This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft File: q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft (raw, json) Hash identifier: ijZjMRtxHEP5JDN9yFads5Mn6TRRWd9JnJoeIhC7+jY= Subject key identifier: DF:FE:B1:71:AA:57:CB:08:49:72:19:8B:9B:F4:27:09:6B:BE:B7:EA Authority key identifier: AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC Certificate issuer: /CN=abbad3de831da94222c1add104caf4c3247689ac Certificate serial: 019B529828DA8791FC2652FC0AF4C7B7936A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft Manifest number: 17D7 Signing time: Wed 24 Dec 2025 23:01:02 +0000 Manifest this update: Wed 24 Dec 2025 23:01:02 +0000 Manifest next update: Thu 25 Dec 2025 23:01:02 +0000 Files and hashes: 1: OWpwpyh1mzp7VRLchsqWjA7Bd6c.roa (hash: oss82o3LFtVmuDKRa45drAtMghVcyPl5JboekWr/Lf4=) 2: VAImUOtIDMTUQI76JnLfRrvllyo.roa (hash: 4SRj/s3ojBfQysGt03CIZScJZWxzkyEXZbgo7Y3hEkk=) 3: a-k-PpKc_hbf1tf8ym45DzWV9JI.roa (hash: CGjB95jiiaCzW7zL6nSnhujYT7ypy6568fnCUOok1Hk=) 4: cqMsKKEpjqP4gOzkP6YxkMm3WxE.roa (hash: cpcpc/9CzEy+wkt4CwIjle5PkQNTLuHjrssCk9RjDo4=) 5: hJ2Q_kNZVtX9DYCp6pRdbULfToU.roa (hash: Bj3orwiHHH0lwtlViSgWz8igoGg/S7618D6XjO8Tllo=) 6: q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl (hash: H/XTAQhuekUYuXHjogkXB7gXTzWQ6fjegpwW6YPnuy8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:98:28:da:87:91:fc:26:52:fc:0a:f4:c7:b7:93:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abbad3de831da94222c1add104caf4c3247689ac Validity Not Before: Dec 24 23:01:02 2025 GMT Not After : Dec 25 23:01:02 2025 GMT Subject: CN=dffeb171aa57cb084972198b9bf427096bbeb7ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:40:d8:88:94:33:41:ff:46:9a:e1:ae:f4:fd: a0:76:ed:06:e4:b7:d2:8d:5d:b2:b5:d6:e2:54:0b: 2d:9e:fa:dd:91:d0:db:8e:32:db:58:4c:41:b9:05: 6f:39:7f:51:5b:31:a1:a2:bc:f4:7c:c0:17:0c:b5: 7d:13:d5:b8:57:9d:21:68:a6:ff:ce:f3:79:5d:e1: e4:ea:04:91:e8:32:2e:a3:bc:04:ca:6b:3a:37:74: 72:60:36:75:2f:8c:57:49:db:c2:a0:27:e5:d1:72: 92:cd:ba:ef:8d:25:24:9a:fc:54:11:c5:2d:ee:95: 76:42:c7:97:b2:fc:b0:cd:36:f3:07:42:3e:df:c8: 9b:0c:49:56:c1:ce:19:79:c6:7e:81:7f:59:dc:21: da:98:13:e7:a5:4d:6a:8f:f4:de:9b:a7:e5:70:a6: 37:2e:6c:2b:08:51:42:7c:66:8b:8d:d2:c5:e1:dd: cb:aa:db:af:4e:ab:94:59:3a:9f:f9:dc:47:71:90: 6d:c3:d2:36:df:6f:cb:c5:8f:d1:1c:a9:26:31:43: f8:77:90:69:d9:2a:9f:a1:ed:15:e8:ff:5f:e1:e8: 58:c5:9f:bc:85:70:c8:8e:ba:b1:36:98:33:c8:79: fd:86:f2:35:bd:7c:ba:dc:ab:50:bd:b1:4f:51:1d: 6d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:FE:B1:71:AA:57:CB:08:49:72:19:8B:9B:F4:27:09:6B:BE:B7:EA