This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft File: q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft (raw, json) Hash identifier: ptcZlhNKe7T+gbIif1D0hoDuhySgxut5A8VmVGcoOmI= Subject key identifier: 8A:6F:0D:17:89:5F:9B:F8:70:15:AA:6A:9C:EB:34:B7:4A:21:8C:CC Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d Certificate serial: 019AF9553003C85E07075AD444E0A9935F54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft Manifest number: 17C8 Signing time: Sun 07 Dec 2025 15:01:40 +0000 Manifest this update: Sun 07 Dec 2025 15:01:40 +0000 Manifest next update: Mon 08 Dec 2025 15:01:40 +0000 Files and hashes: 1: axmcs0YwsBBvp13WSQvabhXKgO8.roa (hash: APz6BdxBlveXPEBlyV0DL9bK8BYpnxs2Kict8QvSCMo=) 2: q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl (hash: sLCTMize56Gcl9UvcSKVN7gg+dA9W+3XWPK2QBiBTOE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:55:30:03:c8:5e:07:07:5a:d4:44:e0:a9:93:5f:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d Validity Not Before: Dec 7 15:01:40 2025 GMT Not After : Dec 8 15:01:40 2025 GMT Subject: CN=8a6f0d17895f9bf87015aa6a9ceb34b74a218ccc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d4:5a:50:49:e8:e8:60:64:f7:7d:d3:35:69: 68:a9:86:0d:1a:23:83:97:13:0b:8f:e3:d7:5e:f0: f5:7a:30:93:56:bf:56:32:fc:6c:db:53:8a:d6:30: b7:91:b3:ac:0e:e1:07:d3:5a:02:d9:cb:83:c1:20: c0:ee:57:30:83:09:2d:cb:61:af:f5:14:15:a9:68: 67:81:cd:75:b8:80:a3:bf:d2:c1:c9:a7:d2:ed:e8: 24:4b:36:d8:f6:eb:f0:33:ba:4b:32:a4:ce:f6:3b: d6:7a:54:25:71:f6:2a:ad:3b:5a:5f:f6:01:80:5f: cd:47:a7:6c:33:ba:37:32:d4:b9:ef:2a:52:73:ff: 24:64:72:96:83:46:57:5f:0d:e0:39:a3:51:a7:c4: a9:39:d1:9b:67:7c:8c:a2:47:11:1c:d4:b6:3d:a0: 7e:e3:8b:e1:8a:df:de:ec:67:b2:05:71:8f:0e:90: b8:12:d2:19:44:54:2d:63:40:09:cf:e0:44:52:e7: 6c:d2:66:9e:10:81:bb:c6:39:c0:ec:7d:ed:73:6c: f5:96:ee:e3:cb:94:f1:2c:53:cd:b4:a9:eb:6f:b5: 9b:fb:81:9f:3c:42:ff:4a:fe:c9:9c:d0:7a:d0:6b: 3c:2b:de:c9:dd:9d:f4:af:c0:ab:3a:8f:34:79:30: bd:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:6F:0D:17:89:5F:9B:F8:70:15:AA:6A:9C:EB:34:B7:4A:21:8C:CC X509v3 Authority Key Identifier: keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:f8:96:5f:8e:38:48:05:aa:2c:7e:57:d6:f7:5a:0b:2d:46: c8:d9:02:e6:1d:0b:bf:83:e6:4e:07:c6:af:3b:be:0c:3e:2e: b3:29:8e:23:ba:50:75:f2:7d:f8:9b:5c:e4:b4:d0:99:83:9c: 