This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft File: p2q9qQNG0MrSXcpvdFC8z40I53E.mft (raw, json) Hash identifier: VAKEdHsEwjNIfoYyFYv4F/8eBv+wzcwwb3/4u2kMHhI= Subject key identifier: BA:23:2D:E4:D3:68:07:AE:F8:2E:8F:EE:7B:35:E1:44:11:97:83:A9 Authority key identifier: A7:6A:BD:A9:03:46:D0:CA:D2:5D:CA:6F:74:50:BC:CF:8D:08:E7:71 Certificate issuer: /CN=a76abda90346d0cad25dca6f7450bccf8d08e771 Certificate serial: 019AF1642DFE98CF6EB56DE0AEF466D40D54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft Manifest number: 0E43 Signing time: Sat 06 Dec 2025 02:01:05 +0000 Manifest this update: Sat 06 Dec 2025 02:01:05 +0000 Manifest next update: Sun 07 Dec 2025 02:01:05 +0000 Files and hashes: 1: MzC4INKIsgRwDzo9x7bkUxRAB1c.roa (hash: Uid11k3HN0TXoHFcev6gIuzNP6/XOwG1nE/1TIUrcps=) 2: p2q9qQNG0MrSXcpvdFC8z40I53E.crl (hash: WB172Ea2Oogn4GzCso93fZyIWbzDzAONjHtUOhsq3xQ=) 3: qo2a4lO3f4INhuJwHg-a_kb1Uw0.roa (hash: Mq/0MPb+8DLoVQSsA/LmGY9yMeYe1hfS1EX+C5wkfg0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.crl rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:2d:fe:98:cf:6e:b5:6d:e0:ae:f4:66:d4:0d:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a76abda90346d0cad25dca6f7450bccf8d08e771 Validity Not Before: Dec 6 02:01:05 2025 GMT Not After : Dec 7 02:01:05 2025 GMT Subject: CN=ba232de4d36807aef82e8fee7b35e144119783a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:83:46:89:5a:0c:b8:77:ed:ca:7a:b8:b6:dc: 3b:e3:e3:30:4e:44:99:b3:09:78:bb:62:0f:42:cf: b2:23:41:33:04:19:ce:6c:c0:7e:33:74:60:34:51: c0:ef:07:c9:3c:f5:15:d8:a2:5d:4e:5c:c8:00:4e: e4:cb:22:d6:14:b1:9c:9a:7c:73:c8:7f:1b:6f:b3: 72:20:0a:2f:df:98:9e:f0:dd:0e:ab:b1:37:b4:5b: 95:eb:b7:02:29:e9:78:c1:fb:c8:00:fb:4e:1e:73: 97:c9:a4:50:7e:63:01:ab:e4:01:7e:26:f8:cb:96: 6b:36:98:70:1e:d7:23:a1:4d:91:b6:6a:a7:eb:94: ad:3c:a4:2f:e0:0a:ae:49:ba:91:3a:03:9d:f0:3e: 43:87:19:cb:0a:de:10:bd:e5:57:4b:3d:7d:b3:2a: 56:1b:18:b1:4a:e0:d1:cb:a3:40:dd:f4:3f:ee:fd: f6:1f:62:f8:95:55:ad:9a:0d:89:36:e6:25:36:79: 59:67:e7:38:67:92:05:19:7b:40:2f:5e:85:66:1d: c0:7a:4d:cb:eb:24:2f:93:c0:a2:fe:28:7d:71:65: 97:5a:45:60:1d:04:f9:25:f5:b9:1b:b5:53:76:59: 0b:2d:ba:19:a4:83:2d:40:5b:5f:a9:c7:e0:e2:df: 64:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:23:2D:E4:D3:68:07:AE:F8:2E:8F:EE:7B:35:E1:44:11:97:83:A9 X509v3 Authority Key Identifier: keyid:A7:6A:BD:A9:03:46:D0:CA:D2:5D:CA:6F:74:50:BC:CF:8D:08:E7:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:d2:c5:f3:68:fd:b5:29:39:11:ff:2c:49:23:90:86:53:dd: