This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft File: q5ioJj4GO4p709cYDnpKpklTRBw.mft (raw, json) Hash identifier: hHc3E2XT6jDhUDT1ccGY5h8bat2zeO45wzHtTu44M50= Subject key identifier: B1:2A:B8:D2:E6:87:83:19:0F:1C:51:69:A8:31:7D:C2:58:B4:8D:B1 Authority key identifier: AB:98:A8:26:3E:06:3B:8A:7B:D3:D7:18:0E:7A:4A:A6:49:53:44:1C Certificate issuer: /CN=ab98a8263e063b8a7bd3d7180e7a4aa64953441c Certificate serial: 019AF23FAC76F960B5FBD8F89F420DB4209A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft Manifest number: 062E Signing time: Sat 06 Dec 2025 06:00:50 +0000 Manifest this update: Sat 06 Dec 2025 06:00:50 +0000 Manifest next update: Sun 07 Dec 2025 06:00:50 +0000 Files and hashes: 1: kD0NYEJpgxaFFDcqPxx98oDLF4A.roa (hash: kEfgwntStfXPUtLxcdJZBEv9NrzPqg0tH8aS2VZkZpA=) 2: q5ioJj4GO4p709cYDnpKpklTRBw.crl (hash: tzNygPVw9Wj20ZK3BXVx6LyqcF+i1VgMfb/MBa3zI/o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:ac:76:f9:60:b5:fb:d8:f8:9f:42:0d:b4:20:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab98a8263e063b8a7bd3d7180e7a4aa64953441c Validity Not Before: Dec 6 06:00:50 2025 GMT Not After : Dec 7 06:00:50 2025 GMT Subject: CN=b12ab8d2e68783190f1c5169a8317dc258b48db1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1a:dd:a1:8e:d0:7e:cc:6c:0d:99:40:04:2c: c0:40:97:61:f0:a6:25:c1:91:af:79:41:a8:dd:21: 3a:7c:5a:0f:e0:53:71:8b:2f:e8:7c:81:f3:0f:5a: ae:5e:4a:69:73:53:fe:9e:95:cd:12:84:bf:55:3a: f0:a9:fb:51:b4:44:75:f3:00:7f:a8:72:ac:10:9e: 28:74:0b:22:6f:ef:9e:6c:43:06:a1:56:31:64:18: 47:96:18:64:4a:14:a7:c9:26:8a:17:b3:e3:15:3b: cb:b3:74:88:4a:1f:a2:14:66:76:59:f5:5f:3d:12: eb:d5:78:93:48:d8:ab:72:d8:b4:54:9f:ff:7e:00: d1:14:f3:dc:88:6d:0e:1c:bc:98:a7:3b:83:0c:e7: a1:4d:08:35:3a:12:e3:52:17:87:17:0b:d4:8f:84: 7a:58:39:b4:59:6e:3b:74:d2:57:20:36:9a:52:73: 94:61:26:c4:11:94:63:1e:d9:f8:f2:c7:ba:50:d5: c3:9c:9a:d2:92:59:f6:29:a6:5c:14:5a:e6:e9:8d: 61:6f:99:4a:c0:7a:3b:ea:80:c2:eb:b4:f1:11:6c: 99:96:6d:0f:65:d9:62:78:72:b8:fc:19:c0:d9:4d: 3d:f0:11:42:12:fd:1c:7b:04:1e:49:79:75:32:e9: 43:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:2A:B8:D2:E6:87:83:19:0F:1C:51:69:A8:31:7D:C2:58:B4:8D:B1 X509v3 Authority Key Identifier: keyid:AB:98:A8:26:3E:06:3B:8A:7B:D3:D7:18:0E:7A:4A:A6:49:53:44:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:dc:d6:f8:70:8e:c2:4d:a8:a2:28:23:10:68:77:9a:81:3e: 