This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft File: q5ioJj4GO4p709cYDnpKpklTRBw.mft (raw, json) Hash identifier: qhC3pZMq3Pphbj3upiMlN6nIacZHq61kia58Mt5+FDs= Subject key identifier: 89:E4:9D:58:F5:F9:9F:41:18:53:F4:D1:05:F6:91:80:45:AA:04:CA Authority key identifier: AB:98:A8:26:3E:06:3B:8A:7B:D3:D7:18:0E:7A:4A:A6:49:53:44:1C Certificate issuer: /CN=ab98a8263e063b8a7bd3d7180e7a4aa64953441c Certificate serial: 019B7591FF77CEDE77C113EAE60B27055FC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft Manifest number: 0672 Signing time: Wed 31 Dec 2025 18:01:00 +0000 Manifest this update: Wed 31 Dec 2025 18:01:00 +0000 Manifest next update: Thu 01 Jan 2026 18:01:00 +0000 Files and hashes: 1: kD0NYEJpgxaFFDcqPxx98oDLF4A.roa (hash: kEfgwntStfXPUtLxcdJZBEv9NrzPqg0tH8aS2VZkZpA=) 2: q5ioJj4GO4p709cYDnpKpklTRBw.crl (hash: N+l1ELSnZp3MLIZ5lSTpS23aWvzReviOeBJ9Ic0tbi0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 16:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:75:91:ff:77:ce:de:77:c1:13:ea:e6:0b:27:05:5f:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab98a8263e063b8a7bd3d7180e7a4aa64953441c Validity Not Before: Dec 31 18:01:00 2025 GMT Not After : Jan 1 18:01:00 2026 GMT Subject: CN=89e49d58f5f99f411853f4d105f6918045aa04ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c0:ad:4f:7d:fb:76:ee:e4:75:9e:e5:04:b6: 05:92:f0:e0:0f:05:6a:c1:1e:93:7f:4d:1b:5c:7b: ff:21:0e:b3:03:10:1b:8c:5b:15:3a:30:7f:9d:80: 61:b4:eb:5b:a1:71:ad:38:c6:3c:ab:15:d2:52:65: 7f:6c:19:01:69:fe:1d:58:93:e1:04:e8:f9:c9:e9: 05:92:fd:a8:ba:f1:93:73:df:11:8a:37:a5:b0:88: 31:dc:e1:dc:25:7d:61:06:3f:ff:21:b4:90:f5:9c: 64:35:64:1a:e2:02:5e:c3:23:d8:ca:21:89:ad:6e: 11:c7:11:95:6b:91:42:cb:c3:e5:17:ce:40:15:af: fb:60:48:05:b2:14:fe:7f:6d:f1:5c:c4:a9:b5:cf: 1a:b7:4e:70:f4:a8:96:46:98:37:54:df:65:5a:ff: d1:59:02:5f:9d:d9:15:a6:ec:5e:8b:e8:3c:ef:b8: 2f:4e:a1:4c:8e:7d:55:8d:1b:70:ed:76:a0:ac:af: db:65:92:18:57:dd:e1:d3:c1:94:79:b7:b4:b1:97: 4c:63:33:45:6e:69:af:2f:e2:12:1f:22:f2:52:72: d2:ee:9d:a7:78:69:38:5d:c8:98:cf:1d:91:d7:03: fe:d3:e2:20:a8:3b:db:2c:7d:4b:13:dc:c1:d4:68: da:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:E4:9D:58:F5:F9:9F:41:18:53:F4:D1:05:F6:91:80:45:AA:04:CA X509v3 Authority Key Identifier: keyid:AB:98:A8:26:3E:06:3B:8A:7B:D3:D7:18:0E:7A:4A:A6:49:53:44:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:46:08:44:9a:bc:de:ca:f5:19:72:93:20:b3:09:85:bc:d0: 