This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft File: q9h7vvWUNUayqD0x7CuZrYg9Udc.mft (raw, json) Hash identifier: YjXcugJhy3twQeB0NCDdBSYrlltsV4ofiSOsE4ALcxM= Subject key identifier: 7C:61:6B:67:DC:3F:18:F7:32:CE:E4:E4:28:F4:FB:E2:73:09:DD:0D Authority key identifier: AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7 Certificate issuer: /CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7 Certificate serial: 019B3E6DD272712E77C6610A1B752E312211 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft Manifest number: 0CF1 Signing time: Sun 21 Dec 2025 01:02:23 +0000 Manifest this update: Sun 21 Dec 2025 01:02:23 +0000 Manifest next update: Mon 22 Dec 2025 01:02:23 +0000 Files and hashes: 1: 7d46OTwbNs5KuUyqdxKYkS8NBJI.roa (hash: 4Rn+6tq432h7x4Ge16LfuM8y8RGTaZzgBXirAxsJ5MM=) 2: W2NhW2V8Iexgd4nWoDLptnalys8.roa (hash: qN2oaoKEpYxm1heQ0tQCx/vfqwegOgZk4tzwgcNVmWg=) 3: XB2P8pqeFQE5V_wiPLEy8Uw8TL4.roa (hash: eEOspJ3pbx3Bzx3yuT7YUHqNvJo2s+nrBm58kVOY9b8=) 4: e70_76D8VUKzyOllsP-C6ko3aJ4.roa (hash: YSc6a0NAXpNIVXvLTAs9uQ9JjUM2SpjCK+qzw0/wRpY=) 5: q9h7vvWUNUayqD0x7CuZrYg9Udc.crl (hash: VUZJ44hN19qDtiwyw2ERTGtG1acMFo5NsNFwqJ0RshQ=) 6: r9AECsFfSl2im_ZX-xTBrlxOfD8.roa (hash: ULicRE/3nxP/zcRYRZJBN8ZiMjtTPhQz8NjZ7TncWXU=) 7: tsLbqC6GleedJxC9I3GCKnE32tM.roa (hash: q8OgS2zQAxO3r6wIDM4lb25MYLPFfkq3kdggEkr0ENk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:d2:72:71:2e:77:c6:61:0a:1b:75:2e:31:22:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7 Validity Not Before: Dec 21 01:02:23 2025 GMT Not After : Dec 22 01:02:23 2025 GMT Subject: CN=7c616b67dc3f18f732cee4e428f4fbe27309dd0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:af:ac:b6:aa:8f:03:c9:15:86:6b:5d:bb:5d: d6:d5:ea:0a:59:fa:bf:70:03:ac:10:fa:3d:b4:cb: ab:b0:6e:1a:06:95:8f:a6:f5:36:34:bd:91:c2:ed: 2d:83:05:0f:f6:fd:93:59:8f:84:a1:68:95:6e:19: 1a:4d:9a:43:41:ca:5b:f7:51:4c:95:d7:63:96:3f: d9:d6:7c:a2:b2:43:df:45:fc:42:03:23:c2:f1:b7: 52:77:68:a0:20:51:9e:2c:a9:c7:85:87:37:b6:14: d2:5f:50:89:b3:df:ab:12:2a:5a:7f:a3:4e:25:6e: 21:1e:32:d9:b8:34:e5:55:cc:60:27:4b:12:99:83: 1f:9c:88:d5:a4:8f:3b:d0:b4:e8:55:21:17:cf:3f: 11:f7:46:74:e7:7d:5d:fd:dc:3d:9b:e6:0f:c2:9b: 59:0c:50:ae:23:df:4c:39:74:49:8e:33:f1:70:71: e2:4d:9d:af:88:2b:c2:81:67:d5:7b:c1:63:30:d8: 1a:dd:a0:0f:5a:50:d4:e2:07:af:ce:ca:f7:25:11: e6:31:c5:df:69:8c:26:d6:b7:6b:2b:07:ae:a7:63: 85:05:05:4d:99:38:20:34:64:d3:d8:f3:85:03:47: 21:91:ac:9e:44:38:31:25:e4:07:2e:c7:93:76:4d: 2c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:61:6B:67:DC:3F:18:F7:32:CE:E4:E4:28:F4:FB:E2:73:09:DD:0D