This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft File: Q9CWU4TcREh6gxcabV0FqUpq1nw.mft (raw, json) Hash identifier: e5ohQo2Z2OwXmeic6BSksPvgWJ36aEo1dupGTxZj+RA= Subject key identifier: 52:2D:94:C5:F4:B0:8F:62:35:9E:C8:26:70:AF:1E:33:7A:DC:6F:7A Authority key identifier: 43:D0:96:53:84:DC:44:48:7A:83:17:1A:6D:5D:05:A9:4A:6A:D6:7C Certificate issuer: /CN=43d0965384dc44487a83171a6d5d05a94a6ad67c Certificate serial: 019AF12D97314DDFABC330AF540C7BAA2482 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft Manifest number: 0201 Signing time: Sat 06 Dec 2025 01:01:28 +0000 Manifest this update: Sat 06 Dec 2025 01:01:28 +0000 Manifest next update: Sun 07 Dec 2025 01:01:28 +0000 Files and hashes: 1: Q9CWU4TcREh6gxcabV0FqUpq1nw.crl (hash: 99toPntnnuqmt52px08rUwSgRaARTnjo5vmcKOUCV0s=) 2: is8rJFkIshJvtMPQsNBVoFxTKBY.roa (hash: eXPJhyZn1FuLC+ECVYIsChabU+UtFgCuyBkgvqoFbIk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:97:31:4d:df:ab:c3:30:af:54:0c:7b:aa:24:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43d0965384dc44487a83171a6d5d05a94a6ad67c Validity Not Before: Dec 6 01:01:28 2025 GMT Not After : Dec 7 01:01:28 2025 GMT Subject: CN=522d94c5f4b08f62359ec82670af1e337adc6f7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d2:f5:ce:45:f8:3b:c5:fd:e5:4c:6b:70:16: 2b:10:23:8b:d5:fe:5b:5c:d9:aa:75:30:27:27:73: 51:37:63:06:6d:90:23:76:24:a7:9c:08:fd:58:5f: dc:52:0b:0d:f6:c1:04:6e:93:d1:8a:92:12:5f:82: 09:45:a5:89:36:6f:0b:dc:96:13:5d:e8:7c:16:5d: c4:9e:00:ad:bb:24:c3:cd:65:6f:7e:c6:d1:3b:6c: 87:a9:94:7a:b4:4a:6f:d9:ce:bb:83:5d:68:a1:34: 36:bd:ef:78:d6:0f:10:ef:b6:d9:fd:3f:58:f8:3d: 82:31:12:f9:ba:f9:50:d5:2f:31:2e:8e:b3:ff:cd: 78:06:a2:e1:9e:e1:ef:76:5b:7f:97:cf:c5:72:24: c3:ae:2a:2f:7e:20:56:ba:b2:14:6a:ca:96:49:c0: 5f:fa:0f:ce:b9:52:0e:70:98:4c:da:82:51:fe:a7: 0a:f5:58:e1:45:6b:08:a3:84:eb:d8:4f:b2:4e:48: 17:41:b1:b7:d8:7b:49:b6:92:b0:b7:ef:59:7e:13: 0e:df:c7:39:b4:fe:82:85:50:c9:43:dd:ff:46:fb: 9c:d7:1b:c8:2a:dc:94:97:2b:24:c4:d8:40:6a:bd: c5:89:ed:b5:e9:59:54:1d:79:7e:fb:fd:8a:07:e4: fc:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:2D:94:C5:F4:B0:8F:62:35:9E:C8:26:70:AF:1E:33:7A:DC:6F:7A X509v3 Authority Key Identifier: keyid:43:D0:96:53:84:DC:44:48:7A:83:17:1A:6D:5D:05:A9:4A:6A:D6:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:cc:64:91:20:96:2d:64:a9:17:c9:40:71:ae:2b:49:7c:bf: 