c6:05:4d:6b:6f:c7:f8:5b:ab:47:c9:d1:fa:fe:3f:43:2d:cc: 15:f1:f6:63:5c:2c:c2:50:75:9a:a9:d9:fe:34:08:70:6a:60: 68:e4:a3:e8:a4:c7:b0:fb:d0:51:ba:ba:80:66:81:8c:16:a3: 11:f3:27:3d:18:02:83:cd:87:08:87:7f:0d:6c:1d:6f:f2:12: 2e:4b:06:bd:17:6f:72:10:81:35:fd:d4:4b:30:46:2d:56:61: d0:ef:fd:38:d8:5a:c6:4b:69:62:08:3b:3d:95:f9:d8:57:26: 88:bd:30:0e:8f:70:ff:d9:d1:e7:4c:f8:f3:cf:9f:8a:4d:0b: 01:44:02:47:4d:ce:91:0c:8e:1a:4c:18:9a:4e:8c:c3:89:eb: b5:0c:60:85:1f:56:a9:55:79:dd:8b:dc:1b:cb:ac:5d:24:44: 90:7a:a2:ba:57:01:25:a7:65:b4:a5:62:04:52:d9:14:5b:78: c5:30:d5:fd:2e:14:8e:2d:8f:41:be:8f:0f:2e:48:b2:c9:2b: e0:72:9b:ec:0a:0a:5d:09:b8:bf:16:f1:c5:27:95:5f:cd:16: f8:d3:ca:ea:04:80:05:18:73:c4:f2:ff:a6:85:d7:ac:9e:65: b8:f3:d2:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZC3+mM9utW3grvRm1A1UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NmFiZGE5MDM0NmQwY2FkMjVkY2E2Zjc0NTBiY2NmOGQw OGU3NzEwHhcNMjUxMjA2MDIwMTA1WhcNMjUxMjA3MDIwMTA1WjAzMTEwLwYDVQQD EyhiYTIzMmRlNGQzNjgwN2FlZjgyZThmZWU3YjM1ZTE0NDExOTc4M2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5oNGiVoMuHftynq4ttw74+MwTkSZ swl4u2IPQs+yI0EzBBnObMB+M3RgNFHA7wfJPPUV2KJdTlzIAE7kyyLWFLGcmnxz yH8bb7NyIAov35ie8N0Oq7E3tFuV67cCKel4wfvIAPtOHnOXyaRQfmMBq+QBfib4 y5ZrNphwHtcjoU2Rtmqn65StPKQv4AquSbqROgOd8D5DhxnLCt4QveVXSz19sypW GxixSuDRy6NA3fQ/7v32H2L4lVWtmg2JNuYlNnlZZ+c4Z5IFGXtAL16FZh3Aek3L 6yQvk8Ci/ih9cWWXWkVgHQT5JfW5G7VTdlkLLboZpIMtQFtfqcfg4t9kVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLojLeTTaAeu+C6P7ns14UQRl4OpMB8GA1UdIwQY MBaAFKdqvakDRtDK0l3Kb3RQvM+NCOdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDJxOXFRTkcwTXJTWGNwdmRGQzh6NDBJNTNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8zNDVjOWItN2I0YS00YjIxLTliMDAt NGQzMDE2ODRjM2JjLzEvcDJxOXFRTkcwTXJTWGNwdmRGQzh6NDBJNTNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8zNDVjOWItN2I0YS00YjIxLTliMDAtNGQzMDE2ODRjM2Jj LzEvcDJxOXFRTkcwTXJTWGNwdmRGQzh6NDBJNTNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH9LF82j9 tSk5Ef8sSSOQhlPdxgVNa2/H+FurR8nR+v4/Qy3MFfH2Y1wswlB1mqnZ/jQIcGpg aOSj6KTHsPvQUbq6gGaBjBajEfMnPRgCg82HCId/DWwdb/ISLksGvRdvchCBNf3U SzBGLVZh0O/9ONhaxktpYgg7PZX52FcmiL0wDo9w/9nR50z488+fik0LAUQCR03O kQyOGkwYmk6Mw4nrtQxghR9WqVV53YvcG8usXSREkHqiulcBJadltKViBFLZFFt4 xTDV/S4Uji2PQb6PDy5Isskr4HKb7AoKXQm4vxbxxSeVX80W+NPK6gSABRhzxPL/ poXXrJ5luPPSZg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:41:02 2025 by rpki-client