This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft File: q29qNuwpYNTQXz2dyxh7m5BOpZs.mft (raw, json) Hash identifier: QeyFXpBCV6UDpJ+qQSFA44kLERixw5yseUGhv6qzVQI= Subject key identifier: F8:72:2D:18:D6:7B:AB:81:96:D9:63:DC:82:92:05:4B:81:DD:74:80 Authority key identifier: AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B Certificate issuer: /CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b Certificate serial: 019AF3F7AD4936EAD7CECC5682383073D970 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft Manifest number: 075D Signing time: Sat 06 Dec 2025 14:01:26 +0000 Manifest this update: Sat 06 Dec 2025 14:01:26 +0000 Manifest next update: Sun 07 Dec 2025 14:01:26 +0000 Files and hashes: 1: DcoOphnBv0Z-r0DRs1Wzn6GO5g8.roa (hash: /C9jr7QH16ykeDGqHdZ0LLAVK74Wkvu3hj1t3uV43yA=) 2: Nq6xP1ML7pMOmt1I4z-fGnkBjbQ.roa (hash: eP8YWZy4BtRcpeOrILokYjbMpuSFUnV4sCVcpAqWhwM=) 3: XmMK1HZ3DcPkTMV2el117ysMhn8.roa (hash: 4EKgTSdeFZXBlalCvjDw36pJD0WP5d5sVK8uLLXyrbI=) 4: q29qNuwpYNTQXz2dyxh7m5BOpZs.crl (hash: oDa5j/C5mC39a+0362+QUYvhjFQQbcwrmMX3gyh7BcI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:ad:49:36:ea:d7:ce:cc:56:82:38:30:73:d9:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b Validity Not Before: Dec 6 14:01:26 2025 GMT Not After : Dec 7 14:01:26 2025 GMT Subject: CN=f8722d18d67bab8196d963dc8292054b81dd7480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c8:71:46:f0:68:cb:52:e5:0a:ed:9a:a0:ab: f7:bd:99:7f:0d:c9:e7:01:c7:e9:21:fe:ae:92:09: 8d:54:7b:81:fc:f3:b1:1a:bc:9b:14:05:eb:55:a1: f6:6e:3d:a3:d5:af:d5:b8:bf:eb:76:20:f4:9d:91: e4:38:22:47:23:d3:c2:d2:2b:09:9e:4e:e6:47:ac: be:95:4b:45:3e:70:e5:e2:8c:08:c7:92:57:e7:48: b4:11:db:01:92:cc:07:34:d9:c9:d6:12:2a:88:43: d8:9a:fb:27:84:d1:a1:17:51:10:bc:f6:f8:18:50: 91:09:dc:73:72:e3:d4:0a:bc:0e:ab:57:8d:5e:1c: cc:b6:60:a3:11:d0:d3:0c:62:e8:df:0c:6f:7a:cb: 30:73:f0:aa:9d:85:71:8d:ed:96:68:b6:a7:34:a5: 80:56:ee:22:65:b7:fb:49:7f:2e:24:b6:0f:96:26: a4:12:d1:9f:33:6a:62:1b:fb:3c:27:af:b2:3f:e2: a7:87:02:02:0e:70:53:4b:8e:b0:8b:3b:2b:16:3b: 67:eb:62:b7:fd:92:37:bb:7a:ea:9a:66:97:56:b9: c6:1b:da:d6:dd:a7:81:d0:19:56:a0:52:37:29:20: e9:62:c5:0a:c7:0c:f2:91:5b:fd:6c:1c:87:ab:74: 6a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:72:2D:18:D6:7B:AB:81:96:D9:63:DC:82:92:05:4B:81:DD:74:80 X509v3 Authority Key Identifier: keyid:AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:fa:fb:77:aa:67:c9:58:48:76:43:c4:b9:4e:ff:20:9c:0a: cf:33:e8:d8:2b:3a:7d:c6:95:81:bc:2f:54:80:54:05:3b:06: 6b:ea:5c:06:de:39:38:fd:5b:4c:2f:9e:8c:bb:67:3f:80:c6: 29:8a:5f:3f:be:08:b2:18:36:6c:b0:4a:b3:0f:7b:7a:49:7c: e4:cf:21:82:f3:26:aa:f3:6f:26:10:9a:53:2f:b3:38:3c:93: c3:3f:62:89:55:2a:e4:0a:04:2f:98:01:79:00:98:4b:7b:4b: ff:be:8c:72:ca:8c:67:53:83:d0:3c:a3:89:31:55:9f:2a:5f: da:02:4f:63:0e:ad:28:0c:06:76:80:4c:70:cf:5d:29:ce:72: 04:53:fb:fe:6d:1d:9e:31:9f:7b:f6:d0:47:64:6f:94:de:06: 4b:bc:27:0c:1b:04:d2:e7:94:19:6e:d4:2e:ca:ef:16:4e:04: cc:9b:46:04:b6:92:32:9c:f1:c1:ac:99:2d:1b:4a:81:e5:9e: 66:58:b9:06:ed:ef:5c:80:e0:6a:31:c3:29:55:e7:8d:07:ec: 1d:c7:a9:65:89:77:da:48:89:63:a7:4c:74:f6:ec:d8:86:7e: ba:af:7a:75:4a:eb:08:02:59:1a:2a:7a:da:8f:fa:26:c5:d9: df:42:0c:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz961JNurXzsxWgjgwc9lwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiNmY2YTM2ZWMyOTYwZDRkMDVmM2Q5ZGNiMTg3YjliOTA0 ZWE1OWIwHhcNMjUxMjA2MTQwMTI2WhcNMjUxMjA3MTQwMTI2WjAzMTEwLwYDVQQD EyhmODcyMmQxOGQ2N2JhYjgxOTZkOTYzZGM4MjkyMDU0YjgxZGQ3NDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAochxRvBoy1LlCu2aoKv3vZl/Dcnn AcfpIf6ukgmNVHuB/POxGrybFAXrVaH2bj2j1a/VuL/rdiD0nZHkOCJHI9PC0isJ nk7mR6y+lUtFPnDl4owIx5JX50i0EdsBkswHNNnJ1hIqiEPYmvsnhNGhF1EQvPb4 GFCRCdxzcuPUCrwOq1eNXhzMtmCjEdDTDGLo3wxvesswc/CqnYVxje2WaLanNKWA Vu4iZbf7SX8uJLYPliakEtGfM2piG/s8J6+yP+KnhwICDnBTS46wizsrFjtn62K3 /ZI3u3rqmmaXVrnGG9rW3aeB0BlWoFI3KSDpYsUKxwzykVv9bByHq3RqhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPhyLRjWe6uBltlj3IKSBUuB3XSAMB8GA1UdIwQY MBaAFKtvajbsKWDU0F89ncsYe5uQTqWbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTI5cU51d3BZTlRRWHoyZHl4aDdtNUJPcFpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy80ZDliYWQtZDJhYy00MTc5LTg5NDUt OTRiYjgzYTIwMDI5LzEvcTI5cU51d3BZTlRRWHoyZHl4aDdtNUJPcFpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy80ZDliYWQtZDJhYy00MTc5LTg5NDUtOTRiYjgzYTIwMDI5 LzEvcTI5cU51d3BZTlRRWHoyZHl4aDdtNUJPcFpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnvr7d6pn yVhIdkPEuU7/IJwKzzPo2Cs6fcaVgbwvVIBUBTsGa+pcBt45OP1bTC+ejLtnP4DG KYpfP74Ishg2bLBKsw97ekl85M8hgvMmqvNvJhCaUy+zODyTwz9iiVUq5AoEL5gB eQCYS3tL/76McsqMZ1OD0DyjiTFVnypf2gJPYw6tKAwGdoBMcM9dKc5yBFP7/m0d njGfe/bQR2RvlN4GS7wnDBsE0ueUGW7ULsrvFk4EzJtGBLaSMpzxwayZLRtKgeWe Zli5Bu3vXIDgajHDKVXnjQfsHcepZYl32kiJY6dMdPbs2IZ+uq96dUrrCAJZGip6 2o/6JsXZ30IMgA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:49:24 2025 by rpki-client