This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft File: q3vjT10mnaUCqmg0i_B7ktksDMQ.mft (raw, json) Hash identifier: 7TvgJqlh8uyRbffnrD4SaRQQlYEW4KZcPJRWe9yV2Ow= Subject key identifier: 5F:E6:58:F0:A1:0A:8B:8A:68:F3:BB:05:1E:C4:3C:EE:6B:B9:7B:6F Authority key identifier: AB:7B:E3:4F:5D:26:9D:A5:02:AA:68:34:8B:F0:7B:92:D9:2C:0C:C4 Certificate issuer: /CN=ab7be34f5d269da502aa68348bf07b92d92c0cc4 Certificate serial: 019B3C106E3BC08D7D190DAA5963FB0D0CC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3vjT10mnaUCqmg0i_B7ktksDMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft Manifest number: 028D Signing time: Sat 20 Dec 2025 14:01:08 +0000 Manifest this update: Sat 20 Dec 2025 14:01:08 +0000 Manifest next update: Sun 21 Dec 2025 14:01:08 +0000 Files and hashes: 1: 7abujg5YyGw-Dy5kOxbayEhXp8E.roa (hash: lOz5VIr6Vz6VAh0bdDShfDUIzKOutVJzrANsECMkN+c=) 2: q3vjT10mnaUCqmg0i_B7ktksDMQ.crl (hash: 7R2lZVnCjcMbCvBmNU+iVeeWIWoAIOnFBj0pq2tbcb4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/q3vjT10mnaUCqmg0i_B7ktksDMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:6e:3b:c0:8d:7d:19:0d:aa:59:63:fb:0d:0c:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab7be34f5d269da502aa68348bf07b92d92c0cc4 Validity Not Before: Dec 20 14:01:08 2025 GMT Not After : Dec 21 14:01:08 2025 GMT Subject: CN=5fe658f0a10a8b8a68f3bb051ec43cee6bb97b6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3e:5d:50:a1:be:cd:04:15:98:34:ba:57:fd: 0f:86:0b:ba:f9:0b:b9:0f:67:93:c5:0c:ba:93:51: d7:25:43:87:ef:2b:a5:d3:26:16:5e:d5:a9:cc:c9: 5f:8b:10:96:8f:f8:be:83:b8:4b:21:4e:2b:53:b2: 01:fa:fb:be:7b:72:8d:64:2a:f8:a7:a0:53:40:82: 90:f6:ed:67:49:4f:b2:ec:d6:35:c1:be:ca:75:c1: 27:8f:5f:41:d0:81:e7:8b:18:93:98:fe:7b:00:0c: c5:8e:dc:20:de:98:9e:81:38:25:e1:fa:bd:f0:10: 60:f4:5b:23:01:ea:d8:53:3b:23:9d:6b:a9:1f:5c: 17:94:f2:24:46:48:87:53:f3:fe:9a:2e:1d:9c:1b: 77:e6:51:ca:70:0f:f4:2a:8c:8e:60:b7:fa:d0:56: 3b:38:e7:1a:c1:2b:19:86:8f:08:94:79:ce:01:d4: 0e:6b:7c:78:85:98:86:b9:f2:e7:fb:a5:96:ba:4a: 3d:03:15:bf:88:79:79:fe:7c:22:34:17:46:10:82: da:30:c2:1c:ab:6e:67:c6:61:a8:f8:3a:14:78:06: 77:ce:b6:1a:d9:16:2b:ae:8e:a3:91:5e:46:6c:80: 34:fb:97:f0:64:2f:68:e2:19:a4:f6:01:8b:46:75: 6d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:E6:58:F0:A1:0A:8B:8A:68:F3:BB:05:1E:C4:3C:EE:6B:B9:7B:6F X509v3 Authority Key Identifier: keyid:AB:7B:E3:4F:5D:26:9D:A5:02:AA:68:34:8B:F0:7B:92:D9:2C:0C:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3vjT10mnaUCqmg0i_B7ktksDMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:e0:d3:75:f0:20:ca:39:ed:49:48:21:b8:a1:c6:4b:4d:05: