This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft File: q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft (raw, json) Hash identifier: hBsvGzdSIhPVz9VNTeIh8QFWUBmHjRUUaVyWmH1IppI= Subject key identifier: 2E:1A:87:CC:78:68:31:51:0B:CE:03:C3:76:06:82:C7:8A:06:A3:9C Authority key identifier: AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B Certificate issuer: /CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b Certificate serial: 019B3F112B03F5D8EBB0B1FB2508A446CCF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft Manifest number: 1794 Signing time: Sun 21 Dec 2025 04:00:48 +0000 Manifest this update: Sun 21 Dec 2025 04:00:48 +0000 Manifest next update: Mon 22 Dec 2025 04:00:48 +0000 Files and hashes: 1: 7XQS9fgmC0xNqPuIMhkAaeUEx0g.roa (hash: 30Yt0v1j2/2WiJgCszBG8BLPKcC0q4CL1Hk0j9TqmbM=) 2: CGRTCK3Ge4ADHzCWSkOhJS2ZO-g.roa (hash: qGlSQR4VzbycTQ4yuefrd6Ta0FRZb+PMZoj6HNp+HDk=) 3: q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl (hash: tDvvi0YFUL/oIZ6HJkU57Ob62DokvnJZm3Wabzf3Z/A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:2b:03:f5:d8:eb:b0:b1:fb:25:08:a4:46:cc:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b Validity Not Before: Dec 21 04:00:48 2025 GMT Not After : Dec 22 04:00:48 2025 GMT Subject: CN=2e1a87cc786831510bce03c3760682c78a06a39c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:e9:2e:f3:d8:af:e4:5c:2c:52:24:36:aa:00: a3:6a:6f:b2:eb:16:b3:09:72:7f:a7:05:83:7c:04: cf:be:17:3f:72:ef:9b:4d:a0:25:6c:89:70:87:da: de:b0:06:f4:11:37:b7:db:6d:dc:c3:c6:e6:da:18: 40:8b:7b:94:8e:d2:95:ff:64:e0:ab:37:b3:e6:0e: b3:7b:cf:65:9b:04:70:f2:ef:76:80:88:eb:61:fa: bb:cd:3d:c0:6c:e2:56:a2:3e:e8:48:48:e1:dd:96: 0c:0b:5d:b2:d9:4b:e2:4d:21:47:42:e8:9a:8a:ba: 44:67:3d:be:91:27:f4:f8:2e:35:24:db:50:2d:60: a5:71:59:93:5f:43:65:eb:20:7d:0e:42:ac:d8:62: 03:e3:38:7e:1a:a0:8e:74:3d:a8:86:26:eb:57:90: 6d:66:d7:9d:5d:fe:b4:a7:57:ad:67:2f:1b:8a:e5: 26:96:8b:8d:16:f3:74:13:45:77:52:bc:0d:e5:07: ea:09:ae:1b:9a:b1:f4:f1:d8:86:af:28:8f:36:f1: 61:49:84:67:a8:40:a6:4d:1c:3b:7a:79:11:05:71: ab:93:2e:25:15:d5:1a:41:8b:67:32:46:37:a4:51: 7f:81:08:c6:87:3a:e0:c0:6d:21:6d:ef:b3:ba:18: 7d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:1A:87:CC:78:68:31:51:0B:CE:03:C3:76:06:82:C7:8A:06:A3:9C X509v3 Authority Key Identifier: keyid:AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:1c:2c:7f:25:40:7e:e3:11:eb:ca:56:68:c1:4e:35:48:54: 