This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft File: qajkTlc8U8cZIxL8xyFQ0t43fW0.mft (raw, json) Hash identifier: XxdJ6fxtvGz1sMBaGR6WS/tEFyp69ks8HVO4C+wX08g= Subject key identifier: 8D:43:B1:CA:2F:4E:10:94:A5:86:85:D8:8F:9F:0D:A1:80:77:9E:65 Authority key identifier: A9:A8:E4:4E:57:3C:53:C7:19:23:12:FC:C7:21:50:D2:DE:37:7D:6D Certificate issuer: /CN=a9a8e44e573c53c7192312fcc72150d2de377d6d Certificate serial: 019B454A470457B5CA31E75B7D2E8BDF7F25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft Manifest number: 1792 Signing time: Mon 22 Dec 2025 09:00:54 +0000 Manifest this update: Mon 22 Dec 2025 09:00:54 +0000 Manifest next update: Tue 23 Dec 2025 09:00:54 +0000 Files and hashes: 1: CTedhf-UDhDCo0gKWN1eFB95iME.roa (hash: Vr6y6sdI8B/BSyNE6gcBQftZW1dE4fIdtomKsz3LLNE=) 2: qajkTlc8U8cZIxL8xyFQ0t43fW0.crl (hash: +/iwnNsJLgRF+fJb3cZeLKEhqeeiwALRa949sG4rfzY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:4a:47:04:57:b5:ca:31:e7:5b:7d:2e:8b:df:7f:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9a8e44e573c53c7192312fcc72150d2de377d6d Validity Not Before: Dec 22 09:00:54 2025 GMT Not After : Dec 23 09:00:54 2025 GMT Subject: CN=8d43b1ca2f4e1094a58685d88f9f0da180779e65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:97:e2:01:cf:30:0e:88:cb:82:21:fc:32:90: 5a:97:5f:9e:48:b3:da:5a:b4:d3:f0:e7:a5:cb:9e: 05:db:88:5b:35:45:0a:b0:2c:b7:59:99:bb:6d:80: 89:85:cb:1c:75:77:96:ec:b9:c6:bd:bd:68:fa:83: c9:22:c7:b5:1a:73:c2:a0:0d:9e:c4:35:99:ee:1c: ff:9c:66:bb:99:55:e5:fa:2a:f6:a6:3e:eb:39:c9: 6c:a1:e3:ee:87:d9:91:5f:df:51:44:e6:15:db:db: 50:f4:27:5f:bb:73:22:8c:4f:ce:16:bf:4c:c8:8f: bb:b4:28:47:b8:44:78:55:c5:ac:18:6c:64:9a:a2: 51:ec:7f:f2:7a:ae:0c:3e:75:7d:e1:57:bf:81:0c: b9:4a:85:08:79:de:c7:c1:f7:d4:56:0d:93:1e:ec: 29:7e:71:ba:e1:51:a3:0d:e0:b5:32:69:6f:25:4e: 21:88:bd:60:6b:3f:69:05:9e:ac:5f:2a:fb:d5:e0: 53:2d:17:a6:ac:9b:b2:c9:46:c5:8f:1a:79:09:98: 50:1d:1a:7e:ed:39:3b:0d:44:f6:f3:e5:e1:5b:4b: f8:1f:cd:cf:ce:aa:9c:2f:d2:f3:6d:2b:40:ec:6b: 99:ec:35:ec:e8:60:d6:95:b3:9f:d9:e4:01:03:b1: 37:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:43:B1:CA:2F:4E:10:94:A5:86:85:D8:8F:9F:0D:A1:80:77:9E:65 X509v3 Authority Key Identifier: keyid:A9:A8:E4:4E:57:3C:53:C7:19:23:12:FC:C7:21:50:D2:DE:37:7D:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:61:a1:f6:48:39:60:43:31:b9:26:2a:d5:16:94:a3:c4:be: 