e2:9d:44:a2:02:fa:6c:d7:ef:a3:78:47:93:cd:07:8c:55:ac: 86:22:ba:c5:42:09:fd:f9:bc:f7:ab:31:d6:8a:27:54:b1:e6: 5e:81:05:3e:b0:6c:d3:39:78:8e:87:1b:b3:01:1f:18:ed:d3: 92:40:fb:cd:f4:cf:b8:71:41:7f:33:4e:57:1d:8e:b4:e7:81: 4a:4b:39:d8:23:7b:e4:2b:74:07:fd:8a:38:84:37:f6:dc:72: 85:30:7b:b7:5a:14:6d:4d:c3:69:bb:d4:d2:7a:38:f2:94:f0: a8:04:1f:c2:28:2c:93:aa:53:19:da:e4:2c:9a:fe:3f:0a:21: 73:9c:da:5c:60:b8:5b:d9:b5:4c:17:cd:cf:9f:46:8f:fa:73: c4:cc:fa:78:59:47:85:da:02:20:c9:23:74:9f:6d:15:bc:dd: dc:f3:b4:ad:40:91:06:19:63:0c:47:12:fb:0e:52:e2:27:0a: 89:1f:43:45:54:93:e8:c5:e5:4c:4f:51:8a:ef:1f:18:b6:17: 57:1d:19:3b:10:8b:b3:f0:b7:7b:ef:a4:52:33:d1:e1:db:ee: d3:79:44:10:ee:58:0f:bf:b3:dc:ba:e3:8d:01:6a:dc:fb:56: ca:33:2e:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EG47wI19GQ2qWWP7DQzGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiN2JlMzRmNWQyNjlkYTUwMmFhNjgzNDhiZjA3YjkyZDky YzBjYzQwHhcNMjUxMjIwMTQwMTA4WhcNMjUxMjIxMTQwMTA4WjAzMTEwLwYDVQQD Eyg1ZmU2NThmMGExMGE4YjhhNjhmM2JiMDUxZWM0M2NlZTZiYjk3YjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2T5dUKG+zQQVmDS6V/0Phgu6+Qu5 D2eTxQy6k1HXJUOH7yul0yYWXtWpzMlfixCWj/i+g7hLIU4rU7IB+vu+e3KNZCr4 p6BTQIKQ9u1nSU+y7NY1wb7KdcEnj19B0IHnixiTmP57AAzFjtwg3piegTgl4fq9 8BBg9FsjAerYUzsjnWupH1wXlPIkRkiHU/P+mi4dnBt35lHKcA/0KoyOYLf60FY7 OOcawSsZho8IlHnOAdQOa3x4hZiGufLn+6WWuko9AxW/iHl5/nwiNBdGEILaMMIc q25nxmGo+DoUeAZ3zrYa2RYrro6jkV5GbIA0+5fwZC9o4hmk9gGLRnVtNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF/mWPChCouKaPO7BR7EPO5ruXtvMB8GA1UdIwQY MBaAFKt7409dJp2lAqpoNIvwe5LZLAzEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTN2alQxMG1uYVVDcW1nMGlfQjdrdGtzRE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9lMGFmNjgtZGM2ZS00MWNjLWE2ZGUt NTU4M2U2MWFkYjM4LzEvcTN2alQxMG1uYVVDcW1nMGlfQjdrdGtzRE1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9lMGFmNjgtZGM2ZS00MWNjLWE2ZGUtNTU4M2U2MWFkYjM4 LzEvcTN2alQxMG1uYVVDcW1nMGlfQjdrdGtzRE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZeDTdfAg yjntSUghuKHGS00F4p1EogL6bNfvo3hHk80HjFWshiK6xUIJ/fm896sx1oonVLHm XoEFPrBs0zl4jocbswEfGO3TkkD7zfTPuHFBfzNOVx2OtOeBSks52CN75Ct0B/2K OIQ39txyhTB7t1oUbU3DabvU0no48pTwqAQfwigsk6pTGdrkLJr+Pwohc5zaXGC4 W9m1TBfNz59Gj/pzxMz6eFlHhdoCIMkjdJ9tFbzd3PO0rUCRBhljDEcS+w5S4icK iR9DRVST6MXlTE9Riu8fGLYXVx0ZOxCLs/C3e++kUjPR4dvu03lEEO5YD7+z3Lrj jQFq3PtWyjMudQ== -----END CERTIFICATE-----Generated at Sat Dec 20 16:18:43 2025 by rpki-client