This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft File: Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft (raw, json) Hash identifier: NRix4MTumviKP1jxxsn5w1iPD+vdfcvTYbnbM9a5SBs= Subject key identifier: AD:0C:5D:EB:1E:B1:0B:41:A2:E1:FC:8F:F2:B5:AB:D6:82:C8:48:0F Authority key identifier: 43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB Certificate issuer: /CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb Certificate serial: 019AF49C19F168BC9DA462875F997473C066 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft Manifest number: 1777 Signing time: Sat 06 Dec 2025 17:01:02 +0000 Manifest this update: Sat 06 Dec 2025 17:01:02 +0000 Manifest next update: Sun 07 Dec 2025 17:01:02 +0000 Files and hashes: 1: M9YJnMZq-Qo4sKyFoXRkAaUtrDA.roa (hash: lb64jsKs0riSb1j7+rgbV5185uMxPtGDDu6H1Pf3T8s=) 2: P0fCccGAGT3P2tDw-rs5ORyPyrw.roa (hash: zsjstCOlxud3vr07JZ7SKJe39jYJRrodk6RlxTPhlQE=) 3: Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl (hash: 4gLQqgwvuW2iszUFU3ogy2AkHPtT4hxCkzl7+FNhVhw=) 4: bOyfi-z2wqC5OBTk4v100ve7CxI.roa (hash: WiyMw0UdlKQAlB0ieoJy4RAqYir7UCqclb4nu/UNQCk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:19:f1:68:bc:9d:a4:62:87:5f:99:74:73:c0:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb Validity Not Before: Dec 6 17:01:02 2025 GMT Not After : Dec 7 17:01:02 2025 GMT Subject: CN=ad0c5deb1eb10b41a2e1fc8ff2b5abd682c8480f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7d:36:1e:dc:96:1f:a7:dd:14:89:bb:fb:21: 69:2f:ba:d4:fa:6c:26:08:f1:60:a0:c4:44:c9:d0: 99:03:cf:a7:14:6c:69:0f:17:3d:df:b4:a4:3b:5c: 5d:93:9e:74:94:38:e1:8a:98:51:0f:67:4a:c7:a9: 3b:b3:de:89:52:1d:74:6a:fb:53:5e:ad:e8:ed:aa: 30:58:a7:d9:3c:a5:f2:d6:b5:a9:59:88:a2:e0:8a: ab:94:4f:38:40:07:15:99:81:0c:1f:6f:97:24:d1: 33:1c:2c:b0:01:15:60:c0:69:37:e2:4d:44:67:7d: d0:60:b9:52:84:ae:c0:3c:02:da:da:55:d9:8f:82: d1:65:00:fa:85:e8:35:b3:e8:ff:94:ec:8f:78:f6: fe:a3:71:74:ad:aa:83:b7:a9:bf:a9:fd:8f:f8:59: 0c:f5:d5:b2:f6:bd:3b:84:7f:72:dd:80:3d:f4:bc: 95:2e:fc:e5:bc:25:d8:96:63:d3:4c:e9:87:1a:9c: 39:16:ae:10:e2:82:36:c7:52:ea:8d:23:10:9b:45: 4b:db:9e:e8:cc:20:78:ec:38:75:92:db:5e:18:21: 2d:f1:3f:91:55:ce:81:e7:22:aa:25:d5:69:1d:4c: 43:e2:05:83:41:90:2b:89:13:77:cd:94:e5:bb:9d: 94:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:0C:5D:EB:1E:B1:0B:41:A2:E1:FC:8F:F2:B5:AB:D6:82:C8:48:0F X509v3 Authority Key Identifier: keyid:43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:70:3d:59:51:34:27:07:d6:86:b0:94:6f:06:2a:52:af:00: 