This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft File: qycpZC0uNTfZq3xFxR_ibepGi4I.mft (raw, json) Hash identifier: QmBkRHTtd7AXCf+EfmubfuHjk5CvbORoktardTbUOWs= Subject key identifier: 5D:91:80:1F:C7:A0:DA:A6:93:5B:A5:06:D1:93:84:E2:00:2A:C5:14 Authority key identifier: AB:27:29:64:2D:2E:35:37:D9:AB:7C:45:C5:1F:E2:6D:EA:46:8B:82 Certificate issuer: /CN=ab2729642d2e3537d9ab7c45c51fe26dea468b82 Certificate serial: 019B326858AC4E0F8BC98AB0F6D16D80D1C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 17:00:57 +0000 Manifest this update: Thu 18 Dec 2025 17:00:57 +0000 Manifest next update: Fri 19 Dec 2025 17:00:57 +0000 Files and hashes: 1: DjJbJVK4ViblB5hs7VL09DEef2k.roa (hash: cqb7/wQBvYXWlhU0RsJ/gn+FwdkM5gkB/GQuwkcLWgs=) 2: qycpZC0uNTfZq3xFxR_ibepGi4I.crl (hash: mU3quz5TuUIDcgkkGF7smi5CW9PP76x/n0QjvYCJiuE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:58:ac:4e:0f:8b:c9:8a:b0:f6:d1:6d:80:d1:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2729642d2e3537d9ab7c45c51fe26dea468b82 Validity Not Before: Dec 18 17:00:57 2025 GMT Not After : Dec 19 17:00:57 2025 GMT Subject: CN=5d91801fc7a0daa6935ba506d19384e2002ac514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1f:b9:fd:14:79:d5:3c:d3:74:38:2f:37:90: 44:6b:9d:c0:c0:1d:dc:38:fe:ed:c6:c5:fe:85:ae: a1:56:a5:0f:02:0d:15:73:79:fb:42:c2:e2:27:c7: f9:f0:a3:6d:a5:98:25:c3:d4:99:6d:49:b3:55:fd: 15:22:0c:0e:6e:34:c5:d6:1b:6d:19:46:f1:6f:68: 5e:34:38:44:9c:20:5c:6f:0d:1f:2a:60:f1:f9:00: 33:34:68:51:e5:e4:f1:7c:0c:5c:e2:d8:c3:a1:df: eb:ee:ef:9f:8b:1b:da:12:20:f9:35:c6:6b:0f:30: 3e:e6:cf:fe:33:d0:be:3b:fe:2a:c0:1a:39:a8:93: 42:bf:0a:ba:ab:55:8e:40:d1:7f:9a:99:5c:6d:78: 5c:bd:86:75:46:46:f2:b0:33:ea:1b:fc:37:de:5b: 59:2e:2f:f6:4c:b7:21:83:a8:e2:35:72:d1:04:91: 88:32:71:bb:d1:f7:7f:01:e6:ed:74:1e:88:67:e5: 3d:bc:4e:3b:bc:17:f5:75:95:66:6d:df:eb:d2:64: e8:37:7e:a7:3d:0d:62:37:fb:68:91:39:a2:b7:47: 03:9f:f7:f7:14:6a:a4:b4:80:f1:24:0f:65:ca:ab: 84:c5:5b:d2:37:6c:cd:a7:f4:c5:1e:34:60:8f:2a: 01:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:91:80:1F:C7:A0:DA:A6:93:5B:A5:06:D1:93:84:E2:00:2A:C5:14 X509v3 Authority Key Identifier: keyid:AB:27:29:64:2D:2E:35:37:D9:AB:7C:45:C5:1F:E2:6D:EA:46:8B:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e4:59:e8:37:8f:0c:33:1c:8d:f8:60:56:cb:03:2c:d7:6a:0c: cd:37:1e:d1:46:66:66:6c:5d:d5:3a:bc:ee:a6:02:fd:49:49: b0:95:dc:61:d9:05:97:81:c7:7d:f4:81:89:47:60:48:81:24: 54:c2:4f:e6:52:e1:80:d5:da:e5:ee:6f:f5:6b:6e:ed:3d:97: fe:33:ce:42:a6:31:89:32:bc:c5:09:e6:4a:11:a2:68:1f:f4: 0e:70:3f:1b:d8:6e:ce:80:84:fb:a7:cd:1c:4f:e8:35:27:5a: b6:06:53:2b:17:8a:ca:4e:e1:6d:29:ef:9f:3a:e6:97:ff:7e: 5a:52:12:fc:89:7f:cb:84:52:77:7c:43:77:5e:4e:21:4e:3e: 22:f1:5a:e4:58:2d:68:0e:0e:9f:9f:47:a1:15:3a:b9:89:95: c8:4f:22:d6:73:79:56:8a:a0:be:24:3e:59:dc:e4:1d:0b:9d: e7:5f:e5:98:46:fb:e0:f9:f1:07:02:60:da:ef:2b:c5:81:32: a4:a6:54:68:bd:af:5a:e6:67:4d:15:29:f9:14:a3:0a:78:90: 8c:30:7c:ed:1f:4d:c1:1f:ef:b4:ca:8c:61:70:43:44:74:08: e9:e5:11:65:cf:75:c8:da:0b:2b:20:85:fa:4a:06:f4:85:00: 2b:26:ea:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaFisTg+LyYqw9tFtgNHFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMjcyOTY0MmQyZTM1MzdkOWFiN2M0NWM1MWZlMjZkZWE0 NjhiODIwHhcNMjUxMjE4MTcwMDU3WhcNMjUxMjE5MTcwMDU3WjAzMTEwLwYDVQQD Eyg1ZDkxODAxZmM3YTBkYWE2OTM1YmE1MDZkMTkzODRlMjAwMmFjNTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvB+5/RR51TzTdDgvN5BEa53AwB3c OP7txsX+ha6hVqUPAg0Vc3n7QsLiJ8f58KNtpZglw9SZbUmzVf0VIgwObjTF1htt GUbxb2heNDhEnCBcbw0fKmDx+QAzNGhR5eTxfAxc4tjDod/r7u+fixvaEiD5NcZr DzA+5s/+M9C+O/4qwBo5qJNCvwq6q1WOQNF/mplcbXhcvYZ1RkbysDPqG/w33ltZ Li/2TLchg6jiNXLRBJGIMnG70fd/AebtdB6IZ+U9vE47vBf1dZVmbd/r0mToN36n PQ1iN/tokTmit0cDn/f3FGqktIDxJA9lyquExVvSN2zNp/TFHjRgjyoBjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF2RgB/HoNqmk1ulBtGThOIAKsUUMB8GA1UdIwQY MBaAFKsnKWQtLjU32at8RcUf4m3qRouCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXljcFpDMHVOVGZacTN4RnhSX2liZXBHaTRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9lZDgwZGUtMTM2MS00MjNmLTkxYWYt NWQwZTYyMGY1MjVkLzEvcXljcFpDMHVOVGZacTN4RnhSX2liZXBHaTRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9lZDgwZGUtMTM2MS00MjNmLTkxYWYtNWQwZTYyMGY1MjVk LzEvcXljcFpDMHVOVGZacTN4RnhSX2liZXBHaTRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5FnoN48M MxyN+GBWywMs12oMzTce0UZmZmxd1Tq87qYC/UlJsJXcYdkFl4HHffSBiUdgSIEk VMJP5lLhgNXa5e5v9Wtu7T2X/jPOQqYxiTK8xQnmShGiaB/0DnA/G9huzoCE+6fN HE/oNSdatgZTKxeKyk7hbSnvnzrml/9+WlIS/Il/y4RSd3xDd15OIU4+IvFa5Fgt aA4On59HoRU6uYmVyE8i1nN5VoqgviQ+WdzkHQud51/lmEb74PnxBwJg2u8rxYEy pKZUaL2vWuZnTRUp+RSjCniQjDB87R9NwR/vtMqMYXBDRHQI6eURZc91yNoLKyCF +koG9IUAKybqTQ== -----END CERTIFICATE-----Generated at Thu Dec 18 19:11:57 2025 by rpki-client