6e:0b:4a:1b:1e:2a:ea:79:57:26:30:1f:2c:11:15:39:d0:02: fa:60:e5:79:9e:e8:68:55:fc:b1:7e:46:8f:96:cc:20:16:b4: 8f:27:50:37:24:53:4f:88:2c:26:a0:a3:67:f9:ab:6f:9a:b3: e7:f4:ea:e7:dc:f8:52:f5:d9:b6:45:28:67:1b:2c:bd:dd:d2: 11:fb:09:3d:c6:da:b4:1f:c0:60:dc:20:cd:a0:de:79:8c:59: dd:c5:f0:81:78:d9:33:fa:63:26:90:89:a0:e8:91:db:9d:b5: 0c:1f:0c:f0:1f:2d:ec:08:06:df:e9:0d:38:ed:f4:26:de:40: 1b:f3:94:c2:24:c8:3d:6d:a9:32:59:84:24:65:94:9c:fb:25: a1:f5:19:20:e8:79:da:ed:48:d6:5b:e7:81:18:ef:a9:63:dd: 30:f2:90:dc:3e:3c:97:9e:53:4c:ab:ef:48:1e:60:d7:40:24: e4:1a:2e:47:79:ea:f2:7b:e2:bf:55:44:79:26:00:6e:44:7e: 61:0b:a9:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr5VTADyF4HB1rUROCpk19UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiNzFlOWIxM2Y1YzMzOWE1ODY5MmVlYWJlNzJlYWE0MDZi YmJkN2QwHhcNMjUxMjA3MTUwMTQwWhcNMjUxMjA4MTUwMTQwWjAzMTEwLwYDVQQD Eyg4YTZmMGQxNzg5NWY5YmY4NzAxNWFhNmE5Y2ViMzRiNzRhMjE4Y2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NRaUEno6GBk933TNWloqYYNGiOD lxMLj+PXXvD1ejCTVr9WMvxs21OK1jC3kbOsDuEH01oC2cuDwSDA7lcwgwkty2Gv 9RQVqWhngc11uICjv9LByafS7egkSzbY9uvwM7pLMqTO9jvWelQlcfYqrTtaX/YB gF/NR6dsM7o3MtS57ypSc/8kZHKWg0ZXXw3gOaNRp8SpOdGbZ3yMokcRHNS2PaB+ 44vhit/e7GeyBXGPDpC4EtIZRFQtY0AJz+BEUuds0maeEIG7xjnA7H3tc2z1lu7j y5TxLFPNtKnrb7Wb+4GfPEL/Sv7JnNB60Gs8K97J3Z30r8CrOo80eTC9swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIpvDReJX5v4cBWqapzrNLdKIYzMMB8GA1UdIwQY MBaAFKtx6bE/XDOaWGku6r5y6qQGu719MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTNIcHNUOWNNNXBZYVM3cXZuTHFwQWE3dlgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82YmEzOWMtZWYxZC00ZDQ4LTk4MmIt Y2Y0YjkwMDk5N2EwLzEvcTNIcHNUOWNNNXBZYVM3cXZuTHFwQWE3dlgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82YmEzOWMtZWYxZC00ZDQ4LTk4MmItY2Y0YjkwMDk5N2Ew LzEvcTNIcHNUOWNNNXBZYVM3cXZuTHFwQWE3dlgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJviWX444 SAWqLH5X1vdaCy1GyNkC5h0Lv4PmTgfGrzu+DD4usymOI7pQdfJ9+Jtc5LTQmYOc bgtKGx4q6nlXJjAfLBEVOdAC+mDleZ7oaFX8sX5Gj5bMIBa0jydQNyRTT4gsJqCj Z/mrb5qz5/Tq59z4UvXZtkUoZxssvd3SEfsJPcbatB/AYNwgzaDeeYxZ3cXwgXjZ M/pjJpCJoOiR2521DB8M8B8t7AgG3+kNOO30Jt5AG/OUwiTIPW2pMlmEJGWUnPsl ofUZIOh52u1I1lvngRjvqWPdMPKQ3D48l55TTKvvSB5g10Ak5BouR3nq8nviv1VE eSYAbkR+YQup2Q== -----END CERTIFICATE-----Generated at Sun Dec 7 19:03:43 2025 by rpki-client