This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft File: q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft (raw, json) Hash identifier: gvNQn84zzodMLjSN6By/3XGzBRAT6pqojHQhxbg4zpg= Subject key identifier: EE:34:B5:F0:5E:F2:13:CF:B7:7B:8B:98:9E:6B:64:1F:93:C6:8A:2D Authority key identifier: AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB Certificate issuer: /CN=ab54fe831b6a719f42e6c8486fd03b550be761fb Certificate serial: 019AF23F974697A03957F3ECB03E79FE70A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft Manifest number: 1782 Signing time: Sat 06 Dec 2025 06:00:44 +0000 Manifest this update: Sat 06 Dec 2025 06:00:44 +0000 Manifest next update: Sun 07 Dec 2025 06:00:44 +0000 Files and hashes: 1: 1-cOylIgVizIi_NLIvrapQIjCpxI.roa (hash: r3+z3BEwpcuYowfbZZN8Q536TC/rI+en5bQ7NHsqLag=) 2: F9Xe_7jgOYvdTNT9YC7uc1m7clw.roa (hash: dbf14IPOhGmAOgdUCZzI8fhPd/ppi3DXyc8q1YDOSJo=) 3: HncO7o0Hx6kmO3BNCUVPbF42-m8.roa (hash: /pA5z2SwqwvGDpyWUHOM2Fy+nufCkYimVU2as7hvZq8=) 4: N5zj-5kvAhoJCItFFzdBa1pYbH0.roa (hash: ypTV2FdvIR6mdrYiLR6I+YqYJsccCY+5Z3r1n8pA0MU=) 5: NiqjOlNTXM20fr7bb_Hu7fNVpnk.roa (hash: WMjXZpt8cy+IOzVtTivSuKAcQFZieAhNSlute/PEdJQ=) 6: VUze8_1n74uVa_uD6F7A6AioYKM.roa (hash: ugq/e8QeF0wIWa9W8bf0Wvpu26TSdCjGX0yCM4f1o1k=) 7: jJkmu95ExwTShGBJvsJR7aBhoPU.roa (hash: nz14VG6Wmam+OFYqgavV7ACmkDO4KpLptIyk8PePgL8=) 8: oFumiBsAWooyBU0TcSWUrXQVV0M.roa (hash: O0f3W53wpKnfJgwZpwBD1xXfrpSbNoYlbIB/lXeKPq8=) 9: q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl (hash: GwQHj6R5cZyzL3TTpxKXeScwAzSsEnWSxqNeKouggpQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:97:46:97:a0:39:57:f3:ec:b0:3e:79:fe:70:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab54fe831b6a719f42e6c8486fd03b550be761fb Validity Not Before: Dec 6 06:00:44 2025 GMT Not After : Dec 7 06:00:44 2025 GMT Subject: CN=ee34b5f05ef213cfb77b8b989e6b641f93c68a2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e1:59:df:bf:f4:03:7c:59:4c:9c:1e:96:c1: 02:10:34:5b:38:dd:53:b0:27:13:2c:ca:bf:05:4f: 75:dc:aa:86:9b:a9:8d:2a:7b:e9:15:f0:7b:d6:a1: 9b:b9:f2:47:17:d3:58:93:f3:be:9c:62:7b:f4:62: b8:09:15:b6:99:f0:91:e6:92:1f:70:5d:6d:71:8b: 72:d5:99:9e:4d:7a:21:2b:dd:d1:1a:16:fc:4b:60: e3:cc:02:74:bc:f0:6b:32:ca:1c:32:29:6c:07:2f: af:a2:32:df:93:84:64:94:93:69:51:65:dc:60:43: 9a:13:65:ff:68:7a:b5:1a:22:5f:f9:c6:95:4a:77: dc:5d:f9:ae:86:ba:bd:6b:5a:5c:73:3a:6f:14:9e: f7:d2:4d:0d:1a:39:1b:ef:90:43:63:ac:6e:05:e7: 00:49:aa:8d:66:c9:12:55:a0:18:28:4b:ff:cd:08: a7:93:df:24:e6:7d:7d:99:ff:87:9f:88:5c:04:7f: 55:75:c2:3b:91:da:df:2e:4a:89:f0:b3:0e:29:e8: 8b:ff:74:e9:4e:db:83:24:5b:1f:59:85:d8:2c:31: cc:0e:44:50:e8:4c:00:b4:09:e4:44:97:b4:8c:74: 