This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft File: Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft (raw, json) Hash identifier: w38wYGkSV1S1Gfa3NoQU2R+mKfxzOgZtmOzSSk8yUCI= Subject key identifier: D0:20:F8:73:60:23:2C:42:74:8C:5A:E9:6A:6C:7D:B3:11:D0:2D:1F Authority key identifier: 43:9C:ED:98:05:A3:C5:D9:34:E2:C5:21:A1:7A:8A:B9:4F:11:AE:C5 Certificate issuer: /CN=439ced9805a3c5d934e2c521a17a8ab94f11aec5 Certificate serial: 019AF5E60E5086BA01019C39FC99C6AC1668 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft Manifest number: 0699 Signing time: Sat 06 Dec 2025 23:01:26 +0000 Manifest this update: Sat 06 Dec 2025 23:01:26 +0000 Manifest next update: Sun 07 Dec 2025 23:01:26 +0000 Files and hashes: 1: Ku3HRyioj0ql8ozTbPCiAHlL8-E.roa (hash: gtf9gLEz02KrYfoccfEAryEzPGbpHsjqTO4FxJ768C8=) 2: Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl (hash: iRR4zRotSJkecfZK13L9JvOTFiT1lE5ZseJB94xlpO0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e6:0e:50:86:ba:01:01:9c:39:fc:99:c6:ac:16:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439ced9805a3c5d934e2c521a17a8ab94f11aec5 Validity Not Before: Dec 6 23:01:26 2025 GMT Not After : Dec 7 23:01:26 2025 GMT Subject: CN=d020f87360232c42748c5ae96a6c7db311d02d1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a3:05:46:ef:89:91:07:2d:31:6d:a1:f6:58: 74:42:7a:78:58:0c:fd:bc:c1:78:57:fd:b7:8e:ac: a0:fe:3e:53:80:98:da:9e:08:76:7f:fc:25:47:dd: f2:d0:1b:8c:1b:12:11:5d:00:55:c6:bc:19:a2:3b: 03:b4:91:78:cd:bf:e5:3e:8d:aa:0b:a1:67:31:00: de:39:85:3c:64:74:b8:27:5d:05:a9:c4:68:dc:9e: 94:71:50:ab:20:32:8b:91:8f:f9:7c:1e:01:bd:08: ba:29:61:24:c4:d8:18:29:e7:eb:e7:6a:17:05:f0: 9f:a7:d4:ef:39:fc:ea:17:79:8e:22:7e:db:44:f8: ad:43:58:25:1c:df:db:e5:f0:6a:9b:62:cb:5c:e0: e7:7d:c2:ca:78:7e:73:30:01:22:2e:e3:74:08:d5: 1c:8d:0b:fe:7c:f5:09:15:cd:f1:49:45:38:5f:85: 7c:22:6d:2d:06:43:7a:ea:0a:5f:7d:d7:38:4f:e5: 9f:2a:ea:3b:c1:49:4e:88:83:e5:fe:c4:6c:3d:19: bc:5d:0e:7d:89:ae:c3:09:e9:7f:61:5a:75:0a:fa: ce:db:eb:3d:e9:67:bf:8e:0d:1e:02:d4:90:b6:da: 85:64:77:6e:ef:8e:e4:1b:41:a8:0e:17:48:12:1f: 71:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:20:F8:73:60:23:2C:42:74:8C:5A:E9:6A:6C:7D:B3:11:D0:2D:1F X509v3 Authority Key Identifier: keyid:43:9C:ED:98:05:A3:C5:D9:34:E2:C5:21:A1:7A:8A:B9:4F:11:AE:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:7a:e8:4c:8d:82:24:e3:cf:34:5d:50:3b:dc:21:e8:ae:44: 