This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft File: q838GnxSDPjRdykgjoXosZfErf8.mft (raw, json) Hash identifier: jS/a0OwUudJcmNoYxdXOeBrzlu3zvh1AbRJZYUq6aWs= Subject key identifier: 76:5E:04:65:D2:6E:B5:A5:4E:9D:AD:A7:A7:45:6E:43:C8:FE:71:74 Authority key identifier: AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF Certificate issuer: /CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff Certificate serial: 019AF12D7C3F37D26D45009F285AFFD26EF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft Manifest number: 0D93 Signing time: Sat 06 Dec 2025 01:01:21 +0000 Manifest this update: Sat 06 Dec 2025 01:01:21 +0000 Manifest next update: Sun 07 Dec 2025 01:01:21 +0000 Files and hashes: 1: 1HhNu8sG2l0hcVfkxopBJPM0AJA.roa (hash: Qt4OCtipxtwIwXuC2KjZFTe3zgqaRe5IKbtJYrVBUxM=) 2: hJbHpAPOiNkNScuafVbq5FNZ7D4.roa (hash: /FjzkSwns/04Wx3/dyzKMt8M5RMeRjhJm2fdzZxup8w=) 3: q838GnxSDPjRdykgjoXosZfErf8.crl (hash: efpRJbeA36vI1cA4r2DY/vUZY6NtCYxFbsxpN1Or27c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:7c:3f:37:d2:6d:45:00:9f:28:5a:ff:d2:6e:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff Validity Not Before: Dec 6 01:01:21 2025 GMT Not After : Dec 7 01:01:21 2025 GMT Subject: CN=765e0465d26eb5a54e9dada7a7456e43c8fe7174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:06:07:de:7e:6c:44:5e:fd:64:62:6d:53:0a: d9:7a:75:48:a7:c9:ae:64:37:70:46:e4:6f:20:46: 35:e2:1f:ae:c8:95:01:80:2b:66:a4:4c:93:1b:fe: d0:a6:60:36:96:2a:ed:eb:5d:cd:88:71:38:5a:e2: ef:76:dd:b4:9a:1a:57:d8:92:15:33:bc:99:de:37: 1a:06:ce:4d:b3:31:f2:d1:87:da:8e:9f:31:56:3b: ca:e1:31:5d:a8:0b:3b:42:fa:e3:8b:95:25:ca:ca: 36:ed:aa:d0:cd:24:ef:71:e7:81:c6:4d:3e:94:d9: 83:60:7a:96:9c:02:9f:43:58:38:18:06:f1:53:9d: eb:c9:65:9a:eb:3f:98:12:7b:af:d3:63:83:f7:78: 26:91:f1:b9:2c:1b:a4:4d:0f:1e:98:18:70:80:71: 53:14:0e:f6:02:df:b4:9a:f0:d1:2c:0e:b3:77:a6: 4d:3c:2c:c2:6e:36:22:8b:34:77:b3:96:e0:f9:64: 95:ec:db:82:06:11:2d:5b:72:03:c1:84:43:2e:0c: 74:86:48:31:a3:42:c2:01:24:68:4c:20:0a:bd:05: dd:05:99:fc:bf:02:1f:6c:c2:91:b7:f6:51:45:0e: 75:4b:86:1b:50:ce:fe:8c:ac:cb:d1:21:47:90:d4: 1c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:5E:04:65:D2:6E:B5:A5:4E:9D:AD:A7:A7:45:6E:43:C8:FE:71:74 X509v3 Authority Key Identifier: keyid:AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:ca:43:28:dc:e8:7c:f2:73:2d:18:d6:83:53:00:ac:4f:50: ee:53:da:64:4d:9d:5a:f8:f4:05:c5:8c:a7:eb:3c:df:96:41: 44:ef:3d:6b:32:30:dc:f0:7b:8a:9a:cb:f7:e6:95:3b:5c:6f: f9:a3:89:43:a1:fe:3f:3e:2c:ff:d2:bf:89:5a:02:9b:d1:c2: 82:df:8a:c9:e2:4d:12:c1:ed:2b:bf:f1:df:fe:a7:6a:fd:93: cd:0f:88:c8:6a:b7:f5:c0:72:8f:48:57:4e:0e:e1:fa:0f:17: e7:b0:3b:4b:9a:13:37:6c:5e:06:9a:93:c3:e1:5f:b3:c4:3f: b9:5d:f4:b5:24:52:84:da:0d:7c:03:bc:ee:ea:93:a8:4d:93: d2:a7:33:31:01:00:71:86:49:9e:74:bc:72:65:e9:74:85:3b: da:c1:94:e8:8a:b8:a2:2a:3f:cd:96:50:98:5c:d9:59:b1:d7: 52:7b:bc:72:5c:cc:9e:05:4d:32:91:7e:1f:25:3e:ec:0b:bb: 4e:a8:b8:40:06:d9:13:44:e2:88:82:8c:66:33:e3:03:97:a1: 47:c3:1f:ef:bb:de:99:4b:42:0f:ae:19:c7:b3:63:5d:df:b0: f0:2e:3e:0c:33:9e:e0:c5:33:1c:a7:94:8c:c5:54:ac:0f:0b: 91:0d:e6:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLXw/N9JtRQCfKFr/0m7zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiY2RmYzFhN2M1MjBjZjhkMTc3MjkyMDhlODVlOGIxOTdj NGFkZmYwHhcNMjUxMjA2MDEwMTIxWhcNMjUxMjA3MDEwMTIxWjAzMTEwLwYDVQQD Eyg3NjVlMDQ2NWQyNmViNWE1NGU5ZGFkYTdhNzQ1NmU0M2M4ZmU3MTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQYH3n5sRF79ZGJtUwrZenVIp8mu ZDdwRuRvIEY14h+uyJUBgCtmpEyTG/7QpmA2lirt613NiHE4WuLvdt20mhpX2JIV M7yZ3jcaBs5NszHy0Yfajp8xVjvK4TFdqAs7Qvrji5Ulyso27arQzSTvceeBxk0+ lNmDYHqWnAKfQ1g4GAbxU53ryWWa6z+YEnuv02OD93gmkfG5LBukTQ8emBhwgHFT FA72At+0mvDRLA6zd6ZNPCzCbjYiizR3s5bg+WSV7NuCBhEtW3IDwYRDLgx0hkgx o0LCASRoTCAKvQXdBZn8vwIfbMKRt/ZRRQ51S4YbUM7+jKzL0SFHkNQcEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHZeBGXSbrWlTp2tp6dFbkPI/nF0MB8GA1UdIwQY MBaAFKvN/Bp8Ugz40XcpII6F6LGXxK3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTgzOEdueFNEUGpSZHlrZ2pvWG9zWmZFcmY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9lNTEyNGYtMTM2OS00OTAxLTlmNTYt MmJiODJhODM3YjdiLzEvcTgzOEdueFNEUGpSZHlrZ2pvWG9zWmZFcmY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9lNTEyNGYtMTM2OS00OTAxLTlmNTYtMmJiODJhODM3Yjdi LzEvcTgzOEdueFNEUGpSZHlrZ2pvWG9zWmZFcmY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASspDKNzo fPJzLRjWg1MArE9Q7lPaZE2dWvj0BcWMp+s835ZBRO89azIw3PB7iprL9+aVO1xv +aOJQ6H+Pz4s/9K/iVoCm9HCgt+KyeJNEsHtK7/x3/6nav2TzQ+IyGq39cByj0hX Tg7h+g8X57A7S5oTN2xeBpqTw+Ffs8Q/uV30tSRShNoNfAO87uqTqE2T0qczMQEA cYZJnnS8cmXpdIU72sGU6Iq4oio/zZZQmFzZWbHXUnu8clzMngVNMpF+HyU+7Au7 Tqi4QAbZE0TiiIKMZjPjA5ehR8Mf77vemUtCD64Zx7NjXd+w8C4+DDOe4MUzHKeU jMVUrA8LkQ3mkg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:32 2025 by rpki-client