This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft File: Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft (raw, json) Hash identifier: WMi3f54t8qA2UfwtjeSdf8eIwBUa+jED5eu2jeFJcSU= Subject key identifier: E4:34:36:9C:84:DF:A0:27:39:75:9E:26:08:89:52:DE:53:49:11:CA Authority key identifier: 43:D9:4E:06:87:16:09:CC:1F:81:5A:56:DE:5C:9F:AF:6D:57:D5:84 Certificate issuer: /CN=43d94e06871609cc1f815a56de5c9faf6d57d584 Certificate serial: 019B53739B678896B4E3779DC1EA221F39DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft Manifest number: 1793 Signing time: Thu 25 Dec 2025 03:00:43 +0000 Manifest this update: Thu 25 Dec 2025 03:00:43 +0000 Manifest next update: Fri 26 Dec 2025 03:00:43 +0000 Files and hashes: 1: Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl (hash: TffV5OblAQl7NrzU2xphtu1BX1xZWAsIujKuT/P4UBM=) 2: pFcInvEW15iKWvoPMx5EVwuCano.roa (hash: nE+nXG0xZdbwspGUmTTrOhLDVrJyA6M8TZL//6qKpZc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:73:9b:67:88:96:b4:e3:77:9d:c1:ea:22:1f:39:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43d94e06871609cc1f815a56de5c9faf6d57d584 Validity Not Before: Dec 25 03:00:43 2025 GMT Not After : Dec 26 03:00:43 2025 GMT Subject: CN=e434369c84dfa02739759e26088952de534911ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:89:89:a4:ac:6e:d5:45:35:41:bf:f6:ce:e0: 26:34:6f:80:ca:1b:80:75:71:3f:85:d4:4f:76:7e: fb:7e:4e:16:4f:55:0e:17:a6:99:e5:e7:19:fd:e0: 3e:35:9f:12:f0:5a:1c:aa:03:a8:c1:90:ce:47:31: 55:44:78:ff:45:be:41:4f:7b:24:de:14:b2:c8:93: fb:24:66:73:e0:48:b4:79:94:85:88:e5:c7:05:fa: f2:ea:a2:f8:45:f0:d6:de:16:83:09:77:1e:9d:1b: 67:8e:bf:1d:2b:4e:a4:63:f1:ec:92:52:07:79:d2: 25:f2:02:07:6b:84:27:c6:2e:24:6d:ae:a0:86:d5: c3:f8:99:d6:a7:54:52:87:e2:77:4b:3e:54:21:f3: 14:9d:87:fe:d0:fa:22:cd:8f:dc:3f:0c:5c:49:1f: e8:2e:34:35:d3:fe:2c:9c:47:b3:d4:8f:bc:41:bf: a8:9c:2d:12:b9:09:cc:ea:24:98:29:6c:8d:5d:dc: f5:41:d7:a4:f9:65:d4:10:c4:ed:7d:69:07:91:18: b7:76:a8:76:e5:24:93:48:d3:5e:91:07:78:bb:38: c6:c2:3a:b3:b2:18:2c:d6:6f:6b:d7:39:29:a5:ec: 5d:c6:31:4d:5f:51:0d:64:84:7c:25:d0:a1:0b:ac: e3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:34:36:9C:84:DF:A0:27:39:75:9E:26:08:89:52:DE:53:49:11:CA X509v3 Authority Key Identifier: keyid:43:D9:4E:06:87:16:09:CC:1F:81:5A:56:DE:5C:9F:AF:6D:57:D5:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:29:11:9e:c2:36:e0:c8:1e:61:96:fb:7a:b1:69:c2:27:a7: 