This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft File: q838GnxSDPjRdykgjoXosZfErf8.mft (raw, json) Hash identifier: HNJnRgBntkKVMIa3tMtwF3JnVdlfblohkpKV36skn04= Subject key identifier: EC:6D:34:50:87:5B:E2:98:4A:28:38:3B:2F:86:05:42:B5:10:CB:14 Authority key identifier: AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF Certificate issuer: /CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff Certificate serial: 019B631E33EB7C4F924E9E8AB5C24A23D86D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft Manifest number: 0DCE Signing time: Sun 28 Dec 2025 04:01:22 +0000 Manifest this update: Sun 28 Dec 2025 04:01:22 +0000 Manifest next update: Mon 29 Dec 2025 04:01:22 +0000 Files and hashes: 1: 1HhNu8sG2l0hcVfkxopBJPM0AJA.roa (hash: Qt4OCtipxtwIwXuC2KjZFTe3zgqaRe5IKbtJYrVBUxM=) 2: hJbHpAPOiNkNScuafVbq5FNZ7D4.roa (hash: /FjzkSwns/04Wx3/dyzKMt8M5RMeRjhJm2fdzZxup8w=) 3: q838GnxSDPjRdykgjoXosZfErf8.crl (hash: M1ZfrA9brIzN39ALGWpF0qvP1QIqmi8p/ny2ARUg8NI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1e:33:eb:7c:4f:92:4e:9e:8a:b5:c2:4a:23:d8:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff Validity Not Before: Dec 28 04:01:22 2025 GMT Not After : Dec 29 04:01:22 2025 GMT Subject: CN=ec6d3450875be2984a28383b2f860542b510cb14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4c:d8:26:9a:91:50:4f:e4:8a:d3:6f:cb:3d: 2c:b2:e6:d2:1f:12:e1:1f:8b:82:68:bb:f9:ee:bf: 80:6d:59:2f:a3:cd:71:08:1e:60:d5:f3:17:75:36: 69:52:fb:32:d5:fc:d9:63:ae:a0:6c:9d:08:e0:51: 2f:88:59:a4:1c:30:0d:64:ca:f7:c4:cf:dd:a2:80: b4:b7:70:f2:d8:f4:c1:c8:cb:86:1f:37:00:15:4a: 6e:2f:71:ab:6a:5d:12:b0:aa:07:77:5b:70:39:3e: 71:bb:c9:d1:7c:7b:94:c9:b5:6a:95:5e:f6:18:d3: 05:f9:2c:ec:f6:ac:1d:cb:e6:79:c7:81:b2:fa:02: 07:26:b2:8d:d2:09:1e:fe:14:10:82:e2:d6:41:2a: 34:97:b3:96:9d:99:1e:e9:22:3a:f5:49:49:b3:6f: 7b:dc:b9:37:75:9b:99:fc:6a:7d:99:44:fd:ef:09: 29:d0:5b:77:14:41:25:9c:ad:09:44:0d:c6:34:2e: 4e:6e:9d:39:92:46:19:90:41:e9:95:8f:e5:73:c9: 00:77:8f:1b:5b:a0:10:dd:67:38:4f:a2:c9:af:15: 66:dd:68:ce:95:11:72:25:88:18:3f:ef:c9:f9:c7: 1f:82:96:5a:26:1c:91:b4:5f:19:c8:d2:5b:fd:0a: aa:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:6D:34:50:87:5B:E2:98:4A:28:38:3B:2F:86:05:42:B5:10:CB:14 X509v3 Authority Key Identifier: keyid:AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:b0:d9:ca:04:73:08:d6:45:d7:71:1c:29:82:bf:66:1b:d2: 