This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft File: q9h7vvWUNUayqD0x7CuZrYg9Udc.mft (raw, json) Hash identifier: nKuRMTG1anJuCwVhokSxYWIqeRR5FbIJdZz2k8lP0so= Subject key identifier: 9C:C8:03:3A:90:3B:E8:EE:46:03:A3:FA:20:68:B1:EE:06:0D:29:DC Authority key identifier: AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7 Certificate issuer: /CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7 Certificate serial: 019AF31C535766D77A65315A893EE87EE6D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft Manifest number: 0CCA Signing time: Sat 06 Dec 2025 10:01:51 +0000 Manifest this update: Sat 06 Dec 2025 10:01:51 +0000 Manifest next update: Sun 07 Dec 2025 10:01:51 +0000 Files and hashes: 1: 7d46OTwbNs5KuUyqdxKYkS8NBJI.roa (hash: 4Rn+6tq432h7x4Ge16LfuM8y8RGTaZzgBXirAxsJ5MM=) 2: W2NhW2V8Iexgd4nWoDLptnalys8.roa (hash: qN2oaoKEpYxm1heQ0tQCx/vfqwegOgZk4tzwgcNVmWg=) 3: XB2P8pqeFQE5V_wiPLEy8Uw8TL4.roa (hash: eEOspJ3pbx3Bzx3yuT7YUHqNvJo2s+nrBm58kVOY9b8=) 4: e70_76D8VUKzyOllsP-C6ko3aJ4.roa (hash: YSc6a0NAXpNIVXvLTAs9uQ9JjUM2SpjCK+qzw0/wRpY=) 5: q9h7vvWUNUayqD0x7CuZrYg9Udc.crl (hash: yW7P93+zs7v0vLFrQcsC2atz2Y6tNhVF7EuQRckF9sw=) 6: r9AECsFfSl2im_ZX-xTBrlxOfD8.roa (hash: ULicRE/3nxP/zcRYRZJBN8ZiMjtTPhQz8NjZ7TncWXU=) 7: tsLbqC6GleedJxC9I3GCKnE32tM.roa (hash: q8OgS2zQAxO3r6wIDM4lb25MYLPFfkq3kdggEkr0ENk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:53:57:66:d7:7a:65:31:5a:89:3e:e8:7e:e6:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7 Validity Not Before: Dec 6 10:01:51 2025 GMT Not After : Dec 7 10:01:51 2025 GMT Subject: CN=9cc8033a903be8ee4603a3fa2068b1ee060d29dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bc:f0:4c:e9:f5:b5:1c:e3:26:54:df:86:1d: be:aa:45:e3:74:34:7c:2c:e4:d3:ac:b2:ec:fc:09: c5:5a:13:ee:b3:fd:77:56:aa:6c:e7:e0:1d:e7:52: 1b:24:e4:c3:91:f3:e9:44:4f:75:24:4b:de:8a:28: 68:15:ac:55:8d:63:e2:a0:72:b9:6f:41:7f:70:b7: a6:64:ea:e3:27:ac:f4:65:54:1b:58:b8:ef:05:f8: c7:56:35:19:20:38:55:dd:33:1f:f7:7f:c2:1e:4f: 09:69:d7:55:f4:94:8a:ca:cd:3f:73:27:e3:6d:cf: 2a:43:0e:56:39:c9:14:49:45:60:c1:f2:e9:51:35: d0:98:64:8d:73:f5:00:9f:6e:3d:5d:95:65:3e:2e: 56:72:46:9e:3e:0f:ca:9b:35:9a:97:f3:3e:77:c6: 00:72:69:7a:94:a2:39:75:b2:11:1e:ba:d2:7f:10: e3:f2:c7:23:e7:c0:04:89:bd:b9:23:d2:1f:4c:53: 4e:6f:07:45:64:f0:c1:15:3f:ef:99:7b:a1:89:61: 10:16:cb:79:21:bb:8c:a4:74:35:1d:6c:0d:22:93: 8e:87:f0:79:91:64:c0:00:4f:90:a3:b3:04:33:fc: e0:78:9a:b9:fe:e1:52:0a:53:82:48:13:20:69:c1: b0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C8:03:3A:90:3B:E8:EE:46:03:A3:FA:20:68:B1:EE:06:0D:29:DC