This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft File: qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft (raw, json) Hash identifier: taBKoj1/E9DFvAoiSM55YDtXfDY0ICxdAnjfQ7U3C04= Subject key identifier: 84:A6:FF:E6:1C:C3:37:A2:28:B8:60:5D:E1:96:4F:9D:64:AB:C5:8F Authority key identifier: A8:EF:61:BD:C0:34:FB:56:38:BC:F1:9E:07:EC:21:D9:00:19:D4:2C Certificate issuer: /CN=a8ef61bdc034fb5638bcf19e07ec21d90019d42c Certificate serial: 019B39B4511C28332DDC20175A5C2D58AB66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 03:01:16 +0000 Manifest this update: Sat 20 Dec 2025 03:01:16 +0000 Manifest next update: Sun 21 Dec 2025 03:01:16 +0000 Files and hashes: 1: qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.crl (hash: iW6AQCaVrpR3Xz6Wt6rJR+6bsfMiaD1XFDibTCM66n0=) 2: uE_fVUsQj_lty3I3lYpDSAIBXSQ.roa (hash: RZlwhFI1FuSzwxiwupmztd/WqpFc9LHBsKw5C8YM+Cc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft rsync://rpki.ripe.net/repository/DEFAULT/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:51:1c:28:33:2d:dc:20:17:5a:5c:2d:58:ab:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8ef61bdc034fb5638bcf19e07ec21d90019d42c Validity Not Before: Dec 20 03:01:16 2025 GMT Not After : Dec 21 03:01:16 2025 GMT Subject: CN=84a6ffe61cc337a228b8605de1964f9d64abc58f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b4:9a:dd:78:71:23:95:fb:b7:6b:3e:b6:6f: 98:c9:8a:73:21:bd:c2:d3:26:a2:4a:88:ed:d0:ea: bd:53:e5:8a:7c:91:8b:d3:18:71:51:d7:59:31:16: 74:80:a6:fb:51:13:2d:24:1b:24:a9:af:78:65:60: f9:ef:53:93:91:0f:3c:1a:1f:af:00:f3:44:7e:be: f4:83:8a:91:0b:44:aa:04:82:75:f4:a4:a8:fb:aa: 35:18:23:a6:1f:be:4e:fe:d8:8a:cc:2f:61:4d:85: c8:27:f4:a3:f7:5c:f1:75:4a:15:51:99:d1:a8:68: 94:10:e1:74:a5:13:8e:77:f0:4c:1c:0b:b1:0a:f7: db:12:a9:12:13:00:9b:e4:51:74:5b:fa:64:c3:09: b2:d8:0d:f3:31:69:19:c7:28:83:43:33:3c:a0:bd: 9b:d2:fd:87:37:33:cf:bb:80:d3:47:2f:43:22:c2: eb:e1:33:8c:5e:04:e7:c4:7c:9e:3e:07:a9:50:0b: 55:53:62:03:42:7e:15:d6:b7:10:c1:0b:8f:70:e6: 67:87:ab:22:ba:3b:8d:a7:5f:83:6e:83:d2:d4:af: c0:75:7c:5a:89:d6:f9:ea:31:23:8e:b8:fd:36:41: 12:0d:81:24:7e:0b:e8:ef:ca:52:e1:e7:6a:81:70: b4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A6:FF:E6:1C:C3:37:A2:28:B8:60:5D:E1:96:4F:9D:64:AB:C5:8F X509v3 Authority Key Identifier: keyid:A8:EF:61:BD:C0:34:FB:56:38:BC:F1:9E:07:EC:21:D9:00:19:D4:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:67:9f:4b:c5:b2:e1:c3:45:01:e5:b6:02:15:a8:d6:c0:63: 