This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft File: CQ-seFK0LR5rHD8PKdE85ensstY.mft (raw, json) Hash identifier: cBuwxOuSAuu5K6hyDzb6FKtU711GhaHqWTciijl1fk0= Subject key identifier: FE:06:78:91:8C:73:BC:24:29:4B:D6:E0:FF:57:F3:B6:6A:C2:5B:14 Authority key identifier: 09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6 Certificate issuer: /CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6 Certificate serial: 019B70A29A83EB1119FBC1384CC23AF7AD9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft Manifest number: 17A5 Signing time: Tue 30 Dec 2025 19:01:03 +0000 Manifest this update: Tue 30 Dec 2025 19:01:03 +0000 Manifest next update: Wed 31 Dec 2025 19:01:03 +0000 Files and hashes: 1: CQ-seFK0LR5rHD8PKdE85ensstY.crl (hash: xq3p8MYADVVjpvVtVida6zVOtjdpilWeR91+dH+dDKU=) 2: tktnNkqo-Ucay9gG5szDFherVRo.roa (hash: fENlsqvH8zzdUmZ9S6kxqqHzh2VPnW1ALr3bQ6F8fDs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:a2:9a:83:eb:11:19:fb:c1:38:4c:c2:3a:f7:ad:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6 Validity Not Before: Dec 30 19:01:03 2025 GMT Not After : Dec 31 19:01:03 2025 GMT Subject: CN=fe0678918c73bc24294bd6e0ff57f3b66ac25b14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:80:b4:42:3b:fd:a6:f9:22:b5:ee:f8:fa:39: 66:9b:75:90:5b:13:c3:b3:3c:4d:a1:df:b1:24:4e: 87:06:90:ea:4b:a8:fd:44:1d:87:d7:7c:c2:0c:97: b2:b4:59:2d:39:90:00:e6:64:bb:5d:53:9b:fb:77: a1:e4:b2:b0:81:f5:92:fb:32:5f:e1:04:9e:f1:ab: 07:07:72:43:c5:9b:e8:25:29:f4:ec:d7:9d:38:63: a1:07:f7:2a:98:be:89:53:27:e6:fa:55:91:12:89: da:a5:6e:68:67:1f:13:8c:7c:b1:3e:e5:d6:3a:23: 1e:88:46:2b:30:95:83:f5:11:c1:cf:20:a7:c4:a1: 8d:37:c6:2d:45:3e:72:47:77:a7:d4:56:d6:c2:02: 4b:b8:ae:ca:6d:6b:dd:96:38:d2:bd:90:f8:a1:5c: de:2e:51:0c:d9:65:01:75:2b:aa:09:7e:28:86:c2: 3d:e4:b3:91:57:e7:4d:30:50:07:05:05:07:01:38: e7:e4:63:ac:0d:3a:ff:ab:1d:8f:3e:b8:9f:14:29: a0:b7:3b:d4:35:ec:17:0f:b1:41:cc:5e:34:3f:08: 89:32:af:8d:8c:ed:8a:f1:02:81:9b:5b:be:4c:f4: 09:30:ae:20:db:6d:38:64:e9:01:34:b5:66:42:5c: 33:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:06:78:91:8C:73:BC:24:29:4B:D6:E0:FF:57:F3:B6:6A:C2:5B:14 X509v3 Authority Key Identifier: keyid:09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:29:73:b3:dc:bf:1d:ca:f8:31:0e:32:24:66:c9:7c:e8:23: 5e:1f:2b:12:42:6e:bb:cc:df:ea:db:27:ec:25:55:05:1e:fc: 