23:64:c5:58:56:ae:ad:a2:28:fc:c3:53:a3:8a:08:50:ba:1a: a0:c2:21:55:83:43:d9:38:d1:a2:a4:78:fb:bc:40:5f:8c:9e: 53:4f:ac:36:f6:11:64:58:78:29:62:7f:53:ae:52:8d:0b:4d: e6:9e:38:3b:26:b3:54:d2:e6:5a:02:fa:87:0b:39:59:25:90: c2:7f:1e:67:7b:ac:a4:81:e1:9f:cc:d4:86:7b:aa:25:a8:ca: e3:33:2e:59:76:04:cc:82:7b:97:b7:c8:93:68:b1:0e:78:61: ad:42:1b:8e:4d:18:c6:81:e0:d1:8f:2c:1a:57:3e:5f:98:4b: ea:05:83:25:af:53:db:21:7d:cb:85:34:19:a8:d6:9c:e7:1a: 5d:a9:8b:21:7a:98:f3:27:d4:ea:83:db:0d:a6:0b:35:3c:12: ef:6b:31:31:f5:26:bf:01:be:31:76:ad:4b:3a:06:6a:45:f1: dd:9a:14:46:85:9c:78:bd:14:4c:1d:95:89:fd:a9:06:66:e3: 37:0d:17:70:f5:0d:80:a1:72:23:fc:e0:9a:b6:0b:c0:6b:50: a3:19:61:15:3d:5e:28:b7:f6:16:98:a9:69:54:63:ab:5b:aa: e1:5e:21:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nBnxaLydpGKHX5l0c8BmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzOTY1ZGQxZjZmMjRhNDZkN2NjNGJjY2ZlY2Q0MTUxYzZk ZDFiZmIwHhcNMjUxMjA2MTcwMTAyWhcNMjUxMjA3MTcwMTAyWjAzMTEwLwYDVQQD EyhhZDBjNWRlYjFlYjEwYjQxYTJlMWZjOGZmMmI1YWJkNjgyYzg0ODBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoH02HtyWH6fdFIm7+yFpL7rU+mwm CPFgoMREydCZA8+nFGxpDxc937SkO1xdk550lDjhiphRD2dKx6k7s96JUh10avtT Xq3o7aowWKfZPKXy1rWpWYii4IqrlE84QAcVmYEMH2+XJNEzHCywARVgwGk34k1E Z33QYLlShK7APALa2lXZj4LRZQD6heg1s+j/lOyPePb+o3F0raqDt6m/qf2P+FkM 9dWy9r07hH9y3YA99LyVLvzlvCXYlmPTTOmHGpw5Fq4Q4oI2x1LqjSMQm0VL257o zCB47Dh1ktteGCEt8T+RVc6B5yKqJdVpHUxD4gWDQZAriRN3zZTlu52UeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK0MXesesQtBouH8j/K1q9aCyEgPMB8GA1UdIwQY MBaAFEOWXdH28kpG18xLzP7NQVHG3Rv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTVaZDBmYnlTa2JYekV2TV9zMUJVY2JkR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jNzMxYzQtOTE4My00ZGIzLWI3MGEt MzM5ODBjMDNmMDhlLzEvUTVaZDBmYnlTa2JYekV2TV9zMUJVY2JkR19zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9jNzMxYzQtOTE4My00ZGIzLWI3MGEtMzM5ODBjMDNmMDhl LzEvUTVaZDBmYnlTa2JYekV2TV9zMUJVY2JkR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHHA9WVE0 JwfWhrCUbwYqUq8AI2TFWFauraIo/MNTo4oIULoaoMIhVYND2TjRoqR4+7xAX4ye U0+sNvYRZFh4KWJ/U65SjQtN5p44OyazVNLmWgL6hws5WSWQwn8eZ3uspIHhn8zU hnuqJajK4zMuWXYEzIJ7l7fIk2ixDnhhrUIbjk0YxoHg0Y8sGlc+X5hL6gWDJa9T 2yF9y4U0GajWnOcaXamLIXqY8yfU6oPbDaYLNTwS72sxMfUmvwG+MXatSzoGakXx 3ZoURoWceL0UTB2Vif2pBmbjNw0XcPUNgKFyI/zgmrYLwGtQoxlhFT1eKLf2Fpip aVRjq1uq4V4hZg== -----END CERTIFICATE-----Generated at Sun Dec 7 03:05:56 2025 by rpki-client