10:a1:6a:76:c5:2e:e4:22:03:9a:f6:51:2e:e4:6e: 88:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:34:B5:F0:5E:F2:13:CF:B7:7B:8B:98:9E:6B:64:1F:93:C6:8A:2D X509v3 Authority Key Identifier: keyid:AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:95:e1:3e:2b:d6:3f:10:d2:26:a7:99:be:70:2f:a2:33:ee: e9:f4:a0:b0:89:b4:e2:e9:e8:56:30:47:71:80:2e:4d:b3:f8: 7c:77:d3:2b:05:9a:d7:4c:9e:b7:2d:ec:56:d1:9f:61:46:45: 3e:55:ec:51:f0:53:8e:0d:c7:5f:09:56:3f:c6:59:51:40:68: fd:cf:45:77:e9:f5:a0:75:ff:ec:72:c9:de:f1:11:7d:06:09: 7c:f7:26:c0:c0:81:c4:d2:ce:9c:bf:81:67:7f:1a:6b:89:2f: b8:1c:c0:1a:c1:b8:40:9e:c9:27:d7:af:56:ed:a5:22:08:84: 76:7f:8a:e1:dd:e0:50:4c:25:23:90:c8:0e:3b:fb:49:76:83: 5b:b5:17:de:6b:18:4a:46:1c:2b:bf:39:c3:7a:46:64:aa:cd: 0b:81:d7:63:2a:47:1c:49:3b:83:b6:3a:0e:35:44:d9:d7:85: 71:7f:17:fd:fa:a0:81:b2:eb:98:bc:de:ff:7b:28:57:81:1b: 35:bd:60:d8:0f:a0:35:b1:55:75:68:b9:a3:4d:87:e4:80:05: d7:7b:d3:46:8c:85:5b:de:f4:e9:07:c0:b3:54:f3:a2:27:a8: fb:b8:9b:7b:7b:38:54:93:38:95:46:41:cf:67:55:39:02:fd: 26:91:a2:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP5dGl6A5V/PssD55/nCpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiNTRmZTgzMWI2YTcxOWY0MmU2Yzg0ODZmZDAzYjU1MGJl NzYxZmIwHhcNMjUxMjA2MDYwMDQ0WhcNMjUxMjA3MDYwMDQ0WjAzMTEwLwYDVQQD EyhlZTM0YjVmMDVlZjIxM2NmYjc3YjhiOTg5ZTZiNjQxZjkzYzY4YTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeFZ37/0A3xZTJwelsECEDRbON1T sCcTLMq/BU913KqGm6mNKnvpFfB71qGbufJHF9NYk/O+nGJ79GK4CRW2mfCR5pIf cF1tcYty1ZmeTXohK93RGhb8S2DjzAJ0vPBrMsocMilsBy+vojLfk4RklJNpUWXc YEOaE2X/aHq1GiJf+caVSnfcXfmuhrq9a1pcczpvFJ730k0NGjkb75BDY6xuBecA SaqNZskSVaAYKEv/zQink98k5n19mf+Hn4hcBH9VdcI7kdrfLkqJ8LMOKeiL/3Tp TtuDJFsfWYXYLDHMDkRQ6EwAtAnkRJe0jHQQoWp2xS7kIgOa9lEu5G6I5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO40tfBe8hPPt3uLmJ5rZB+TxootMB8GA1UdIwQY MBaAFKtU/oMbanGfQubISG/QO1UL52H7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTFULWd4dHFjWjlDNXNoSWI5QTdWUXZuWWZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS81ZWFhYTctMzEwNy00MjY4LWFhZDYt NmZkOTc4OTIwNWJhLzEvcTFULWd4dHFjWjlDNXNoSWI5QTdWUXZuWWZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS81ZWFhYTctMzEwNy00MjY4LWFhZDYtNmZkOTc4OTIwNWJh LzEvcTFULWd4dHFjWjlDNXNoSWI5QTdWUXZuWWZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAZXhPivW PxDSJqeZvnAvojPu6fSgsIm04unoVjBHcYAuTbP4fHfTKwWa10yety3sVtGfYUZF PlXsUfBTjg3HXwlWP8ZZUUBo/c9Fd+n1oHX/7HLJ3vERfQYJfPcmwMCBxNLOnL+B Z38aa4kvuBzAGsG4QJ7JJ9evVu2lIgiEdn+K4d3gUEwlI5DIDjv7SXaDW7UX3msY SkYcK785w3pGZKrNC4HXYypHHEk7g7Y6DjVE2deFcX8X/fqggbLrmLze/3soV4Eb Nb1g2A+gNbFVdWi5o02H5IAF13vTRoyFW9706QfAs1Tzoieo+7ibe3s4VJM4lUZB z2dVOQL9JpGi1w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:55 2025 by rpki-client