This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft File: q9h7vvWUNUayqD0x7CuZrYg9Udc.mft (raw, json) Hash identifier: vY/NWI9zwb0fLXXANbf9g/SgIGmuuCA9UhOvOVg1Dhk= Subject key identifier: 83:6A:28:90:01:DE:F4:A2:8D:E5:8E:7E:EB:10:54:6B:6E:AC:7A:80 Authority key identifier: AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7 Certificate issuer: /CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7 Certificate serial: 019B4A04664920C5D0D2BF2A3226BEA2E1A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft Manifest number: 0CF7 Signing time: Tue 23 Dec 2025 07:02:40 +0000 Manifest this update: Tue 23 Dec 2025 07:02:40 +0000 Manifest next update: Wed 24 Dec 2025 07:02:40 +0000 Files and hashes: 1: 7d46OTwbNs5KuUyqdxKYkS8NBJI.roa (hash: 4Rn+6tq432h7x4Ge16LfuM8y8RGTaZzgBXirAxsJ5MM=) 2: W2NhW2V8Iexgd4nWoDLptnalys8.roa (hash: qN2oaoKEpYxm1heQ0tQCx/vfqwegOgZk4tzwgcNVmWg=) 3: XB2P8pqeFQE5V_wiPLEy8Uw8TL4.roa (hash: eEOspJ3pbx3Bzx3yuT7YUHqNvJo2s+nrBm58kVOY9b8=) 4: e70_76D8VUKzyOllsP-C6ko3aJ4.roa (hash: YSc6a0NAXpNIVXvLTAs9uQ9JjUM2SpjCK+qzw0/wRpY=) 5: q9h7vvWUNUayqD0x7CuZrYg9Udc.crl (hash: L5se+YX/40mUXDkd+A1ThI2UiDfTqk/SRTgIhq250d4=) 6: r9AECsFfSl2im_ZX-xTBrlxOfD8.roa (hash: ULicRE/3nxP/zcRYRZJBN8ZiMjtTPhQz8NjZ7TncWXU=) 7: tsLbqC6GleedJxC9I3GCKnE32tM.roa (hash: q8OgS2zQAxO3r6wIDM4lb25MYLPFfkq3kdggEkr0ENk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:04:66:49:20:c5:d0:d2:bf:2a:32:26:be:a2:e1:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7 Validity Not Before: Dec 23 07:02:40 2025 GMT Not After : Dec 24 07:02:40 2025 GMT Subject: CN=836a289001def4a28de58e7eeb10546b6eac7a80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0b:75:db:8a:d5:5c:f4:29:21:4d:6f:fd:71: 5a:71:73:e1:d7:5c:ba:61:4c:3b:03:c3:a4:4f:9a: 54:c5:b7:1a:23:c0:1b:cc:8c:f5:76:6c:74:fc:1d: de:98:a5:5c:cc:54:d3:2b:db:a7:db:76:37:bd:30: 5d:dc:c8:85:e6:45:f6:33:ce:06:28:e5:1c:9d:51: 91:f5:99:0e:24:d6:05:76:3a:a4:e8:7a:fe:00:a9: 0d:ac:94:d3:1b:0b:57:1f:9c:4e:ff:a7:cc:f9:8f: e8:31:24:d0:f5:4e:e7:af:d6:f0:47:e8:0b:a8:d3: c5:04:b9:9b:6a:e2:cb:5a:73:11:db:68:ee:b9:90: 5b:ca:6e:3a:79:9a:4e:7d:66:e5:7b:d5:32:e4:d3: 4b:d6:d5:c2:5d:e9:3c:62:f1:25:cd:56:53:04:4e: c7:cd:61:c7:4a:fe:08:d2:1a:ba:49:20:02:61:68: 13:9f:03:91:44:50:d2:c0:ae:85:cb:dd:9d:6c:03: 33:46:6e:8a:ac:93:48:7a:2b:eb:fb:db:d7:bc:a5: 0b:72:1a:20:8e:af:01:64:dd:4d:18:23:12:cd:ef: 05:b2:3d:60:47:33:a9:62:67:41:76:35:af:27:9b: 91:05:ab:e6:46:7f:4e:8e:3b:7f:39:70:ee:98:9e: 11:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:6A:28:90:01:DE:F4:A2:8D:E5:8E:7E:EB:10:54:6B:6E:AC:7A:80 