This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft File: q5ioJj4GO4p709cYDnpKpklTRBw.mft (raw, json) Hash identifier: KhBfoEmlOsMSsa6jq1nJObjf8GsORAIGcZk0QSvw5OA= Subject key identifier: DC:05:53:0B:43:A2:69:1D:F0:7F:C1:24:95:50:5A:57:84:66:5A:69 Authority key identifier: AB:98:A8:26:3E:06:3B:8A:7B:D3:D7:18:0E:7A:4A:A6:49:53:44:1C Certificate issuer: /CN=ab98a8263e063b8a7bd3d7180e7a4aa64953441c Certificate serial: 019B31FA6E7F3C0115AEA0720E281CC2B685 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft Manifest number: 064F Signing time: Thu 18 Dec 2025 15:00:54 +0000 Manifest this update: Thu 18 Dec 2025 15:00:54 +0000 Manifest next update: Fri 19 Dec 2025 15:00:54 +0000 Files and hashes: 1: kD0NYEJpgxaFFDcqPxx98oDLF4A.roa (hash: kEfgwntStfXPUtLxcdJZBEv9NrzPqg0tH8aS2VZkZpA=) 2: q5ioJj4GO4p709cYDnpKpklTRBw.crl (hash: THaYgEqTy0y6v8muugYU7vObsvQR6FCxbZ3YuvBEhDk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 15:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:6e:7f:3c:01:15:ae:a0:72:0e:28:1c:c2:b6:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab98a8263e063b8a7bd3d7180e7a4aa64953441c Validity Not Before: Dec 18 15:00:54 2025 GMT Not After : Dec 19 15:00:54 2025 GMT Subject: CN=dc05530b43a2691df07fc12495505a5784665a69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9f:2f:eb:c1:58:96:7e:02:ef:f9:28:19:0d: ec:84:9a:39:fe:dc:87:0f:15:32:0b:42:a9:f8:d1: b7:61:5e:17:53:bf:62:ca:70:dd:10:c9:5a:12:72: 1f:7b:f7:37:d8:32:ff:6f:80:33:aa:39:44:0b:50: 12:bb:61:ab:06:f5:d4:45:2c:62:10:ad:ee:72:a3: 1c:23:8d:d6:a2:c2:ef:bc:18:d0:ef:9c:a6:d5:64: eb:44:1a:d0:51:bc:f0:88:48:7c:a1:a5:b7:42:b3: c8:66:53:be:3c:58:45:9e:a7:79:6f:a9:9e:9b:88: 48:91:a3:0a:47:ff:e5:ab:98:fb:1a:22:8e:c5:f8: 51:22:a4:34:f1:91:b5:5c:aa:2e:a6:a7:8b:6c:04: ce:e0:83:78:ff:fb:e6:de:8f:79:ff:be:05:1f:51: 6e:81:70:6e:35:8e:ee:52:e4:c0:fc:b1:02:35:97: 5e:6c:41:9b:10:f2:e7:d3:c0:37:fe:40:2a:19:87: 58:84:8e:22:39:ab:1f:73:5c:b8:c6:ad:25:08:bd: 3a:1d:6c:b3:9b:6b:c2:31:2e:27:29:da:df:b5:e7: 6c:9d:a5:42:27:25:47:b2:0c:0f:7b:d8:cc:d5:01: bb:c7:4a:be:37:ed:0c:bf:a8:e7:a7:c1:49:ec:d1: ad:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:05:53:0B:43:A2:69:1D:F0:7F:C1:24:95:50:5A:57:84:66:5A:69 X509v3 Authority Key Identifier: keyid:AB:98:A8:26:3E:06:3B:8A:7B:D3:D7:18:0E:7A:4A:A6:49:53:44:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:e2:2f:b3:db:c5:02:22:0b:61:23:26:b3:2a:06:3a:5d:b2: 