This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft File: Q9_AZs580-OCV0poZnlzsLRo3zw.mft (raw, json) Hash identifier: rZKWlu7YRYOwIv8Poqvm0nOwjjLWDT4hvEonU6v1G/o= Subject key identifier: F1:10:73:93:4D:2D:3D:2F:0B:B9:A7:6C:4F:34:93:6D:C5:B4:C5:51 Authority key identifier: 43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C Certificate issuer: /CN=43dfc066ce7cd3e382574a68667973b0b468df3c Certificate serial: 019AF208A530598294C9DF454DF8A3597CCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft Manifest number: 16EB Signing time: Sat 06 Dec 2025 05:00:44 +0000 Manifest this update: Sat 06 Dec 2025 05:00:44 +0000 Manifest next update: Sun 07 Dec 2025 05:00:44 +0000 Files and hashes: 1: Q2tZHxcnTfsijpne_PaEOT5dOKg.roa (hash: FVNO2p4hWZxlSs3+Rn7ouc28IBioq9Skdi74miEeHBs=) 2: Q9_AZs580-OCV0poZnlzsLRo3zw.crl (hash: e5hy/1RV9Rfqa7521tFrgwcvNKsECG5Ia0IUyxiCyvg=) 3: UWeGIl_6VHcutFLK0L5MueAINMY.roa (hash: AVZtTMJBhtqap/729tRkybRSFR3yVa5RKP1aMlDfHfg=) 4: obC6Nt8k6sToBFUPijQUE-JEfbw.roa (hash: yOvP0SEgsV1LHmbEstQePJyjtcgM5eUQYScQpZCvC+g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:a5:30:59:82:94:c9:df:45:4d:f8:a3:59:7c:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43dfc066ce7cd3e382574a68667973b0b468df3c Validity Not Before: Dec 6 05:00:44 2025 GMT Not After : Dec 7 05:00:44 2025 GMT Subject: CN=f11073934d2d3d2f0bb9a76c4f34936dc5b4c551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:da:dc:5d:d6:f0:22:d4:37:8c:49:c1:70:fb: 9a:52:44:9e:4b:7f:39:38:61:bb:15:dc:5a:0a:f3: 38:c7:aa:b3:94:b7:7d:a4:f8:4b:a3:05:d5:68:be: ae:de:d7:1f:ad:5c:a1:04:e4:25:6d:ab:2c:d8:12: f1:16:65:23:4e:c4:63:78:0a:ec:0f:9f:5f:dc:d0: e4:70:03:1a:d2:4b:0d:cf:7a:ac:3c:72:87:e0:be: ec:b0:d3:48:18:ba:5d:85:42:b4:88:92:1d:41:1d: 5f:4a:1d:32:2b:84:71:32:cb:e3:65:06:c0:fa:59: c4:00:f5:75:3f:77:de:18:86:d2:b8:46:4c:b8:c2: b9:10:44:6b:61:85:cd:9f:1f:9e:8b:05:7a:a9:8f: 96:34:db:d5:e9:c5:09:a7:59:39:89:9b:94:4d:30: 67:9b:2d:a7:3d:4c:54:59:41:aa:86:2b:93:1c:97: 43:ef:58:82:bb:b7:5b:8c:6b:bd:6a:e1:ba:06:d9: 83:4a:39:9d:aa:8d:3b:02:7d:eb:5e:74:f8:ab:16: 9c:2c:c4:91:99:fc:42:99:80:98:32:cf:4a:07:72: d3:51:3a:0f:d9:1b:60:7c:06:9f:cb:60:dc:c9:68: d9:fc:d1:fe:61:ca:a0:11:25:2a:46:b4:d3:a0:ab: f3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:10:73:93:4D:2D:3D:2F:0B:B9:A7:6C:4F:34:93:6D:C5:B4:C5:51 X509v3 Authority Key Identifier: keyid:43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:79:79:bd:4d:07:fd:c3:08:0b:60:89:1c:cd:61:07:19:2c: 