This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft File: qS5dl54DJTmZRrI5CCLTDx0vNeE.mft (raw, json) Hash identifier: t3JZd5kLg2Acqr2fGNv43TIwmNU7++4FkRq0FOzbjD0= Subject key identifier: CB:1F:7A:56:37:2F:F2:E6:5B:EF:A3:77:ED:F5:0F:F8:E5:A5:3A:52 Authority key identifier: A9:2E:5D:97:9E:03:25:39:99:46:B2:39:08:22:D3:0F:1D:2F:35:E1 Certificate issuer: /CN=a92e5d979e0325399946b2390822d30f1d2f35e1 Certificate serial: 019AF1D1FAEC8E491E10E31A265651C746E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft Manifest number: 0216 Signing time: Sat 06 Dec 2025 04:01:01 +0000 Manifest this update: Sat 06 Dec 2025 04:01:01 +0000 Manifest next update: Sun 07 Dec 2025 04:01:01 +0000 Files and hashes: 1: JQJmD49tR8jandeFHJ1IkrOGoDQ.roa (hash: qBRt18tQW7myUfjqyk6Za7F1LghK7qoZn+vndFJYSpM=) 2: qS5dl54DJTmZRrI5CCLTDx0vNeE.crl (hash: V6Dqq6SgfuKFOhWfUkolxKKKYqI9SZ0NOzrj0pwz+Ps=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:fa:ec:8e:49:1e:10:e3:1a:26:56:51:c7:46:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a92e5d979e0325399946b2390822d30f1d2f35e1 Validity Not Before: Dec 6 04:01:01 2025 GMT Not After : Dec 7 04:01:01 2025 GMT Subject: CN=cb1f7a56372ff2e65befa377edf50ff8e5a53a52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:17:65:c4:db:3c:31:bb:fb:7f:fc:1f:08:fc: c8:2b:ab:fa:83:1e:b3:28:73:d7:f3:71:4e:bb:c7: 96:f0:e6:d9:88:cf:81:13:f4:4b:ac:7a:e3:a1:ec: ae:e0:3e:d7:2f:3b:ba:c2:7a:a2:82:f9:de:4f:ea: ac:04:48:fc:4e:3d:4d:67:b4:09:a7:57:b6:22:cc: 35:e2:64:fe:8c:f8:f5:fb:02:36:83:dd:b7:f5:bf: 5d:34:6e:da:7d:41:f0:54:a2:b3:30:6a:72:6f:e0: 35:32:aa:91:f7:52:88:a5:c1:a5:38:8a:e1:cb:ed: c4:6d:ca:1a:d3:65:a1:5c:a3:02:ed:b0:5c:89:74: 4c:c0:92:1b:b0:06:35:f7:68:03:78:dd:73:83:6a: c8:07:55:34:68:f9:4b:bd:18:36:33:89:f1:81:75: f1:4f:83:47:41:a4:9f:fa:ad:a7:1f:c8:7b:dc:61: a6:37:7d:b4:8a:b2:ca:8a:de:36:fd:7d:72:e0:a6: 4b:87:de:5f:41:c7:ab:3e:88:aa:06:8b:36:a7:d5: 25:83:41:79:7d:08:bc:a3:ca:a3:68:4d:dd:df:5b: 93:78:3c:01:f6:6d:5b:3c:d7:a1:7f:3c:ca:5b:55: 22:57:0d:8e:17:57:8c:d1:60:e5:6a:5e:12:ab:43: d5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:1F:7A:56:37:2F:F2:E6:5B:EF:A3:77:ED:F5:0F:F8:E5:A5:3A:52 X509v3 Authority Key Identifier: keyid:A9:2E:5D:97:9E:03:25:39:99:46:B2:39:08:22:D3:0F:1D:2F:35:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:df:19:48:03:54:7a:ac:b4:7e:60:1a:52:07:8d:6f:20:ff: 