18:74:ae:1a:19:8b:9b:fe:d4:6b:c9:43:a7:f7:cc:c6:fc:5d: 85:1c:4f:d6:5f:5c:a0:b6:38:3a:ab:f0:9a:f6:6d:55:a8:1f: c8:a2:a8:4c:01:d7:8d:d4:05:1c:ba:da:17:5e:02:29:55:6d: c0:cc:19:7e:6b:e7:80:b5:2a:02:45:de:44:1e:32:17:ac:1e: 7c:dd:82:ac:5d:4d:28:43:1f:b5:f6:f8:42:7d:00:2e:ec:9b: 2b:48:18:b1:0f:31:63:87:d8:26:e9:2c:72:53:fd:b5:38:58: 6b:20:96:81:19:44:40:71:5c:d0:b8:09:bd:60:c5:29:bf:a3: 6c:a1:84:41:0a:8a:15:84:89:e5:b1:3b:0f:b7:2f:6b:1a:44: e0:b4:04:9f:51:86:18:79:7d:06:47:16:ca:2b:bf:b2:2f:7d: 30:e6:70:f3:1c:1f:12:95:39:70:39:f7:c4:9d:8c:8a:f0:0e: 1a:c6:2e:d3:7f:c7:88:ec:97:25:69:3d:58:c3:77:6a:cd:fe: 5d:4b:27:90:25:2d:e2:07:e9:94:82:95:e1:3f:6e:91:52:04: 87:da:cb:aa:a4:f6:71:f0:50:1c:51:95:77:5d:8c:4d:98:c4: 08:35:83:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15g5QhroBAZw5/JnGrBZoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzOWNlZDk4MDVhM2M1ZDkzNGUyYzUyMWExN2E4YWI5NGYx MWFlYzUwHhcNMjUxMjA2MjMwMTI2WhcNMjUxMjA3MjMwMTI2WjAzMTEwLwYDVQQD EyhkMDIwZjg3MzYwMjMyYzQyNzQ4YzVhZTk2YTZjN2RiMzExZDAyZDFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6MFRu+JkQctMW2h9lh0Qnp4WAz9 vMF4V/23jqyg/j5TgJjangh2f/wlR93y0BuMGxIRXQBVxrwZojsDtJF4zb/lPo2q C6FnMQDeOYU8ZHS4J10FqcRo3J6UcVCrIDKLkY/5fB4BvQi6KWEkxNgYKefr52oX BfCfp9TvOfzqF3mOIn7bRPitQ1glHN/b5fBqm2LLXODnfcLKeH5zMAEiLuN0CNUc jQv+fPUJFc3xSUU4X4V8Im0tBkN66gpffdc4T+WfKuo7wUlOiIPl/sRsPRm8XQ59 ia7DCel/YVp1CvrO2+s96We/jg0eAtSQttqFZHdu747kG0GoDhdIEh9xjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNAg+HNgIyxCdIxa6WpsfbMR0C0fMB8GA1UdIwQY MBaAFEOc7ZgFo8XZNOLFIaF6irlPEa7FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTV6dG1BV2p4ZGswNHNVaG9YcUt1VThScnNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83YjUwN2EtZmVjZC00YWUzLTgwNWQt YTc3ODM0NWFlZDg4LzEvUTV6dG1BV2p4ZGswNHNVaG9YcUt1VThScnNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC83YjUwN2EtZmVjZC00YWUzLTgwNWQtYTc3ODM0NWFlZDg4 LzEvUTV6dG1BV2p4ZGswNHNVaG9YcUt1VThScnNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJnroTI2C JOPPNF1QO9wh6K5EGHSuGhmLm/7Ua8lDp/fMxvxdhRxP1l9coLY4OqvwmvZtVagf yKKoTAHXjdQFHLraF14CKVVtwMwZfmvngLUqAkXeRB4yF6wefN2CrF1NKEMftfb4 Qn0ALuybK0gYsQ8xY4fYJuksclP9tThYayCWgRlEQHFc0LgJvWDFKb+jbKGEQQqK FYSJ5bE7D7cvaxpE4LQEn1GGGHl9BkcWyiu/si99MOZw8xwfEpU5cDn3xJ2MivAO GsYu03/HiOyXJWk9WMN3as3+XUsnkCUt4gfplIKV4T9ukVIEh9rLqqT2cfBQHFGV d12MTZjECDWD1Q== -----END CERTIFICATE-----Generated at Sun Dec 7 03:11:52 2025 by rpki-client