This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.mft File: Q5p_k_yoCMgtJvv-D94bloz26NM.mft (raw, json) Hash identifier: tj19GRGyg0jusWL2MqFC9y7u1JQ6wq85zQ70bz84rPw= Subject key identifier: 41:BB:6C:62:16:E7:65:6E:86:B1:E7:3A:D8:55:13:CE:1D:E0:D0:76 Authority key identifier: 43:9A:7F:93:FC:A8:08:C8:2D:26:FB:FE:0F:DE:1B:96:8C:F6:E8:D3 Certificate issuer: /CN=439a7f93fca808c82d26fbfe0fde1b968cf6e8d3 Certificate serial: 019AFCFA6847EB45580B7D9DCD123CD2B96B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5p_k_yoCMgtJvv-D94bloz26NM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.mft Manifest number: 0987 Signing time: Mon 08 Dec 2025 08:01:00 +0000 Manifest this update: Mon 08 Dec 2025 08:01:00 +0000 Manifest next update: Tue 09 Dec 2025 08:01:00 +0000 Files and hashes: 1: O9UxuLNdjVpPMRVJ8_xamVbi3ck.roa (hash: w7PnuXi3vgOvtTP6oScaXCDqYyS0FwVpkDFtt58ndZ4=) 2: Q5p_k_yoCMgtJvv-D94bloz26NM.crl (hash: 5y4h3qCsIU/EybTSemkjFo1JuGn3oiOfaerADos378Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.mft rsync://rpki.ripe.net/repository/DEFAULT/Q5p_k_yoCMgtJvv-D94bloz26NM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:fa:68:47:eb:45:58:0b:7d:9d:cd:12:3c:d2:b9:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439a7f93fca808c82d26fbfe0fde1b968cf6e8d3 Validity Not Before: Dec 8 08:01:00 2025 GMT Not After : Dec 9 08:01:00 2025 GMT Subject: CN=41bb6c6216e7656e86b1e73ad85513ce1de0d076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:68:1d:f2:98:1b:74:ec:69:f4:bb:0a:c1:36: 23:fa:bb:a7:83:02:46:d1:cf:e7:27:84:1b:9f:7e: b9:dc:66:18:bc:cb:d4:60:15:08:0a:cb:76:0c:4e: 55:2f:b9:3e:33:cc:24:58:90:4d:a0:f7:05:d9:b7: e3:6d:e2:49:b7:cc:dc:59:34:cc:02:76:e3:b8:5d: ec:c6:af:97:5d:d9:a4:75:99:a1:85:43:f5:dc:d1: 3d:57:b5:77:d4:69:3d:74:6c:fe:1b:96:fd:86:88: f6:93:9b:38:8f:da:f8:64:f6:23:eb:3b:e7:5f:18: 63:2c:0c:4c:b8:6a:9a:30:a7:66:5b:37:a9:28:47: bb:3e:8a:0d:61:eb:74:88:b8:f9:aa:a0:ae:75:ad: a3:5f:20:3e:65:c5:1e:f3:a9:c4:d7:45:87:ab:60: 22:7b:c3:65:98:a7:21:e8:20:9b:39:40:57:1e:46: 19:57:e1:77:cc:d0:17:ba:d4:4a:95:07:85:ea:16: c2:40:20:77:06:a2:78:1b:03:35:68:b4:1d:da:99: 88:ba:50:f2:d6:19:f2:55:70:0c:fc:07:02:55:f5: ce:46:fc:ac:56:92:88:56:d0:5b:45:b4:81:5d:c9: a4:58:0c:5f:ba:14:73:9d:29:97:1d:89:a0:ac:1a: 37:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:BB:6C:62:16:E7:65:6E:86:B1:E7:3A:D8:55:13:CE:1D:E0:D0:76 X509v3 Authority Key Identifier: keyid:43:9A:7F:93:FC:A8:08:C8:2D:26:FB:FE:0F:DE:1B:96:8C:F6:E8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5p_k_yoCMgtJvv-D94bloz26NM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:4b:66:f2:dc:44:a9:39:d0:4e:b4:e0:3d:3b:02:66:16:0e: c2:24:11:14:e0:3a:b3:84:8d:87:d0:6d:66:7e:19:43:e1:ea: 32:ce:9b:13:fa:d1:68:0c:1d:b6:f1:ed:6e:37:11:4b:38:25: 63:84:ad:96:92:c4:e4:41:f8:9f:98:68:70:7b:af:d9:13:c5: d7:d3:8c:ed:22:87:40:f2:c6:13:8f:54:cd:36:79:43:27:3e: da:c0:5f:6c:18:a0:7e:2f:7e:94:b8:44:21:b7:ca:cf:ec:56: 67:9a:ee:33:72:d2:46:5a:f7:ef:1d:0f:ee:02:4c:3a:fb:c6: fc:aa:0f:6c:81:9d:18:b6:68:e1:b0:dc:66:96:28:58:a6:58: 9a:06:75:c6:a8:b5:05:0b:a8:52:67:1f:6e:bc:13:fe:76:4e: ce:8f:f7:3a:bd:04:e6:06:d9:89:3f:c8:fa:bc:3c:2f:b5:c5: 24:10:c0:c8:ab:b7:16:5f:2d:a8:64:c8:9f:c0:fb:d7:01:b6: 08:63:d0:db:06:fb:2a:e8:35:1e:3e:c1:c5:13:39:9e:e7:02: 80:e1:b4:ea:30:93:b4:30:ae:5a:09:cb:f8:eb:e3:14:a1:e4: a1:35:b7:94:e8:1f:aa:b7:49:7a:76:81:67:3a:cc:ce:06:f1: e0:e6:18:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8+mhH60VYC32dzRI80rlrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzOWE3ZjkzZmNhODA4YzgyZDI2ZmJmZTBmZGUxYjk2OGNm NmU4ZDMwHhcNMjUxMjA4MDgwMTAwWhcNMjUxMjA5MDgwMTAwWjAzMTEwLwYDVQQD Eyg0MWJiNmM2MjE2ZTc2NTZlODZiMWU3M2FkODU1MTNjZTFkZTBkMDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWgd8pgbdOxp9LsKwTYj+rungwJG 0c/nJ4Qbn3653GYYvMvUYBUICst2DE5VL7k+M8wkWJBNoPcF2bfjbeJJt8zcWTTM AnbjuF3sxq+XXdmkdZmhhUP13NE9V7V31Gk9dGz+G5b9hoj2k5s4j9r4ZPYj6zvn XxhjLAxMuGqaMKdmWzepKEe7PooNYet0iLj5qqCuda2jXyA+ZcUe86nE10WHq2Ai e8NlmKch6CCbOUBXHkYZV+F3zNAXutRKlQeF6hbCQCB3BqJ4GwM1aLQd2pmIulDy 1hnyVXAM/AcCVfXORvysVpKIVtBbRbSBXcmkWAxfuhRznSmXHYmgrBo36wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEG7bGIW52VuhrHnOthVE84d4NB2MB8GA1UdIwQY MBaAFEOaf5P8qAjILSb7/g/eG5aM9ujTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTVwX2tfeW9DTWd0SnZ2LUQ5NGJsb3oyNk5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy84ZjlmMzItYzFkNS00ZmE2LWIwMTMt OTI5N2I4NTVmYTcyLzEvUTVwX2tfeW9DTWd0SnZ2LUQ5NGJsb3oyNk5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy84ZjlmMzItYzFkNS00ZmE2LWIwMTMtOTI5N2I4NTVmYTcy LzEvUTVwX2tfeW9DTWd0SnZ2LUQ5NGJsb3oyNk5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKEtm8txE qTnQTrTgPTsCZhYOwiQRFOA6s4SNh9BtZn4ZQ+HqMs6bE/rRaAwdtvHtbjcRSzgl Y4StlpLE5EH4n5hocHuv2RPF19OM7SKHQPLGE49UzTZ5Qyc+2sBfbBigfi9+lLhE IbfKz+xWZ5ruM3LSRlr37x0P7gJMOvvG/KoPbIGdGLZo4bDcZpYoWKZYmgZ1xqi1 BQuoUmcfbrwT/nZOzo/3Or0E5gbZiT/I+rw8L7XFJBDAyKu3Fl8tqGTIn8D71wG2 CGPQ2wb7Kug1Hj7BxRM5nucCgOG06jCTtDCuWgnL+OvjFKHkoTW3lOgfqrdJenaB ZzrMzgbx4OYYZw== -----END CERTIFICATE-----Generated at Mon Dec 8 09:36:12 2025 by rpki-client