29:81:39:eb:b5:86:4f:24:1a:9c:96:ab:15:b7:3e:50:fb:10: 37:d0:2c:20:8a:f6:a6:bd:10:64:4c:e9:b7:4a:a0:4c:1e:ba: b1:ec:28:74:d3:ec:f6:fe:47:66:18:f9:45:65:da:3b:0e:42: 94:3c:0f:fc:cc:22:3f:35:46:8b:8c:a7:9d:0d:d4:ba:15:fc: ab:d2:7f:f3:1c:58:31:70:59:91:ae:37:2d:d9:5b:df:3d:9f: 67:4c:2e:70:87:d4:15:0c:a4:c0:1d:41:57:11:70:c1:69:67: 61:97:e9:b9:a1:1a:77:1d:b4:b2:04:3f:dd:9a:d0:ca:90:4b: ec:7b:76:9d:16:3b:52:69:e9:90:ce:88:f3:24:12:66:fd:18: 90:3d:e3:85:45:8a:36:88:e5:a8:b2:a7:35:28:74:4c:e4:c3: 16:1e:e9:13:5b:ef:d8:a2:21:95:df:db:2f:fd:6b:7f:19:a7: 90:76:80:51:00:96:92:1b:70:d9:f2:2a:30:ad:55:4d:87:dc: 1f:b0:b7:8d:e3:d4:44:98:8b:bc:84:18:cf:bd:fc:03:ad:d5: aa:69:8c:c6:af:af:f8:0e:d2:95:e3:13:b4:92:f8:71:b8:07: 07:15:5f:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0frsjkkeEOMaJlZRx0bgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5MmU1ZDk3OWUwMzI1Mzk5OTQ2YjIzOTA4MjJkMzBmMWQy ZjM1ZTEwHhcNMjUxMjA2MDQwMTAxWhcNMjUxMjA3MDQwMTAxWjAzMTEwLwYDVQQD EyhjYjFmN2E1NjM3MmZmMmU2NWJlZmEzNzdlZGY1MGZmOGU1YTUzYTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhdlxNs8Mbv7f/wfCPzIK6v6gx6z KHPX83FOu8eW8ObZiM+BE/RLrHrjoeyu4D7XLzu6wnqigvneT+qsBEj8Tj1NZ7QJ p1e2Isw14mT+jPj1+wI2g9239b9dNG7afUHwVKKzMGpyb+A1MqqR91KIpcGlOIrh y+3Ebcoa02WhXKMC7bBciXRMwJIbsAY192gDeN1zg2rIB1U0aPlLvRg2M4nxgXXx T4NHQaSf+q2nH8h73GGmN320irLKit42/X1y4KZLh95fQcerPoiqBos2p9Ulg0F5 fQi8o8qjaE3d31uTeDwB9m1bPNehfzzKW1UiVw2OF1eM0WDlal4Sq0PVcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMsfelY3L/LmW++jd+31D/jlpTpSMB8GA1UdIwQY MBaAFKkuXZeeAyU5mUayOQgi0w8dLzXhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVM1ZGw1NERKVG1aUnJJNUNDTFREeDB2TmVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84MTExNWUtYmNhMS00Mzc1LTgxMDAt YTQ3ZDE0MWNmYzVhLzEvcVM1ZGw1NERKVG1aUnJJNUNDTFREeDB2TmVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84MTExNWUtYmNhMS00Mzc1LTgxMDAtYTQ3ZDE0MWNmYzVh LzEvcVM1ZGw1NERKVG1aUnJJNUNDTFREeDB2TmVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqt8ZSANU eqy0fmAaUgeNbyD/KYE567WGTyQanJarFbc+UPsQN9AsIIr2pr0QZEzpt0qgTB66 sewodNPs9v5HZhj5RWXaOw5ClDwP/MwiPzVGi4ynnQ3UuhX8q9J/8xxYMXBZka43 Ldlb3z2fZ0wucIfUFQykwB1BVxFwwWlnYZfpuaEadx20sgQ/3ZrQypBL7Ht2nRY7 UmnpkM6I8yQSZv0YkD3jhUWKNojlqLKnNSh0TOTDFh7pE1vv2KIhld/bL/1rfxmn kHaAUQCWkhtw2fIqMK1VTYfcH7C3jePURJiLvIQYz738A63VqmmMxq+v+A7SleMT tJL4cbgHBxVfCQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:08:24 2025 by rpki-client