This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft File: q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft (raw, json) Hash identifier: tULspHmClY9718Fs1Enn7EYkj8rGkZHrbV63RIm2NbU= Subject key identifier: 03:35:24:24:4E:5C:B8:69:92:3C:A5:77:1C:5A:88:44:8D:1B:1A:BC Authority key identifier: AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18 Certificate issuer: /CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918 Certificate serial: 019AF276996EE93ADB05E71E58C712B60766 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft Manifest number: 176B Signing time: Sat 06 Dec 2025 07:00:49 +0000 Manifest this update: Sat 06 Dec 2025 07:00:49 +0000 Manifest next update: Sun 07 Dec 2025 07:00:49 +0000 Files and hashes: 1: EV5m5XkVlwJiCAVuE-Ap-f7iyzE.roa (hash: 5PDn99juoAn/xETBDuvN6m9sq91U6NavWyjHbCXKOeQ=) 2: FAhtWfmDEr62tA8-MdL4s1_WH2Q.roa (hash: GtQmguJ7Q5PK416zswB+RN8W/nrjymWunr8cc+Q6G9I=) 3: q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl (hash: DghXn6Mq4KOpWnzwLdTr6lm4OCbTOrMMVAEuEjsaycs=) 4: q_qPSgEpylFC-voOECXeWUWdHJM.roa (hash: jFOGBq/GXOLKGj5Jj8L6FPHFg+Kwe4gyyf67qENLLPY=) 5: tS4qFuiX3ntHvDjVyJpnqQIgubM.roa (hash: N7idUn1lSpqbvStbcsN5u6MjxI9pbc7GDDAuvP2mI1U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:99:6e:e9:3a:db:05:e7:1e:58:c7:12:b6:07:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918 Validity Not Before: Dec 6 07:00:49 2025 GMT Not After : Dec 7 07:00:49 2025 GMT Subject: CN=033524244e5cb869923ca5771c5a88448d1b1abc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b3:53:33:58:64:02:b2:94:74:d4:4a:5a:91: dd:d3:ea:61:f6:9b:f0:91:28:80:69:e1:6a:a1:48: 3d:4a:84:67:da:12:b7:f8:b6:22:a6:d0:7e:3b:dd: e3:03:8c:1c:41:fe:3b:4c:d0:8c:41:f5:f0:5f:3a: 63:9f:69:27:7e:7a:bf:56:db:96:cc:b0:c2:c6:c0: 22:7a:d3:84:35:e6:b0:ca:2c:ef:f9:50:61:25:df: 41:92:d7:38:9c:3e:4d:cc:52:bc:86:3d:2e:f5:b1: 80:fc:47:6c:de:16:0b:37:29:eb:76:1c:2f:75:6a: 66:e7:fe:7d:df:cb:fe:01:8b:cf:28:bf:0d:38:45: 46:90:c5:9d:b0:a0:79:c0:eb:67:9d:a8:b7:2a:8f: af:d3:9b:eb:9f:da:e1:c3:80:d2:a9:cf:68:de:bc: ae:1c:8a:5f:1f:c0:96:75:4a:a8:e3:74:f3:da:18: e8:2d:a4:cd:8f:77:61:aa:3c:e4:2e:ca:ca:0e:f5: 61:04:85:20:81:a4:26:e6:55:5b:c0:9b:cb:b6:51: 38:bd:e7:7c:53:05:f1:8b:e0:b0:06:43:09:6b:05: 76:f3:bb:57:4f:10:06:ea:1a:63:6c:f9:e6:1f:0b: 9d:ee:28:34:97:07:dd:7e:20:2d:e0:ac:26:d7:40: 88:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:35:24:24:4E:5C:B8:69:92:3C:A5:77:1C:5A:88:44:8D:1B:1A:BC X509v3 Authority Key Identifier: keyid:AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:cc:72:de:ca:22:fa:3a:74:14:60:19:aa:85:a9:c8:47:1d: 6a:14:d2:12:b2:70:95:ad:3b:41:7c:e3:eb:c8:0a:48:f3:14: da:8d:3a:1b:2f:35:e3:cf:91:28:94:5d:7d:20:44:14:e5:54: f6:11:cd:5f:9f:ee:86:63:47:90:d8:29:c4:30:98:43:a5:31: 28:25:d2:71:b3:f0:c4:28:f4:03:e5:36:99:32:f0:8d:2a:8a: f6:0c:1b:b6:c0:b1:11:d0:26:50:63:90:6f:11:ed:27:6c:f7: 21:c2:a7:17:3f:75:29:ca:78:4e:d0:29:85:39:05:13:08:ad: e3:45:e9:ea:31:92:b8:a3:e9:5c:b3:84:be:49:91:b9:43:ea: 62:15:cb:21:a4:37:4f:61:e4:af:11:5e:9d:b5:d3:82:f5:53: 00:50:ad:18:a9:07:0f:5a:03:87:5a:fc:0a:37:9f:8f:c3:d3: 5b:e4:73:07:9c:c4:88:fb:81:9e:3e:33:fa:4b:9b:03:14:14: 9f:88:83:40:42:7f:3d:8a:d3:9e:ab:06:3b:75:f3:fb:1e:58: c3:e6:6b:4a:18:12:ed:3a:8d:2b:2b:4b:17:3f:c3:23:b3:f9: d7:cf:42:84:fb:bb:07:96:fc:71:32:92:6f:c7:2a:91:80:b7: 02:82:ed:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydplu6TrbBeceWMcStgdmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiNGYwMGY1YzNhYjNkZjRjNjc0YTQxMGQ4YTBmMDE4MmZi NWU5MTgwHhcNMjUxMjA2MDcwMDQ5WhcNMjUxMjA3MDcwMDQ5WjAzMTEwLwYDVQQD EygwMzM1MjQyNDRlNWNiODY5OTIzY2E1NzcxYzVhODg0NDhkMWIxYWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7NTM1hkArKUdNRKWpHd0+ph9pvw kSiAaeFqoUg9SoRn2hK3+LYiptB+O93jA4wcQf47TNCMQfXwXzpjn2knfnq/VtuW zLDCxsAietOENeawyizv+VBhJd9Bktc4nD5NzFK8hj0u9bGA/Eds3hYLNynrdhwv dWpm5/5938v+AYvPKL8NOEVGkMWdsKB5wOtnnai3Ko+v05vrn9rhw4DSqc9o3ryu HIpfH8CWdUqo43Tz2hjoLaTNj3dhqjzkLsrKDvVhBIUggaQm5lVbwJvLtlE4ved8 UwXxi+CwBkMJawV287tXTxAG6hpjbPnmHwud7ig0lwfdfiAt4Kwm10CIcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAM1JCROXLhpkjyldxxaiESNGxq8MB8GA1UdIwQY MBaAFKtPAPXDqz30xnSkENig8BgvtekYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTA4QTljT3JQZlRHZEtRUTJLRHdHQy0xNlJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hMWYyMTItYmEzNS00NjZiLWI1MmUt Mzg1M2QzNDBjOWE2LzEvcTA4QTljT3JQZlRHZEtRUTJLRHdHQy0xNlJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9hMWYyMTItYmEzNS00NjZiLWI1MmUtMzg1M2QzNDBjOWE2 LzEvcTA4QTljT3JQZlRHZEtRUTJLRHdHQy0xNlJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW8xy3soi +jp0FGAZqoWpyEcdahTSErJwla07QXzj68gKSPMU2o06Gy8148+RKJRdfSBEFOVU 9hHNX5/uhmNHkNgpxDCYQ6UxKCXScbPwxCj0A+U2mTLwjSqK9gwbtsCxEdAmUGOQ bxHtJ2z3IcKnFz91Kcp4TtAphTkFEwit40Xp6jGSuKPpXLOEvkmRuUPqYhXLIaQ3 T2HkrxFenbXTgvVTAFCtGKkHD1oDh1r8Cjefj8PTW+RzB5zEiPuBnj4z+kubAxQU n4iDQEJ/PYrTnqsGO3Xz+x5Yw+ZrShgS7TqNKytLFz/DI7P5189ChPu7B5b8cTKS b8cqkYC3AoLtYg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:52:26 2025 by rpki-client