X509v3 Authority Key Identifier: keyid:AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:5d:2a:56:8e:7c:94:2f:de:27:42:ec:68:32:8f:92:40:3d: ed:0c:5f:0c:48:4d:b6:a5:5a:d2:9b:ce:05:26:e5:af:a6:93: cb:db:62:85:76:08:6b:74:bd:57:7e:59:a3:92:f3:b4:e3:27: cf:27:c6:74:c2:48:15:61:ec:c2:cd:c4:40:cb:01:87:86:bf: 67:e3:fe:30:9b:69:8f:5a:b4:89:8a:11:e5:96:1c:7b:ad:cf: df:83:8b:aa:d8:0e:4e:15:6f:5c:79:9d:e5:6c:2a:9d:22:29: 72:78:ea:05:85:6c:1d:38:d7:8b:de:6b:c2:e1:ff:87:f9:70: 57:09:00:e5:98:e6:15:94:bd:0f:ee:d6:79:63:d3:8a:f8:82: 2f:d0:0e:5b:84:54:2b:39:f1:26:69:fc:2c:3b:5b:f0:87:93: c9:eb:ac:b7:2d:23:ae:52:fd:0a:ce:22:a0:5b:33:16:30:c4: c1:11:6f:33:51:11:60:89:af:39:69:32:5c:2d:a0:b9:0a:36: 42:de:a9:66:c4:eb:6c:9e:14:0b:10:d3:95:3f:90:ff:e8:2e: 88:f9:03:aa:1c:00:a8:98:87:6f:f9:5f:dc:8a:19:01:ae:3c: f4:9c:0d:87:43:3f:9e:2e:bd:e3:0b:bd:73:29:63:13:a7:a0: 82:a4:fb:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSmCjah5H8JlL8CvTHt5NqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYmFkM2RlODMxZGE5NDIyMmMxYWRkMTA0Y2FmNGMzMjQ3 Njg5YWMwHhcNMjUxMjI0MjMwMTAyWhcNMjUxMjI1MjMwMTAyWjAzMTEwLwYDVQQD EyhkZmZlYjE3MWFhNTdjYjA4NDk3MjE5OGI5YmY0MjcwOTZiYmViN2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEDYiJQzQf9GmuGu9P2gdu0G5LfS jV2ytdbiVAstnvrdkdDbjjLbWExBuQVvOX9RWzGhorz0fMAXDLV9E9W4V50haKb/ zvN5XeHk6gSR6DIuo7wEyms6N3RyYDZ1L4xXSdvCoCfl0XKSzbrvjSUkmvxUEcUt 7pV2QseXsvywzTbzB0I+38ibDElWwc4ZecZ+gX9Z3CHamBPnpU1qj/Tem6flcKY3 LmwrCFFCfGaLjdLF4d3LqtuvTquUWTqf+dxHcZBtw9I232/LxY/RHKkmMUP4d5Bp 2Sqfoe0V6P9f4ehYxZ+8hXDIjrqxNpgzyHn9hvI1vXy63KtQvbFPUR1tuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/+sXGqV8sISXIZi5v0JwlrvrfqMB8GA1UdIwQY MBaAFKu6096DHalCIsGt0QTK9MMkdomsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTdyVDNvTWRxVUlpd2EzUkJNcjB3eVIyaWF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZTgxNDktZDUzYy00OTkyLWJkMDct NTVjNDM0ZWVjOTZjLzEvcTdyVDNvTWRxVUlpd2EzUkJNcjB3eVIyaWF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZTgxNDktZDUzYy00OTkyLWJkMDctNTVjNDM0ZWVjOTZj LzEvcTdyVDNvTWRxVUlpd2EzUkJNcjB3eVIyaWF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr10qVo58 lC/eJ0LsaDKPkkA97QxfDEhNtqVa0pvOBSblr6aTy9tihXYIa3S9V35Zo5LztOMn zyfGdMJIFWHsws3EQMsBh4a/Z+P+MJtpj1q0iYoR5ZYce63P34OLqtgOThVvXHmd 5WwqnSIpcnjqBYVsHTjXi95rwuH/h/lwVwkA5ZjmFZS9D+7WeWPTiviCL9AOW4RU KznxJmn8LDtb8IeTyeusty0jrlL9Cs4ioFszFjDEwRFvM1ERYImvOWkyXC2guQo2 Qt6pZsTrbJ4UCxDTlT+Q/+guiPkDqhwAqJiHb/lf3IoZAa489JwNh0M/ni694wu9 cyljE6eggqT7EA== -----END CERTIFICATE-----Generated at Thu Dec 25 02:41:23 2025 by rpki-client