This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.mft File: q5qrE0J62MAHKuCNm7gKvBnT-YQ.mft (raw, json) Hash identifier: X0XIFIPkj8KVjRmQ6DqPyzSe1oZoGvkkvMCw+BQ4KZ8= Subject key identifier: 71:63:5C:89:AC:37:66:96:9A:7D:2E:61:13:A5:F3:BC:FF:73:AE:2D Authority key identifier: AB:9A:AB:13:42:7A:D8:C0:07:2A:E0:8D:9B:B8:0A:BC:19:D3:F9:84 Certificate issuer: /CN=ab9aab13427ad8c0072ae08d9bb80abc19d3f984 Certificate serial: 019AF1D25EC4AF90D7DBA1FDE1A53967C6CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5qrE0J62MAHKuCNm7gKvBnT-YQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.mft Manifest number: 0BC9 Signing time: Sat 06 Dec 2025 04:01:27 +0000 Manifest this update: Sat 06 Dec 2025 04:01:27 +0000 Manifest next update: Sun 07 Dec 2025 04:01:27 +0000 Files and hashes: 1: i11QUMq5rxHIsS_Sujk7fM1Wmpc.roa (hash: 6iS4lGatjNwdjx3TWoy83KW0n9N+x6+eWhAvA99wwRM=) 2: q5qrE0J62MAHKuCNm7gKvBnT-YQ.crl (hash: Gb2QbxfMo1foYqkgzKbFvR2wsElOG+kqP28SyfOd1nA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.mft rsync://rpki.ripe.net/repository/DEFAULT/q5qrE0J62MAHKuCNm7gKvBnT-YQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:5e:c4:af:90:d7:db:a1:fd:e1:a5:39:67:c6:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab9aab13427ad8c0072ae08d9bb80abc19d3f984 Validity Not Before: Dec 6 04:01:27 2025 GMT Not After : Dec 7 04:01:27 2025 GMT Subject: CN=71635c89ac3766969a7d2e6113a5f3bcff73ae2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4d:c3:ba:c2:49:42:01:1e:a8:f4:40:2e:3f: 11:91:3c:47:32:a5:59:a7:d9:43:ed:e8:98:24:22: 59:e6:59:06:15:14:ec:43:0c:2c:89:37:d5:d2:57: 99:aa:36:d3:d5:b7:f2:3b:e5:d8:cf:36:30:e8:2c: 21:d1:6a:52:da:17:e6:19:42:35:fe:0b:e0:a7:05: e9:e4:be:b9:47:51:5a:07:b0:3d:c9:c8:8a:9a:38: 2e:70:6a:7e:50:f9:97:b9:ca:4b:5d:c8:45:41:28: 3a:41:5b:92:d4:f1:cf:5e:65:4e:7b:7c:2d:34:92: a4:53:7b:c0:3a:d1:fd:cb:44:73:81:1e:22:40:6a: 92:ec:b4:d6:cc:ea:aa:dc:50:e1:57:9e:be:a9:0f: a7:53:52:e9:2e:02:f8:c7:8f:4a:6a:79:0f:05:27: 07:24:78:11:6c:6a:c9:f9:7c:d8:38:b1:13:45:05: d2:77:d6:51:08:ee:05:90:92:3f:d1:87:4c:a7:62: 06:ee:be:24:7c:e9:f3:9b:78:f0:cb:7d:72:b5:fc: 87:ea:bd:69:a0:06:16:1c:68:62:4b:e2:62:19:db: d0:7d:be:75:d0:c0:8c:cf:9c:94:b3:ea:7e:88:1b: eb:c8:a9:99:14:7c:4b:60:d9:3e:40:3e:dd:bd:7e: b2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:63:5C:89:AC:37:66:96:9A:7D:2E:61:13:A5:F3:BC:FF:73:AE:2D X509v3 Authority Key Identifier: