This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft File: q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft (raw, json) Hash identifier: h2/Q5qtxzkPR+F3jDyxVZhZzMarH3cr5MrAj5gWzrzw= Subject key identifier: E3:C6:B0:BD:BD:F5:18:61:34:84:0B:16:B9:11:C0:AE:CD:DC:08:78 Authority key identifier: AB:F5:87:57:1C:0C:69:84:58:C3:85:B1:5D:60:C7:F0:8C:70:B6:FE Certificate issuer: /CN=abf587571c0c698458c385b15d60c7f08c70b6fe Certificate serial: 019B35D6FE54F109A1C35257D9A41122DF8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft Manifest number: 0B08 Signing time: Fri 19 Dec 2025 09:00:40 +0000 Manifest this update: Fri 19 Dec 2025 09:00:40 +0000 Manifest next update: Sat 20 Dec 2025 09:00:40 +0000 Files and hashes: 1: J83vR5DpFwQeOzZ3QWcMbb8635o.roa (hash: iKjeQjYNy9qFyGrhW5tTdYxo05LYCK/XsNtUNF1Tfbg=) 2: q_WHVxwMaYRYw4WxXWDH8Ixwtv4.crl (hash: V5VLeKWP7OytNDqlE33quUA6LG0F5gwCl5aU/INw5ZE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.crl rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft rsync://rpki.ripe.net/repository/DEFAULT/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 09:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d6:fe:54:f1:09:a1:c3:52:57:d9:a4:11:22:df:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf587571c0c698458c385b15d60c7f08c70b6fe Validity Not Before: Dec 19 09:00:40 2025 GMT Not After : Dec 20 09:00:40 2025 GMT Subject: CN=e3c6b0bdbdf5186134840b16b911c0aecddc0878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9e:55:00:1d:8a:55:38:63:fa:b5:5c:68:d5: 10:ae:4d:5e:8c:c7:04:28:7d:36:69:ab:f1:75:4c: ba:2d:c2:c5:fa:cc:15:62:0c:38:a7:bf:f8:a7:17: f6:c5:c4:1f:9a:44:9a:61:83:b9:35:57:43:cb:7f: d8:a9:04:db:ca:0b:a6:a7:0d:9a:f2:66:f8:06:a3: b3:5e:78:77:3e:39:7b:f7:54:90:2b:59:bb:45:ed: 0b:98:b8:b5:98:f1:88:66:41:5b:82:88:2c:05:df: 7a:92:cb:02:7c:51:4c:be:b9:b7:ae:e3:eb:54:39: b2:e8:ba:c7:44:e0:a2:11:7f:3e:ea:57:f5:c1:13: cc:5a:d3:5c:bf:a4:a1:f9:ce:fd:20:2b:bc:63:ca: 18:6c:ae:36:b9:d7:26:99:bb:e6:a8:4e:69:52:af: 58:84:65:40:36:65:a0:33:50:6b:ef:10:cc:e1:91: ca:61:cc:2c:52:1b:56:59:31:df:1b:07:d1:ab:f4: 97:4e:9e:dd:fc:30:c6:29:f4:d7:d1:14:cb:18:98: 58:5f:96:90:44:61:d6:f6:03:af:af:98:1a:2b:05: b2:5b:7a:ff:2d:84:4f:a3:71:be:9d:04:32:2d:39: 65:cd:fb:90:30:8c:68:fe:83:e1:ce:7e:a6:70:5b: 69:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:C6:B0:BD:BD:F5:18:61:34:84:0B:16:B9:11:C0:AE:CD:DC:08:78 X509v3 Authority Key Identifier: keyid:AB:F5:87:57:1C:0C:69:84:58:C3:85:B1:5D:60:C7:F0:8C:70:B6:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:3d:75:59:8d:b3:62:ec:9b:de:32:73:fa:ce:40:f3:9f:f8: d9:aa:77:47:c3:5a:bf:63:66:59:13:b4:be:d4:8d:60:39:f5: 9a:73:22:71:97:88:92:2e:d1:ee:82:12:1b:8d:d9:35:3d:bd: 2d:34:4d:fd:1c:27:c4:b1:f0:76:54:1e:fc:6d:68:51:3b:e9: 67:a6:2a:47:56:05:4a:6b:5d:0c:b3:d1:56:aa:83:7c:05:1a: c3:e7:1a:c3:e7:ab:e9:26:3f:d0:7b:2f:13:93:53:cd:64:1d: 46:7c:0b:6f:b1:13:c4:f8:71:18:99:3d:92:64:64:e1:b3:f7: cf:43:5e:8d:fc:04:31:fb:42:be:5a:7c:c9:db:5d:b0:b1:19: a8:be:ea:07:d8:b8:6c:16:51:a4:18:5b:f0:11:7d:d6:a0:8e: d4:94:9d:75:a3:92:bf:ef:e6:e8:fc:a1:93:95:64:8b:0f:9b: c3:fd:7c:ae:4a:9a:0b:72:dc:fb:52:df:6e:50:33:fc:e5:64: 81:2b:f4:ae:2d:91:51:cc:b2:b4:9c:b5:8b:a8:c2:63:2c:69: a6:12:d6:c6:39:78:35:a0:34:41:bc:d6:68:82:a8:7f:25:9c: ac:b2:85:d4:29:70:43:c0:6c:62:2b:81:06:e2:e9:cc:75:8f: 25:b3:8f:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs11v5U8Qmhw1JX2aQRIt+PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiZjU4NzU3MWMwYzY5ODQ1OGMzODViMTVkNjBjN2YwOGM3 MGI2ZmUwHhcNMjUxMjE5MDkwMDQwWhcNMjUxMjIwMDkwMDQwWjAzMTEwLwYDVQQD EyhlM2M2YjBiZGJkZjUxODYxMzQ4NDBiMTZiOTExYzBhZWNkZGMwODc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm55VAB2KVThj+rVcaNUQrk1ejMcE KH02aavxdUy6LcLF+swVYgw4p7/4pxf2xcQfmkSaYYO5NVdDy3/YqQTbygumpw2a 8mb4BqOzXnh3Pjl791SQK1m7Re0LmLi1mPGIZkFbgogsBd96kssCfFFMvrm3ruPr VDmy6LrHROCiEX8+6lf1wRPMWtNcv6Sh+c79ICu8Y8oYbK42udcmmbvmqE5pUq9Y hGVANmWgM1Br7xDM4ZHKYcwsUhtWWTHfGwfRq/SXTp7d/DDGKfTX0RTLGJhYX5aQ RGHW9gOvr5gaKwWyW3r/LYRPo3G+nQQyLTllzfuQMIxo/oPhzn6mcFtp0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOPGsL299RhhNIQLFrkRwK7N3Ah4MB8GA1UdIwQY MBaAFKv1h1ccDGmEWMOFsV1gx/CMcLb+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcV9XSFZ4d01hWVJZdzRXeFhXREg4SXh3dHY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi85ZDhiODItNDdhZS00ZTEyLTlhNGQt NzgyZmU3MDkyMDEwLzEvcV9XSFZ4d01hWVJZdzRXeFhXREg4SXh3dHY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi85ZDhiODItNDdhZS00ZTEyLTlhNGQtNzgyZmU3MDkyMDEw LzEvcV9XSFZ4d01hWVJZdzRXeFhXREg4SXh3dHY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADD11WY2z Yuyb3jJz+s5A85/42ap3R8Nav2NmWRO0vtSNYDn1mnMicZeIki7R7oISG43ZNT29 LTRN/RwnxLHwdlQe/G1oUTvpZ6YqR1YFSmtdDLPRVqqDfAUaw+caw+er6SY/0Hsv E5NTzWQdRnwLb7ETxPhxGJk9kmRk4bP3z0NejfwEMftCvlp8ydtdsLEZqL7qB9i4 bBZRpBhb8BF91qCO1JSddaOSv+/m6Pyhk5Vkiw+bw/18rkqaC3Lc+1LfblAz/OVk gSv0ri2RUcyytJy1i6jCYyxpphLWxjl4NaA0QbzWaIKofyWcrLKF1ClwQ8BsYiuB BuLpzHWPJbOPdQ== -----END CERTIFICATE-----Generated at Fri Dec 19 18:32:22 2025 by rpki-client