:15:13:4b:39:74:72:89:24:2e:81:bd:a9:94:dd: e8:4c:f1:60:ec:5c:69:0b:fe:08:f9:d3:09:bf:fe:c0:59:fa: 38:8a:98:e7:c3:da:2d:2f:b9:fb:d4:e2:a1:6a:29:34:68:b5: 9f:e9:1c:78:6b:c1:9d:30:b7:17:fc:20:ca:26:6c:17:54:7e: 95:52:1a:96:5c:93:cc:f4:7b:ff:a8:15:f8:0b:d7:0e:2b:39: bc:f9:1b:bd:a3:b5:22:6f:d7:98:e0:4e:dd:5a:64:77:6f:b1: b9:dc:2a:ab:95:0e:56:a2:36:d3:9a:83:f6:ab:2f:5b:43:6f: a4:7a:4f:7f:95:e8:36:2b:79:2d:97:5f:c0:c1:34:61:8f:dc: 49:9c:0c:7d:51:5e:5b:7b:ce:57:e4:dc:dd:cb:ba:55:44:42: 7f:a1:0e:c9:22:4e:0d:d5:0e:ea:87:4f:c5:1d:74:0a:20:28: 33:b0:22:e9:e1:de:f5:c3:d5:f6:1e:c3:4c:15:b9:4b:63:8e: bd:7d:aa:37:73:5b:35:35:d4:f9:df:4f:d4:fe:67:66:c0:a5: db:4b:e3:04:69:48:11:9d:1e:71:d9:89:d1:1d:f3:6a:3a:70: 50:9b:ac:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5tFLL+pluMZOWDHHshNrjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZDViYTA4MTVjOWY1MTkzZjgwOTg5ZWU4OTNhY2FjYzRi YTg4NDkwHhcNMjUxMjIwMDMwMTE3WhcNMjUxMjIxMDMwMTE3WjAzMTEwLwYDVQQD Eyg4YjM2YzUyZjhmMWUzOWJmMjAyY2I3NzJkMjNmN2I1NDI4ZDAzNGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFUSt2u7DX53Ay0llprBgcZSphxU 8fNrsv1fWgc+yFbM4nOGwisSEPpuz6OthdqMX/2BHVT7bLu1LxJQGbI3QyrCAolr wgzgXXjl/yMLj2x0ESMDHgloi8Ta6LgWLPXHe0tLhMPr2M5nTIwO3VnWXz/9lDKL IHn4nY19XVKoN8SHQqssreQIkmDgPaZL9Up+vksghinxe4jJ5U29G9DNq7j7L+Sh RrVKA1t+1lVCNNSRtv9BkeCVeSFyX1Z3fUo5o/qWvdAaQJt1LhnYspEtij0ehiOT DLia+ByL7JqLVKTVYDJDBXvURbHwy6u32rPlGEfaXy1ZEXTIbEpsoWH6pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIs2xS+PHjm/ICy3ctI/e1Qo0DSqMB8GA1UdIwQY MBaAFEPVuggVyfUZP4CYnuiTrKzEuohJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83MjgyYjQtN2YxMS00ZWUwLWFiZWEt ZTEzZTU1NzljNWRjLzEvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi83MjgyYjQtN2YxMS00ZWUwLWFiZWEtZTEzZTU1NzljNWRj LzEvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACvlXEY+G QMyMqxq9IpQfsQEz5hqQZhUTSzl0cokkLoG9qZTd6EzxYOxcaQv+CPnTCb/+wFn6 OIqY58PaLS+5+9TioWopNGi1n+kceGvBnTC3F/wgyiZsF1R+lVIallyTzPR7/6gV +AvXDis5vPkbvaO1Im/XmOBO3Vpkd2+xudwqq5UOVqI205qD9qsvW0NvpHpPf5Xo Nit5LZdfwME0YY/cSZwMfVFeW3vOV+Tc3cu6VURCf6EOySJODdUO6odPxR10CiAo M7Ai6eHe9cPV9h7DTBW5S2OOvX2qN3NbNTXU+d9P1P5nZsCl20vjBGlIEZ0ecdmJ 0R3zajpwUJusJw== -----END CERTIFICATE-----Generated at Sat Dec 20 12:37:57 2025 by rpki-client