keyid:AB:9A:AB:13:42:7A:D8:C0:07:2A:E0:8D:9B:B8:0A:BC:19:D3:F9:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5qrE0J62MAHKuCNm7gKvBnT-YQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:2d:2f:1f:89:04:f8:a4:ae:ba:67:84:d6:11:27:ac:37:de: ff:66:6e:5a:3d:f0:00:ad:6a:c6:d6:4a:40:5b:10:90:c6:cd: 59:23:63:b2:4a:03:a7:be:e8:b6:69:43:91:03:f5:05:37:25: 6b:5f:6e:4d:64:41:56:0c:e9:75:8e:1b:c7:36:d7:db:d9:04: b4:d7:29:fc:42:61:8c:bb:fa:21:d5:97:d9:a1:c4:8b:d0:aa: 99:32:62:e5:2c:87:0e:20:94:b9:c3:a1:e8:19:b5:5c:fa:98: bd:29:f8:8c:c3:a2:86:85:04:e0:95:3b:01:78:cd:23:f0:e3: d7:af:a0:0b:01:92:d3:af:e3:2d:3e:32:64:8a:91:06:95:f8: eb:83:9b:c4:12:4f:fc:4a:fb:88:8a:88:7c:f2:04:3f:8c:57: be:d1:0e:ee:c3:0b:26:52:8e:fc:5a:2a:c7:01:cd:cb:34:f7: fc:0e:0d:90:46:68:71:b7:4a:42:2f:3f:9a:35:2a:a1:d0:2b: 5c:50:f2:7b:7b:c2:cb:b5:4a:b5:ac:45:a9:b9:33:04:1c:fd: 47:3e:b5:5a:21:67:61:48:99:74:6a:5c:b7:36:0d:96:a1:55: c8:33:05:7c:77:1f:bf:e5:1a:f4:8d:5b:a4:8d:92:34:60:86: 24:5a:54:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0l7Er5DX26H94aU5Z8bPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiOWFhYjEzNDI3YWQ4YzAwNzJhZTA4ZDliYjgwYWJjMTlk M2Y5ODQwHhcNMjUxMjA2MDQwMTI3WhcNMjUxMjA3MDQwMTI3WjAzMTEwLwYDVQQD Eyg3MTYzNWM4OWFjMzc2Njk2OWE3ZDJlNjExM2E1ZjNiY2ZmNzNhZTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmE3DusJJQgEeqPRALj8RkTxHMqVZ p9lD7eiYJCJZ5lkGFRTsQwwsiTfV0leZqjbT1bfyO+XYzzYw6Cwh0WpS2hfmGUI1 /gvgpwXp5L65R1FaB7A9yciKmjgucGp+UPmXucpLXchFQSg6QVuS1PHPXmVOe3wt NJKkU3vAOtH9y0RzgR4iQGqS7LTWzOqq3FDhV56+qQ+nU1LpLgL4x49KankPBScH JHgRbGrJ+XzYOLETRQXSd9ZRCO4FkJI/0YdMp2IG7r4kfOnzm3jwy31ytfyH6r1p oAYWHGhiS+JiGdvQfb510MCMz5yUs+p+iBvryKmZFHxLYNk+QD7dvX6yxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHFjXImsN2aWmn0uYROl87z/c64tMB8GA1UdIwQY MBaAFKuaqxNCetjAByrgjZu4CrwZ0/mEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTVxckUwSjYyTUFIS3VDTm03Z0t2Qm5ULVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lYjk1ODItZDI3NS00OTdhLWI2MmIt MzkyNjAzMTljN2JkLzEvcTVxckUwSjYyTUFIS3VDTm03Z0t2Qm5ULVlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9lYjk1ODItZDI3NS00OTdhLWI2MmItMzkyNjAzMTljN2Jk LzEvcTVxckUwSjYyTUFIS3VDTm03Z0t2Qm5ULVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlS0vH4kE +KSuumeE1hEnrDfe/2ZuWj3wAK1qxtZKQFsQkMbNWSNjskoDp77otmlDkQP1BTcl a19uTWRBVgzpdY4bxzbX29kEtNcp/EJhjLv6IdWX2aHEi9CqmTJi5SyHDiCUucOh 6Bm1XPqYvSn4jMOihoUE4JU7AXjNI/Dj16+gCwGS06/jLT4yZIqRBpX464ObxBJP /Er7iIqIfPIEP4xXvtEO7sMLJlKO/FoqxwHNyzT3/A4NkEZocbdKQi8/mjUqodAr XFDye3vCy7VKtaxFqbkzBBz9Rz61WiFnYUiZdGpctzYNlqFVyDMFfHcfv+Ua9I1b pI2SNGCGJFpU3g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:35:22 2025 by rpki-client