4f:94:f8:df:92:64:80:59:49:f0:2d:7c:b5:aa:05:c8:ea:1a: f7:cd:6d:e0:f0:aa:0a:e3:03:da:29:ad:ed:44:ed:0d:74:79: b9:96:66:d3:0a:c2:65:a9:6b:37:f7:c2:d8:0c:64:44:54:73: f5:64:cf:9f:c9:17:62:7a:8b:3a:0b:09:e3:f0:8e:cd:a0:c1: 8a:a1:fd:85:e4:ce:5a:76:d6:8b:cd:12:ad:6c:40:3c:cf:48: 52:e9:b9:09:56:88:38:1e:90:2c:b9:76:f9:42:a3:f9:e9:8b: 16:5b:f2:b7:db:ae:b4:6a:97:23:f1:cb:2c:cd:b0:43:2b:b8: f7:ca:d5:4b:01:33:6b:b1:e8:19:33:c9:dd:e8:5f:ef:01:f5: 42:6d:10:2f:e0:9a:50:ae:61:9f:71:fe:9f:58:f9:96:3d:0e: a9:48:72:7a:c0:19:df:b0:9e:d7:31:7b:90:3d:46:dc:b3:d0: 37:63:4f:74:99:d0:5f:34:32:80:65:f7:14:b7:c5:3f:f2:a7: cd:07:a6:4d:3f:18:7f:b9:06:8b:93:12:09:fe:6f:5b:f3:ac: 21:cf:cb:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtwopqD6xEZ+8E4TMI6962dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MGZhYzc4NTJiNDJkMWU2YjFjM2YwZjI5ZDEzY2U1ZTll Y2IyZDYwHhcNMjUxMjMwMTkwMTAzWhcNMjUxMjMxMTkwMTAzWjAzMTEwLwYDVQQD EyhmZTA2Nzg5MThjNzNiYzI0Mjk0YmQ2ZTBmZjU3ZjNiNjZhYzI1YjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYC0Qjv9pvkite74+jlmm3WQWxPD szxNod+xJE6HBpDqS6j9RB2H13zCDJeytFktOZAA5mS7XVOb+3eh5LKwgfWS+zJf 4QSe8asHB3JDxZvoJSn07NedOGOhB/cqmL6JUyfm+lWREonapW5oZx8TjHyxPuXW OiMeiEYrMJWD9RHBzyCnxKGNN8YtRT5yR3en1FbWwgJLuK7KbWvdljjSvZD4oVze LlEM2WUBdSuqCX4ohsI95LORV+dNMFAHBQUHATjn5GOsDTr/qx2PPrifFCmgtzvU NewXD7FBzF40PwiJMq+NjO2K8QKBm1u+TPQJMK4g2204ZOkBNLVmQlwzcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP4GeJGMc7wkKUvW4P9X87ZqwlsUMB8GA1UdIwQY MBaAFAkPrHhStC0eaxw/DynRPOXp7LLWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1Etc2VGSzBMUjVySEQ4UEtkRTg1ZW5zc3RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy84NzEwYmEtZmI1OS00NjZiLTllNmIt ZTg5ODY4MWJjODllLzEvQ1Etc2VGSzBMUjVySEQ4UEtkRTg1ZW5zc3RZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy84NzEwYmEtZmI1OS00NjZiLTllNmItZTg5ODY4MWJjODll LzEvQ1Etc2VGSzBMUjVySEQ4UEtkRTg1ZW5zc3RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdylzs9y/ Hcr4MQ4yJGbJfOgjXh8rEkJuu8zf6tsn7CVVBR78T5T435JkgFlJ8C18taoFyOoa 981t4PCqCuMD2imt7UTtDXR5uZZm0wrCZalrN/fC2AxkRFRz9WTPn8kXYnqLOgsJ 4/COzaDBiqH9heTOWnbWi80SrWxAPM9IUum5CVaIOB6QLLl2+UKj+emLFlvyt9uu tGqXI/HLLM2wQyu498rVSwEza7HoGTPJ3ehf7wH1Qm0QL+CaUK5hn3H+n1j5lj0O qUhyesAZ37Ce1zF7kD1G3LPQN2NPdJnQXzQygGX3FLfFP/KnzQemTT8Yf7kGi5MS Cf5vW/OsIc/Llg== -----END CERTIFICATE-----Generated at Wed Dec 31 00:28:35 2025 by rpki-client