This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft File: q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft (raw, json) Hash identifier: nOEHVbHPJ6jJO/pwYOyBF6hVcAl9Ptdgs5vKBa9nX1o= Subject key identifier: F2:62:7C:A8:CB:4E:DD:51:EC:8C:8E:63:A4:86:E0:5B:AB:AE:F1:F8 Authority key identifier: AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18 Certificate issuer: /CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918 Certificate serial: 019B37FC4D9ED8BBFFB52104FBED830BE5AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft Manifest number: 178F Signing time: Fri 19 Dec 2025 19:00:40 +0000 Manifest this update: Fri 19 Dec 2025 19:00:40 +0000 Manifest next update: Sat 20 Dec 2025 19:00:40 +0000 Files and hashes: 1: EV5m5XkVlwJiCAVuE-Ap-f7iyzE.roa (hash: 5PDn99juoAn/xETBDuvN6m9sq91U6NavWyjHbCXKOeQ=) 2: FAhtWfmDEr62tA8-MdL4s1_WH2Q.roa (hash: GtQmguJ7Q5PK416zswB+RN8W/nrjymWunr8cc+Q6G9I=) 3: q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl (hash: ThbRZRpOAxeG09eGtZXw9pfhzVnusJJ1E6ckiowWFiQ=) 4: q_qPSgEpylFC-voOECXeWUWdHJM.roa (hash: jFOGBq/GXOLKGj5Jj8L6FPHFg+Kwe4gyyf67qENLLPY=) 5: tS4qFuiX3ntHvDjVyJpnqQIgubM.roa (hash: N7idUn1lSpqbvStbcsN5u6MjxI9pbc7GDDAuvP2mI1U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 19:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:4d:9e:d8:bb:ff:b5:21:04:fb:ed:83:0b:e5:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918 Validity Not Before: Dec 19 19:00:40 2025 GMT Not After : Dec 20 19:00:40 2025 GMT Subject: CN=f2627ca8cb4edd51ec8c8e63a486e05babaef1f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:57:d6:44:91:a8:55:06:6a:57:a8:f5:16:c9: 32:be:30:48:b2:e8:5c:36:e4:63:cd:ae:5a:fe:1d: 31:19:ed:d1:fe:24:00:00:6c:8b:6c:86:01:b0:f1: ba:7e:cb:2e:ae:cd:d9:fc:3d:0c:2b:3c:3a:82:74: 67:ed:36:a5:14:9b:e2:39:28:01:4b:95:95:7a:80: 6f:e1:7f:4c:a3:a7:cf:9c:bf:e7:04:d8:c7:ef:be: 02:3e:99:24:ed:80:ad:db:00:1f:bc:3f:a2:25:46: 43:fe:26:f1:24:32:d4:05:d2:ae:9f:9b:75:1f:8c: 89:f8:a6:fd:36:4f:4b:f8:6e:7b:f2:64:7a:a9:61: c7:6f:85:a5:32:da:92:66:f4:8e:56:73:89:8f:dc: 49:fa:cd:1f:95:32:6b:90:ef:64:d9:d6:88:13:a0: 26:35:56:53:f0:4f:bb:1d:d3:12:38:39:c4:bc:a4: cf:81:3e:3a:b3:b4:3e:29:d6:c2:b6:8e:01:6e:63: 84:84:02:a9:08:df:68:dc:28:89:50:6a:a9:72:9a: 87:0f:6f:20:7b:c2:0c:df:3b:08:d4:4b:41:58:20: 9b:83:7f:4f:71:3f:5e:c7:33:f0:5b:bf:b4:b2:96: 82:20:4b:a5:12:8d:98:2d:00:ff:94:13:4b:2c:5a: 83:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:62:7C:A8:CB:4E:DD:51:EC:8C:8E:63:A4:86:E0:5B:AB:AE:F1:F8 X509v3 Authority