This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft File: q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft (raw, json) Hash identifier: F4SAADid0imy+7IK9uDLsyEOANSZnow/Rk9jeA9fT6o= Subject key identifier: 79:83:3D:78:C7:C3:2C:51:D9:3C:E0:2B:57:03:36:76:24:74:3C:73 Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d Certificate serial: 019B4A717C6AAAA32D3BF70D9409B18F978F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft Manifest number: 17F2 Signing time: Tue 23 Dec 2025 09:01:49 +0000 Manifest this update: Tue 23 Dec 2025 09:01:49 +0000 Manifest next update: Wed 24 Dec 2025 09:01:49 +0000 Files and hashes: 1: axmcs0YwsBBvp13WSQvabhXKgO8.roa (hash: APz6BdxBlveXPEBlyV0DL9bK8BYpnxs2Kict8QvSCMo=) 2: q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl (hash: K+Dp9tBBeOazljQBrhPu66r7WS3sSQtyjkzxLcMSB3g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:71:7c:6a:aa:a3:2d:3b:f7:0d:94:09:b1:8f:97:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d Validity Not Before: Dec 23 09:01:49 2025 GMT Not After : Dec 24 09:01:49 2025 GMT Subject: CN=79833d78c7c32c51d93ce02b5703367624743c73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e2:ca:d4:38:f3:76:54:4d:23:96:15:5b:6e: 94:c8:7f:9e:c1:62:95:88:eb:43:80:a0:5e:cd:9e: ee:45:9a:dd:c9:bc:ce:8f:59:f9:cf:b2:ad:78:11: a4:f3:7d:a4:cf:f4:f7:e6:15:db:fc:11:1d:08:14: a3:52:78:ad:e0:dc:5e:72:a3:58:90:b0:87:7c:83: 2a:bc:1b:5f:38:bd:32:9c:f8:5d:60:3e:38:a8:06: c0:ac:a1:60:4d:dd:a4:da:b1:d7:0f:e5:20:59:63: 0e:3c:40:41:02:3e:98:f9:ba:3e:03:28:cb:af:94: 61:81:59:92:97:a7:d0:cb:a7:40:6f:c5:17:f5:e3: eb:75:f7:08:e4:be:0d:b6:ba:29:3e:ad:fb:24:21: bb:43:34:01:37:d2:0d:5b:e0:a6:7d:64:59:a1:c7: d3:c3:1c:ce:b2:59:93:d0:d4:69:44:a7:35:4b:81: cf:5c:43:ca:30:00:b7:da:ea:a3:75:a4:84:c9:e3: 44:ad:98:90:7f:d4:d3:dc:bc:14:38:c1:a9:44:16: 9a:e6:cf:ac:71:0c:58:19:9d:ee:6a:33:89:ef:a8: d9:0f:57:96:e7:49:90:3d:ae:4d:82:f2:4a:53:c7: b9:9e:86:45:65:58:5b:2b:cb:28:f5:c5:fc:9e:58: f7:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:83:3D:78:C7:C3:2C:51:D9:3C:E0:2B:57:03:36:76:24:74:3C:73 X509v3 Authority Key Identifier: keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:bb:df:f1:9b:63:81:b6:93:1f:08:f0:0c:85:6e:69:6d:9e: e7:59:93:e6:41:6e:67:31:2d:2c:bd:8c:0e:13:0d:5f:76:5c: c4:4f:c0:97:ea:93:f8:bb:b0:e8:34:77:a5:32:bd:86:54:93: ee:ea:f0:db:40:d8:1d:30:92:a7:69:54:08:ab:e6:56:52:76: f2:00:c9:60:2f:9f:fb:e0:bc:c7:53:98:dc:8c:2c:5a:0b:cb: a5:c1:93:2f:3e:58:f9:88:eb:82:b8:3e:4e:72:cf:25:f8:32: d7:93:ab:48:cb:a8:fe:df:bf:d3:bb:13:6d:96:82:44:88:ad: 36:54:63:d1:0a:17:7f:8c:36:3e:c6:8f:1f:ef:a0:1c:f1:a8: c3:55:69:ec:8c:ce:45:8f:04:88:6f:54:d1:6b:64:c8:b5:85: 0e:30:90:56:9c:af:a4:01:1d:22:e6:ef:a7:42:f8:38:07:ad: 96:ff:57:94:8c:94:80:4c:07:84:56:6e:f5:9b:f1:22:aa:2c: 13:72:f2:32:5d:da:a1:47:1f:e6:5c:d3:12:59:78:40:bf:9e: 84:4c:1f:c0:50:e0:71:7f:97:f4:55:5b:64:5a:75:19:a3:30: 47:f4:1b:72:c1:ee:f0:68:4a:71:f4:19:cf:10:fe:37:da:e2: 7e:3e:0e:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKcXxqqqMtO/cNlAmxj5ePMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiNzFlOWIxM2Y1YzMzOWE1ODY5MmVlYWJlNzJlYWE0MDZi YmJkN2QwHhcNMjUxMjIzMDkwMTQ5WhcNMjUxMjI0MDkwMTQ5WjAzMTEwLwYDVQQD Eyg3OTgzM2Q3OGM3YzMyYzUxZDkzY2UwMmI1NzAzMzY3NjI0NzQzYzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2eLK1DjzdlRNI5YVW26UyH+ewWKV iOtDgKBezZ7uRZrdybzOj1n5z7KteBGk832kz/T35hXb/BEdCBSjUnit4NxecqNY kLCHfIMqvBtfOL0ynPhdYD44qAbArKFgTd2k2rHXD+UgWWMOPEBBAj6Y+bo+AyjL r5RhgVmSl6fQy6dAb8UX9ePrdfcI5L4NtropPq37JCG7QzQBN9INW+CmfWRZocfT wxzOslmT0NRpRKc1S4HPXEPKMAC32uqjdaSEyeNErZiQf9TT3LwUOMGpRBaa5s+s cQxYGZ3uajOJ76jZD1eW50mQPa5NgvJKU8e5noZFZVhbK8so9cX8nlj3NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHmDPXjHwyxR2TzgK1cDNnYkdDxzMB8GA1UdIwQY MBaAFKtx6bE/XDOaWGku6r5y6qQGu719MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTNIcHNUOWNNNXBZYVM3cXZuTHFwQWE3dlgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82YmEzOWMtZWYxZC00ZDQ4LTk4MmIt Y2Y0YjkwMDk5N2EwLzEvcTNIcHNUOWNNNXBZYVM3cXZuTHFwQWE3dlgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82YmEzOWMtZWYxZC00ZDQ4LTk4MmItY2Y0YjkwMDk5N2Ew LzEvcTNIcHNUOWNNNXBZYVM3cXZuTHFwQWE3dlgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAALvf8Ztj gbaTHwjwDIVuaW2e51mT5kFuZzEtLL2MDhMNX3ZcxE/Al+qT+Luw6DR3pTK9hlST 7urw20DYHTCSp2lUCKvmVlJ28gDJYC+f++C8x1OY3IwsWgvLpcGTLz5Y+Yjrgrg+ TnLPJfgy15OrSMuo/t+/07sTbZaCRIitNlRj0QoXf4w2PsaPH++gHPGow1Vp7IzO RY8EiG9U0WtkyLWFDjCQVpyvpAEdIubvp0L4OAetlv9XlIyUgEwHhFZu9ZvxIqos E3LyMl3aoUcf5lzTEll4QL+ehEwfwFDgcX+X9FVbZFp1GaMwR/QbcsHu8GhKcfQZ zxD+N9rifj4OoA== -----END CERTIFICATE-----Generated at Tue Dec 23 17:16:44 2025 by rpki-client