This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft File: q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft (raw, json) Hash identifier: FX650S1Ybc1raMLToXvGmbXHju6eE+O5ys1JB889Ghw= Subject key identifier: 99:29:ED:77:A3:E9:4C:C2:40:5C:B2:11:13:33:16:A7:7F:61:97:D2 Authority key identifier: AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18 Certificate issuer: /CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918 Certificate serial: 019B6C205A11D037460EC17A07E6727C0524 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft Manifest number: 17AA Signing time: Mon 29 Dec 2025 22:00:17 +0000 Manifest this update: Mon 29 Dec 2025 22:00:17 +0000 Manifest next update: Tue 30 Dec 2025 22:00:17 +0000 Files and hashes: 1: EV5m5XkVlwJiCAVuE-Ap-f7iyzE.roa (hash: 5PDn99juoAn/xETBDuvN6m9sq91U6NavWyjHbCXKOeQ=) 2: FAhtWfmDEr62tA8-MdL4s1_WH2Q.roa (hash: GtQmguJ7Q5PK416zswB+RN8W/nrjymWunr8cc+Q6G9I=) 3: q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl (hash: LkT9VV4w91IscuQjT7cTtkY8pnwjIgYWbAoGA2QqpsQ=) 4: q_qPSgEpylFC-voOECXeWUWdHJM.roa (hash: jFOGBq/GXOLKGj5Jj8L6FPHFg+Kwe4gyyf67qENLLPY=) 5: tS4qFuiX3ntHvDjVyJpnqQIgubM.roa (hash: N7idUn1lSpqbvStbcsN5u6MjxI9pbc7GDDAuvP2mI1U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 22:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:20:5a:11:d0:37:46:0e:c1:7a:07:e6:72:7c:05:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918 Validity Not Before: Dec 29 22:00:17 2025 GMT Not After : Dec 30 22:00:17 2025 GMT Subject: CN=9929ed77a3e94cc2405cb211133316a77f6197d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:00:2f:e5:34:3d:f3:13:fa:d2:79:64:2a:70: 53:ad:c5:e4:5e:3b:1c:44:fd:c4:cf:8f:83:b1:d0: 16:9a:52:94:2b:a9:18:ea:0a:da:f2:96:b6:a8:81: 65:45:2a:b0:45:cf:98:12:cd:2f:41:ef:4b:d2:bc: de:cd:58:c8:b7:99:38:1e:03:46:82:5a:3f:c6:f6: 32:96:db:9f:04:d5:e0:4e:ed:e0:dc:c6:a1:11:95: d6:b7:af:60:3c:d5:20:1d:83:aa:d5:29:e4:8c:39: 91:9f:7d:ba:cd:a6:8a:c8:df:69:13:3e:87:2f:c7: d4:ca:14:df:5a:45:49:df:02:04:99:08:b0:c4:de: cc:a6:96:0e:9e:52:09:43:46:aa:0b:13:74:8e:d3: 91:0a:54:50:75:68:97:4e:db:a9:ad:d4:05:76:a9: 78:1d:53:ad:0b:e7:a2:4f:e5:00:55:bf:00:ef:af: a1:14:95:0a:70:59:33:cc:6e:c6:fc:a6:9a:6a:62: 23:90:3d:e7:6f:97:dc:aa:1e:1e:01:4e:ce:46:84: e8:51:1e:65:c5:0f:11:33:d3:ed:7d:af:fd:29:e5: 61:53:17:8e:8d:14:5e:ff:7c:65:89:cb:0b:71:0d: 99:9f:38:86:7e:29:c4:27:2a:e8:e3:44:80:52:8f: d6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:29:ED:77:A3:E9:4C:C2:40:5C:B2:11:13:33:16:A7:7F:61:97:D2 X509v3 Authority