This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3f9619-4bd0-4aba-90e2-7c3f8c40c510/1/q9lqrojvmbTVDknsrpyuSPN4gfc.mft File: q9lqrojvmbTVDknsrpyuSPN4gfc.mft (raw, json) Hash identifier: fURhUwOBrQTuYOdbz5yeOSfh8TGC2bLBD6bNVTpitpk= Subject key identifier: 8D:2F:93:8D:24:6A:0F:33:89:D1:6E:B1:18:3D:5D:BD:73:02:C1:E9 Authority key identifier: AB:D9:6A:AE:88:EF:99:B4:D5:0E:49:EC:AE:9C:AE:48:F3:78:81:F7 Certificate issuer: /CN=abd96aae88ef99b4d50e49ecae9cae48f37881f7 Certificate serial: 019AF2AD39E5C061F4E5D65690FA53C86531 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9lqrojvmbTVDknsrpyuSPN4gfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3f9619-4bd0-4aba-90e2-7c3f8c40c510/1/q9lqrojvmbTVDknsrpyuSPN4gfc.mft Manifest number: 03B0 Signing time: Sat 06 Dec 2025 08:00:29 +0000 Manifest this update: Sat 06 Dec 2025 08:00:29 +0000 Manifest next update: Sun 07 Dec 2025 08:00:29 +0000 Files and hashes: 1: jOBsmTZZQR2oFpHPynuOSfcKlhQ.roa (hash: HS2UqrHXUPTUg04Ke/uHXIU8tldEPiGgxWt1zu5k5H0=) 2: q9lqrojvmbTVDknsrpyuSPN4gfc.crl (hash: cmlZje6ehibwQ9rj2LvcaoZ8aPRZycvGIk4GWWW1UQ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3f9619-4bd0-4aba-90e2-7c3f8c40c510/1/q9lqrojvmbTVDknsrpyuSPN4gfc.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/3f9619-4bd0-4aba-90e2-7c3f8c40c510/1/q9lqrojvmbTVDknsrpyuSPN4gfc.mft rsync://rpki.ripe.net/repository/DEFAULT/q9lqrojvmbTVDknsrpyuSPN4gfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:39:e5:c0:61:f4:e5:d6:56:90:fa:53:c8:65:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abd96aae88ef99b4d50e49ecae9cae48f37881f7 Validity Not Before: Dec 6 08:00:29 2025 GMT Not After : Dec 7 08:00:29 2025 GMT Subject: CN=8d2f938d246a0f3389d16eb1183d5dbd7302c1e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5e:b8:a2:6a:69:d5:2c:6e:a6:6b:8f:47:00: b0:97:f2:84:4a:d3:9b:e5:91:cc:dd:f6:53:f1:63: b5:75:ea:3f:91:8f:88:c2:7d:d5:ce:6a:32:4a:4b: df:4d:c5:a2:fe:40:35:5a:04:81:d8:4a:7c:f1:c6: 06:f5:ee:f6:91:fc:9c:ce:45:d8:b0:60:1c:69:02: c6:37:4f:c6:17:a3:6b:6b:31:25:15:aa:c2:90:f1: cd:05:e6:54:63:14:c5:94:5f:5b:1b:52:22:ae:8b: eb:f0:5d:7c:bd:6b:60:60:08:b7:0c:77:ab:77:ff: 4b:f6:06:ef:6f:80:02:13:95:db:c4:89:86:ff:8c: e9:eb:7c:45:37:37:66:62:c5:7c:08:2f:3a:60:4c: 48:12:d0:70:b8:4c:ab:8f:99:82:ec:e8:3c:47:4e: 98:a2:a6:c0:88:4f:63:17:64:40:40:c5:98:78:ee: 42:1c:66:69:e3:37:71:1f:c5:61:14:58:74:0c:a8: 82:3b:d3:38:e4:3d:11:bd:56:50:17:13:66:ae:61: 9c:a2:4f:35:d4:da:a9:25:06:36:08:8f:67:47:0e: 2f:38:e6:f5:ad:9a:b7:92:7c:1b:51:0a:d9:8e:df: bf:5d:2b:b4:5f:6f:34:a1:6a:bc:51:9f:d1:60:60: e9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:2F:93:8D:24:6A:0F:33:89:D1:6E:B1:18:3D:5D:BD:73:02:C1:E9 X509v3 Authority Key Identifier: keyid:AB:D9:6A:AE:88:EF:99:B4:D5:0E:49:EC:AE:9C:AE:48:F3:78:81:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9lqrojvmbTVDknsrpyuSPN4gfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3f9619-4bd0-4aba-90e2-7c3f8c40c510/1/q9lqrojvmbTVDknsrpyuSPN4gfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3f9619-4bd0-4aba-90e2-7c3f8c40c510/1/q9lqrojvmbTVDknsrpyuSPN4gfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:15:6a:ce:c0:d3:02:22:19:8e:b3:1a:0b:5e:1c:c4:ff:30: 67:19:da:f1:5e:b6:23:1b:6f:8d:30:a7:7e:ea:15:65:86:fa: b0:55:a6:46:b7:84:c6:5b:2a:ef:67:55:99:a7:ac:ab:1d:2d: 74:9a:d5:c7:a0:e6:70:a9:f3:d0:92:56:6d:14:33:78:26:1b: af:26:3f:d2:b0:b3:a0:e4:a9:07:31:24:0f:10:0d:32:24:e5: f9:0d:54:5b:a5:04:81:73:5f:b6:d1:a5:40:d1:b7:0e:f9:ab: df:29:2d:86:57:26:46:d7:79:4f:52:6e:27:60:c4:c0:57:00: c8:58:35:8b:a6:4a:8c:50:a4:1a:6f:26:7e:a8:43:22:a9:ef: 1b:10:2e:65:a2:aa:65:ff:3d:47:24:95:99:27:ec:69:0d:3b: 92:2c:a1:8c:ee:75:90:23:d5:23:e4:3d:f6:70:16:ac:13:af: 02:9d:a9:91:47:c4:b2:90:6b:f4:dc:5b:8b:e9:74:f7:6c:c0: ad:15:1a:32:83:42:0e:53:69:90:bb:61:a2:a3:cc:ad:ff:d5: 19:3e:02:4c:33:5a:cf:28:81:d5:23:5a:a9:c5:c4:55:d6:74: 40:e1:01:81:a3:39:bb:5d:fb:22:d8:bf:2a:e8:db:db:49:db: c4:04:96:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrTnlwGH05dZWkPpTyGUxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiZDk2YWFlODhlZjk5YjRkNTBlNDllY2FlOWNhZTQ4ZjM3 ODgxZjcwHhcNMjUxMjA2MDgwMDI5WhcNMjUxMjA3MDgwMDI5WjAzMTEwLwYDVQQD Eyg4ZDJmOTM4ZDI0NmEwZjMzODlkMTZlYjExODNkNWRiZDczMDJjMWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql64ompp1SxupmuPRwCwl/KEStOb 5ZHM3fZT8WO1deo/kY+Iwn3VzmoySkvfTcWi/kA1WgSB2Ep88cYG9e72kfyczkXY sGAcaQLGN0/GF6NrazElFarCkPHNBeZUYxTFlF9bG1Iirovr8F18vWtgYAi3DHer d/9L9gbvb4ACE5XbxImG/4zp63xFNzdmYsV8CC86YExIEtBwuEyrj5mC7Og8R06Y oqbAiE9jF2RAQMWYeO5CHGZp4zdxH8VhFFh0DKiCO9M45D0RvVZQFxNmrmGcok81 1NqpJQY2CI9nRw4vOOb1rZq3knwbUQrZjt+/XSu0X280oWq8UZ/RYGDpRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI0vk40kag8zidFusRg9Xb1zAsHpMB8GA1UdIwQY MBaAFKvZaq6I75m01Q5J7K6crkjzeIH3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTlscXJvanZtYlRWRGtuc3JweXVTUE40Z2ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZjk2MTktNGJkMC00YWJhLTkwZTIt N2MzZjhjNDBjNTEwLzEvcTlscXJvanZtYlRWRGtuc3JweXVTUE40Z2ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8zZjk2MTktNGJkMC00YWJhLTkwZTItN2MzZjhjNDBjNTEw LzEvcTlscXJvanZtYlRWRGtuc3JweXVTUE40Z2ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPhVqzsDT AiIZjrMaC14cxP8wZxna8V62IxtvjTCnfuoVZYb6sFWmRreExlsq72dVmaesqx0t dJrVx6DmcKnz0JJWbRQzeCYbryY/0rCzoOSpBzEkDxANMiTl+Q1UW6UEgXNfttGl QNG3Dvmr3ykthlcmRtd5T1JuJ2DEwFcAyFg1i6ZKjFCkGm8mfqhDIqnvGxAuZaKq Zf89RySVmSfsaQ07kiyhjO51kCPVI+Q99nAWrBOvAp2pkUfEspBr9Nxbi+l092zA rRUaMoNCDlNpkLthoqPMrf/VGT4CTDNazyiB1SNaqcXEVdZ0QOEBgaM5u137Iti/ Kujb20nbxASWZw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:09:48 2025 by rpki-client