This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft File: Q9_AZs580-OCV0poZnlzsLRo3zw.mft (raw, json) Hash identifier: n2jnkf+C7HqjbsZ2Dk6XWIPtR/McTSO2LYNPuVDBklE= Subject key identifier: B4:EE:1D:59:30:E0:A9:40:B1:64:21:F0:34:EF:B9:73:11:83:E4:EC Authority key identifier: 43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C Certificate issuer: /CN=43dfc066ce7cd3e382574a68667973b0b468df3c Certificate serial: 019B3F4848536F3CF4E8FC11EAA1583B480A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft Manifest number: 1713 Signing time: Sun 21 Dec 2025 05:01:00 +0000 Manifest this update: Sun 21 Dec 2025 05:01:00 +0000 Manifest next update: Mon 22 Dec 2025 05:01:00 +0000 Files and hashes: 1: Q2tZHxcnTfsijpne_PaEOT5dOKg.roa (hash: FVNO2p4hWZxlSs3+Rn7ouc28IBioq9Skdi74miEeHBs=) 2: Q9_AZs580-OCV0poZnlzsLRo3zw.crl (hash: JQUjAWhBHBBtyWeejsaGv/NRc2cwS+5YhA0OxfRzG7E=) 3: UWeGIl_6VHcutFLK0L5MueAINMY.roa (hash: AVZtTMJBhtqap/729tRkybRSFR3yVa5RKP1aMlDfHfg=) 4: obC6Nt8k6sToBFUPijQUE-JEfbw.roa (hash: yOvP0SEgsV1LHmbEstQePJyjtcgM5eUQYScQpZCvC+g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:48:53:6f:3c:f4:e8:fc:11:ea:a1:58:3b:48:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43dfc066ce7cd3e382574a68667973b0b468df3c Validity Not Before: Dec 21 05:01:00 2025 GMT Not After : Dec 22 05:01:00 2025 GMT Subject: CN=b4ee1d5930e0a940b16421f034efb9731183e4ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d6:68:50:ba:d8:89:dd:6f:0b:78:51:3a:7c: 09:33:72:4f:c5:62:03:49:ef:ad:b6:9c:96:da:cd: a0:54:f9:d4:1e:d6:d9:3e:b4:cd:d2:c5:cb:75:c5: 45:22:70:20:3c:83:c4:14:83:7e:70:18:27:40:c2: 7c:9d:f2:0d:11:17:3b:f2:5d:4d:6b:62:17:ef:8f: ef:93:2c:fa:0a:05:41:bf:c8:52:4d:9e:2b:2d:87: 44:76:54:af:f8:e0:fb:5a:06:fb:a3:5e:d8:82:00: bf:01:6b:0e:3a:bd:76:96:7a:f1:ad:f6:82:27:0e: 8e:5f:35:a4:b8:9b:21:0e:30:f8:95:b3:15:bc:f3: e2:be:18:43:ad:4b:87:22:e1:a2:7d:2a:af:af:2f: 6d:dd:0c:e4:f8:8e:0c:cd:9e:80:d8:58:59:cf:72: 60:24:96:a4:43:93:ba:f2:69:76:d2:b2:b2:01:ae: a5:c8:20:e3:20:b8:7e:9a:83:8d:ba:c6:4d:77:81: 7e:35:d9:36:94:1b:f2:71:52:c7:78:9c:b2:c8:7e: 8c:9c:1b:55:cc:d6:92:14:f3:ad:85:73:27:77:94: f6:6c:79:a2:b5:d7:51:ed:f1:f9:8b:5a:b7:06:8c: 01:26:01:38:33:c2:94:4e:d8:58:88:d4:3c:e2:5a: 87:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:EE:1D:59:30:E0:A9:40:B1:64:21:F0:34:EF:B9:73:11:83:E4:EC X509v3 Authority Key Identifier: keyid:43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:1d:44:e5:1b:eb:ec:25:99:e2:bb:c6:6e:2b:2b:dc:16:a1: 