This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft File: Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft (raw, json) Hash identifier: M5AkXKMxhUZDKHCwVbQUO45/mYX8H4/4ZmcbcGnUfOM= Subject key identifier: 44:62:FC:7C:05:E8:5E:A0:63:FD:7A:4C:89:70:A3:8B:39:43:BF:43 Authority key identifier: 43:D5:18:D7:30:77:88:FC:A3:89:18:78:49:0E:4F:32:D9:AA:F6:AF Certificate issuer: /CN=43d518d7307788fca3891878490e4f32d9aaf6af Certificate serial: 019AF16471F2F5C5E4DA092869C80969A892 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft Manifest number: 11AB Signing time: Sat 06 Dec 2025 02:01:23 +0000 Manifest this update: Sat 06 Dec 2025 02:01:23 +0000 Manifest next update: Sun 07 Dec 2025 02:01:23 +0000 Files and hashes: 1: Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.crl (hash: Ezo6eKHM1eMpuX0GXAF5roQu6umescjekHfi+3uXD7U=) 2: hOsUXVARCl8NqYdv3cI6OIcfqwU.roa (hash: w1gjvrKQRUt3hmiD9OYkOr05DsegCS6tRj5zStTTlPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.crl rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft rsync://rpki.ripe.net/repository/DEFAULT/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:71:f2:f5:c5:e4:da:09:28:69:c8:09:69:a8:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43d518d7307788fca3891878490e4f32d9aaf6af Validity Not Before: Dec 6 02:01:23 2025 GMT Not After : Dec 7 02:01:23 2025 GMT Subject: CN=4462fc7c05e85ea063fd7a4c8970a38b3943bf43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d2:36:da:fd:bd:eb:f0:84:60:62:80:53:5a: 5a:0c:7e:ac:68:e2:7b:de:b1:1b:d1:e8:bd:e1:4f: 4b:8e:a0:b3:b5:b3:e2:08:c7:97:72:39:f5:49:08: 66:68:00:46:78:a2:d8:7f:f6:4e:00:e7:67:e2:b4: bb:5e:f0:e0:73:17:5c:06:30:cb:91:c5:c0:4a:a3: 63:ed:4d:59:7d:7a:1d:91:f2:96:17:f1:0d:c1:8f: b2:3e:51:55:39:16:b4:c3:02:c1:98:f5:93:27:8e: 28:c3:98:92:80:e6:c5:bf:5a:9a:c8:57:b8:82:f4: d5:89:1e:5a:40:d2:7d:81:ce:93:04:d9:a3:ac:46: 62:3f:52:17:80:ad:05:54:fb:cf:7b:91:71:0a:88: 3b:5f:f9:50:63:93:80:61:f5:c9:83:ca:32:95:ba: 86:f3:c1:b1:b5:d1:9c:a4:18:49:45:62:b7:17:a0: 9a:6c:bc:f6:7e:a4:7c:37:8a:34:81:c9:71:f2:4c: c1:24:18:51:de:1e:50:b0:92:fb:d2:19:1f:6b:f7: db:e9:9f:fa:2e:8e:6f:a8:d8:30:d7:28:aa:d6:87: e1:82:69:6a:cf:63:da:de:f2:60:ac:4a:98:d9:35: d4:70:15:9d:27:30:55:ab:60:3a:a2:43:1a:bb:47: ef:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:62:FC:7C:05:E8:5E:A0:63:FD:7A:4C:89:70:A3:8B:39:43:BF:43 X509v3 Authority Key Identifier: keyid:43:D5:18:D7:30:77:88:FC:A3:89:18:78:49:0E:4F:32:D9:AA:F6:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:1b:4c:68:91:57:cd:5b:e1:c1:4b:5a:c6:d2:d8:2e:eb:8d: 