X509v3 Authority Key Identifier: keyid:AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:2c:78:35:62:1c:5b:99:cc:dd:5d:a9:12:50:c4:26:42:fc: ab:04:9c:67:2b:a0:2a:75:8e:56:11:d4:18:5b:6d:9c:e2:88: 7c:b3:f1:09:99:25:7d:23:34:3f:c9:6a:67:85:cb:3b:92:2b: 26:42:a0:84:25:60:61:ec:a3:cc:07:25:aa:9c:9d:62:90:e2: 59:0a:1b:ec:51:4e:a2:72:42:9f:0a:de:d4:e9:34:30:b8:27: 3d:dd:bc:d2:00:75:db:c1:a0:1e:a9:ed:b8:d5:ff:a9:23:d2: 10:c2:3d:a3:70:eb:52:e7:4b:26:26:4b:32:87:cc:e5:4e:10: c4:d9:83:01:5e:99:a7:ea:f1:b6:df:f7:4e:90:37:cd:d5:aa: e2:89:67:d0:93:8c:4d:5a:46:a5:96:1e:ea:a3:8b:3f:1e:60: eb:8e:80:38:9f:21:24:a2:08:29:9a:92:7f:08:92:5a:aa:54: e3:12:03:bb:f4:23:b6:d6:55:ff:bb:3c:cf:34:79:47:35:de: b6:88:a5:1e:fc:e7:39:60:f5:bd:01:6e:ca:3e:8d:64:dc:a3: 7f:4b:df:f7:2c:49:3f:03:da:45:e5:43:2a:e7:62:cb:4b:d2: 82:a4:72:03:1f:9f:50:29:17:ea:6a:8e:21:94:b9:f7:ba:d0: 97:6d:2c:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bdJycS53xmEKG3UuMSIRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiZDg3YmJlZjU5NDM1NDZiMmE4M2QzMWVjMmI5OWFkODgz ZDUxZDcwHhcNMjUxMjIxMDEwMjIzWhcNMjUxMjIyMDEwMjIzWjAzMTEwLwYDVQQD Eyg3YzYxNmI2N2RjM2YxOGY3MzJjZWU0ZTQyOGY0ZmJlMjczMDlkZDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAta+stqqPA8kVhmtdu13W1eoKWfq/ cAOsEPo9tMursG4aBpWPpvU2NL2Rwu0tgwUP9v2TWY+EoWiVbhkaTZpDQcpb91FM lddjlj/Z1nyiskPfRfxCAyPC8bdSd2igIFGeLKnHhYc3thTSX1CJs9+rEipaf6NO JW4hHjLZuDTlVcxgJ0sSmYMfnIjVpI870LToVSEXzz8R90Z0531d/dw9m+YPwptZ DFCuI99MOXRJjjPxcHHiTZ2viCvCgWfVe8FjMNga3aAPWlDU4gevzsr3JRHmMcXf aYwm1rdrKweup2OFBQVNmTggNGTT2POFA0chkayeRDgxJeQHLseTdk0snwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHxha2fcPxj3Ms7k5Cj0++JzCd0NMB8GA1UdIwQY MBaAFKvYe771lDVGsqg9Mewrma2IPVHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTloN3Z2V1VOVWF5cUQweDdDdVpyWWc5VWRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84YWQyZTAtZTNmMC00YWJlLWJjYjYt MmY1Yzc0YzY5YWUxLzEvcTloN3Z2V1VOVWF5cUQweDdDdVpyWWc5VWRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC84YWQyZTAtZTNmMC00YWJlLWJjYjYtMmY1Yzc0YzY5YWUx LzEvcTloN3Z2V1VOVWF5cUQweDdDdVpyWWc5VWRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEyx4NWIc W5nM3V2pElDEJkL8qwScZyugKnWOVhHUGFttnOKIfLPxCZklfSM0P8lqZ4XLO5Ir JkKghCVgYeyjzAclqpydYpDiWQob7FFOonJCnwre1Ok0MLgnPd280gB128GgHqnt uNX/qSPSEMI9o3DrUudLJiZLMofM5U4QxNmDAV6Zp+rxtt/3TpA3zdWq4oln0JOM TVpGpZYe6qOLPx5g646AOJ8hJKIIKZqSfwiSWqpU4xIDu/QjttZV/7s8zzR5RzXe toilHvznOWD1vQFuyj6NZNyjf0vf9yxJPwPaReVDKudiy0vSgqRyAx+fUCkX6mqO IZS597rQl20seA== -----END CERTIFICATE-----Generated at Sun Dec 21 05:51:18 2025 by rpki-client