2f:81:ac:a0:66:5e:3f:4c:b0:58:f1:c3:34:08:1f:74:6e:cc: 03:0f:d2:1c:c3:0c:70:d0:d1:b9:b8:78:03:78:41:98:dd:a2: 21:0a:32:80:c8:48:ba:72:70:55:bb:62:a6:b5:1f:e4:29:2c: 3a:51:84:44:ac:92:a4:ca:9b:a9:05:2d:62:34:9a:b0:f4:16: 35:fb:87:ff:a5:28:a1:73:15:bb:b2:8b:f3:bd:d2:18:f2:1b: 9f:50:f2:fb:d3:4d:3e:6c:39:38:d5:02:59:fc:2c:af:6e:b7: 56:0c:2b:e5:86:7a:6e:5b:93:c2:c6:cf:84:d8:01:fd:11:fa: 13:0b:1a:d8:19:aa:48:aa:63:fb:3f:3b:d0:82:a9:a1:14:3e: 88:06:48:ef:5b:47:4c:79:99:3c:b8:46:72:9e:af:82:c3:fe: 90:48:cf:2d:b7:a0:46:83:d7:e3:a0:ed:c5:10:79:ed:9b:0f: d9:78:39:94:90:37:b4:27:05:21:7a:fa:b2:a2:7f:30:c4:60: b5:bf:89:f0:d2:80:7a:4d:a2:97:f2:73:9d:49:29:10:18:16: 79:f4:8f:b6:29:33:e9:48:5e:ef:81:69:84:cd:9c:05:f3:ea: d2:70:a3:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SEhTbzz06PwR6qFYO0gKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZGZjMDY2Y2U3Y2QzZTM4MjU3NGE2ODY2Nzk3M2IwYjQ2 OGRmM2MwHhcNMjUxMjIxMDUwMTAwWhcNMjUxMjIyMDUwMTAwWjAzMTEwLwYDVQQD EyhiNGVlMWQ1OTMwZTBhOTQwYjE2NDIxZjAzNGVmYjk3MzExODNlNGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdZoULrYid1vC3hROnwJM3JPxWID Se+ttpyW2s2gVPnUHtbZPrTN0sXLdcVFInAgPIPEFIN+cBgnQMJ8nfINERc78l1N a2IX74/vkyz6CgVBv8hSTZ4rLYdEdlSv+OD7Wgb7o17YggC/AWsOOr12lnrxrfaC Jw6OXzWkuJshDjD4lbMVvPPivhhDrUuHIuGifSqvry9t3Qzk+I4MzZ6A2FhZz3Jg JJakQ5O68ml20rKyAa6lyCDjILh+moONusZNd4F+Ndk2lBvycVLHeJyyyH6MnBtV zNaSFPOthXMnd5T2bHmitddR7fH5i1q3BowBJgE4M8KUTthYiNQ84lqHbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLTuHVkw4KlAsWQh8DTvuXMRg+TsMB8GA1UdIwQY MBaAFEPfwGbOfNPjgldKaGZ5c7C0aN88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTlfQVpzNTgwLU9DVjBwb1pubHpzTFJvM3p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8xNjM2ZjgtNTAyNi00MDRlLWExYWUt MjUwOTc0M2FkMjllLzEvUTlfQVpzNTgwLU9DVjBwb1pubHpzTFJvM3p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8xNjM2ZjgtNTAyNi00MDRlLWExYWUtMjUwOTc0M2FkMjll LzEvUTlfQVpzNTgwLU9DVjBwb1pubHpzTFJvM3p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjB1E5Rvr 7CWZ4rvGbisr3BahL4GsoGZeP0ywWPHDNAgfdG7MAw/SHMMMcNDRubh4A3hBmN2i IQoygMhIunJwVbtiprUf5CksOlGERKySpMqbqQUtYjSasPQWNfuH/6UooXMVu7KL 873SGPIbn1Dy+9NNPmw5ONUCWfwsr263Vgwr5YZ6bluTwsbPhNgB/RH6Ewsa2Bmq SKpj+z870IKpoRQ+iAZI71tHTHmZPLhGcp6vgsP+kEjPLbegRoPX46DtxRB57ZsP 2Xg5lJA3tCcFIXr6sqJ/MMRgtb+J8NKAek2il/JznUkpEBgWefSPtikz6Uhe74Fp hM2cBfPq0nCj3A== -----END CERTIFICATE-----Generated at Sun Dec 21 10:20:46 2025 by rpki-client