This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft File: q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft (raw, json) Hash identifier: XFCvvArXFAkuxduq58OT7SU5zjlDVFskS8gNDE8JQWA= Subject key identifier: 73:FB:EB:C4:81:B0:D7:C2:9C:AA:8E:4E:E3:03:F4:20:D3:C8:57:3C Authority key identifier: AB:C3:A3:09:1C:3B:1A:8C:9E:82:A0:9D:37:40:90:F6:D7:30:0B:20 Certificate issuer: /CN=abc3a3091c3b1a8c9e82a09d374090f6d7300b20 Certificate serial: 019AF50A1EF31033D41DE16E344442C3AB99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft Manifest number: 13A5 Signing time: Sat 06 Dec 2025 19:01:12 +0000 Manifest this update: Sat 06 Dec 2025 19:01:12 +0000 Manifest next update: Sun 07 Dec 2025 19:01:12 +0000 Files and hashes: 1: U0noiLh-k1UXMkIIKBzlJl8anFA.roa (hash: elwLD+4HU2f37SzvunJF3t0pDH8qA22yevc6clLdIHM=) 2: q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl (hash: dk8Rsdv5mx0sRaJc2Rv3amJNZocg+0JmOnVb/XMswAE=) 3: yWfF0scZVTP5CTfvSN5AZLRV8Wo.roa (hash: lubmpITrOYefbF4JNbcAm7bQPDyIFYxHEuPyUf330UI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:1e:f3:10:33:d4:1d:e1:6e:34:44:42:c3:ab:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abc3a3091c3b1a8c9e82a09d374090f6d7300b20 Validity Not Before: Dec 6 19:01:12 2025 GMT Not After : Dec 7 19:01:12 2025 GMT Subject: CN=73fbebc481b0d7c29caa8e4ee303f420d3c8573c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:91:c4:10:3d:96:de:05:db:20:ff:1a:76:db: 1c:84:4c:55:46:46:fb:97:40:e3:85:7f:c4:24:6a: b2:5c:12:fd:4d:dd:5e:ee:d9:f3:b4:2c:6f:d3:f1: 8b:11:96:c4:46:4a:8d:e6:c1:dc:1f:a9:c5:db:bb: 03:fb:36:34:91:b2:9a:34:2e:1a:93:a1:fe:76:57: 64:81:29:9b:1c:15:fb:c2:b0:41:71:14:39:76:ba: 0f:84:61:1b:b1:b3:84:34:4b:26:ae:3d:dd:7b:57: a1:be:e6:dd:20:06:c5:e1:2b:68:b7:65:dc:15:13: 15:d1:ef:67:3f:bb:6a:07:95:66:63:51:63:cd:9b: f1:4b:e0:47:ca:57:6a:7e:d7:74:ab:22:33:3f:d3: 91:1a:71:ab:3b:38:6a:6f:3c:7d:48:c1:cf:bf:f8: fe:82:33:9a:77:90:13:dd:18:87:7b:56:33:e0:82: 2e:03:81:31:d5:86:ad:e0:47:51:5a:39:f7:8d:17: 39:33:f1:d9:ae:03:4e:c0:96:3c:4e:48:86:13:42: 9d:5d:21:27:af:e6:a5:97:98:57:a2:4f:56:a5:de: a4:a4:6c:5a:cc:5f:16:c9:85:23:b3:69:e9:bf:64: c3:53:38:d9:d8:c0:61:b8:3a:ba:a0:bc:07:1d:0c: 85:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:FB:EB:C4:81:B0:D7:C2:9C:AA:8E:4E:E3:03:F4:20:D3:C8:57:3C X509v3 Authority Key Identifier: keyid:AB:C3:A3:09:1C:3B:1A:8C:9E:82:A0:9D:37:40:90:F6:D7:30:0B:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:48:bf:f3:45:f7:61:95:46:6e:96:1c:4e:87:3e:16:6d:83: bf:aa:1a:75:af:61:8e:03:50:f1:fb:e8:a8:61:fb:ca:b0:83: b0:ce:2f:a1:c1:cb:20:7c:8e:b2:45:cc:98:da:85:b5:0a:8a: b9:92:7c:51:6b:59:02:cc:18:e7:65:9a:38:a2:e6:85:7a:79: 23:8e:44:9c:b9:c3:d2:e0:6e:20:45:ce:dc:c7:a7:86:d9:47: b2:f0:48:52:1d:d3:3c:31:63:10:4d:01:25:a5:7b:9e:81:d4: d3:49:9d:3a:34:33:9f:bb:28:a0:f4:dd:75:14:3f:4b:e5:64: b0:6d:83:9e:33:1d:dc:c4:bc:a3:cd:38:6f:d5:55:a2:5d:97: 50:c6:1e:b4:f7:36:15:2b:1f:6d:54:28:99:ed:55:72:fc:70: d8:fc:4c:7b:86:e3:cb:95:0d:3e:7b:d2:04:42:af:d1:f8:0e: 8f:e1:a1:8a:39:21:c7:e7:51:a3:70:57:0f:14:67:53:c7:99: 9a:86:0b:1c:92:f7:44:6c:86:4c:93:24:c7:89:cb:0a:8b:c9: 3c:e2:f8:0c:6e:80:bd:9d:5d:1c:a7:23:57:1d:1a:e2:fa:e9: e3:48:67:28:c3:53:c3:fc:5e:c8:2a:74:ab:80:ac:d2:09:c4: f4:49:4e:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Ch7zEDPUHeFuNERCw6uZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYzNhMzA5MWMzYjFhOGM5ZTgyYTA5ZDM3NDA5MGY2ZDcz MDBiMjAwHhcNMjUxMjA2MTkwMTEyWhcNMjUxMjA3MTkwMTEyWjAzMTEwLwYDVQQD Eyg3M2ZiZWJjNDgxYjBkN2MyOWNhYThlNGVlMzAzZjQyMGQzYzg1NzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJHEED2W3gXbIP8adtschExVRkb7 l0DjhX/EJGqyXBL9Td1e7tnztCxv0/GLEZbERkqN5sHcH6nF27sD+zY0kbKaNC4a k6H+dldkgSmbHBX7wrBBcRQ5droPhGEbsbOENEsmrj3de1ehvubdIAbF4Stot2Xc FRMV0e9nP7tqB5VmY1FjzZvxS+BHyldqftd0qyIzP9ORGnGrOzhqbzx9SMHPv/j+ gjOad5AT3RiHe1Yz4IIuA4Ex1Yat4EdRWjn3jRc5M/HZrgNOwJY8TkiGE0KdXSEn r+all5hXok9Wpd6kpGxazF8WyYUjs2npv2TDUzjZ2MBhuDq6oLwHHQyFywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHP768SBsNfCnKqOTuMD9CDTyFc8MB8GA1UdIwQY MBaAFKvDowkcOxqMnoKgnTdAkPbXMAsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcThPakNSdzdHb3llZ3FDZE4wQ1E5dGN3Q3lBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9iNzM5ZTktMTZhOC00MmRmLTgyMGMt MThhNzY4YjYwZmNkLzEvcThPakNSdzdHb3llZ3FDZE4wQ1E5dGN3Q3lBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9iNzM5ZTktMTZhOC00MmRmLTgyMGMtMThhNzY4YjYwZmNk LzEvcThPakNSdzdHb3llZ3FDZE4wQ1E5dGN3Q3lBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACki/80X3 YZVGbpYcToc+Fm2Dv6oada9hjgNQ8fvoqGH7yrCDsM4vocHLIHyOskXMmNqFtQqK uZJ8UWtZAswY52WaOKLmhXp5I45EnLnD0uBuIEXO3MenhtlHsvBIUh3TPDFjEE0B JaV7noHU00mdOjQzn7sooPTddRQ/S+VksG2DnjMd3MS8o804b9VVol2XUMYetPc2 FSsfbVQome1Vcvxw2PxMe4bjy5UNPnvSBEKv0fgOj+Ghijkhx+dRo3BXDxRnU8eZ moYLHJL3RGyGTJMkx4nLCovJPOL4DG6AvZ1dHKcjVx0a4vrp40hnKMNTw/xeyCp0 q4Cs0gnE9ElOBQ== -----END CERTIFICATE-----Generated at Sun Dec 7 03:56:43 2025 by rpki-client