This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft File: CqLxIFVT-llg8YBcbtk4np4NySw.mft (raw, json) Hash identifier: BjPsMiSHlBVqgz86+u8HYV1RIFeg//uSwV04n58k7og= Subject key identifier: 7C:F9:D6:D1:81:C4:18:76:5E:AD:32:F8:86:F8:23:CA:CB:C8:AA:77 Authority key identifier: 0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C Certificate issuer: /CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c Certificate serial: 019B3D90C8060579F35B588E476841DCF342 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft Manifest number: 0FA8 Signing time: Sat 20 Dec 2025 21:00:57 +0000 Manifest this update: Sat 20 Dec 2025 21:00:57 +0000 Manifest next update: Sun 21 Dec 2025 21:00:57 +0000 Files and hashes: 1: CqLxIFVT-llg8YBcbtk4np4NySw.crl (hash: P+eI1VrRJB4uAr9oN47Hhsz9E+aF0XHqXOIiNRmvntk=) 2: MAyKtR82lE73Rh03ItY-WJwlb0g.roa (hash: f22v5OwOnzL/KWHiBBd5+v5oBvo4HOCog7B7G8jEiaw=) 3: RmEKf5AMcv-GlXgJ8CZCaZ-S-bA.roa (hash: eaj18qKp8KNClDH+PpQWLvjTLItUDXXCJ/w32Wi8Qaw=) 4: Zf3An3BZ0tkzgzLF3YZuNzRqcaQ.roa (hash: g/EpgWzY2fh+5ethfX/aF6EmwHM9mLLUcuJd+6tww38=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:c8:06:05:79:f3:5b:58:8e:47:68:41:dc:f3:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c Validity Not Before: Dec 20 21:00:57 2025 GMT Not After : Dec 21 21:00:57 2025 GMT Subject: CN=7cf9d6d181c418765ead32f886f823cacbc8aa77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:29:e0:70:72:c8:d0:6d:bc:14:f7:df:13:42: de:f6:2e:ea:1f:de:b3:55:2e:6c:69:c0:b5:ae:43: 82:ef:c4:45:40:53:a6:46:bd:39:4a:b0:41:d8:0e: 27:3d:e2:ec:01:ab:9c:a8:20:17:e0:22:1f:78:e8: a4:b9:a2:c5:3b:d8:32:f7:9f:6f:86:49:05:e3:e8: 4c:9b:8b:ca:c1:76:e6:22:e4:e1:91:03:0d:70:5b: 56:cc:c9:a9:d7:ef:62:29:11:02:54:3f:19:2d:2c: 76:41:c4:b7:a4:ad:1c:d4:e7:cd:fc:7c:46:fc:0b: 96:d9:72:81:33:8f:1d:c5:6c:a7:9b:8d:57:9b:14: 84:54:86:c1:e6:6a:52:61:46:2e:dd:fb:46:fd:64: d6:d1:96:be:d4:2c:ce:97:68:72:d9:25:8c:b3:29: 7f:aa:f2:bb:a7:b8:fa:ae:3f:38:0a:8a:8e:2a:4f: d8:09:69:df:58:da:74:16:b4:77:c7:d1:77:5c:77: f8:69:a0:2e:47:3b:2d:ef:d7:d6:57:46:d2:ac:a6: 1b:c4:2c:b9:56:85:b9:61:c6:bf:0a:ab:d3:ba:60: f1:05:95:c0:24:15:d7:b3:c6:ec:35:a4:de:3d:b2: 33:b2:92:22:7c:7e:f8:44:f1:d8:0e:7c:8b:0e:1a: e0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F9:D6:D1:81:C4:18:76:5E:AD:32:F8:86:F8:23:CA:CB:C8:AA:77 X509v3 Authority Key Identifier: keyid:0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:ba:da:a9:6b:31:24:77:95:71:14:1d:5c:37:38:98:f2:a1: 