This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/q_CoT_j1BX-Ukd775q1V7q6YzAY.mft File: q_CoT_j1BX-Ukd775q1V7q6YzAY.mft (raw, json) Hash identifier: +8X37QegUvaeMQ63Al0/5vVQKTejQvZWj3UJjBaL49I= Subject key identifier: 14:FA:BF:19:08:3D:4F:25:6F:E0:8E:64:F3:DD:2F:D9:02:F5:AB:F3 Authority key identifier: AB:F0:A8:4F:F8:F5:05:7F:94:91:DE:FB:E6:AD:55:EE:AE:98:CC:06 Certificate issuer: /CN=abf0a84ff8f5057f9491defbe6ad55eeae98cc06 Certificate serial: 019B36B4002A34F0A27989947E51A766D55D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q_CoT_j1BX-Ukd775q1V7q6YzAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/q_CoT_j1BX-Ukd775q1V7q6YzAY.mft Manifest number: 117E Signing time: Fri 19 Dec 2025 13:02:04 +0000 Manifest this update: Fri 19 Dec 2025 13:02:04 +0000 Manifest next update: Sat 20 Dec 2025 13:02:04 +0000 Files and hashes: 1: MjzHW04MNpWP93ktfKv3g1wY_yY.roa (hash: sTUqFaDMKCqi+ntmnIAR8vXErg/0YN5V/YZHZNxvcNw=) 2: q_CoT_j1BX-Ukd775q1V7q6YzAY.crl (hash: 7E8UqgcZyXc5QUHfuUM2W+fMzJCMQh2hTVxvSgo2AJk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/q_CoT_j1BX-Ukd775q1V7q6YzAY.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/q_CoT_j1BX-Ukd775q1V7q6YzAY.mft rsync://rpki.ripe.net/repository/DEFAULT/q_CoT_j1BX-Ukd775q1V7q6YzAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b4:00:2a:34:f0:a2:79:89:94:7e:51:a7:66:d5:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf0a84ff8f5057f9491defbe6ad55eeae98cc06 Validity Not Before: Dec 19 13:02:04 2025 GMT Not After : Dec 20 13:02:04 2025 GMT Subject: CN=14fabf19083d4f256fe08e64f3dd2fd902f5abf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:1a:6d:2d:b2:6d:3b:51:93:dd:a3:74:ee:29: b0:73:54:ca:08:b7:40:68:71:74:e8:6f:4f:2c:66: 35:eb:de:d4:a3:b8:e9:35:1f:f2:40:9d:e6:d5:be: 79:23:de:12:fc:fa:7b:9a:71:25:3d:b4:fb:74:69: 7d:45:5c:7e:d6:05:05:30:0f:41:66:83:e4:b2:dd: 29:92:0d:8c:00:37:42:5e:da:13:cc:bb:b1:84:24: a2:e0:04:d5:93:ce:38:f5:e0:27:d4:bc:ce:a5:e4: 3e:a0:05:c2:39:db:27:a4:55:de:d1:62:4d:eb:39: df:2f:7f:6e:3d:34:f4:a3:30:4e:e6:58:f4:ad:a9: 79:6e:52:a1:4e:f2:a4:54:4b:99:e9:b7:ee:43:a5: 6d:e7:7f:56:e2:80:dc:5e:e7:7a:8d:bf:26:1e:7e: 9d:ea:9d:7f:d0:33:17:b9:0c:b0:3a:f6:28:3c:56: 7b:5f:df:fe:31:1e:33:5c:6f:6d:39:67:66:59:1a: 11:60:bf:b8:ca:69:4f:bc:b6:eb:f2:b9:23:70:37: 7e:d1:b8:a0:9a:be:62:c9:f0:09:6e:e2:ea:2f:11: 7d:72:37:2a:c7:80:89:52:6d:d6:e8:83:4e:52:05: f8:0d:a2:b6:16:40:d4:92:8f:1d:10:b9:0b:1d:7a: d8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:FA:BF:19:08:3D:4F:25:6F:E0:8E:64:F3:DD:2F:D9:02:F5:AB:F3 X509v3 Authority Key Identifier: keyid:AB:F0:A8:4F:F8:F5:05:7F:94:91:DE:FB:E6:AD:55:EE:AE:98:CC:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q_CoT_j1BX-Ukd775q1V7q6YzAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/q_CoT_j1BX-Ukd775q1V7q6YzAY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/q_CoT_j1BX-Ukd775q1V7q6YzAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:55:bf:f1:e0:9f:22:35:a7:41:8c:cc:da:0d:63:0b:7e:ee: 6d:17:ba:79:aa:87:a9:96:8b:12:8d:6a:08:a3:0f:47:f0:e5: 3b:da:f3:54:be:df:91:fc:d1:69:ca:0f:64:46:0f:2a:e5:10: 0b:58:4e:0b:d6:af:5b:1c:e4:e6:7c:ee:e3:a5:08:20:13:2e: 39:1b:ea:67:79:96:24:ba:6e:51:4a:6c:46:56:8d:cf:f7:c6: 87:e3:93:24:48:d3:62:3e:0b:37:f5:87:51:fc:49:68:e7:1a: ba:db:71:9a:0e:18:8f:49:04:03:7c:1a:fa:a3:f1:04:bd:3f: 1b:fd:68:33:23:7c:89:98:d2:ed:6e:8c:a1:00:b7:6d:2a:f1: 4f:3b:b5:f9:ed:bb:c8:07:c0:d6:3d:46:69:07:0d:9e:db:40: 03:35:84:76:bc:86:03:38:99:4f:6e:e2:32:e9:b3:f2:11:26: 69:2d:48:04:01:28:48:bc:27:0a:20:03:28:cd:13:6c:65:e3: a8:89:a4:6d:cc:df:80:1a:c0:9e:73:b1:ff:5d:94:08:0b:7c: a7:5e:e5:f4:6f:86:b9:65:6e:aa:c3:12:0d:78:1e:e6:9f:1b: b4:de:44:35:15:b6:00:de:00:1f:05:e2:cd:0e:3c:8c:07:1d: f1:3e:3b:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2tAAqNPCieYmUflGnZtVdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiZjBhODRmZjhmNTA1N2Y5NDkxZGVmYmU2YWQ1NWVlYWU5 OGNjMDYwHhcNMjUxMjE5MTMwMjA0WhcNMjUxMjIwMTMwMjA0WjAzMTEwLwYDVQQD EygxNGZhYmYxOTA4M2Q0ZjI1NmZlMDhlNjRmM2RkMmZkOTAyZjVhYmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BptLbJtO1GT3aN07imwc1TKCLdA aHF06G9PLGY1697Uo7jpNR/yQJ3m1b55I94S/Pp7mnElPbT7dGl9RVx+1gUFMA9B ZoPkst0pkg2MADdCXtoTzLuxhCSi4ATVk8449eAn1LzOpeQ+oAXCOdsnpFXe0WJN 6znfL39uPTT0ozBO5lj0ral5blKhTvKkVEuZ6bfuQ6Vt539W4oDcXud6jb8mHn6d 6p1/0DMXuQywOvYoPFZ7X9/+MR4zXG9tOWdmWRoRYL+4ymlPvLbr8rkjcDd+0big mr5iyfAJbuLqLxF9cjcqx4CJUm3W6INOUgX4DaK2FkDUko8dELkLHXrYAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBT6vxkIPU8lb+COZPPdL9kC9avzMB8GA1UdIwQY MBaAFKvwqE/49QV/lJHe++atVe6umMwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcV9Db1RfajFCWC1Va2Q3NzVxMVY3cTZZekFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mOThiZDQtZGUwNy00MmNkLTk4NDgt OTQ0Y2ExYTgwYjE4LzEvcV9Db1RfajFCWC1Va2Q3NzVxMVY3cTZZekFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mOThiZDQtZGUwNy00MmNkLTk4NDgtOTQ0Y2ExYTgwYjE4 LzEvcV9Db1RfajFCWC1Va2Q3NzVxMVY3cTZZekFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZlW/8eCf IjWnQYzM2g1jC37ubRe6eaqHqZaLEo1qCKMPR/DlO9rzVL7fkfzRacoPZEYPKuUQ C1hOC9avWxzk5nzu46UIIBMuORvqZ3mWJLpuUUpsRlaNz/fGh+OTJEjTYj4LN/WH UfxJaOcauttxmg4Yj0kEA3wa+qPxBL0/G/1oMyN8iZjS7W6MoQC3bSrxTzu1+e27 yAfA1j1GaQcNnttAAzWEdryGAziZT27iMumz8hEmaS1IBAEoSLwnCiADKM0TbGXj qImkbczfgBrAnnOx/12UCAt8p17l9G+GuWVuqsMSDXge5p8btN5ENRW2AN4AHwXi zQ48jAcd8T47rA== -----END CERTIFICATE-----Generated at Fri Dec 19 19:01:28 2025 by rpki-client