This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft File: qD8d69XUeEhD-qKIsuAciFBsHMk.mft (raw, json) Hash identifier: j9JOWjK/zsJTNlR6456pxIFtMEke88SoSOxYTCoMcT4= Subject key identifier: A0:C7:FC:D1:8E:47:A6:BE:28:C2:15:B7:D7:B2:22:05:5C:79:5D:40 Authority key identifier: A8:3F:1D:EB:D5:D4:78:48:43:FA:A2:88:B2:E0:1C:88:50:6C:1C:C9 Certificate issuer: /CN=a83f1debd5d4784843faa288b2e01c88506c1cc9 Certificate serial: 019B5DC0299CF8822A2D88E7F258EBA4D693 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft Manifest number: 15F6 Signing time: Sat 27 Dec 2025 03:00:33 +0000 Manifest this update: Sat 27 Dec 2025 03:00:33 +0000 Manifest next update: Sun 28 Dec 2025 03:00:33 +0000 Files and hashes: 1: BZ13VNeYDJ675QrTvza6Su89fFQ.roa (hash: 1LD0YSVmtKovTGtmhUY3CjQg1PtKAp7I1QWK9ijZOII=) 2: qD8d69XUeEhD-qKIsuAciFBsHMk.crl (hash: CIfPh+gfF4YtcrfBbyfD8HLYiVJ+RcFjI4fhVSL/Dl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:c0:29:9c:f8:82:2a:2d:88:e7:f2:58:eb:a4:d6:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83f1debd5d4784843faa288b2e01c88506c1cc9 Validity Not Before: Dec 27 03:00:33 2025 GMT Not After : Dec 28 03:00:33 2025 GMT Subject: CN=a0c7fcd18e47a6be28c215b7d7b222055c795d40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d4:7c:a0:82:92:41:3d:0e:d2:b4:32:d9:9a: b6:17:fd:de:59:dd:ad:85:0b:b6:51:c8:eb:5c:ad: 82:43:36:b5:d6:fa:1e:53:86:87:2a:7c:cf:dd:d6: 05:43:9b:44:ec:c5:ea:13:f6:b7:62:d0:b9:f7:50: d9:57:cd:89:b9:a9:36:f6:10:31:6a:e2:c3:e4:71: 61:7d:93:b4:69:d8:6c:7f:23:e6:db:cc:f9:63:67: ea:3b:b8:ab:50:ce:25:39:47:29:f3:10:ff:fa:95: be:f7:49:01:8f:74:ee:3d:03:f6:fc:81:c0:93:fd: c1:3c:ee:a4:68:63:78:41:eb:53:0c:b4:f3:b7:c4: 2c:15:de:8e:10:49:ef:0d:a2:ea:80:b4:3d:7f:6b: 8b:89:1d:25:b1:96:8e:17:99:51:22:ae:4f:8e:ca: 55:8f:6f:22:f4:b7:a4:f5:9c:c6:01:79:33:37:06: 31:15:83:b9:61:61:40:85:fd:f8:e9:85:b3:b0:6e: 2a:86:75:39:4c:53:73:3c:b8:df:ec:c1:8c:10:56: e2:b6:2a:c3:dd:03:40:c5:f6:64:8e:d1:f8:a6:6a: f9:ff:bd:18:71:05:98:28:65:4c:39:bd:13:f9:4c: e2:42:a5:50:c0:8e:b5:ed:34:8c:a3:81:39:13:1c: 00:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C7:FC:D1:8E:47:A6:BE:28:C2:15:B7:D7:B2:22:05:5C:79:5D:40 X509v3 Authority Key Identifier: keyid:A8:3F:1D:EB:D5:D4:78:48:43:FA:A2:88:B2:E0:1C:88:50:6C:1C:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:d1:cc:3e:94:a1:fa:33:f5:be:a1:fa:ba:f3:16:af:3d:42: 