6d:6a:c8:da:e3:60:2f:3e:87:34:9b:84:50:66:a7:a9:98:11: 6d:53:66:7c:bf:ef:dc:2c:d9:88:f9:78:5f:99:d2:b8:0b:34: 74:a5:cd:ea:ee:ca:db:58:84:6e:ac:75:d5:6d:e3:a8:0d:b0: e6:83:ca:b4:0a:26:e5:29:65:ab:8b:a7:42:9f:5b:0e:c6:e4: 46:cf:58:a4:08:7f:23:d5:74:7b:c5:3a:41:08:81:fb:c4:8e: 96:05:84:be:02:8d:bd:70:0f:1d:52:84:60:1a:c4:f4:09:b2: 90:29:7e:76:0d:3c:62:75:1b:3f:49:67:fb:23:12:34:6f:9f: 2c:68:39:ed:38:9a:bb:34:56:40:55:06:a9:39:1b:3d:a4:40: 81:51:85:e8:0e:90:30:bb:3b:8d:97:07:07:ad:54:e7:6a:44: c8:18:8f:62:a3:7d:67:c1:d1:d7:06:07:a1:36:60:bd:f3:8b: 5d:5a:c2:db:de:39:37:44:fc:39:b2:ce:9f:f6:97:fa:8a:25: 96:84:41:ad:09:a0:49:06:cc:16:41:42:84:8c:a5:3f:0c:c6: 9a:e9:47:6d:9a:60:6a:78:7c:40:bf:85:0a:20:7c:54:c8:e5: d9:0e:e3:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCKUwWYKUyd9FTfijWXzMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZGZjMDY2Y2U3Y2QzZTM4MjU3NGE2ODY2Nzk3M2IwYjQ2 OGRmM2MwHhcNMjUxMjA2MDUwMDQ0WhcNMjUxMjA3MDUwMDQ0WjAzMTEwLwYDVQQD EyhmMTEwNzM5MzRkMmQzZDJmMGJiOWE3NmM0ZjM0OTM2ZGM1YjRjNTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstrcXdbwItQ3jEnBcPuaUkSeS385 OGG7FdxaCvM4x6qzlLd9pPhLowXVaL6u3tcfrVyhBOQlbass2BLxFmUjTsRjeArs D59f3NDkcAMa0ksNz3qsPHKH4L7ssNNIGLpdhUK0iJIdQR1fSh0yK4RxMsvjZQbA +lnEAPV1P3feGIbSuEZMuMK5EERrYYXNnx+eiwV6qY+WNNvV6cUJp1k5iZuUTTBn my2nPUxUWUGqhiuTHJdD71iCu7dbjGu9auG6BtmDSjmdqo07An3rXnT4qxacLMSR mfxCmYCYMs9KB3LTUToP2RtgfAafy2DcyWjZ/NH+YcqgESUqRrTToKvzCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPEQc5NNLT0vC7mnbE80k23FtMVRMB8GA1UdIwQY MBaAFEPfwGbOfNPjgldKaGZ5c7C0aN88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTlfQVpzNTgwLU9DVjBwb1pubHpzTFJvM3p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8xNjM2ZjgtNTAyNi00MDRlLWExYWUt MjUwOTc0M2FkMjllLzEvUTlfQVpzNTgwLU9DVjBwb1pubHpzTFJvM3p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8xNjM2ZjgtNTAyNi00MDRlLWExYWUtMjUwOTc0M2FkMjll LzEvUTlfQVpzNTgwLU9DVjBwb1pubHpzTFJvM3p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUXl5vU0H /cMIC2CJHM1hBxksbWrI2uNgLz6HNJuEUGanqZgRbVNmfL/v3CzZiPl4X5nSuAs0 dKXN6u7K21iEbqx11W3jqA2w5oPKtAom5Sllq4unQp9bDsbkRs9YpAh/I9V0e8U6 QQiB+8SOlgWEvgKNvXAPHVKEYBrE9AmykCl+dg08YnUbP0ln+yMSNG+fLGg57Tia uzRWQFUGqTkbPaRAgVGF6A6QMLs7jZcHB61U52pEyBiPYqN9Z8HR1wYHoTZgvfOL XVrC2945N0T8ObLOn/aX+oolloRBrQmgSQbMFkFChIylPwzGmulHbZpganh8QL+F CiB8VMjl2Q7jXg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:52:13 2025 by rpki-client