X509v3 Authority Key Identifier: keyid:AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:56:fd:97:c1:54:3e:1b:2d:15:97:3b:b5:74:c6:4a:f6:bb: 59:1e:cc:a3:b6:b1:25:6e:29:d4:a4:23:d4:ab:12:ba:79:06: b6:94:ba:1f:50:2d:1a:22:8f:9b:84:45:45:0f:69:f8:aa:f9: 7a:77:aa:02:f6:00:fe:3b:a3:08:c4:22:87:b9:5f:9c:70:a8: 6b:5b:77:8d:2c:ed:d1:fd:85:b7:49:b7:81:a8:9c:3c:1e:f6: fd:d6:e7:32:5e:88:77:a1:96:a4:3b:89:83:18:63:9d:0e:33: 16:53:cc:7e:d5:60:06:e6:75:3d:59:6c:55:bc:2f:14:93:c6: 08:bb:27:0e:1e:69:3a:00:26:78:0d:52:d8:a7:fd:ee:32:dc: 89:97:d0:ef:bb:37:9d:d9:f3:aa:a4:a7:0c:e8:00:21:f5:8f: a6:ab:47:23:58:a3:c7:fb:e4:6a:3c:ff:84:2b:51:f4:33:30: bf:71:42:6b:79:bf:70:30:70:cf:ac:04:d3:7d:11:56:a5:cf: 6f:4b:98:9e:74:04:2e:55:60:ea:aa:57:bb:92:87:08:31:14: af:3a:0f:7b:05:57:6d:93:33:bd:7a:93:05:99:6b:5d:c7:38: be:2b:67:f5:3f:8e:fb:ed:b1:3f:7c:c4:71:bd:7a:61:9a:ef: 85:77:4d:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHFNXZtd6ZTFaiT7ofubQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiZDg3YmJlZjU5NDM1NDZiMmE4M2QzMWVjMmI5OWFkODgz ZDUxZDcwHhcNMjUxMjA2MTAwMTUxWhcNMjUxMjA3MTAwMTUxWjAzMTEwLwYDVQQD Eyg5Y2M4MDMzYTkwM2JlOGVlNDYwM2EzZmEyMDY4YjFlZTA2MGQyOWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbzwTOn1tRzjJlTfhh2+qkXjdDR8 LOTTrLLs/AnFWhPus/13Vqps5+Ad51IbJOTDkfPpRE91JEveiihoFaxVjWPioHK5 b0F/cLemZOrjJ6z0ZVQbWLjvBfjHVjUZIDhV3TMf93/CHk8JaddV9JSKys0/cyfj bc8qQw5WOckUSUVgwfLpUTXQmGSNc/UAn249XZVlPi5WckaePg/KmzWal/M+d8YA cml6lKI5dbIRHrrSfxDj8scj58AEib25I9IfTFNObwdFZPDBFT/vmXuhiWEQFst5 IbuMpHQ1HWwNIpOOh/B5kWTAAE+Qo7MEM/zgeJq5/uFSClOCSBMgacGwVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJzIAzqQO+juRgOj+iBose4GDSncMB8GA1UdIwQY MBaAFKvYe771lDVGsqg9Mewrma2IPVHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTloN3Z2V1VOVWF5cUQweDdDdVpyWWc5VWRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84YWQyZTAtZTNmMC00YWJlLWJjYjYt MmY1Yzc0YzY5YWUxLzEvcTloN3Z2V1VOVWF5cUQweDdDdVpyWWc5VWRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC84YWQyZTAtZTNmMC00YWJlLWJjYjYtMmY1Yzc0YzY5YWUx LzEvcTloN3Z2V1VOVWF5cUQweDdDdVpyWWc5VWRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP1b9l8FU PhstFZc7tXTGSva7WR7Mo7axJW4p1KQj1KsSunkGtpS6H1AtGiKPm4RFRQ9p+Kr5 eneqAvYA/jujCMQih7lfnHCoa1t3jSzt0f2Ft0m3gaicPB72/dbnMl6Id6GWpDuJ gxhjnQ4zFlPMftVgBuZ1PVlsVbwvFJPGCLsnDh5pOgAmeA1S2Kf97jLciZfQ77s3 ndnzqqSnDOgAIfWPpqtHI1ijx/vkajz/hCtR9DMwv3FCa3m/cDBwz6wE030RVqXP b0uYnnQELlVg6qpXu5KHCDEUrzoPewVXbZMzvXqTBZlrXcc4vitn9T+O++2xP3zE cb16YZrvhXdNXQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:38:31 2025 by rpki-client