Key Identifier: keyid:AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:b3:7f:2e:23:f7:aa:dc:69:8e:73:fd:d4:a2:74:cb:26:8f: 7b:5d:f1:35:0d:27:39:01:7f:5e:b6:7b:1b:6f:71:44:8c:f3: 58:a7:8d:12:a8:06:04:47:a8:bd:18:ff:43:15:09:90:67:49: 9a:d5:5d:48:50:a6:30:64:f0:fe:76:3a:e8:5f:2a:58:7e:21: a8:87:06:4f:a0:09:f5:ed:a4:9d:56:84:8a:d3:6f:35:68:4b: 8a:d6:c7:f5:e0:5c:ba:e9:78:b9:5a:c9:88:99:30:54:39:14: 55:47:bd:4c:f5:43:e9:34:c9:2f:fb:45:41:e4:73:e5:8b:33: 6c:d6:a4:48:1a:4a:67:56:df:4b:8f:d3:e6:9b:3e:ea:04:e9: 2c:74:7b:e7:eb:37:b4:78:e7:07:ac:3c:f6:e6:45:cb:b3:05: 34:65:7b:de:f6:1f:f7:f1:02:53:01:b4:35:08:9f:9a:e1:22: 61:73:88:8b:55:e2:cb:1e:6a:62:93:9c:ba:14:c8:84:b0:52: c3:31:21:b2:ce:5e:b9:b1:1c:6f:ba:a7:c6:fe:52:88:8a:83: f4:f0:05:60:66:16:4c:53:6e:05:c9:4b:02:46:c3:87:dc:d6: 79:a6:fb:fc:54:de:4f:4d:2e:62:2a:fc:8a:76:d3:80:3c:05: 26:e0:12:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/E2e2Lv/tSEE++2DC+WsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiNGYwMGY1YzNhYjNkZjRjNjc0YTQxMGQ4YTBmMDE4MmZi NWU5MTgwHhcNMjUxMjE5MTkwMDQwWhcNMjUxMjIwMTkwMDQwWjAzMTEwLwYDVQQD EyhmMjYyN2NhOGNiNGVkZDUxZWM4YzhlNjNhNDg2ZTA1YmFiYWVmMWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFfWRJGoVQZqV6j1FskyvjBIsuhc NuRjza5a/h0xGe3R/iQAAGyLbIYBsPG6fssurs3Z/D0MKzw6gnRn7TalFJviOSgB S5WVeoBv4X9Mo6fPnL/nBNjH774CPpkk7YCt2wAfvD+iJUZD/ibxJDLUBdKun5t1 H4yJ+Kb9Nk9L+G578mR6qWHHb4WlMtqSZvSOVnOJj9xJ+s0flTJrkO9k2daIE6Am NVZT8E+7HdMSODnEvKTPgT46s7Q+KdbCto4BbmOEhAKpCN9o3CiJUGqpcpqHD28g e8IM3zsI1EtBWCCbg39PcT9exzPwW7+0spaCIEulEo2YLQD/lBNLLFqDMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPJifKjLTt1R7IyOY6SG4FurrvH4MB8GA1UdIwQY MBaAFKtPAPXDqz30xnSkENig8BgvtekYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTA4QTljT3JQZlRHZEtRUTJLRHdHQy0xNlJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hMWYyMTItYmEzNS00NjZiLWI1MmUt Mzg1M2QzNDBjOWE2LzEvcTA4QTljT3JQZlRHZEtRUTJLRHdHQy0xNlJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9hMWYyMTItYmEzNS00NjZiLWI1MmUtMzg1M2QzNDBjOWE2 LzEvcTA4QTljT3JQZlRHZEtRUTJLRHdHQy0xNlJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb7N/LiP3 qtxpjnP91KJ0yyaPe13xNQ0nOQF/XrZ7G29xRIzzWKeNEqgGBEeovRj/QxUJkGdJ mtVdSFCmMGTw/nY66F8qWH4hqIcGT6AJ9e2knVaEitNvNWhLitbH9eBcuul4uVrJ iJkwVDkUVUe9TPVD6TTJL/tFQeRz5YszbNakSBpKZ1bfS4/T5ps+6gTpLHR75+s3 tHjnB6w89uZFy7MFNGV73vYf9/ECUwG0NQifmuEiYXOIi1Xiyx5qYpOcuhTIhLBS wzEhss5eubEcb7qnxv5SiIqD9PAFYGYWTFNuBclLAkbDh9zWeab7/FTeT00uYir8 inbTgDwFJuASNw== -----END CERTIFICATE-----Generated at Sat Dec 20 04:58:39 2025 by rpki-client