This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft File: 1qqJ97ciJ5wDKULc8khl9tctZQE.mft (raw, json) Hash identifier: j3U1ZcyEBwwNsHL1QqGAZ0zjYiCfypJCG1/J4eMF5rQ= Subject key identifier: 9E:03:EB:46:6A:5E:4B:60:DF:49:6B:E9:B2:D7:95:B3:75:89:C7:8A Authority key identifier: D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01 Certificate issuer: /CN=d6aa89f7b722279c032942dcf24865f6d72d6501 Certificate serial: 019B390FAFC9E35BD998F5B151B5B0DBBE13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft Manifest number: 127A Signing time: Sat 20 Dec 2025 00:01:27 +0000 Manifest this update: Sat 20 Dec 2025 00:01:27 +0000 Manifest next update: Sun 21 Dec 2025 00:01:27 +0000 Files and hashes: 1: 1qqJ97ciJ5wDKULc8khl9tctZQE.crl (hash: 5NjMqIOfI7xoo6qBISDNYdDu+j0ZOXR1GRaBLrgRr2Y=) 2: AgasgsgRMARsZv6ZL1FMUAMH49o.roa (hash: rP0A/zCy7W2yRJEKVS59R2RHbWAgc1CTX30QoNq6GK4=) 3: kIQph00YRfR7VyoSJ5QKs9_47CM.roa (hash: T6/F9gO6dDf2HDaMUJjHPMQQkg1ian0JLCMBF3Ug9u4=) 4: qtgbnELTyW65aNCYZpJqV2m2-Jw.roa (hash: BZNYV9kq2qBJjfITSVC14VQZO/Cg3QnROE1UWyqLr8U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:af:c9:e3:5b:d9:98:f5:b1:51:b5:b0:db:be:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6aa89f7b722279c032942dcf24865f6d72d6501 Validity Not Before: Dec 20 00:01:27 2025 GMT Not After : Dec 21 00:01:27 2025 GMT Subject: CN=9e03eb466a5e4b60df496be9b2d795b37589c78a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a4:67:bd:35:39:e8:9f:31:e6:d1:3a:ec:bb: 39:72:01:b4:7e:61:3a:76:41:b7:25:e8:66:1a:2b: fd:e0:fa:ed:07:64:51:b7:96:a8:d4:6b:22:a1:8e: 94:04:3c:f5:da:f7:11:e6:99:77:7b:fd:8c:ec:28: f3:15:c3:08:f1:4a:15:c7:dd:ee:df:61:88:1e:ec: 00:c5:7b:bb:3d:99:61:d4:74:1c:5a:a1:64:c3:03: 51:3f:e4:a9:92:f2:41:ef:7c:0d:a9:f5:fc:22:94: a8:c8:d7:38:31:15:b4:f8:dc:2a:2f:85:b6:8b:4b: 0a:eb:28:70:99:26:ed:0a:36:49:c7:10:b4:07:bf: 76:76:27:b5:20:2e:48:bc:3b:c0:96:01:2f:bd:00: 58:f1:bb:77:0f:2e:71:78:ab:4f:e6:89:85:1f:d9: 2a:f6:16:62:42:2b:8c:ff:e4:19:cb:1a:8f:b8:bb: 81:78:38:f5:0a:be:fa:1a:70:6e:35:2b:6f:07:08: 07:61:f4:bd:e8:dc:35:5b:8a:bb:39:de:9d:40:f4: 52:ee:48:c0:5c:c0:c1:ee:f1:ca:22:dd:01:cd:32: 94:76:05:f9:c0:b3:33:3d:f8:95:75:ae:17:b1:6a: eb:1d:ac:fa:e4:e8:d5:23:03:9a:f0:ec:88:12:fd: 89:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:03:EB:46:6A:5E:4B:60:DF:49:6B:E9:B2:D7:95:B3:75:89:C7:8A X509v3 Authority Key Identifier: keyid:D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:ac:13:24:a7:0c:b0:e6:e7:29:8b:6d:23:2c:5e:01:58:3f: 