19:fd:d1:6f:84:ab:83:b7:2d:10:1c:9c:31:1c:7a:cf:24:5a: eb:77:75:f0:11:23:bf:83:ef:47:62:70:3c:73:1f:9c:00:b7: c7:a8:4b:d0:24:cf:28:1f:3b:29:ff:0a:bb:bc:9f:21:11:55: 8a:31:7c:06:09:3a:83:ac:95:4a:f4:a2:bb:13:4b:64:1a:7d: b3:da:7b:24:84:2a:18:91:7a:db:90:17:4d:fc:a3:bf:d4:7a: a5:e7:8a:2d:e8:d1:e7:08:33:36:b8:ab:4a:28:1b:a4:9c:e2: 86:51:43:9b:92:b2:08:32:8f:17:ae:de:20:c2:ff:db:39:7e: cf:09:c1:24:4e:d7:74:e6:eb:e1:f5:0b:7d:6b:40:48:dc:22: f6:0e:17:91:e1:5e:7b:5e:1f:da:c0:5e:df:ec:b0:d4:a0:23: 4b:d3:01:f7:77:cf:0c:b8:84:20:e2:e7:c7:47:b1:28:27:5f: 65:ab:8b:9e:53:59:f9:94:0b:70:85:2c:e5:b7:f7:57:ee:56: 69:0c:5b:e8:66:05:f5:95:28:a2:6d:e8:dd:df:3a:ef:13:fc: 23:c8:3c:c6:6c:21:90:e5:20:70:18:d3:80:5d:82:01:6d:f4: 1b:3f:ba:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/ESsD9djrsLH7JQikRsz4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiOWY4NGM2YTQ4ZDVjNmRmZTY0MTQ5ODczYjE0OGQxMTIw YjAwOWIwHhcNMjUxMjIxMDQwMDQ4WhcNMjUxMjIyMDQwMDQ4WjAzMTEwLwYDVQQD EygyZTFhODdjYzc4NjgzMTUxMGJjZTAzYzM3NjA2ODJjNzhhMDZhMzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA++ku89iv5FwsUiQ2qgCjam+y6xaz CXJ/pwWDfATPvhc/cu+bTaAlbIlwh9resAb0ETe3223cw8bm2hhAi3uUjtKV/2Tg qzez5g6ze89lmwRw8u92gIjrYfq7zT3AbOJWoj7oSEjh3ZYMC12y2UviTSFHQuia irpEZz2+kSf0+C41JNtQLWClcVmTX0Nl6yB9DkKs2GID4zh+GqCOdD2ohibrV5Bt ZtedXf60p1etZy8biuUmlouNFvN0E0V3UrwN5QfqCa4bmrH08diGryiPNvFhSYRn qECmTRw7enkRBXGrky4lFdUaQYtnMkY3pFF/gQjGhzrgwG0hbe+zuhh9mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC4ah8x4aDFRC84Dw3YGgseKBqOcMB8GA1UdIwQY MBaAFKufhMakjVxt/mQUmHOxSNESCwCbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTUtRXhxU05YRzMtWkJTWWM3RkkwUklMQUpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8zNjE3N2YtN2NkOC00YmQzLTg2ODkt MjEzZDY0YmVmZjcxLzEvcTUtRXhxU05YRzMtWkJTWWM3RkkwUklMQUpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8zNjE3N2YtN2NkOC00YmQzLTg2ODktMjEzZDY0YmVmZjcx LzEvcTUtRXhxU05YRzMtWkJTWWM3RkkwUklMQUpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhRwsfyVA fuMR68pWaMFONUhUGf3Rb4Srg7ctEBycMRx6zyRa63d18BEjv4PvR2JwPHMfnAC3 x6hL0CTPKB87Kf8Ku7yfIRFVijF8Bgk6g6yVSvSiuxNLZBp9s9p7JIQqGJF625AX Tfyjv9R6peeKLejR5wgzNrirSigbpJzihlFDm5KyCDKPF67eIML/2zl+zwnBJE7X dObr4fULfWtASNwi9g4XkeFee14f2sBe3+yw1KAjS9MB93fPDLiEIOLnx0exKCdf ZauLnlNZ+ZQLcIUs5bf3V+5WaQxb6GYF9ZUoom3o3d867xP8I8g8xmwhkOUgcBjT gF2CAW30Gz+6+A== -----END CERTIFICATE-----Generated at Sun Dec 21 07:40:25 2025 by rpki-client