This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft File: q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft (raw, json) Hash identifier: 540Qk+EXdAPwYt/TvE+0Ar/GHuoOvz3LhDcC9Qx5xsY= Subject key identifier: F5:FA:B3:C9:86:2E:98:32:73:C3:C3:57:3A:99:53:3E:67:3F:70:5D Authority key identifier: AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30 Certificate issuer: /CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330 Certificate serial: 019AF27686188817A86768205EFCB509203E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 07:00:44 +0000 Manifest this update: Sat 06 Dec 2025 07:00:44 +0000 Manifest next update: Sun 07 Dec 2025 07:00:44 +0000 Files and hashes: 1: S0sJgeFKsSQM_Y24-bMbEEazWOE.roa (hash: y7ujKOOyPaVjZL4Z2dl77e4qeqFzdcjNTXADyZzs44w=) 2: q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl (hash: IP/Uh2XyQn4rL8tvQcbrchcAUnFpG1eHJUqxyFrADVU=) 3: r-ygRbjtxxgO3t3aGjdEJ1nnCcw.roa (hash: WR2yF8mNXvC7JDBK3ZnnxThACZnLlRj8L9WEQd6jnY4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:86:18:88:17:a8:67:68:20:5e:fc:b5:09:20:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330 Validity Not Before: Dec 6 07:00:44 2025 GMT Not After : Dec 7 07:00:44 2025 GMT Subject: CN=f5fab3c9862e983273c3c3573a99533e673f705d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:00:bb:3c:51:49:26:d9:20:86:38:51:df:71: 10:67:25:2b:72:cb:f5:75:d8:de:b3:d7:76:5b:06: 98:aa:59:33:b2:df:3d:c8:8b:aa:58:4c:df:a2:e0: f8:2c:38:73:45:04:67:b8:b4:0b:74:19:30:dc:01: 51:54:33:96:47:59:ca:c3:13:07:03:60:47:59:36: 37:1c:37:36:75:15:cb:be:46:9a:8e:e4:da:b3:7e: 13:10:49:4c:cc:b4:1e:09:26:55:bc:a7:84:7f:b8: 6c:3d:8f:ff:95:cd:04:d4:b2:18:ce:8a:59:97:0f: fb:c2:c7:e5:d5:27:ec:56:1b:15:bd:6a:54:1b:5a: 09:87:db:4f:7f:6b:ce:0b:98:d5:b4:ae:c1:18:b7: fa:81:8c:18:77:4e:3e:14:a1:b9:17:63:47:00:c2: 91:bc:96:e0:b6:e3:ca:75:6c:78:a7:13:2d:ef:7c: 22:44:80:e5:93:31:46:08:9c:0f:07:5e:0f:63:0f: 5a:3e:9b:4d:c2:57:fd:1f:26:ef:ad:80:05:c1:13: 7a:da:df:e4:36:76:53:32:c5:a4:d5:e1:a9:53:cd: 68:66:91:5b:7f:73:7a:f7:b0:c1:db:5b:2b:ae:50: 17:94:ba:24:09:55:bc:62:4b:89:b3:96:89:91:fd: e7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:FA:B3:C9:86:2E:98:32:73:C3:C3:57:3A:99:53:3E:67:3F:70:5D X509v3 Authority Key Identifier: keyid:AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:9d:d0:87:3c:32:06:e2:0b:cf:d9:aa:0c:6e:cc:fe:5c:5d: fa:c4:5e:8a:60:c3:63:84:63:3b:03:57:5e:05:23:c8:ec:fc: 02:cc:33:cf:4d:fb:ae:10:85:1f:51:f2:e3:19:7f:55:77:89: c5:b3:29:dd:b5:47:25:65:62:d6:7e:f5:08:79:09:8d:83:19: 6a:c8:6b:81:17:64:b8:05:20:63:94:7e:12:7e:85:d6:c1:30: a1:48:7d:a6:d0:04:8e:98:2b:b3:ee:55:a6:30:72:ec:83:84: 36:a6:da:f4:cb:7c:62:dd:d4:ba:38:39:13:40:d7:14:28:b8: 7b:78:df:90:0c:3a:1b:5d:71:4b:8a:01:48:6d:c6:71:68:57: 27:c9:d0:92:28:12:a4:11:3d:3c:20:d0:58:14:a7:fa:45:a7: 08:7f:b3:82:31:4a:f6:5d:bd:9b:ae:cf:9e:d2:b6:ce:49:b7: 7f:02:35:52:4b:f3:d2:46:e8:2e:7e:d4:31:e7:2d:9e:25:30: e5:78:fd:74:03:67:9e:1f:cb:5b:74:2d:cf:51:04:a4:de:1d: 07:17:7f:25:1f:34:b1:0b:d7:9c:07:f6:d9:e9:20:dc:89:0b: 32:f8:8c:ec:be:b2:e5:e9:05:86:e8:e6:c9:0d:8d:b9:c2:82: 4b:01:ed:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydoYYiBeoZ2ggXvy1CSA+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYzQ1YjY1OGIxZWMwZmRlYjQ1OWU2ZmYyNTc3ZGI4Y2E2 YTkzMzAwHhcNMjUxMjA2MDcwMDQ0WhcNMjUxMjA3MDcwMDQ0WjAzMTEwLwYDVQQD EyhmNWZhYjNjOTg2MmU5ODMyNzNjM2MzNTczYTk5NTMzZTY3M2Y3MDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAC7PFFJJtkghjhR33EQZyUrcsv1 ddjes9d2WwaYqlkzst89yIuqWEzfouD4LDhzRQRnuLQLdBkw3AFRVDOWR1nKwxMH A2BHWTY3HDc2dRXLvkaajuTas34TEElMzLQeCSZVvKeEf7hsPY//lc0E1LIYzopZ lw/7wsfl1SfsVhsVvWpUG1oJh9tPf2vOC5jVtK7BGLf6gYwYd04+FKG5F2NHAMKR vJbgtuPKdWx4pxMt73wiRIDlkzFGCJwPB14PYw9aPptNwlf9HybvrYAFwRN62t/k NnZTMsWk1eGpU81oZpFbf3N697DB21srrlAXlLokCVW8YkuJs5aJkf3n5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPX6s8mGLpgyc8PDVzqZUz5nP3BdMB8GA1UdIwQY MBaAFKvEW2WLHsD960Web/JXfbjKapMwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcThSYlpZc2V3UDNyUlo1djhsZDl1TXBxa3pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9jNWMxYjMtZTVjYS00YTgzLTgzOTAt OTE3OTMzYjE1MDJlLzEvcThSYlpZc2V3UDNyUlo1djhsZDl1TXBxa3pBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9jNWMxYjMtZTVjYS00YTgzLTgzOTAtOTE3OTMzYjE1MDJl LzEvcThSYlpZc2V3UDNyUlo1djhsZDl1TXBxa3pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArJ3Qhzwy BuILz9mqDG7M/lxd+sReimDDY4RjOwNXXgUjyOz8Aswzz037rhCFH1Hy4xl/VXeJ xbMp3bVHJWVi1n71CHkJjYMZashrgRdkuAUgY5R+En6F1sEwoUh9ptAEjpgrs+5V pjBy7IOENqba9Mt8Yt3Uujg5E0DXFCi4e3jfkAw6G11xS4oBSG3GcWhXJ8nQkigS pBE9PCDQWBSn+kWnCH+zgjFK9l29m67PntK2zkm3fwI1Ukvz0kboLn7UMectniUw 5Xj9dANnnh/LW3Qtz1EEpN4dBxd/JR80sQvXnAf22ekg3IkLMviM7L6y5ekFhujm yQ2NucKCSwHtCw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:27:42 2025 by rpki-client