X509v3 Authority Key Identifier: keyid:AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:2d:16:6a:d1:2d:59:6f:7f:df:71:a9:a5:18:35:0f:89:eb: 90:41:a4:ea:97:4a:eb:6b:c6:6c:46:96:9d:37:71:c5:0e:22: 43:5c:64:b2:83:99:4f:e1:f5:ba:96:f5:27:1e:62:7d:58:2a: 9e:be:69:ba:ed:5d:b6:b5:fc:45:b5:36:c1:08:42:0f:a2:13: 27:6e:84:8b:84:c8:fd:b8:48:14:85:ba:25:ff:28:13:75:e1: 15:65:1e:5f:8b:c4:5b:15:3f:7c:47:b3:0e:06:56:a3:dc:80: ff:ad:4b:c6:c3:36:e1:9c:9c:b7:07:59:de:e3:42:1b:d7:86: 42:9a:35:c6:e4:15:ae:21:de:41:7a:fb:8c:e8:2d:a6:2b:32: 20:2a:ff:4e:41:38:47:4e:9b:50:08:b5:21:91:16:6b:c7:77: 7d:8d:7f:df:23:c7:4f:4f:59:34:e1:5f:68:60:d5:df:25:89: 8c:84:1b:95:3e:82:af:07:70:8b:e7:c8:aa:06:94:6e:11:c1: 99:81:95:9c:ef:50:62:97:f9:e0:40:d1:1d:61:1b:0d:f3:ea: aa:32:e9:64:72:a4:64:15:e1:f1:ac:63:6b:64:83:22:d3:62: 07:61:e1:bd:b7:98:77:bf:c1:5b:e3:32:7e:5c:7c:da:33:a7: 0c:b4:33:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKBGZJIMXQ0r8qMia+ouGkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiZDg3YmJlZjU5NDM1NDZiMmE4M2QzMWVjMmI5OWFkODgz ZDUxZDcwHhcNMjUxMjIzMDcwMjQwWhcNMjUxMjI0MDcwMjQwWjAzMTEwLwYDVQQD Eyg4MzZhMjg5MDAxZGVmNGEyOGRlNThlN2VlYjEwNTQ2YjZlYWM3YTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gt124rVXPQpIU1v/XFacXPh11y6 YUw7A8OkT5pUxbcaI8AbzIz1dmx0/B3emKVczFTTK9un23Y3vTBd3MiF5kX2M84G KOUcnVGR9ZkOJNYFdjqk6Hr+AKkNrJTTGwtXH5xO/6fM+Y/oMSTQ9U7nr9bwR+gL qNPFBLmbauLLWnMR22juuZBbym46eZpOfWble9Uy5NNL1tXCXek8YvElzVZTBE7H zWHHSv4I0hq6SSACYWgTnwORRFDSwK6Fy92dbAMzRm6KrJNIeivr+9vXvKULchog jq8BZN1NGCMSze8Fsj1gRzOpYmdBdjWvJ5uRBavmRn9Ojjt/OXDumJ4RIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFINqKJAB3vSijeWOfusQVGturHqAMB8GA1UdIwQY MBaAFKvYe771lDVGsqg9Mewrma2IPVHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTloN3Z2V1VOVWF5cUQweDdDdVpyWWc5VWRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84YWQyZTAtZTNmMC00YWJlLWJjYjYt MmY1Yzc0YzY5YWUxLzEvcTloN3Z2V1VOVWF5cUQweDdDdVpyWWc5VWRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC84YWQyZTAtZTNmMC00YWJlLWJjYjYtMmY1Yzc0YzY5YWUx LzEvcTloN3Z2V1VOVWF5cUQweDdDdVpyWWc5VWRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqy0WatEt WW9/33GppRg1D4nrkEGk6pdK62vGbEaWnTdxxQ4iQ1xksoOZT+H1upb1Jx5ifVgq nr5puu1dtrX8RbU2wQhCD6ITJ26Ei4TI/bhIFIW6Jf8oE3XhFWUeX4vEWxU/fEez DgZWo9yA/61LxsM24ZyctwdZ3uNCG9eGQpo1xuQVriHeQXr7jOgtpisyICr/TkE4 R06bUAi1IZEWa8d3fY1/3yPHT09ZNOFfaGDV3yWJjIQblT6Crwdwi+fIqgaUbhHB mYGVnO9QYpf54EDRHWEbDfPqqjLpZHKkZBXh8axja2SDItNiB2HhvbeYd7/BW+My flx82jOnDLQzKA== -----END CERTIFICATE-----Generated at Tue Dec 23 15:21:26 2025 by rpki-client