24:14:ac:6e:06:6d:0e:d4:e3:ea:c7:41:dd:fd:09:ab:9e:62: 9f:44:52:fa:a9:f3:86:9d:1f:84:75:10:2b:a8:35:75:e2:ec: a5:71:dc:91:3b:95:de:32:08:73:c0:70:e4:eb:f2:60:49:88: c0:cd:50:c3:13:58:17:8c:8f:a3:91:85:7d:57:23:e2:e4:ae: 56:d9:f4:94:28:d9:56:d1:14:da:0c:5e:6b:73:ef:95:79:73: 69:6d:da:22:d0:7d:99:fb:7d:2d:da:14:42:fb:10:61:bc:08: 62:ef:94:02:05:c1:e8:12:77:62:4f:52:e2:63:f9:3d:fd:7e: e6:91:a2:44:f8:03:b1:16:2c:cc:78:9b:f6:e4:14:ce:9e:cb: d4:62:5d:5a:21:a6:f3:a3:72:2d:92:7c:c6:a2:8c:b6:6d:14: e9:99:26:12:3e:fd:a3:eb:58:b4:1b:8e:c3:ac:ce:e5:60:67: 94:e2:0f:66:25:89:51:82:3e:03:e7:59:a8:d1:a5:45:fc:c0: 8f:e4:a7:dd:cc:8f:98:8e:72:e2:75:ff:ec:ec:e0:61:f0:ca: 9e:35:c3:a4:a3:73:e8:2f:16:a4:c5:84:b8:13:63:a3:46:d4: 30:d6:eb:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D6/J41vZmPWxUbWw274TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2YWE4OWY3YjcyMjI3OWMwMzI5NDJkY2YyNDg2NWY2ZDcy ZDY1MDEwHhcNMjUxMjIwMDAwMTI3WhcNMjUxMjIxMDAwMTI3WjAzMTEwLwYDVQQD Eyg5ZTAzZWI0NjZhNWU0YjYwZGY0OTZiZTliMmQ3OTViMzc1ODljNzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqRnvTU56J8x5tE67Ls5cgG0fmE6 dkG3JehmGiv94PrtB2RRt5ao1GsioY6UBDz12vcR5pl3e/2M7CjzFcMI8UoVx93u 32GIHuwAxXu7PZlh1HQcWqFkwwNRP+SpkvJB73wNqfX8IpSoyNc4MRW0+NwqL4W2 i0sK6yhwmSbtCjZJxxC0B792die1IC5IvDvAlgEvvQBY8bt3Dy5xeKtP5omFH9kq 9hZiQiuM/+QZyxqPuLuBeDj1Cr76GnBuNStvBwgHYfS96Nw1W4q7Od6dQPRS7kjA XMDB7vHKIt0BzTKUdgX5wLMzPfiVda4XsWrrHaz65OjVIwOa8OyIEv2JFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ4D60ZqXktg30lr6bLXlbN1iceKMB8GA1UdIwQY MBaAFNaqife3IiecAylC3PJIZfbXLWUBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXFxSjk3Y2lKNXdES1VMYzhraGw5dGN0WlFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wZTdlMjgtYTgyOS00N2QyLTgwZTYt OGJhNjg4ODY2OWNmLzEvMXFxSjk3Y2lKNXdES1VMYzhraGw5dGN0WlFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8wZTdlMjgtYTgyOS00N2QyLTgwZTYtOGJhNjg4ODY2OWNm LzEvMXFxSjk3Y2lKNXdES1VMYzhraGw5dGN0WlFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVawTJKcM sObnKYttIyxeAVg/JBSsbgZtDtTj6sdB3f0Jq55in0RS+qnzhp0fhHUQK6g1deLs pXHckTuV3jIIc8Bw5OvyYEmIwM1QwxNYF4yPo5GFfVcj4uSuVtn0lCjZVtEU2gxe a3PvlXlzaW3aItB9mft9LdoUQvsQYbwIYu+UAgXB6BJ3Yk9S4mP5Pf1+5pGiRPgD sRYszHib9uQUzp7L1GJdWiGm86NyLZJ8xqKMtm0U6ZkmEj79o+tYtBuOw6zO5WBn lOIPZiWJUYI+A+dZqNGlRfzAj+Sn3cyPmI5y4nX/7OzgYfDKnjXDpKNz6C8WpMWE uBNjo0bUMNbrjA== -----END CERTIFICATE-----Generated at Sat Dec 20 09:33:07 2025 by rpki-client