This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.mft File: q8ETx66mtxSgYOn3w-cVaeYD05U.mft (raw, json) Hash identifier: /yERGui4O23xzgjvyFuZjDyfNWlj3wizCnKx2NHrjIA= Subject key identifier: DB:3E:DE:B5:E7:75:8C:F4:0E:3B:13:7D:EF:F7:07:27:AE:A5:57:07 Authority key identifier: AB:C1:13:C7:AE:A6:B7:14:A0:60:E9:F7:C3:E7:15:69:E6:03:D3:95 Certificate issuer: /CN=abc113c7aea6b714a060e9f7c3e71569e603d395 Certificate serial: 019B3C105231594B8BAC4D2217CF2EAD732D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8ETx66mtxSgYOn3w-cVaeYD05U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.mft Manifest number: 0E78 Signing time: Sat 20 Dec 2025 14:01:01 +0000 Manifest this update: Sat 20 Dec 2025 14:01:01 +0000 Manifest next update: Sun 21 Dec 2025 14:01:01 +0000 Files and hashes: 1: cACLsETFkrWp2y3uSppllbzeN8M.roa (hash: 69+xRQ628SJEg1B3Gvd/lIbJ0dPAum9FWWtmKpGIALk=) 2: q8ETx66mtxSgYOn3w-cVaeYD05U.crl (hash: eEazpUoCVXsMxoZldjUjqGyxezKT6JQZWDx++rXwseo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.mft rsync://rpki.ripe.net/repository/DEFAULT/q8ETx66mtxSgYOn3w-cVaeYD05U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:52:31:59:4b:8b:ac:4d:22:17:cf:2e:ad:73:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abc113c7aea6b714a060e9f7c3e71569e603d395 Validity Not Before: Dec 20 14:01:01 2025 GMT Not After : Dec 21 14:01:01 2025 GMT Subject: CN=db3edeb5e7758cf40e3b137deff70727aea55707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:37:16:ed:a9:cc:82:73:d2:d0:da:04:c6:e7: 18:56:aa:55:e0:ad:f0:cc:0c:1f:23:a3:f8:28:9d: b0:1b:b3:e9:4c:0c:e4:83:47:38:ce:a7:2c:ca:f7: d2:50:29:85:d4:28:9f:9d:0d:78:3e:91:98:0a:1b: b0:89:ef:49:dc:bd:4b:f0:6e:92:67:6f:ab:c1:64: d9:30:fe:0f:84:f2:1a:f0:7d:e8:61:92:6d:91:86: bd:ba:80:bd:e3:f7:ec:a0:8d:9c:89:61:85:23:c3: a9:c2:4e:31:42:76:5c:bc:f3:38:9e:ae:77:6c:37: c8:de:20:82:7b:3b:44:f3:52:c2:12:47:b6:08:1a: 44:4b:83:3e:fe:42:41:7f:35:78:87:4c:37:f8:ae: 68:04:41:eb:35:17:6f:0d:67:c3:7e:39:db:82:1b: b3:28:bb:00:23:da:4e:95:83:9f:bb:c7:cb:c5:2a: 5d:02:3f:4f:c8:6d:bc:da:45:24:86:cf:e3:db:4b: ab:19:b1:6c:79:04:ec:be:b7:60:4c:b2:e4:7d:cb: 10:b1:e9:1c:41:d6:45:da:cf:1e:56:4e:a6:05:6e: 7c:61:9c:10:ed:1a:88:41:67:cf:42:52:d3:98:71: cc:35:f3:50:4f:24:4b:aa:73:62:81:af:63:bd:a3: 64:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:3E:DE:B5:E7:75:8C:F4:0E:3B:13:7D:EF:F7:07:27:AE:A5:57:07 X509v3 Authority Key Identifier: keyid:AB:C1:13:C7:AE:A6:B7:14:A0:60:E9:F7:C3:E7:15:69:E6:03:D3:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8ETx66mtxSgYOn3w-cVaeYD05U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:f2:9c:37:40:b1:55:1e:ec:44:42:40:84:0a:d5:84:f5:ef: c3:c0:f5:ed:40:54:bd:45:43:ca:4a:39:e9:a9:20:75:47:59: 53:d4:f9:ec:39:6c:98:0c:b4:dd:31:bd:92:2c:a4:39:a8:ab: f7:76:65:0a:c6:4c:d2:51:98:76:12:b9:34:75:38:06:2e:61: 0b:5a:4c:1e:a5:3a:3e:97:c0:5f:3b:f8:2e:7c:a8:fe:ab:78: 8e:18:3c:3b:4a:77:7f:bc:05:d8:71:50:49:7e:1e:b2:83:5c: 79:3b:10:e9:8f:82:8e:00:12:1a:50:84:c6:cb:33:67:d1:db: cf:bb:0c:17:b1:7f:c8:dd:cc:74:34:c2:5e:d6:62:ea:88:27: a4:9f:4d:58:07:ef:e7:ed:b1:0f:a4:03:9b:49:00:24:21:07: c8:23:15:d5:d8:72:f0:86:d5:59:01:c1:c2:c2:d9:4d:41:2b: fa:c2:f0:4b:29:b9:2c:67:53:73:2f:95:00:23:91:37:c8:44: 67:b1:30:92:32:3f:3a:63:28:f8:49:51:98:ad:dc:21:e7:ab: 9e:5c:82:c9:45:10:1d:9e:21:8f:7b:b3:93:02:a4:71:45:10: fb:5d:69:a7:6d:b4:d5:08:94:46:6d:c1:1d:f8:76:f0:91:84: 21:55:d1:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EFIxWUuLrE0iF88urXMtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYzExM2M3YWVhNmI3MTRhMDYwZTlmN2MzZTcxNTY5ZTYw M2QzOTUwHhcNMjUxMjIwMTQwMTAxWhcNMjUxMjIxMTQwMTAxWjAzMTEwLwYDVQQD EyhkYjNlZGViNWU3NzU4Y2Y0MGUzYjEzN2RlZmY3MDcyN2FlYTU1NzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDcW7anMgnPS0NoExucYVqpV4K3w zAwfI6P4KJ2wG7PpTAzkg0c4zqcsyvfSUCmF1CifnQ14PpGYChuwie9J3L1L8G6S Z2+rwWTZMP4PhPIa8H3oYZJtkYa9uoC94/fsoI2ciWGFI8Opwk4xQnZcvPM4nq53 bDfI3iCCeztE81LCEke2CBpES4M+/kJBfzV4h0w3+K5oBEHrNRdvDWfDfjnbghuz KLsAI9pOlYOfu8fLxSpdAj9PyG282kUkhs/j20urGbFseQTsvrdgTLLkfcsQsekc QdZF2s8eVk6mBW58YZwQ7RqIQWfPQlLTmHHMNfNQTyRLqnNiga9jvaNkyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNs+3rXndYz0DjsTfe/3ByeupVcHMB8GA1UdIwQY MBaAFKvBE8euprcUoGDp98PnFWnmA9OVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcThFVHg2Nm10eFNnWU9uM3ctY1ZhZVlEMDVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9jMGFkNGQtMjBmZS00YTkzLWFmMDYt MWQwYTRlYzgyN2FiLzEvcThFVHg2Nm10eFNnWU9uM3ctY1ZhZVlEMDVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9jMGFkNGQtMjBmZS00YTkzLWFmMDYtMWQwYTRlYzgyN2Fi LzEvcThFVHg2Nm10eFNnWU9uM3ctY1ZhZVlEMDVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM/KcN0Cx VR7sREJAhArVhPXvw8D17UBUvUVDyko56akgdUdZU9T57DlsmAy03TG9kiykOair 93ZlCsZM0lGYdhK5NHU4Bi5hC1pMHqU6PpfAXzv4Lnyo/qt4jhg8O0p3f7wF2HFQ SX4esoNceTsQ6Y+CjgASGlCExsszZ9Hbz7sMF7F/yN3MdDTCXtZi6ognpJ9NWAfv 5+2xD6QDm0kAJCEHyCMV1dhy8IbVWQHBwsLZTUEr+sLwSym5LGdTcy+VACORN8hE Z7EwkjI/OmMo+ElRmK3cIeernlyCyUUQHZ4hj3uzkwKkcUUQ+11pp2201QiURm3B Hfh28JGEIVXRqg== -----END CERTIFICATE-----Generated at Sat Dec 20 20:41:55 2025 by rpki-client