This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft File: qy5bZ_JcvYgspNAj0h75jUg3Nds.mft (raw, json) Hash identifier: g/RsyN0BbUhdfXaOGhxVagQCMR8PLjrKCQNq7WCo9Ko= Subject key identifier: CC:89:B6:47:97:01:97:47:16:79:44:0F:79:2D:43:22:EE:9D:E2:9A Authority key identifier: AB:2E:5B:67:F2:5C:BD:88:2C:A4:D0:23:D2:1E:F9:8D:48:37:35:DB Certificate issuer: /CN=ab2e5b67f25cbd882ca4d023d21ef98d483735db Certificate serial: 019B43258722A08F99CD35AA32123FE41DF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft Manifest number: 1790 Signing time: Sun 21 Dec 2025 23:01:31 +0000 Manifest this update: Sun 21 Dec 2025 23:01:31 +0000 Manifest next update: Mon 22 Dec 2025 23:01:31 +0000 Files and hashes: 1: K7Ga725J3x2RwbbwxIq7lR_PIPs.roa (hash: iDoa32FgeW+pTYDS/vRw8g8vbffEox0Tjj/f0H2pJ4o=) 2: USK3DF_MeFiqUsO5eyLbMIpRftM.roa (hash: EfIlwaa4+l/J+6WJ30e/f1BqrVRRkC35cUUZDfKg660=) 3: jtaR0UqVsAZLkY0kZNEVD_APhkw.roa (hash: mqg6f6CiSZ5djyLSZlp3pc+4PGWQ8YQjeu4DqnHw2+g=) 4: qy5bZ_JcvYgspNAj0h75jUg3Nds.crl (hash: gtJC61DIZ1jenN6V4zJc3ljEpEE1/+vsSG26mdBonr8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:25:87:22:a0:8f:99:cd:35:aa:32:12:3f:e4:1d:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2e5b67f25cbd882ca4d023d21ef98d483735db Validity Not Before: Dec 21 23:01:31 2025 GMT Not After : Dec 22 23:01:31 2025 GMT Subject: CN=cc89b647970197471679440f792d4322ee9de29a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d3:31:f8:9a:25:cc:aa:78:61:7c:36:73:62: 62:29:c8:dd:5c:99:5a:0a:7f:57:94:e6:6c:a9:e9: 00:7d:e5:38:7b:94:0b:6c:d0:6f:8b:25:2b:79:d3: 12:95:9c:05:e6:65:69:95:62:ff:ee:e0:d9:ad:48: bb:b7:84:cd:69:7a:de:28:e5:55:68:06:0b:53:fb: 29:7f:4c:48:d3:77:6a:1d:e3:08:27:c4:67:19:f9: 9e:37:a1:d2:e3:1e:fe:bd:ec:e8:d3:d4:08:6a:1f: 4b:4e:2d:88:cb:95:36:e5:90:2d:3a:56:95:b1:72: 75:4f:98:c0:91:5c:dc:b9:1b:bf:85:c6:20:6e:22: a7:ae:14:d4:14:e1:9c:c8:8d:68:12:85:f8:05:e5: a3:de:90:02:3a:e3:8b:d6:9c:e0:fc:10:8a:fa:27: 71:ac:23:b6:5a:31:49:6c:ff:27:57:74:bb:6c:c7: 37:57:b5:41:b2:4a:ef:48:df:48:85:dd:ce:37:85: 0c:33:f1:8c:a9:23:70:24:d7:51:a9:e1:94:c8:a6: 6d:73:96:f9:0d:27:ca:5e:d7:ab:e5:64:cf:83:54: 76:8f:39:78:98:f6:af:65:36:44:3e:91:d4:14:3c: e8:5e:c1:0f:c8:47:af:8b:9f:0c:31:14:27:15:92: d5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:89:B6:47:97:01:97:47:16:79:44:0F:79:2D:43:22:EE:9D:E2:9A X509v3 Authority Key Identifier: keyid:AB:2E:5B:67:F2:5C:BD:88:2C:A4:D0:23:D2:1E:F9:8D:48:37:35:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:b7:5b:f6:37:91:14:c2:1e:58:fb:06:1c:2b:dd:1c:1a:50: 