7e:55:1c:b2:ba:2d:c3:50:66:58:52:54:8b:52:93:a8:2e:e8: f9:fe:f7:37:82:01:53:d1:a9:09:6e:0e:b5:9b:bc:46:d5:70: 11:04:49:c8:9e:86:d2:f1:66:0f:d0:ef:b1:55:a9:a9:8e:f5: 3b:97:6b:35:49:04:52:2e:ae:75:9f:b7:35:1a:af:e6:d6:66: e8:e4:a1:ac:90:59:8f:09:94:2a:da:46:d2:49:db:86:e7:6b: 89:6e:75:08:52:16:fd:b6:22:2f:67:d9:e5:1c:9a:8b:f3:b2: 56:21:1e:d8:d9:f7:da:d4:09:c2:88:c5:9e:d8:8b:34:85:bc: ff:12:03:9f:a9:4d:10:b4:47:bf:8c:e7:b3:44:2d:32:b5:87: f4:87:46:55:f7:54:8c:22:ab:ef:4c:bc:ad:41:01:74:50:ff: 7f:4b:a1:8d:ab:db:d8:7a:bf:c9:10:d8:d9:75:fd:71:8c:e2: 2b:97:15:83:06:08:5a:f6:37:2a:80:38:dd:cc:c9:76:f3:00: dd:65:33:a9:fc:fd:5d:86:36:6d:08:8a:cd:6c:10:ef:c1:58: cf:8d:65:09:b2:c0:69:a7:5d:37:b0:33:3d:c6:a5:00:90:fb: 9a:23:e6:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsx+m5/PAEVrqByDigcwraFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiOThhODI2M2UwNjNiOGE3YmQzZDcxODBlN2E0YWE2NDk1 MzQ0MWMwHhcNMjUxMjE4MTUwMDU0WhcNMjUxMjE5MTUwMDU0WjAzMTEwLwYDVQQD EyhkYzA1NTMwYjQzYTI2OTFkZjA3ZmMxMjQ5NTUwNWE1Nzg0NjY1YTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj58v68FYln4C7/koGQ3shJo5/tyH DxUyC0Kp+NG3YV4XU79iynDdEMlaEnIfe/c32DL/b4AzqjlEC1ASu2GrBvXURSxi EK3ucqMcI43WosLvvBjQ75ym1WTrRBrQUbzwiEh8oaW3QrPIZlO+PFhFnqd5b6me m4hIkaMKR//lq5j7GiKOxfhRIqQ08ZG1XKoupqeLbATO4IN4//vm3o95/74FH1Fu gXBuNY7uUuTA/LECNZdebEGbEPLn08A3/kAqGYdYhI4iOasfc1y4xq0lCL06HWyz m2vCMS4nKdrftedsnaVCJyVHsgwPe9jM1QG7x0q+N+0Mv6jnp8FJ7NGt9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNwFUwtDomkd8H/BJJVQWleEZlppMB8GA1UdIwQY MBaAFKuYqCY+BjuKe9PXGA56SqZJU0QcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTVpb0pqNEdPNHA3MDljWURucEtwa2xUUkJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8xMTlkMzQtNDA3YS00MjllLTkwNTYt NzYyOGNiYWYwZWM4LzEvcTVpb0pqNEdPNHA3MDljWURucEtwa2xUUkJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8xMTlkMzQtNDA3YS00MjllLTkwNTYtNzYyOGNiYWYwZWM4 LzEvcTVpb0pqNEdPNHA3MDljWURucEtwa2xUUkJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMeIvs9vF AiILYSMmsyoGOl2yflUcsrotw1BmWFJUi1KTqC7o+f73N4IBU9GpCW4OtZu8RtVw EQRJyJ6G0vFmD9DvsVWpqY71O5drNUkEUi6udZ+3NRqv5tZm6OShrJBZjwmUKtpG 0knbhudriW51CFIW/bYiL2fZ5Ryai/OyViEe2Nn32tQJwojFntiLNIW8/xIDn6lN ELRHv4zns0QtMrWH9IdGVfdUjCKr70y8rUEBdFD/f0uhjavb2Hq/yRDY2XX9cYzi K5cVgwYIWvY3KoA43czJdvMA3WUzqfz9XYY2bQiKzWwQ78FYz41lCbLAaaddN7Az PcalAJD7miPmNA== -----END CERTIFICATE-----Generated at Fri Dec 19 00:15:49 2025 by rpki-client