This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft File: q8GRjB9F5uwX2spnp60ZPK8Et7I.mft (raw, json) Hash identifier: 9nLuR6ssx4m3jdV9GQtzQJAbKeEmYwGpjl7MwuPSM3g= Subject key identifier: C8:7B:B7:70:24:C7:11:E3:4D:BE:09:F8:7E:D6:D0:1F:C4:37:52:B2 Authority key identifier: AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2 Certificate issuer: /CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2 Certificate serial: 019AF385496EF014350575F7E284E2FE2240 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft Manifest number: 05DB Signing time: Sat 06 Dec 2025 11:56:29 +0000 Manifest this update: Sat 06 Dec 2025 11:56:29 +0000 Manifest next update: Sun 07 Dec 2025 11:56:29 +0000 Files and hashes: 1: DYsiQqVjAuJI8byUG8mKd0jSQh4.asa (hash: YMrGSqc7KqHO4j1lgZTxY1WoFwm99rirLTct3gzShT0=) 2: HMmCdkpHTMLYze6qZGF-iwUAzmA.roa (hash: EsQLIbughOGxNVdEh2Tzb5JlJpT3ZvlB6qAeVifGGwk=) 3: L4RKq9blDuun-Ov7h4-EXCJDU7o.roa (hash: rV2ghgo1vc0bF0beR2sZL8zKS4novhD+fyLSyA4fGEk=) 4: TKYCIQIu4F23JxsEDfGIzBctkEc.roa (hash: EAnr/9lW4r6/S4hhnfhRdmsx8JCo45r2zRW9cF9kcLo=) 5: _HpIO26oTlp3ah6eb8LpZJn4sZU.asa (hash: rNwAJLoUrEajetBo8sWHQzmyDtFszLMTuAjSH9z1rL4=) 6: iLSgImJKA6sfcvh2C5H8MSiXYgc.roa (hash: i6Q1/zgekWcF03q/uHf2eJzbB2A8g+6dH//zgAn+ods=) 7: q8GRjB9F5uwX2spnp60ZPK8Et7I.crl (hash: DeJNfVuc/a2InyK2mSOgOiOyopy9sMwcYqH8yMNDtq4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:85:49:6e:f0:14:35:05:75:f7:e2:84:e2:fe:22:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2 Validity Not Before: Dec 6 11:56:29 2025 GMT Not After : Dec 7 11:56:29 2025 GMT Subject: CN=c87bb77024c711e34dbe09f87ed6d01fc43752b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:05:96:d7:4e:cb:88:db:a0:9a:01:82:74:21: 0d:2f:02:31:2a:52:d5:9d:43:ba:98:78:11:a0:77: 4f:98:e0:50:bd:48:98:3b:c5:23:15:01:7e:c6:8e: a1:55:08:9a:45:36:12:69:d6:58:db:86:88:bf:d1: e1:98:fa:4e:01:20:c6:39:c8:2e:bf:fa:41:d0:ea: dd:26:57:0b:2b:1c:b1:8d:4b:5c:cb:ee:a2:4b:6f: c1:21:f0:76:c6:1e:d9:45:4a:2e:75:b3:b7:99:a9: 5b:1b:67:d9:7f:7c:bd:f1:bf:37:0f:a8:17:f2:45: 09:22:c2:b9:40:a7:a5:97:43:8b:4a:68:57:09:44: 5d:53:89:ce:2a:d8:0a:ff:ac:78:7d:b8:e1:d1:da: 4f:53:f3:26:20:df:91:b3:17:fa:8b:5a:0d:fa:7f: 26:d4:cc:fb:05:cf:1b:e2:8e:51:55:ba:26:2a:03: 44:a5:d2:1d:64:f6:ef:7e:a4:65:67:a4:4f:ba:dc: ff:dc:8c:d4:2d:0f:cc:45:20:95:fa:fb:2b:85:a8: 53:88:61:40:61:19:d0:c8:b4:77:da:eb:b9:ce:a1: b0:da:68:35:c2:75:f6:13:06:71:e3:1e:f3:d8:e1: 30:0d:82:a6:90:69:0d:9d:6b:f0:92:d2:c1:0b:d7: 2f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:7B:B7:70:24:C7:11:E3:4D:BE:09:F8:7E:D6:D0:1F:C4:37:52:B2 