This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft File: q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft (raw, json) Hash identifier: HlfVWydP608wBpaByEO1x9YBdNbsJOCkbsSiE0oQhJ8= Subject key identifier: 9D:20:24:54:39:FF:4F:5D:B7:1A:BA:0A:6C:43:64:B5:00:DF:40:69 Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d Certificate serial: 019B522A9E4D29B0400123C928FED15FBF7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft Manifest number: 17F6 Signing time: Wed 24 Dec 2025 21:01:23 +0000 Manifest this update: Wed 24 Dec 2025 21:01:23 +0000 Manifest next update: Thu 25 Dec 2025 21:01:23 +0000 Files and hashes: 1: axmcs0YwsBBvp13WSQvabhXKgO8.roa (hash: APz6BdxBlveXPEBlyV0DL9bK8BYpnxs2Kict8QvSCMo=) 2: q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl (hash: NjjcJoyiqrZogBeM+p7mogm4eMXRb1VLaQPSXwCJ7vo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:2a:9e:4d:29:b0:40:01:23:c9:28:fe:d1:5f:bf:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d Validity Not Before: Dec 24 21:01:23 2025 GMT Not After : Dec 25 21:01:23 2025 GMT Subject: CN=9d20245439ff4f5db71aba0a6c4364b500df4069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5d:5f:dd:61:cd:08:d5:20:4e:80:38:50:dd: 68:8f:c4:6f:19:2e:bf:8c:9f:29:a1:64:13:bc:8a: 32:f6:c4:37:bb:ab:b6:c7:7b:48:de:34:13:fe:5a: 1e:b2:89:8e:6f:26:12:f9:d0:ea:d7:b4:a4:dd:bb: 53:e9:74:54:c7:3e:a2:8f:95:2a:a1:8c:9f:21:42: 75:50:a7:4a:de:0c:46:86:9a:f4:c0:8a:32:90:68: 4c:9f:4b:c5:cc:19:0c:2d:40:a5:2c:e5:12:db:a1: 7c:4c:d4:4e:da:1f:ba:c5:af:42:a7:78:87:bc:c4: 3e:18:59:83:ce:6c:6b:d5:07:06:c8:bd:f4:72:4c: d0:12:60:0c:69:41:74:0b:18:d2:2c:2b:53:e1:04: 10:1c:dc:c8:73:d8:ba:25:d3:c2:13:d6:e4:9c:40: cf:89:4f:ee:71:e2:04:a9:ed:e5:89:12:5e:1b:e3: a7:4f:f3:f2:bb:02:95:7e:db:a5:69:2f:a4:0a:82: 5d:e3:72:81:52:49:c0:31:a5:1b:65:93:36:14:19: 8b:85:c0:c4:1f:3f:cf:d4:54:c9:01:d6:93:d1:95: 6c:a3:44:3b:b9:4b:f7:0d:ed:b9:d5:4c:db:ef:e7: a9:9e:a6:36:65:65:70:2f:1a:ab:54:1b:4c:21:c8: ef:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:20:24:54:39:FF:4F:5D:B7:1A:BA:0A:6C:43:64:B5:00:DF:40:69 X509v3 Authority Key Identifier: keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:ae:3a:ff:c2:d7:61:b9:06:1c:18:94:e4:f2:aa:4b:6d:83: 6b:e4:c7:b6:54:78:e8:cb:3a:77:f6:46:df:75:9d:e3:4e:f6: d1:95:c4:08:7b:24:72:8c:ca:5e:8e:b8:a5:cb:ea:e3:7b:52: e6:70:17:cd:d6:fc:42:ec:c0:7b:67:83:d2:8a:e8:45:c6:79: c4:03:93:f5:20:0a:b9:3c:eb:cb:2e:46:23:0f:c5:84:5a:68: 96:17:c4:cb:1a:3a:ae:ff:b5:2a:0f:22:91:cb:6b:cd:81:1a: 4a:a7:15:ba:c2:4f:e9:13:ad:f0:b0:49:d3:91:35:7d:59:6c: c6:b2:e0:75:e7:9e:45:91:f3:73:c8:3c:34:6d:53:02:e5:f7: 24:dd:40:8d:fc:37:c3:08:78:41:fa:84:1d:6e:99:68:f9:95: 11:12:b2:6e:98:0e:bc:a8:fd:6c:6c:e9:54:21:2e:06:79:30: a0:b1:ac:6e:ab:d7:7d:57:33:5b:70:87:c6:dd:86:82:2f:a8: 8c:72:7a:bd:10:fc:63:88:5a:02:23:2e:e4:ac:af:a8:3e:20: 70:54:39:37:8a:dc:45:17:f7:18:a1:42:7f:df:4c:c5:3c:82: 77:75:ad:95:df:63:73:d0:52:ea:71:b9:b9:a1:5a:62:1b:b6: 7b:a0:e9:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSKp5NKbBAASPJKP7RX79/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiNzFlOWIxM2Y1YzMzOWE1ODY5MmVlYWJlNzJlYWE0MDZi YmJkN2QwHhcNMjUxMjI0MjEwMTIzWhcNMjUxMjI1MjEwMTIzWjAzMTEwLwYDVQQD Eyg5ZDIwMjQ1NDM5ZmY0ZjVkYjcxYWJhMGE2YzQzNjRiNTAwZGY0MDY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoF1f3WHNCNUgToA4UN1oj8RvGS6/ jJ8poWQTvIoy9sQ3u6u2x3tI3jQT/loesomObyYS+dDq17Sk3btT6XRUxz6ij5Uq oYyfIUJ1UKdK3gxGhpr0wIoykGhMn0vFzBkMLUClLOUS26F8TNRO2h+6xa9Cp3iH vMQ+GFmDzmxr1QcGyL30ckzQEmAMaUF0CxjSLCtT4QQQHNzIc9i6JdPCE9bknEDP iU/uceIEqe3liRJeG+OnT/PyuwKVftulaS+kCoJd43KBUknAMaUbZZM2FBmLhcDE Hz/P1FTJAdaT0ZVso0Q7uUv3De251Uzb7+epnqY2ZWVwLxqrVBtMIcjv3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ0gJFQ5/09dtxq6CmxDZLUA30BpMB8GA1UdIwQY MBaAFKtx6bE/XDOaWGku6r5y6qQGu719MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTNIcHNUOWNNNXBZYVM3cXZuTHFwQWE3dlgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82YmEzOWMtZWYxZC00ZDQ4LTk4MmIt Y2Y0YjkwMDk5N2EwLzEvcTNIcHNUOWNNNXBZYVM3cXZuTHFwQWE3dlgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82YmEzOWMtZWYxZC00ZDQ4LTk4MmItY2Y0YjkwMDk5N2Ew LzEvcTNIcHNUOWNNNXBZYVM3cXZuTHFwQWE3dlgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOa46/8LX YbkGHBiU5PKqS22Da+THtlR46Ms6d/ZG33Wd40720ZXECHskcozKXo64pcvq43tS 5nAXzdb8QuzAe2eD0oroRcZ5xAOT9SAKuTzryy5GIw/FhFpolhfEyxo6rv+1Kg8i kctrzYEaSqcVusJP6ROt8LBJ05E1fVlsxrLgdeeeRZHzc8g8NG1TAuX3JN1Ajfw3 wwh4QfqEHW6ZaPmVERKybpgOvKj9bGzpVCEuBnkwoLGsbqvXfVczW3CHxt2Ggi+o jHJ6vRD8Y4haAiMu5KyvqD4gcFQ5N4rcRRf3GKFCf99MxTyCd3Wtld9jc9BS6nG5 uaFaYhu2e6DpgQ== -----END CERTIFICATE-----Generated at Thu Dec 25 02:44:15 2025 by rpki-client