83:ba:20:e8:e6:d1:42:f4:56:6c:ec:48:d3:7d:de:1a:6c:1c: 99:39:ca:73:fa:ec:a5:17:0e:0a:ce:f8:90:31:88:2b:70:5d: 0c:7c:5a:49:4a:f6:2d:4d:89:1a:f8:fa:88:84:2e:2c:54:5a: 35:cc:f9:a9:e5:09:42:42:31:40:94:f9:99:93:cc:95:4d:b1: 24:77:55:10:5c:ba:08:7b:49:c2:9b:35:c2:47:d8:41:13:c6: dd:7c:c5:e5:e2:f2:23:cd:19:42:2a:d0:cb:f0:bb:b9:a2:c2: 76:c5:10:4d:da:c6:5a:46:8b:ef:fc:79:17:2d:18:94:18:21: e8:b0:4f:19:51:83:f7:d1:8e:89:a0:84:08:1d:74:b3:1c:2c: 8e:1d:64:35:3b:e2:d6:39:d0:91:22:22:85:7d:b8:7d:53:e0: 2a:3d:71:fb:63:fa:a7:27:bf:18:bb:19:4b:7d:b0:5a:f6:c6: 72:53:a5:33:a9:01:0a:fc:82:e3:9f:ea:96:cb:44:fa:9a:45: 1f:7d:04:db:38:23:a0:79:4a:7e:3a:b7:aa:b2:e7:61:90:5b: a0:db:2a:62:d0:ae:27:80:2e:07:e6:a9:17:cc:15:ee:23:02: 51:93:aa:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFSkcEV7XKMedbfS6L338lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5YThlNDRlNTczYzUzYzcxOTIzMTJmY2M3MjE1MGQyZGUz NzdkNmQwHhcNMjUxMjIyMDkwMDU0WhcNMjUxMjIzMDkwMDU0WjAzMTEwLwYDVQQD Eyg4ZDQzYjFjYTJmNGUxMDk0YTU4Njg1ZDg4ZjlmMGRhMTgwNzc5ZTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpfiAc8wDojLgiH8MpBal1+eSLPa WrTT8Oely54F24hbNUUKsCy3WZm7bYCJhcscdXeW7LnGvb1o+oPJIse1GnPCoA2e xDWZ7hz/nGa7mVXl+ir2pj7rOclsoePuh9mRX99RROYV29tQ9Cdfu3MijE/OFr9M yI+7tChHuER4VcWsGGxkmqJR7H/yeq4MPnV94Ve/gQy5SoUIed7HwffUVg2THuwp fnG64VGjDeC1MmlvJU4hiL1gaz9pBZ6sXyr71eBTLRemrJuyyUbFjxp5CZhQHRp+ 7Tk7DUT28+XhW0v4H83PzqqcL9LzbStA7GuZ7DXs6GDWlbOf2eQBA7E39wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI1DscovThCUpYaF2I+fDaGAd55lMB8GA1UdIwQY MBaAFKmo5E5XPFPHGSMS/MchUNLeN31tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWFqa1RsYzhVOGNaSXhMOHh5RlEwdDQzZlcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy80NTJkZDUtZDBlNC00ZDRiLThhZTYt MTk1MTM0NWNlYTMzLzEvcWFqa1RsYzhVOGNaSXhMOHh5RlEwdDQzZlcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy80NTJkZDUtZDBlNC00ZDRiLThhZTYtMTk1MTM0NWNlYTMz LzEvcWFqa1RsYzhVOGNaSXhMOHh5RlEwdDQzZlcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp2Gh9kg5 YEMxuSYq1RaUo8S+g7og6ObRQvRWbOxI033eGmwcmTnKc/rspRcOCs74kDGIK3Bd DHxaSUr2LU2JGvj6iIQuLFRaNcz5qeUJQkIxQJT5mZPMlU2xJHdVEFy6CHtJwps1 wkfYQRPG3XzF5eLyI80ZQirQy/C7uaLCdsUQTdrGWkaL7/x5Fy0YlBgh6LBPGVGD 99GOiaCECB10sxwsjh1kNTvi1jnQkSIihX24fVPgKj1x+2P6pye/GLsZS32wWvbG clOlM6kBCvyC45/qlstE+ppFH30E2zgjoHlKfjq3qrLnYZBboNsqYtCuJ4AuB+ap F8wV7iMCUZOq9g== -----END CERTIFICATE-----Generated at Mon Dec 22 12:58:37 2025 by rpki-client