Key Identifier: keyid:AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:e8:c0:fd:97:c8:4b:cc:22:ab:63:38:b4:b3:7f:f6:10:3a: df:51:c5:b3:b5:f8:96:f8:4b:48:ac:ea:14:b4:b0:88:c8:5d: 39:57:bf:7f:83:14:d1:6c:e3:86:b8:83:2c:c8:65:0d:33:7b: aa:25:e9:3b:19:1b:d1:c0:15:12:72:a2:e4:73:03:41:e2:98: 21:48:d2:7c:dd:68:9e:33:48:fb:a1:ee:38:dd:e6:19:c3:01: af:d5:00:21:42:1e:24:5d:5e:64:c7:de:9f:95:c4:2a:7a:8d: 3a:24:a5:e3:71:9a:14:7c:f0:1f:16:02:a7:22:0b:44:f5:39: a5:91:3d:da:93:d6:5d:93:7a:af:f5:91:b4:27:aa:e3:f3:85: a5:15:ef:6a:96:b2:cc:1f:dd:46:04:fe:8b:a9:79:d6:1c:32: 69:f7:df:8e:89:41:0b:3d:17:44:69:26:c6:41:41:79:cb:a1: 66:4e:f4:85:52:dc:3e:ba:6f:61:bc:7b:fc:4d:0c:6e:8e:75: fa:42:f8:32:f9:05:c6:8a:ca:3f:0d:11:5f:c8:e1:bb:4a:bf: c8:e9:ec:86:9c:27:d0:51:e2:ed:8a:2c:8e:a4:79:30:b0:f1: 78:24:e2:67:48:cd:20:c7:a6:38:dc:88:ff:74:86:e4:1e:d8: d6:78:3e:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsIFoR0DdGDsF6B+ZyfAUkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiNGYwMGY1YzNhYjNkZjRjNjc0YTQxMGQ4YTBmMDE4MmZi NWU5MTgwHhcNMjUxMjI5MjIwMDE3WhcNMjUxMjMwMjIwMDE3WjAzMTEwLwYDVQQD Eyg5OTI5ZWQ3N2EzZTk0Y2MyNDA1Y2IyMTExMzMzMTZhNzdmNjE5N2QyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gAv5TQ98xP60nlkKnBTrcXkXjsc RP3Ez4+DsdAWmlKUK6kY6gra8pa2qIFlRSqwRc+YEs0vQe9L0rzezVjIt5k4HgNG glo/xvYyltufBNXgTu3g3MahEZXWt69gPNUgHYOq1SnkjDmRn326zaaKyN9pEz6H L8fUyhTfWkVJ3wIEmQiwxN7MppYOnlIJQ0aqCxN0jtORClRQdWiXTtuprdQFdql4 HVOtC+eiT+UAVb8A76+hFJUKcFkzzG7G/KaaamIjkD3nb5fcqh4eAU7ORoToUR5l xQ8RM9Ptfa/9KeVhUxeOjRRe/3xlicsLcQ2ZnziGfinEJyro40SAUo/W/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJkp7Xej6UzCQFyyERMzFqd/YZfSMB8GA1UdIwQY MBaAFKtPAPXDqz30xnSkENig8BgvtekYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTA4QTljT3JQZlRHZEtRUTJLRHdHQy0xNlJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hMWYyMTItYmEzNS00NjZiLWI1MmUt Mzg1M2QzNDBjOWE2LzEvcTA4QTljT3JQZlRHZEtRUTJLRHdHQy0xNlJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9hMWYyMTItYmEzNS00NjZiLWI1MmUtMzg1M2QzNDBjOWE2 LzEvcTA4QTljT3JQZlRHZEtRUTJLRHdHQy0xNlJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuejA/ZfI S8wiq2M4tLN/9hA631HFs7X4lvhLSKzqFLSwiMhdOVe/f4MU0WzjhriDLMhlDTN7 qiXpOxkb0cAVEnKi5HMDQeKYIUjSfN1onjNI+6HuON3mGcMBr9UAIUIeJF1eZMfe n5XEKnqNOiSl43GaFHzwHxYCpyILRPU5pZE92pPWXZN6r/WRtCeq4/OFpRXvapay zB/dRgT+i6l51hwyafffjolBCz0XRGkmxkFBecuhZk70hVLcPrpvYbx7/E0Mbo51 +kL4MvkFxorKPw0RX8jhu0q/yOnshpwn0FHi7YosjqR5MLDxeCTiZ0jNIMemONyI /3SG5B7Y1ng+kg== -----END CERTIFICATE-----Generated at Tue Dec 30 04:34:05 2025 by rpki-client