X509v3 Authority Key Identifier: keyid:AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:e9:25:82:24:a6:6c:72:40:71:3c:ec:80:63:6c:17:ee:d9: e0:e3:2e:ba:29:93:aa:8f:d2:30:c6:f8:3b:e8:6a:cb:c7:a4: 69:8d:6c:be:b4:3a:b0:06:ea:6c:bc:1d:f0:c0:d3:8a:37:0a: a6:95:5e:79:10:04:e8:33:75:45:2e:ae:83:93:2d:93:22:2b: 6f:ab:7e:71:4c:3c:c4:22:87:a0:0c:8d:5f:bc:8b:1c:47:ad: a8:59:fe:02:40:a4:1f:6e:b6:77:7c:31:04:6a:f0:84:b8:20: 00:01:c3:e0:11:cd:b1:69:76:5d:db:04:20:03:dc:f5:21:98: 2b:e4:8e:45:13:02:0f:9d:88:1d:43:7c:20:bd:47:f9:e8:7c: 2e:06:68:a9:55:2d:27:b6:80:e4:a0:e1:a4:a8:74:9b:c7:3f: 06:f7:98:63:ea:14:fa:3e:53:94:b5:2d:fd:9d:95:ff:5a:8e: 42:75:e4:29:a6:07:d4:8c:81:b1:96:ab:8e:6c:7c:19:69:6a: d1:0e:c9:93:db:f0:79:65:c2:ce:42:ee:6c:07:2a:3f:7b:db: 72:1b:ee:46:f0:b4:df:6e:27:2a:3a:20:2c:31:03:28:ec:5b: 23:87:9c:47:07:b9:b5:7f:d4:a0:d2:f2:7b:68:09:e1:00:8e: 5f:05:21:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzhUlu8BQ1BXX34oTi/iJAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYzE5MThjMWY0NWU2ZWMxN2RhY2E2N2E3YWQxOTNjYWYw NGI3YjIwHhcNMjUxMjA2MTE1NjI5WhcNMjUxMjA3MTE1NjI5WjAzMTEwLwYDVQQD EyhjODdiYjc3MDI0YzcxMWUzNGRiZTA5Zjg3ZWQ2ZDAxZmM0Mzc1MmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgWW107LiNugmgGCdCENLwIxKlLV nUO6mHgRoHdPmOBQvUiYO8UjFQF+xo6hVQiaRTYSadZY24aIv9HhmPpOASDGOcgu v/pB0OrdJlcLKxyxjUtcy+6iS2/BIfB2xh7ZRUoudbO3malbG2fZf3y98b83D6gX 8kUJIsK5QKell0OLSmhXCURdU4nOKtgK/6x4fbjh0dpPU/MmIN+Rsxf6i1oN+n8m 1Mz7Bc8b4o5RVbomKgNEpdIdZPbvfqRlZ6RPutz/3IzULQ/MRSCV+vsrhahTiGFA YRnQyLR32uu5zqGw2mg1wnX2EwZx4x7z2OEwDYKmkGkNnWvwktLBC9cvdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMh7t3AkxxHjTb4J+H7W0B/EN1KyMB8GA1UdIwQY MBaAFKvBkYwfRebsF9rKZ6etGTyvBLeyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcThHUmpCOUY1dXdYMnNwbnA2MFpQSzhFdDdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84Zjg4ZGUtZGFlZC00OGQyLWI3MDEt NmJiNWZlNjY1NzUwLzEvcThHUmpCOUY1dXdYMnNwbnA2MFpQSzhFdDdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi84Zjg4ZGUtZGFlZC00OGQyLWI3MDEtNmJiNWZlNjY1NzUw LzEvcThHUmpCOUY1dXdYMnNwbnA2MFpQSzhFdDdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL+klgiSm bHJAcTzsgGNsF+7Z4OMuuimTqo/SMMb4O+hqy8ekaY1svrQ6sAbqbLwd8MDTijcK ppVeeRAE6DN1RS6ug5MtkyIrb6t+cUw8xCKHoAyNX7yLHEetqFn+AkCkH262d3wx BGrwhLggAAHD4BHNsWl2XdsEIAPc9SGYK+SORRMCD52IHUN8IL1H+eh8LgZoqVUt J7aA5KDhpKh0m8c/BveYY+oU+j5TlLUt/Z2V/1qOQnXkKaYH1IyBsZarjmx8GWlq 0Q7Jk9vweWXCzkLubAcqP3vbchvuRvC0324nKjogLDEDKOxbI4ecRwe5tX/UoNLy e2gJ4QCOXwUhFg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:06:07 2025 by rpki-client