9b:fd:ac:e6:73:4f:03:ce:ba:9d:45:8b:d4:66:99:b4:3c:8c: c4:ff:c9:58:b9:72:c8:c7:69:50:8b:b2:4f:cf:a4:de:6b:79: 10:2c:30:42:84:7a:b5:f0:7d:04:76:8a:a4:8f:87:1e:cd:68: 09:77:b9:a8:40:2e:ee:38:2f:15:23:97:57:9c:55:7a:aa:4e: 78:7e:8e:a0:d1:7c:3b:a4:96:23:96:48:0a:a1:09:91:37:ec: c0:56:55:63:bf:23:1c:de:82:f3:52:1d:5a:6d:be:b5:46:c9: e1:d5:a4:12:3c:13:87:6a:46:0c:bc:ee:55:e6:c0:ef:95:66: b2:54:dd:10:f8:fa:31:4e:b5:41:37:03:24:52:94:f2:43:49: 0e:76:da:11:85:1e:55:8a:fd:7e:e0:16:28:9a:25:58:cf:0c: c2:23:4a:b5:f8:15:7f:92:c6:fa:04:25:47:58:bb:c9:95:12: 7e:39:45:b7:9e:d3:d7:9e:f8:a8:9f:dc:7b:35:2e:1a:58:d8: 58:82:ef:b3:be:32:81:28:bc:46:f3:85:94:92:c1:73:43:5c: d7:2f:1d:8f:f7:12:4f:0b:15:dc:06:68:7d:5f:40:fd:80:67: 8f:60:b8:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP6x2+WC1+9j4n0INtCCaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiOThhODI2M2UwNjNiOGE3YmQzZDcxODBlN2E0YWE2NDk1 MzQ0MWMwHhcNMjUxMjA2MDYwMDUwWhcNMjUxMjA3MDYwMDUwWjAzMTEwLwYDVQQD EyhiMTJhYjhkMmU2ODc4MzE5MGYxYzUxNjlhODMxN2RjMjU4YjQ4ZGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxrdoY7QfsxsDZlABCzAQJdh8KYl wZGveUGo3SE6fFoP4FNxiy/ofIHzD1quXkppc1P+npXNEoS/VTrwqftRtER18wB/ qHKsEJ4odAsib++ebEMGoVYxZBhHlhhkShSnySaKF7PjFTvLs3SISh+iFGZ2WfVf PRLr1XiTSNircti0VJ//fgDRFPPciG0OHLyYpzuDDOehTQg1OhLjUheHFwvUj4R6 WDm0WW47dNJXIDaaUnOUYSbEEZRjHtn48se6UNXDnJrSkln2KaZcFFrm6Y1hb5lK wHo76oDC67TxEWyZlm0PZdlieHK4/BnA2U098BFCEv0cewQeSXl1MulDLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLEquNLmh4MZDxxRaagxfcJYtI2xMB8GA1UdIwQY MBaAFKuYqCY+BjuKe9PXGA56SqZJU0QcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTVpb0pqNEdPNHA3MDljWURucEtwa2xUUkJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8xMTlkMzQtNDA3YS00MjllLTkwNTYt NzYyOGNiYWYwZWM4LzEvcTVpb0pqNEdPNHA3MDljWURucEtwa2xUUkJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8xMTlkMzQtNDA3YS00MjllLTkwNTYtNzYyOGNiYWYwZWM4 LzEvcTVpb0pqNEdPNHA3MDljWURucEtwa2xUUkJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADNzW+HCO wk2ooigjEGh3moE+m/2s5nNPA866nUWL1GaZtDyMxP/JWLlyyMdpUIuyT8+k3mt5 ECwwQoR6tfB9BHaKpI+HHs1oCXe5qEAu7jgvFSOXV5xVeqpOeH6OoNF8O6SWI5ZI CqEJkTfswFZVY78jHN6C81IdWm2+tUbJ4dWkEjwTh2pGDLzuVebA75VmslTdEPj6 MU61QTcDJFKU8kNJDnbaEYUeVYr9fuAWKJolWM8MwiNKtfgVf5LG+gQlR1i7yZUS fjlFt57T1574qJ/cezUuGljYWILvs74ygSi8RvOFlJLBc0Nc1y8dj/cSTwsV3AZo fV9A/YBnj2C4gQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:42:46 2025 by rpki-client