This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/fe46bd-67da-4dfe-9cb4-e25d38f5c930/1/qX_5V51boEXbuQGijCxRWI0E_RE.mft File: qX_5V51boEXbuQGijCxRWI0E_RE.mft (raw, json) Hash identifier: QokDGwSXust7o3vnnZ7YbXb+8yjJt7XMwjCGArgsc38= Subject key identifier: 33:8F:F8:C6:5B:32:40:E6:A9:91:31:A7:CD:16:BC:EA:51:56:D6:A6 Authority key identifier: A9:7F:F9:57:9D:5B:A0:45:DB:B9:01:A2:8C:2C:51:58:8D:04:FD:11 Certificate issuer: /CN=a97ff9579d5ba045dbb901a28c2c51588d04fd11 Certificate serial: 019B3F48B30FADE76C53D9B3E9A5D13B1AF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qX_5V51boEXbuQGijCxRWI0E_RE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/fe46bd-67da-4dfe-9cb4-e25d38f5c930/1/qX_5V51boEXbuQGijCxRWI0E_RE.mft Manifest number: 0116 Signing time: Sun 21 Dec 2025 05:01:27 +0000 Manifest this update: Sun 21 Dec 2025 05:01:27 +0000 Manifest next update: Mon 22 Dec 2025 05:01:27 +0000 Files and hashes: 1: iUuETCEbGtwWmtCdQKzT9MtsuME.roa (hash: MRtjhtm+DjeKhdCjunhlsOl8ue7lCEfAuSo2rForAtw=) 2: qX_5V51boEXbuQGijCxRWI0E_RE.crl (hash: lu6zlhPUiKux9HScO3wu++vDhh3ofvjICjy2UQJGmfc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/fe46bd-67da-4dfe-9cb4-e25d38f5c930/1/qX_5V51boEXbuQGijCxRWI0E_RE.crl rsync://rpki.ripe.net/repository/DEFAULT/43/fe46bd-67da-4dfe-9cb4-e25d38f5c930/1/qX_5V51boEXbuQGijCxRWI0E_RE.mft rsync://rpki.ripe.net/repository/DEFAULT/qX_5V51boEXbuQGijCxRWI0E_RE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:b3:0f:ad:e7:6c:53:d9:b3:e9:a5:d1:3b:1a:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a97ff9579d5ba045dbb901a28c2c51588d04fd11 Validity Not Before: Dec 21 05:01:27 2025 GMT Not After : Dec 22 05:01:27 2025 GMT Subject: CN=338ff8c65b3240e6a99131a7cd16bcea5156d6a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c7:e8:df:3f:68:4b:05:cf:0b:4d:4e:c0:cf: 9d:8b:95:e9:c8:6b:46:88:ec:62:f0:6c:60:52:a6: ae:13:34:5f:e1:50:e5:d3:54:21:28:f5:5d:de:d8: 95:97:2c:3f:fa:9f:cb:c2:38:80:f7:ee:f2:e2:a8: e3:30:b8:e2:1e:e2:19:95:c0:f5:7b:1f:64:51:00: 20:9b:68:fc:8c:31:a6:42:f0:53:7b:0e:3e:0a:ef: 77:54:33:11:55:97:0f:2d:be:10:f1:e3:dc:15:66: 4f:b1:4f:95:f3:26:a0:32:30:89:e3:da:9d:83:68: 9f:d0:f0:45:ed:4c:27:26:1b:cf:b2:47:dd:dc:da: 12:12:b7:b1:3d:68:af:b9:aa:b5:14:63:7e:0b:fa: fd:54:58:a9:0d:3e:e1:c4:22:d2:62:a3:f4:b7:4e: 