This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft File: rqwbISmrusZTn4DaZVDElyHQqMQ.mft (raw, json) Hash identifier: cD9stWGWZ2DDjC/HGwKzDDQePs1HQqaie3xu5oh3YXM= Subject key identifier: FC:1F:59:41:17:9D:AF:37:2F:35:08:26:B8:A2:D9:A6:B6:D2:24:5C Authority key identifier: AE:AC:1B:21:29:AB:BA:C6:53:9F:80:DA:65:50:C4:97:21:D0:A8:C4 Certificate issuer: /CN=aeac1b2129abbac6539f80da6550c49721d0a8c4 Certificate serial: 019B30E8ADF9AD72C19770C2C895FB70D574 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 10:01:53 +0000 Manifest this update: Thu 18 Dec 2025 10:01:53 +0000 Manifest next update: Fri 19 Dec 2025 10:01:53 +0000 Files and hashes: 1: G8jEBCJ40YxdeYHhh1JxuOrWu8k.roa (hash: u6YIbtm6mXClFsqPd0bMxYAJYLNOq1ta01JHXpi1Jvg=) 2: brfKmaHZgWhn9Y1IgcosJigVegE.roa (hash: hRHZ0HKst4J6nqgNJucpnxIpgDhzIMo76gGJN9N1kSE=) 3: rqwbISmrusZTn4DaZVDElyHQqMQ.crl (hash: tpOc8yuYM2nzrRCh+TEeaODw87WIURfCBNkFZwzpYnU=) 4: tTyobIMETJWMRqGGbvqF3q_JzFs.roa (hash: oRSuTrzckp8V2s4ne2mBwQQ1J529VLuwAhGtgjqw+Go=) 5: wd0T2jlDARdpvazu9WfBcqzqFRI.roa (hash: uy8OHigRvAXPuAD5Z6pOXMag0Udux534TcZIu/uohEw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:ad:f9:ad:72:c1:97:70:c2:c8:95:fb:70:d5:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aeac1b2129abbac6539f80da6550c49721d0a8c4 Validity Not Before: Dec 18 10:01:53 2025 GMT Not After : Dec 19 10:01:53 2025 GMT Subject: CN=fc1f5941179daf372f350826b8a2d9a6b6d2245c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c5:a5:67:39:e8:21:ed:da:b6:1f:7e:d0:09: 71:66:5f:d4:70:04:92:22:d3:a4:a3:5d:8e:79:22: 9e:c3:2d:0d:2f:cb:8a:bf:d6:ce:8b:20:c8:5c:1f: 11:58:60:77:b9:05:b6:6e:2e:43:c0:48:e3:83:20: 6a:c5:35:6f:f4:7f:ae:4b:80:d1:5d:af:12:46:bb: 6f:83:c8:ad:7f:4e:e5:75:fd:72:95:ca:66:73:9b: c3:d1:9a:47:62:f5:ca:af:72:bf:3d:bd:ae:37:07: 97:35:23:3c:20:64:47:5b:e3:56:89:95:87:22:fb: a5:d1:f6:42:34:16:5d:10:f6:97:04:73:72:22:70: 70:09:4a:e9:02:59:b8:5a:fb:88:e9:b4:50:a3:17: ce:e4:c2:c5:aa:75:18:7c:8e:80:cf:b5:b7:7e:2c: df:91:86:99:18:c8:a7:04:e7:86:53:03:8d:2d:98: 4c:6d:9d:e3:44:61:eb:f0:99:d5:53:b6:23:60:2f: 42:2a:44:df:f3:4b:17:07:2b:b6:25:09:bd:d2:af: 87:c9:18:c9:8c:e5:9d:fe:c8:5b:96:e3:1f:3e:11: 1e:99:94:a3:41:06:f8:50:fd:e2:38:86:33:42:d3: b6:0f:c4:a0:63:67:5d:d4:14:15:68:b5:89:1d:23: 75:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:1F:59:41:17:9D:AF:37:2F:35:08:26:B8:A2:D9:A6:B6:D2:24:5C X509v3 Authority Key Identifier: keyid:AE:AC:1B:21:29:AB:BA:C6:53:9F:80:DA:65:50:C4:97:21:D0:A8:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:74:e4:a4:d6:a3:72:bc:63:e8:ae:fe:6b:b8:17:fa:10:70: 82:a5:39:4e:3d:4d:16:ee:2c:11:85:12:16:89:39:62:3f:78: 73:4e:85:2c:0e:7d:07:e8:94:9c:32:78:23:14:fe:3e:20:74: 2b:d9:2c:dc:07:b7:b5:3d:4e:e6:d0:42:ee:7a:c2:fc:f8:89: 13:94:ca:81:1c:ca:a3:a5:5b:6a:88:aa:7c:c0:18:b7:70:2b: e0:98:30:92:4d:ca:27:0b:a3:b3:52:8e:98:a8:37:f3:c0:fd: e8:09:1b:a2:a5:b6:48:46:d6:cb:83:b8:54:90:a0:d7:cd:4c: 96:c9:dd:cf:ab:fa:f9:0b:fc:b3:ad:dd:d4:ab:9d:e1:e2:fb: c8:72:06:a3:fb:8b:3e:46:5c:a1:0f:f4:b3:c5:8f:9a:3a:5a: 8f:6d:8a:9f:96:0c:66:11:24:10:ad:5d:e4:67:c3:6e:42:4c: 11:43:15:ac:72:66:f4:36:43:20:d1:03:23:7f:bf:c3:db:9a: 0e:7f:08:bc:77:86:b8:2f:bf:f1:af:0c:ce:32:45:8e:cc:f0: 3c:be:61:a0:e4:1f:02:10:24:51:82:b3:a6:31:c5:0f:82:15: 17:26:45:2a:77:71:3e:72:a6:0b:f4:24:64:e1:7a:bf:d2:2a: 73:6b:b3:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6K35rXLBl3DCyJX7cNV0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYWMxYjIxMjlhYmJhYzY1MzlmODBkYTY1NTBjNDk3MjFk MGE4YzQwHhcNMjUxMjE4MTAwMTUzWhcNMjUxMjE5MTAwMTUzWjAzMTEwLwYDVQQD EyhmYzFmNTk0MTE3OWRhZjM3MmYzNTA4MjZiOGEyZDlhNmI2ZDIyNDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMWlZznoIe3ath9+0AlxZl/UcASS ItOko12OeSKewy0NL8uKv9bOiyDIXB8RWGB3uQW2bi5DwEjjgyBqxTVv9H+uS4DR Xa8SRrtvg8itf07ldf1ylcpmc5vD0ZpHYvXKr3K/Pb2uNweXNSM8IGRHW+NWiZWH Ivul0fZCNBZdEPaXBHNyInBwCUrpAlm4WvuI6bRQoxfO5MLFqnUYfI6Az7W3fizf kYaZGMinBOeGUwONLZhMbZ3jRGHr8JnVU7YjYC9CKkTf80sXByu2JQm90q+HyRjJ jOWd/shbluMfPhEemZSjQQb4UP3iOIYzQtO2D8SgY2dd1BQVaLWJHSN1BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPwfWUEXna83LzUIJrii2aa20iRcMB8GA1UdIwQY MBaAFK6sGyEpq7rGU5+A2mVQxJch0KjEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnF3YklTbXJ1c1pUbjREYVpWREVseUhRcU1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9iOWJiN2YtMTY2ZC00MWFmLWExZGIt ODY2YjJiMDIxZmM1LzEvcnF3YklTbXJ1c1pUbjREYVpWREVseUhRcU1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9iOWJiN2YtMTY2ZC00MWFmLWExZGItODY2YjJiMDIxZmM1 LzEvcnF3YklTbXJ1c1pUbjREYVpWREVseUhRcU1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABnTkpNaj crxj6K7+a7gX+hBwgqU5Tj1NFu4sEYUSFok5Yj94c06FLA59B+iUnDJ4IxT+PiB0 K9ks3Ae3tT1O5tBC7nrC/PiJE5TKgRzKo6VbaoiqfMAYt3Ar4Jgwkk3KJwujs1KO mKg388D96AkboqW2SEbWy4O4VJCg181Mlsndz6v6+Qv8s63d1Kud4eL7yHIGo/uL PkZcoQ/0s8WPmjpaj22Kn5YMZhEkEK1d5GfDbkJMEUMVrHJm9DZDINEDI3+/w9ua Dn8IvHeGuC+/8a8MzjJFjszwPL5hoOQfAhAkUYKzpjHFD4IVFyZFKndxPnKmC/Qk ZOF6v9Iqc2uzSQ== -----END CERTIFICATE-----Generated at Thu Dec 18 12:24:02 2025 by rpki-client