80:d0:c8:31:33:87:27:90:81:20:01:49:c2:f1:ee:b4:bf:7f: 16:61:a4:1b:64:37:02:fc:2e:98:6b:f7:63:7d:f0:28:a4:22: ea:e1:d2:d1:a0:2b:79:c7:af:f2:13:23:58:76:3b:19:b1:c7: f4:00:73:f7:69:0c:72:ae:03:6c:45:92:06:16:d7:83:c4:da: d0:54:28:6c:6a:a6:53:d7:0b:ec:fc:72:ac:2a:75:29:88:ff: db:7a:65:0b:02:d4:36:b6:3b:dc:ac:77:86:7c:6b:26:3f:e7: 09:98:2d:58:d1:04:62:e9:7d:dc:3b:50:ca:2e:a3:cd:03:4d: 8f:41:ab:a8:00:32:b3:d1:43:8b:60:6a:a8:7a:17:b3:fd:e1: f0:5d:df:02:dd:40:88:35:16:99:f7:93:82:0e:61:c6:15:bb: 0d:3b:30:30:aa:42:f8:e6:70:5b:72:f5:de:8c:dd:be:d8:04: c5:24:93:9c:9b:75:cf:ac:dd:b1:8e:95:b4:a3:70:97:f7:dd: e0:f4:70:cd:f4:89:88:21:b7:f8:a9:2b:a9:0a:6d:98:eb:6c: 73:c7:d3:a9:e6:44:be:39:87:cf:c7:b9:e2:55:19:3c:b6:9b: 74:28:6e:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLZcxTd+rwzCvVAx7qiSCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZDA5NjUzODRkYzQ0NDg3YTgzMTcxYTZkNWQwNWE5NGE2 YWQ2N2MwHhcNMjUxMjA2MDEwMTI4WhcNMjUxMjA3MDEwMTI4WjAzMTEwLwYDVQQD Eyg1MjJkOTRjNWY0YjA4ZjYyMzU5ZWM4MjY3MGFmMWUzMzdhZGM2ZjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNL1zkX4O8X95UxrcBYrECOL1f5b XNmqdTAnJ3NRN2MGbZAjdiSnnAj9WF/cUgsN9sEEbpPRipISX4IJRaWJNm8L3JYT Xeh8Fl3EngCtuyTDzWVvfsbRO2yHqZR6tEpv2c67g11ooTQ2ve941g8Q77bZ/T9Y +D2CMRL5uvlQ1S8xLo6z/814BqLhnuHvdlt/l8/FciTDriovfiBWurIUasqWScBf +g/OuVIOcJhM2oJR/qcK9VjhRWsIo4Tr2E+yTkgXQbG32HtJtpKwt+9ZfhMO38c5 tP6ChVDJQ93/Rvuc1xvIKtyUlyskxNhAar3Fie216VlUHXl++/2KB+T8WQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFItlMX0sI9iNZ7IJnCvHjN63G96MB8GA1UdIwQY MBaAFEPQllOE3ERIeoMXGm1dBalKatZ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTlDV1U0VGNSRWg2Z3hjYWJWMEZxVXBxMW53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9jZjc2MTctOTI2ZC00YzRiLTk5NzYt ODFhNzgzMTlmZDZhLzEvUTlDV1U0VGNSRWg2Z3hjYWJWMEZxVXBxMW53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9jZjc2MTctOTI2ZC00YzRiLTk5NzYtODFhNzgzMTlmZDZh LzEvUTlDV1U0VGNSRWg2Z3hjYWJWMEZxVXBxMW53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJsxkkSCW LWSpF8lAca4rSXy/gNDIMTOHJ5CBIAFJwvHutL9/FmGkG2Q3AvwumGv3Y33wKKQi 6uHS0aArecev8hMjWHY7GbHH9ABz92kMcq4DbEWSBhbXg8Ta0FQobGqmU9cL7Pxy rCp1KYj/23plCwLUNrY73Kx3hnxrJj/nCZgtWNEEYul93DtQyi6jzQNNj0GrqAAy s9FDi2BqqHoXs/3h8F3fAt1AiDUWmfeTgg5hxhW7DTswMKpC+OZwW3L13ozdvtgE xSSTnJt1z6zdsY6VtKNwl/fd4PRwzfSJiCG3+KkrqQptmOtsc8fTqeZEvjmHz8e5 4lUZPLabdChu8g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:59 2025 by rpki-client