96:91:49:6f:09:be:7f:14:cc:69:ee:bc:ed:0d:e5:20:cd:c1: 78:16:ff:ba:18:bc:6d:f1:86:b5:b1:48:20:4a:a5:bd:8a:80: 89:3c:4f:be:82:c8:89:74:9d:03:53:48:04:24:92:47:97:68: c1:75:47:21:72:4e:84:62:5f:6a:9e:13:a1:c8:ee:bf:dc:dc: 04:1d:a9:76:b2:4a:7c:b1:5c:fb:37:0d:95:37:2e:99:ea:cc: 26:0b:78:e3:5a:55:40:5f:e6:31:9f:c8:28:48:d2:56:f6:2e: 09:44:2d:d6:87:f1:ae:02:9a:2e:9a:9e:f1:ca:fa:20:38:e1: 7d:1a:f5:17:2b:3b:36:1c:16:42:9c:8f:ec:27:b0:8b:e0:e9: 8f:4c:69:a5:ba:e9:9a:41:c8:09:45:b3:44:23:7c:f4:d9:ee: 84:f8:e2:39:86:4f:8f:a7:47:c1:a0:7e:92:bd:d8:ee:7c:99: 85:c4:75:0e:3e:25:45:d3:67:8f:f5:d0:f3:6e:18:cb:a5:18: 4f:46:ca:d6:31:39:cf:ab:59:b7:28:1f:f9:44:94:76:d2:9e: 23:b5:37:bf:33:6c:eb:f5:0c:99:ce:ce:ac:cb:9c:59:f7:9f: 00:dd:7c:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjHjPrfE+STp6KtcJKI9htMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiY2RmYzFhN2M1MjBjZjhkMTc3MjkyMDhlODVlOGIxOTdj NGFkZmYwHhcNMjUxMjI4MDQwMTIyWhcNMjUxMjI5MDQwMTIyWjAzMTEwLwYDVQQD EyhlYzZkMzQ1MDg3NWJlMjk4NGEyODM4M2IyZjg2MDU0MmI1MTBjYjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkzYJpqRUE/kitNvyz0ssubSHxLh H4uCaLv57r+AbVkvo81xCB5g1fMXdTZpUvsy1fzZY66gbJ0I4FEviFmkHDANZMr3 xM/dooC0t3Dy2PTByMuGHzcAFUpuL3Gral0SsKoHd1twOT5xu8nRfHuUybVqlV72 GNMF+Szs9qwdy+Z5x4Gy+gIHJrKN0gke/hQQguLWQSo0l7OWnZke6SI69UlJs297 3Lk3dZuZ/Gp9mUT97wkp0Ft3FEElnK0JRA3GNC5Obp05kkYZkEHplY/lc8kAd48b W6AQ3Wc4T6LJrxVm3WjOlRFyJYgYP+/J+ccfgpZaJhyRtF8ZyNJb/QqqlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOxtNFCHW+KYSig4Oy+GBUK1EMsUMB8GA1UdIwQY MBaAFKvN/Bp8Ugz40XcpII6F6LGXxK3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTgzOEdueFNEUGpSZHlrZ2pvWG9zWmZFcmY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9lNTEyNGYtMTM2OS00OTAxLTlmNTYt MmJiODJhODM3YjdiLzEvcTgzOEdueFNEUGpSZHlrZ2pvWG9zWmZFcmY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9lNTEyNGYtMTM2OS00OTAxLTlmNTYtMmJiODJhODM3Yjdi LzEvcTgzOEdueFNEUGpSZHlrZ2pvWG9zWmZFcmY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGLDZygRz CNZF13EcKYK/ZhvSlpFJbwm+fxTMae687Q3lIM3BeBb/uhi8bfGGtbFIIEqlvYqA iTxPvoLIiXSdA1NIBCSSR5dowXVHIXJOhGJfap4Tocjuv9zcBB2pdrJKfLFc+zcN lTcumerMJgt441pVQF/mMZ/IKEjSVvYuCUQt1ofxrgKaLpqe8cr6IDjhfRr1Fys7 NhwWQpyP7Cewi+Dpj0xppbrpmkHICUWzRCN89NnuhPjiOYZPj6dHwaB+kr3Y7nyZ hcR1Dj4lRdNnj/XQ824Yy6UYT0bK1jE5z6tZtygf+USUdtKeI7U3vzNs6/UMmc7O rMucWfefAN18bg== -----END CERTIFICATE-----Generated at Sun Dec 28 06:38:19 2025 by rpki-client