This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft File: q5z9FXRB9pQo3R9jYcpPSuQss4o.mft (raw, json) Hash identifier: ZKjJh0yBYMavBfQAT1H+WLRdG0pbmx8GZmM5eycXb1c= Subject key identifier: 21:CB:C3:3E:D5:7D:3A:95:26:74:43:87:E3:67:8F:50:F5:ED:3D:19 Authority key identifier: AB:9C:FD:15:74:41:F6:94:28:DD:1F:63:61:CA:4F:4A:E4:2C:B3:8A Certificate issuer: /CN=ab9cfd157441f69428dd1f6361ca4f4ae42cb38a Certificate serial: 019AF12CC395F90C943E4E5E1E739D95BA94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 01:00:33 +0000 Manifest this update: Sat 06 Dec 2025 01:00:33 +0000 Manifest next update: Sun 07 Dec 2025 01:00:33 +0000 Files and hashes: 1: dCfTqcxg62Lir67qVkgBChTuqA4.roa (hash: UBu+ymeFM9aQ8J18E3tvVpuPsYqEYn9P+xx2d6+/UxI=) 2: q5z9FXRB9pQo3R9jYcpPSuQss4o.crl (hash: ZTIJYqlaIyA0suj1PV5URdKX+Q8/q5SyDp1yFhoSKIQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:c3:95:f9:0c:94:3e:4e:5e:1e:73:9d:95:ba:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab9cfd157441f69428dd1f6361ca4f4ae42cb38a Validity Not Before: Dec 6 01:00:33 2025 GMT Not After : Dec 7 01:00:33 2025 GMT Subject: CN=21cbc33ed57d3a9526744387e3678f50f5ed3d19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:87:6a:fb:e4:d1:4a:15:90:93:0a:44:4e:a9: 6e:1b:3e:9f:5c:52:28:eb:70:30:13:a3:9f:55:41: 5f:6d:3e:49:d6:73:54:28:5f:31:3c:f7:6c:e5:49: f2:92:de:91:6c:83:4d:78:8b:4e:d2:76:80:8d:38: 02:88:84:11:8d:c7:cf:68:26:7e:07:5e:2e:b1:d1: 71:2d:21:cd:a9:e3:03:a3:54:fb:69:3d:33:da:a2: 22:9b:49:d9:51:8a:50:63:6c:dd:a1:02:45:55:2f: e5:4b:0d:97:fb:26:1e:f8:a2:42:0b:19:08:8a:52: 5e:93:58:15:ff:e5:a1:7e:ca:04:b0:f9:b3:fc:bd: 55:6f:04:25:9f:04:a5:8f:65:ce:8f:ee:78:91:e8: 54:70:39:e3:3f:fd:31:7c:e5:bd:c7:fd:3f:c9:61: 6e:3a:21:12:0c:0c:b9:99:7a:2f:bc:4c:49:1b:31: 84:db:60:be:0c:95:3a:f4:5d:cb:69:7c:c4:94:84: fe:7d:70:57:c0:e5:96:02:fa:e7:1d:c6:d1:6e:08: 15:7a:de:6b:c5:01:72:2e:3c:b9:eb:ee:79:01:a5: 92:64:6e:07:e2:f1:94:5d:9b:03:44:7f:30:13:df: 9f:12:ef:fe:c9:77:0e:71:4a:95:1e:b2:3f:90:08: d2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:CB:C3:3E:D5:7D:3A:95:26:74:43:87:E3:67:8F:50:F5:ED:3D:19 X509v3 Authority Key Identifier: keyid:AB:9C:FD:15:74:41:F6:94:28:DD:1F:63:61:CA:4F:4A:E4:2C:B3:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:4b:2b:01:70:7a:9b:0c:c7:9c:1a:ea:d5:3f:4b:bb:93:45: 16:80:0a:c0:33:1d:dd:57:7a:98:29:ca:ee:9b:1e:b6:73:bf: d2:0a:e4:68:de:03:2c:e8:7d:16:ba:b5:ff:73:62:d4:2b:85: 69:32:08:97:af:eb:34:15:ee:78:28:88:31:ed:ae:19:87:0e: b3:b1:a9:38:bd:11:20:53:45:85:70:8f:05:c4:d1:79:24:5a: 01:8a:b4:2b:43:3f:67:36:70:f4:c3:97:2a:fb:ba:c8:06:92: 1f:4b:38:5e:ea:10:d5:67:d1:3f:65:c8:01:c2:62:6b:6b:36: ad:9a:3c:33:06:04:1f:e0:fb:8e:df:9a:df:a8:13:3c:fc:f0: dd:31:e8:2d:6c:bd:84:b7:e4:5a:22:9b:91:e3:b7:6a:c6:0e: f6:2a:32:c1:83:46:40:56:a6:89:83:34:30:9e:fc:8a:aa:1e: 4f:0e:54:ba:64:7b:6d:2c:93:77:28:bc:a8:72:2f:88:f5:17: 1a:b0:8f:a1:bb:41:11:bb:95:bb:22:30:13:be:92:f6:12:b1: 60:6b:36:24:b1:33:fd:8e:af:ec:a3:81:d1:f3:15:c1:65:74: 52:f1:ca:da:45:56:1b:3d:82:37:7d:39:3f:fc:fb:4a:17:f5: 5a:c1:9a:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLMOV+QyUPk5eHnOdlbqUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiOWNmZDE1NzQ0MWY2OTQyOGRkMWY2MzYxY2E0ZjRhZTQy Y2IzOGEwHhcNMjUxMjA2MDEwMDMzWhcNMjUxMjA3MDEwMDMzWjAzMTEwLwYDVQQD EygyMWNiYzMzZWQ1N2QzYTk1MjY3NDQzODdlMzY3OGY1MGY1ZWQzZDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4dq++TRShWQkwpETqluGz6fXFIo 63AwE6OfVUFfbT5J1nNUKF8xPPds5Unykt6RbINNeItO0naAjTgCiIQRjcfPaCZ+ B14usdFxLSHNqeMDo1T7aT0z2qIim0nZUYpQY2zdoQJFVS/lSw2X+yYe+KJCCxkI ilJek1gV/+WhfsoEsPmz/L1VbwQlnwSlj2XOj+54kehUcDnjP/0xfOW9x/0/yWFu OiESDAy5mXovvExJGzGE22C+DJU69F3LaXzElIT+fXBXwOWWAvrnHcbRbggVet5r xQFyLjy56+55AaWSZG4H4vGUXZsDRH8wE9+fEu/+yXcOcUqVHrI/kAjSMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCHLwz7VfTqVJnRDh+Nnj1D17T0ZMB8GA1UdIwQY MBaAFKuc/RV0QfaUKN0fY2HKT0rkLLOKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTV6OUZYUkI5cFFvM1I5alljcFBTdVFzczRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi83ZDMxNGUtNDJjZC00MmNlLTk4NWUt OTU0ZjI2OTEzZjQzLzEvcTV6OUZYUkI5cFFvM1I5alljcFBTdVFzczRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi83ZDMxNGUtNDJjZC00MmNlLTk4NWUtOTU0ZjI2OTEzZjQz LzEvcTV6OUZYUkI5cFFvM1I5alljcFBTdVFzczRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaksrAXB6 mwzHnBrq1T9Lu5NFFoAKwDMd3Vd6mCnK7psetnO/0grkaN4DLOh9Frq1/3Ni1CuF aTIIl6/rNBXueCiIMe2uGYcOs7GpOL0RIFNFhXCPBcTReSRaAYq0K0M/ZzZw9MOX Kvu6yAaSH0s4XuoQ1WfRP2XIAcJia2s2rZo8MwYEH+D7jt+a36gTPPzw3THoLWy9 hLfkWiKbkeO3asYO9ioywYNGQFamiYM0MJ78iqoeTw5UumR7bSyTdyi8qHIviPUX GrCPobtBEbuVuyIwE76S9hKxYGs2JLEz/Y6v7KOB0fMVwWV0UvHK2kVWGz2CN305 P/z7Shf1WsGaaQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:06:33 2025 by rpki-client