1d:37:ea:50:3b:74:44:11:09:4c:08:88:95:1a:51:56:e3:5f: 99:93:63:e0:e4:47:37:10:e6:1c:a2:16:74:b1:e6:95:71:eb: 85:16:6a:9c:2c:fb:74:17:ec:ef:91:65:ba:a7:35:d6:af:8d: 25:8d:a8:af:6a:6b:c4:53:1b:ea:a0:df:fe:1a:25:ab:30:29: 56:14:c1:8e:b5:29:20:9d:26:82:fe:e2:db:53:d3:56:c5:8f: c9:55:21:5e:b2:0a:d6:65:ca:45:81:8d:21:b0:ad:41:02:05: ae:3e:3a:2b:d7:0a:35:2a:3f:bd:d8:c3:99:62:4b:42:65:23: e2:8a:68:e1:3e:73:9c:20:ca:43:66:5a:17:10:b9:fc:2b:f5: 47:f0:21:41:79:e0:f7:4b:94:5c:94:73:d7:b6:b0:a6:63:9e: c5:6d:ef:c2:78:0c:f2:93:0d:31:f1:61:8c:f8:55:35:1a:c8: f6:8c:ed:77:03:50:7e:98:0e:42:fd:c9:35:89:61:40:7f:6e: ce:7e:ca:0d:a9:f5:53:dd:b3:2b:bb:6e:75:45:35:e2:f9:2f: 5a:18:25:04:71:74:01:25:24:5c:21:f8:e6:65:b2:73:8b:59: 66:ab:a0:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTc5tniJa043edweoiHznfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZDk0ZTA2ODcxNjA5Y2MxZjgxNWE1NmRlNWM5ZmFmNmQ1 N2Q1ODQwHhcNMjUxMjI1MDMwMDQzWhcNMjUxMjI2MDMwMDQzWjAzMTEwLwYDVQQD EyhlNDM0MzY5Yzg0ZGZhMDI3Mzk3NTllMjYwODg5NTJkZTUzNDkxMWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYmJpKxu1UU1Qb/2zuAmNG+AyhuA dXE/hdRPdn77fk4WT1UOF6aZ5ecZ/eA+NZ8S8FocqgOowZDORzFVRHj/Rb5BT3sk 3hSyyJP7JGZz4Ei0eZSFiOXHBfry6qL4RfDW3haDCXcenRtnjr8dK06kY/HsklIH edIl8gIHa4Qnxi4kba6ghtXD+JnWp1RSh+J3Sz5UIfMUnYf+0PoizY/cPwxcSR/o LjQ10/4snEez1I+8Qb+onC0SuQnM6iSYKWyNXdz1Qdek+WXUEMTtfWkHkRi3dqh2 5SSTSNNekQd4uzjGwjqzshgs1m9r1zkppexdxjFNX1ENZIR8JdChC6zjRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQ0NpyE36AnOXWeJgiJUt5TSRHKMB8GA1UdIwQY MBaAFEPZTgaHFgnMH4FaVt5cn69tV9WEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTlsT0JvY1dDY3dmZ1ZwVzNseWZyMjFYMVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8zMjEzZDMtY2QxYS00NjRkLTkxOGQt MmQ2MjZhY2I3ODMzLzEvUTlsT0JvY1dDY3dmZ1ZwVzNseWZyMjFYMVlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8zMjEzZDMtY2QxYS00NjRkLTkxOGQtMmQ2MjZhY2I3ODMz LzEvUTlsT0JvY1dDY3dmZ1ZwVzNseWZyMjFYMVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgykRnsI2 4MgeYZb7erFpwienHTfqUDt0RBEJTAiIlRpRVuNfmZNj4ORHNxDmHKIWdLHmlXHr hRZqnCz7dBfs75Fluqc11q+NJY2or2prxFMb6qDf/holqzApVhTBjrUpIJ0mgv7i 21PTVsWPyVUhXrIK1mXKRYGNIbCtQQIFrj46K9cKNSo/vdjDmWJLQmUj4opo4T5z nCDKQ2ZaFxC5/Cv1R/AhQXng90uUXJRz17awpmOexW3vwngM8pMNMfFhjPhVNRrI 9oztdwNQfpgOQv3JNYlhQH9uzn7KDan1U92zK7tudUU14vkvWhglBHF0ASUkXCH4 5mWyc4tZZqugpA== -----END CERTIFICATE-----Generated at Thu Dec 25 11:04:15 2025 by rpki-client