50:23:f6:fc:60:cb:51:30:e4:bc:04:01:10:85:f4:a0:db:b9: c8:ab:50:a9:ab:c4:f7:67:48:e3:dc:49:77:f6:ec:94:7a:4b: 2e:1d:c7:6f:ba:e5:cf:c2:96:bf:da:87:f2:3f:6d:6f:53:1c: 74:44:2a:e8:31:d2:d9:64:f4:23:ff:2c:0d:3a:39:95:a2:4c: 93:63:be:b9:bb:a4:80:9e:89:76:7a:e6:a8:d3:73:f0:2f:f0: 80:6c:62:e1:6c:8f:c3:59:22:1c:9d:be:08:3e:6b:60:ef:f3: b2:97:a2:85:20:a2:4a:e4:f4:fa:53:d0:fa:ca:ec:96:a2:d4: b1:7f:41:31:23:b9:f3:e0:9a:e8:05:50:6a:1f:35:d5:d5:07: ab:dd:43:98:39:4a:33:8b:52:01:45:36:c2:30:70:29:a8:d7: 63:16:22:27:22:f3:4f:59:a7:34:72:18:04:8c:d3:c7:1b:35: a3:81:94:52:45:cf:ea:53:b1:49:80:a6:82:50:20:f2:64:f0: 23:e6:f5:50:ca:c3:a6:cf:e7:3c:44:8b:04:f2:ae:25:83:8f: 4f:da:66:5c:0d:e8:f3:06:68:e1:69:1f:74:fe:75:b3:f6:13: cc:01:c0:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5tFEcKDMt3CAXWlwtWKtmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4ZWY2MWJkYzAzNGZiNTYzOGJjZjE5ZTA3ZWMyMWQ5MDAx OWQ0MmMwHhcNMjUxMjIwMDMwMTE2WhcNMjUxMjIxMDMwMTE2WjAzMTEwLwYDVQQD Eyg4NGE2ZmZlNjFjYzMzN2EyMjhiODYwNWRlMTk2NGY5ZDY0YWJjNThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7Sa3XhxI5X7t2s+tm+YyYpzIb3C 0yaiSojt0Oq9U+WKfJGL0xhxUddZMRZ0gKb7URMtJBskqa94ZWD571OTkQ88Gh+v APNEfr70g4qRC0SqBIJ19KSo+6o1GCOmH75O/tiKzC9hTYXIJ/Sj91zxdUoVUZnR qGiUEOF0pROOd/BMHAuxCvfbEqkSEwCb5FF0W/pkwwmy2A3zMWkZxyiDQzM8oL2b 0v2HNzPPu4DTRy9DIsLr4TOMXgTnxHyePgepUAtVU2IDQn4V1rcQwQuPcOZnh6si ujuNp1+DboPS1K/AdXxaidb56jEjjrj9NkESDYEkfgvo78pS4edqgXC0YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFISm/+YcwzeiKLhgXeGWT51kq8WPMB8GA1UdIwQY MBaAFKjvYb3ANPtWOLzxngfsIdkAGdQsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcU85aHZjQTAtMVk0dlBHZUItd2gyUUFaMUN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8zMDAxNjUtMjVjNi00MDFiLTljYmYt MWY0OWJjN2ZkM2JkLzEvcU85aHZjQTAtMVk0dlBHZUItd2gyUUFaMUN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8zMDAxNjUtMjVjNi00MDFiLTljYmYtMWY0OWJjN2ZkM2Jk LzEvcU85aHZjQTAtMVk0dlBHZUItd2gyUUFaMUN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkGefS8Wy 4cNFAeW2AhWo1sBjUCP2/GDLUTDkvAQBEIX0oNu5yKtQqavE92dI49xJd/bslHpL Lh3Hb7rlz8KWv9qH8j9tb1McdEQq6DHS2WT0I/8sDTo5laJMk2O+ubukgJ6Jdnrm qNNz8C/wgGxi4WyPw1kiHJ2+CD5rYO/zspeihSCiSuT0+lPQ+srslqLUsX9BMSO5 8+Ca6AVQah811dUHq91DmDlKM4tSAUU2wjBwKajXYxYiJyLzT1mnNHIYBIzTxxs1 o4GUUkXP6lOxSYCmglAg8mTwI+b1UMrDps/nPESLBPKuJYOPT9pmXA3o8wZo4Wkf dP51s/YTzAHAMA== -----END CERTIFICATE-----Generated at Sat Dec 20 09:53:52 2025 by rpki-client