27:1b:aa:8e:81:d9:7c:bb:95:f6:80:02:db:c8:0e:da:a0:cb: da:b1:6a:5f:79:dd:ab:23:2f:39:41:07:28:a9:1a:f4:ac:a5: d9:2c:62:29:5c:13:1b:28:7c:a8:38:c7:2a:ea:b6:a5:ab:7e: 1e:cd:26:5b:38:59:04:32:5c:84:6e:80:0f:30:3f:78:b8:8a: db:59:8c:f6:2b:e6:13:de:34:23:17:60:31:80:b6:ae:4c:a4: 0e:f8:8c:f7:f1:f1:b3:41:3f:b2:86:24:57:10:5a:7e:a9:46: 29:f2:b3:7e:07:96:f1:80:17:02:3c:3d:35:65:41:9c:c8:8e: 08:ce:cc:7f:7c:67:2e:e7:55:74:78:3c:01:3c:fc:83:9c:9c: e0:5a:36:e8:92:1b:63:b2:61:f0:55:3b:96:7b:66:b6:83:fd: 48:5c:ff:1b:9d:68:8f:ba:3d:a7:95:fb:f0:0d:27:5c:33:23: c3:46:be:e2:c6:c7:c7:72:3d:4c:44:bc:fd:e7:4e:16:68:84: 62:0d:42:c1:48:64:5e:65:08:43:ea:8a:2e:85:5c:5a:7b:e2: c4:1c:01:eb:82:47:ff:ed:d3:0e:3d:c8:09:3c:0f:6f:71:69: 9e:db:09:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt1kf93zt53wRPq5gsnBV/EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiOThhODI2M2UwNjNiOGE3YmQzZDcxODBlN2E0YWE2NDk1 MzQ0MWMwHhcNMjUxMjMxMTgwMTAwWhcNMjYwMTAxMTgwMTAwWjAzMTEwLwYDVQQD Eyg4OWU0OWQ1OGY1Zjk5ZjQxMTg1M2Y0ZDEwNWY2OTE4MDQ1YWEwNGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4sCtT337du7kdZ7lBLYFkvDgDwVq wR6Tf00bXHv/IQ6zAxAbjFsVOjB/nYBhtOtboXGtOMY8qxXSUmV/bBkBaf4dWJPh BOj5yekFkv2ouvGTc98RijelsIgx3OHcJX1hBj//IbSQ9ZxkNWQa4gJewyPYyiGJ rW4RxxGVa5FCy8PlF85AFa/7YEgFshT+f23xXMSptc8at05w9KiWRpg3VN9lWv/R WQJfndkVpuxei+g877gvTqFMjn1VjRtw7XagrK/bZZIYV93h08GUebe0sZdMYzNF bmmvL+ISHyLyUnLS7p2neGk4XciYzx2R1wP+0+IgqDvbLH1LE9zB1GjaoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFInknVj1+Z9BGFP00QX2kYBFqgTKMB8GA1UdIwQY MBaAFKuYqCY+BjuKe9PXGA56SqZJU0QcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTVpb0pqNEdPNHA3MDljWURucEtwa2xUUkJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8xMTlkMzQtNDA3YS00MjllLTkwNTYt NzYyOGNiYWYwZWM4LzEvcTVpb0pqNEdPNHA3MDljWURucEtwa2xUUkJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8xMTlkMzQtNDA3YS00MjllLTkwNTYtNzYyOGNiYWYwZWM4 LzEvcTVpb0pqNEdPNHA3MDljWURucEtwa2xUUkJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0UYIRJq8 3sr1GXKTILMJhbzQJxuqjoHZfLuV9oAC28gO2qDL2rFqX3ndqyMvOUEHKKka9Kyl 2SxiKVwTGyh8qDjHKuq2pat+Hs0mWzhZBDJchG6ADzA/eLiK21mM9ivmE940Ixdg MYC2rkykDviM9/Hxs0E/soYkVxBafqlGKfKzfgeW8YAXAjw9NWVBnMiOCM7Mf3xn LudVdHg8ATz8g5yc4Fo26JIbY7Jh8FU7lntmtoP9SFz/G51oj7o9p5X78A0nXDMj w0a+4sbHx3I9TES8/edOFmiEYg1CwUhkXmUIQ+qKLoVcWnvixBwB64JH/+3TDj3I CTwPb3FpntsJsQ== -----END CERTIFICATE-----Generated at Wed Dec 31 21:48:01 2025 by rpki-client