18:b0:4a:ad:ec:ca:ee:43:d4:66:55:8a:47:b0:33:1a:9e:e2: 49:bb:01:00:2d:9a:71:12:d0:e0:90:c9:ae:bf:04:b2:2d:24: 03:31:15:5f:66:90:bd:80:21:0b:fb:fd:93:ca:70:d9:c8:ab: 60:03:46:b0:a0:4b:e7:71:f3:20:db:7a:02:ba:a8:90:a3:4b: fa:ff:4b:ae:b1:7e:61:90:71:42:4f:00:9b:e4:5c:a6:1a:e2: 27:2d:5a:ba:e7:bd:85:b5:ae:18:92:27:1c:9c:8b:61:82:f6: 97:80:28:ba:e4:ab:a3:9e:98:0c:3e:72:f3:3c:a3:93:e6:94: 55:b6:a3:02:c8:b8:4f:b4:66:e5:e8:e3:5a:58:b8:64:bb:ec: 4a:cd:c9:60:88:4d:9f:48:89:64:f1:b0:9f:09:3a:fa:8c:37: 0d:a9:c3:34:32:21:bc:5b:5c:2f:b8:03:26:ca:16:4f:49:b7: 73:95:02:8c:06:4f:10:68:21:ed:02:e9:bb:e8:b6:c1:e5:b3: 59:48:34:6b:44:88:be:44:35:a4:a1:28:43:8c:4c:fe:8e:f0: 55:d3:8f:bf:cd:12:b2:29:ec:7d:4c:66:d5:e8:2d:88:a2:11: 1f:a3:ac:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJYcioI+ZzTWqMhI/5B34MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMmU1YjY3ZjI1Y2JkODgyY2E0ZDAyM2QyMWVmOThkNDgz NzM1ZGIwHhcNMjUxMjIxMjMwMTMxWhcNMjUxMjIyMjMwMTMxWjAzMTEwLwYDVQQD EyhjYzg5YjY0Nzk3MDE5NzQ3MTY3OTQ0MGY3OTJkNDMyMmVlOWRlMjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNMx+JolzKp4YXw2c2JiKcjdXJla Cn9XlOZsqekAfeU4e5QLbNBviyUredMSlZwF5mVplWL/7uDZrUi7t4TNaXreKOVV aAYLU/spf0xI03dqHeMIJ8RnGfmeN6HS4x7+vezo09QIah9LTi2Iy5U25ZAtOlaV sXJ1T5jAkVzcuRu/hcYgbiKnrhTUFOGcyI1oEoX4BeWj3pACOuOL1pzg/BCK+idx rCO2WjFJbP8nV3S7bMc3V7VBskrvSN9Ihd3ON4UMM/GMqSNwJNdRqeGUyKZtc5b5 DSfKXter5WTPg1R2jzl4mPavZTZEPpHUFDzoXsEPyEevi58MMRQnFZLVVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMyJtkeXAZdHFnlED3ktQyLuneKaMB8GA1UdIwQY MBaAFKsuW2fyXL2ILKTQI9Ie+Y1INzXbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXk1YlpfSmN2WWdzcE5BajBoNzVqVWczTmRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC82N2ZmZTktOGQ5OC00YzZkLWJlMmEt M2Y2ZWMyNDk3MTdjLzEvcXk1YlpfSmN2WWdzcE5BajBoNzVqVWczTmRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC82N2ZmZTktOGQ5OC00YzZkLWJlMmEtM2Y2ZWMyNDk3MTdj LzEvcXk1YlpfSmN2WWdzcE5BajBoNzVqVWczTmRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJrdb9jeR FMIeWPsGHCvdHBpQGLBKrezK7kPUZlWKR7AzGp7iSbsBAC2acRLQ4JDJrr8Esi0k AzEVX2aQvYAhC/v9k8pw2cirYANGsKBL53HzINt6ArqokKNL+v9LrrF+YZBxQk8A m+RcphriJy1auue9hbWuGJInHJyLYYL2l4AouuSro56YDD5y8zyjk+aUVbajAsi4 T7Rm5ejjWli4ZLvsSs3JYIhNn0iJZPGwnwk6+ow3DanDNDIhvFtcL7gDJsoWT0m3 c5UCjAZPEGgh7QLpu+i2weWzWUg0a0SIvkQ1pKEoQ4xM/o7wVdOPv80SsinsfUxm 1egtiKIRH6OsCw== -----END CERTIFICATE-----Generated at Mon Dec 22 06:25:56 2025 by rpki-client