8d:36:3b:2d:48:52:2a:63:84:32:32:61:ad:c8:92:27:d3:35: 1d:db:f3:d7:87:2b:00:54:b1:b6:c7:3f:1f:79:e1:12:c1:1e: d8:9d:dd:9a:9d:e9:87:d0:fe:31:e7:91:dc:05:d8:16:3e:23: d2:8b:90:84:34:e7:84:10:4a:38:15:82:09:2f:95:49:40:19: 71:6c:81:41:b7:a4:83:36:09:6d:ad:e8:59:92:1c:b8:86:6a: a0:6f:74:9c:c1:62:11:16:f4:7a:31:9b:bf:3a:cc:dd:30:ba: a2:c2:17:61:6a:d7:fa:be:2d:10:38:00:99:67:ff:c7:ff:f2: 5d:72:0a:29:6d:a9:00:0f:cb:70:10:54:e8:89:98:7d:a7:05: f4:10:0d:8d:06:7f:95:29:ea:d6:84:29:5d:62:a5:29:eb:86: 8c:6e:e1:9f:8a:88:86:3a:66:42:82:f9:17:4f:b1:b9:cb:38: d5:cb:0a:94:82:1b:b3:56:3a:2c:f8:37:34:38:83:d0:ee:18: 1f:fa:9f:66:ad:7c:c0:0b:b0:c6:36:74:ab:59:0f:40:14:cc: a9:fd:1b:54:ef:99:24:cb:41:8d:4d:41:53:b4:50:cd:0d:3a: fa:40:8e:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZHHy9cXk2gkoacgJaaiSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZDUxOGQ3MzA3Nzg4ZmNhMzg5MTg3ODQ5MGU0ZjMyZDlh YWY2YWYwHhcNMjUxMjA2MDIwMTIzWhcNMjUxMjA3MDIwMTIzWjAzMTEwLwYDVQQD Eyg0NDYyZmM3YzA1ZTg1ZWEwNjNmZDdhNGM4OTcwYTM4YjM5NDNiZjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudI22v296/CEYGKAU1paDH6saOJ7 3rEb0ei94U9LjqCztbPiCMeXcjn1SQhmaABGeKLYf/ZOAOdn4rS7XvDgcxdcBjDL kcXASqNj7U1ZfXodkfKWF/ENwY+yPlFVORa0wwLBmPWTJ44ow5iSgObFv1qayFe4 gvTViR5aQNJ9gc6TBNmjrEZiP1IXgK0FVPvPe5FxCog7X/lQY5OAYfXJg8oylbqG 88GxtdGcpBhJRWK3F6CabLz2fqR8N4o0gclx8kzBJBhR3h5QsJL70hkfa/fb6Z/6 Lo5vqNgw1yiq1ofhgmlqz2Pa3vJgrEqY2TXUcBWdJzBVq2A6okMau0fvjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFERi/HwF6F6gY/16TIlwo4s5Q79DMB8GA1UdIwQY MBaAFEPVGNcwd4j8o4kYeEkOTzLZqvavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTlVWTF6QjNpUHlqaVJoNFNRNVBNdG1xOXE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9hYjdjYWEtOGJjNS00YmNlLWExMzAt ZWRkZjMyMGQ1MGUyLzEvUTlVWTF6QjNpUHlqaVJoNFNRNVBNdG1xOXE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9hYjdjYWEtOGJjNS00YmNlLWExMzAtZWRkZjMyMGQ1MGUy LzEvUTlVWTF6QjNpUHlqaVJoNFNRNVBNdG1xOXE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApxtMaJFX zVvhwUtaxtLYLuuNjTY7LUhSKmOEMjJhrciSJ9M1Hdvz14crAFSxtsc/H3nhEsEe 2J3dmp3ph9D+MeeR3AXYFj4j0ouQhDTnhBBKOBWCCS+VSUAZcWyBQbekgzYJba3o WZIcuIZqoG90nMFiERb0ejGbvzrM3TC6osIXYWrX+r4tEDgAmWf/x//yXXIKKW2p AA/LcBBU6ImYfacF9BANjQZ/lSnq1oQpXWKlKeuGjG7hn4qIhjpmQoL5F0+xucs4 1csKlIIbs1Y6LPg3NDiD0O4YH/qfZq18wAuwxjZ0q1kPQBTMqf0bVO+ZJMtBjU1B U7RQzQ06+kCOUw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:57:33 2025 by rpki-client