1f:15:59:06:7b:e4:ce:30:47:6a:e3:ba:32:ca:6e:94:a7:34: 1b:8e:ef:d0:2d:01:fa:93:46:27:16:5f:0a:30:93:74:f8:c5: 49:a7:56:33:9d:bc:da:e9:fa:1e:ef:4d:b5:cd:11:ee:d1:1c: 58:10:56:90:40:b6:5f:09:b4:ab:de:f2:a6:c1:8b:6f:3a:51: 2b:e5:bf:68:71:7d:7b:00:8c:17:a7:e5:da:14:f7:28:e8:7f: 67:7a:cf:d3:77:8f:65:57:fd:cd:2d:69:14:cb:e7:25:3f:49: f6:53:35:4e:cc:ee:21:4d:30:99:1e:19:83:3e:df:bf:60:32: 9d:ec:60:db:2a:ba:cc:78:da:c5:71:24:22:26:e0:cd:4b:7b: a6:7d:de:04:5c:65:19:c1:43:c3:38:1d:9c:0e:22:ef:1b:ef: 80:83:93:a3:e1:18:1a:89:25:53:3f:30:2c:e7:a9:05:8c:0b: 00:33:dc:cd:3a:58:55:4a:ee:f9:4f:5b:90:7b:5c:3e:d3:41: af:4b:ba:80:c1:67:90:4e:30:b9:d9:2e:a7:cf:f9:72:49:90: 50:c5:b5:11:ed:68:3d:d3:38:f0:1f:d9:f1:5e:1f:f0:67:09: 62:5f:5b:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kMgGBXnzW1iOR2hB3PNCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhYTJmMTIwNTU1M2ZhNTk2MGYxODA1YzZlZDkzODllOWUw ZGM5MmMwHhcNMjUxMjIwMjEwMDU3WhcNMjUxMjIxMjEwMDU3WjAzMTEwLwYDVQQD Eyg3Y2Y5ZDZkMTgxYzQxODc2NWVhZDMyZjg4NmY4MjNjYWNiYzhhYTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyngcHLI0G28FPffE0Le9i7qH96z VS5sacC1rkOC78RFQFOmRr05SrBB2A4nPeLsAaucqCAX4CIfeOikuaLFO9gy959v hkkF4+hMm4vKwXbmIuThkQMNcFtWzMmp1+9iKRECVD8ZLSx2QcS3pK0c1OfN/HxG /AuW2XKBM48dxWynm41XmxSEVIbB5mpSYUYu3ftG/WTW0Za+1CzOl2hy2SWMsyl/ qvK7p7j6rj84CoqOKk/YCWnfWNp0FrR3x9F3XHf4aaAuRzst79fWV0bSrKYbxCy5 VoW5Yca/CqvTumDxBZXAJBXXs8bsNaTePbIzspIifH74RPHYDnyLDhrgVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHz51tGBxBh2Xq0y+Ib4I8rLyKp3MB8GA1UdIwQY MBaAFAqi8SBVU/pZYPGAXG7ZOJ6eDcksMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3FMeElGVlQtbGxnOFlCY2J0azRucDROeVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82NGU0NDItMTM3ZS00MTAxLWJiNmMt YjA2ODMxNTk2NDQ5LzEvQ3FMeElGVlQtbGxnOFlCY2J0azRucDROeVN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS82NGU0NDItMTM3ZS00MTAxLWJiNmMtYjA2ODMxNTk2NDQ5 LzEvQ3FMeElGVlQtbGxnOFlCY2J0azRucDROeVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdLraqWsx JHeVcRQdXDc4mPKhHxVZBnvkzjBHauO6MspulKc0G47v0C0B+pNGJxZfCjCTdPjF SadWM5282un6Hu9Ntc0R7tEcWBBWkEC2Xwm0q97ypsGLbzpRK+W/aHF9ewCMF6fl 2hT3KOh/Z3rP03ePZVf9zS1pFMvnJT9J9lM1TszuIU0wmR4Zgz7fv2Aynexg2yq6 zHjaxXEkIibgzUt7pn3eBFxlGcFDwzgdnA4i7xvvgIOTo+EYGoklUz8wLOepBYwL ADPczTpYVUru+U9bkHtcPtNBr0u6gMFnkE4wudkup8/5ckmQUMW1Ee1oPdM48B/Z 8V4f8GcJYl9bag== -----END CERTIFICATE-----Generated at Sun Dec 21 00:14:32 2025 by rpki-client