34:72:35:07:be:67:8d:d8:d2:7c:e6:57:50:57:ff:e4:76:7e: 51:67:e4:f1:44:4d:3c:dd:a2:66:49:6d:a3:6c:99:40:c4:2c: 0b:10:79:b6:6f:87:f7:ba:ff:c7:01:2e:0d:51:d4:0b:05:ec: a2:37:38:32:8c:3d:73:fe:f0:20:05:70:f2:64:8b:a4:d8:39: ce:d6:ac:19:cd:98:59:e3:21:e9:6e:7b:ac:0e:bc:d4:53:3b: 19:a6:32:ee:94:48:4d:5f:51:6b:1d:3d:75:9c:39:0c:7d:86: af:31:22:0e:4e:44:e5:9b:2c:dd:ce:a9:83:fb:c7:84:18:94: 3b:1c:82:dd:a4:f5:85:58:5d:19:66:9d:53:78:61:c4:aa:62: e8:fa:59:38:a6:69:9c:06:70:ac:39:61:db:a6:fc:c3:2e:ee: 7d:a3:46:f1:1b:ac:07:7b:2f:2d:fb:09:e8:88:81:20:50:7e: 11:68:db:8a:c9:ed:e4:38:26:04:2d:f6:a0:e2:d0:c3:f9:11: bd:09:50:07:a7:e7:ea:be:5b:01:9d:6d:a0:e0:a1:28:71:02: 5d:f3:c7:ad:a0:08:8a:fc:8a:31:ec:7a:40:6a:3f:7b:70:aa: ba:16:d4:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdwCmc+IIqLYjn8ljrpNaTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4M2YxZGViZDVkNDc4NDg0M2ZhYTI4OGIyZTAxYzg4NTA2 YzFjYzkwHhcNMjUxMjI3MDMwMDMzWhcNMjUxMjI4MDMwMDMzWjAzMTEwLwYDVQQD EyhhMGM3ZmNkMThlNDdhNmJlMjhjMjE1YjdkN2IyMjIwNTVjNzk1ZDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49R8oIKSQT0O0rQy2Zq2F/3eWd2t hQu2UcjrXK2CQza11voeU4aHKnzP3dYFQ5tE7MXqE/a3YtC591DZV82Juak29hAx auLD5HFhfZO0adhsfyPm28z5Y2fqO7irUM4lOUcp8xD/+pW+90kBj3TuPQP2/IHA k/3BPO6kaGN4QetTDLTzt8QsFd6OEEnvDaLqgLQ9f2uLiR0lsZaOF5lRIq5PjspV j28i9Lek9ZzGAXkzNwYxFYO5YWFAhf346YWzsG4qhnU5TFNzPLjf7MGMEFbitirD 3QNAxfZkjtH4pmr5/70YcQWYKGVMOb0T+UziQqVQwI617TSMo4E5ExwAOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKDH/NGOR6a+KMIVt9eyIgVceV1AMB8GA1UdIwQY MBaAFKg/HevV1HhIQ/qiiLLgHIhQbBzJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUQ4ZDY5WFVlRWhELXFLSXN1QWNpRkJzSE1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8zOTNhMGYtZTQ1Ni00NmUyLWE3NTQt ZTQ2YzEzYjFjNzZkLzEvcUQ4ZDY5WFVlRWhELXFLSXN1QWNpRkJzSE1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8zOTNhMGYtZTQ1Ni00NmUyLWE3NTQtZTQ2YzEzYjFjNzZk LzEvcUQ4ZDY5WFVlRWhELXFLSXN1QWNpRkJzSE1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi9HMPpSh +jP1vqH6uvMWrz1CNHI1B75njdjSfOZXUFf/5HZ+UWfk8URNPN2iZklto2yZQMQs CxB5tm+H97r/xwEuDVHUCwXsojc4Mow9c/7wIAVw8mSLpNg5ztasGc2YWeMh6W57 rA681FM7GaYy7pRITV9Rax09dZw5DH2GrzEiDk5E5Zss3c6pg/vHhBiUOxyC3aT1 hVhdGWadU3hhxKpi6PpZOKZpnAZwrDlh26b8wy7ufaNG8RusB3svLfsJ6IiBIFB+ EWjbisnt5DgmBC32oOLQw/kRvQlQB6fn6r5bAZ1toOChKHECXfPHraAIivyKMex6 QGo/e3CquhbUxA== -----END CERTIFICATE-----Generated at Sat Dec 27 04:37:07 2025 by rpki-client