91:59:85:10:c4:1b:d2:88:95:05:94:66:43:2a:29: d2:c6:c1:d1:7c:46:c6:cc:f1:38:a5:70:b9:91:4c: e7:49:27:ff:e4:37:6d:9a:15:f7:44:50:f2:7a:45: 94:38:40:2e:09:65:dd:ed:8a:6e:fc:8c:a3:24:a4: d4:b8:79:77:8a:1a:e0:bd:b4:c7:10:c5:4a:a7:51: 57:00:4f:40:ad:c9:14:1f:60:30:eb:3c:b2:33:89: 58:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:8F:F8:C6:5B:32:40:E6:A9:91:31:A7:CD:16:BC:EA:51:56:D6:A6 X509v3 Authority Key Identifier: keyid:A9:7F:F9:57:9D:5B:A0:45:DB:B9:01:A2:8C:2C:51:58:8D:04:FD:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qX_5V51boEXbuQGijCxRWI0E_RE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/fe46bd-67da-4dfe-9cb4-e25d38f5c930/1/qX_5V51boEXbuQGijCxRWI0E_RE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/fe46bd-67da-4dfe-9cb4-e25d38f5c930/1/qX_5V51boEXbuQGijCxRWI0E_RE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:d0:b5:fc:6a:90:f7:0e:1d:c1:ae:11:7d:c8:2d:1a:cf:db: 83:b6:35:9a:23:b8:4f:0c:e9:af:a9:90:72:26:35:2a:82:58: d0:31:f0:0e:7a:a2:76:12:65:81:b5:cd:dd:5c:34:cb:10:34: ac:51:c2:43:68:b7:94:dc:22:62:ca:ff:21:61:ac:e6:e6:fc: a3:46:49:2c:20:23:15:84:30:0a:a7:94:5a:a2:fc:60:ac:4b: 14:9c:16:fe:05:eb:75:ee:69:da:9c:6b:b1:9e:6a:55:6c:cd: 6e:89:88:05:1c:ba:2d:82:f4:77:f5:68:4f:0e:f4:b0:95:30: fe:64:5f:6b:d1:6d:c4:b5:7c:bd:ad:09:ee:98:5d:52:cf:16: f8:ca:af:d9:39:b0:2e:fc:05:21:89:e0:33:b3:e9:21:50:0b: ca:ca:fd:e8:43:ca:5c:71:0a:bf:91:4e:a0:5d:8a:c8:e7:2c: b0:59:ff:d5:61:75:71:14:75:e8:ce:36:c1:ee:77:a7:b3:50: 42:60:7b:7a:4d:ee:0c:0d:6c:77:d3:d3:49:05:76:cc:22:c7: d8:89:9a:10:63:56:00:03:c1:08:a4:f9:7d:94:88:4a:41:dd: b8:fa:f7:31:05:b6:79:2c:ed:a9:18:ae:9a:4c:6d:92:ae:ba: 2c:b6:ff:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SLMPredsU9mz6aXROxr5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5N2ZmOTU3OWQ1YmEwNDVkYmI5MDFhMjhjMmM1MTU4OGQw NGZkMTEwHhcNMjUxMjIxMDUwMTI3WhcNMjUxMjIyMDUwMTI3WjAzMTEwLwYDVQQD EygzMzhmZjhjNjViMzI0MGU2YTk5MTMxYTdjZDE2YmNlYTUxNTZkNmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8fo3z9oSwXPC01OwM+di5XpyGtG iOxi8GxgUqauEzRf4VDl01QhKPVd3tiVlyw/+p/LwjiA9+7y4qjjMLjiHuIZlcD1 ex9kUQAgm2j8jDGmQvBTew4+Cu93VDMRVZcPLb4Q8ePcFWZPsU+V8yagMjCJ49qd g2if0PBF7UwnJhvPskfd3NoSErexPWivuaq1FGN+C/r9VFipDT7hxCLSYqP0t06R WYUQxBvSiJUFlGZDKinSxsHRfEbGzPE4pXC5kUznSSf/5DdtmhX3RFDyekWUOEAu CWXd7Ypu/IyjJKTUuHl3ihrgvbTHEMVKp1FXAE9ArckUH2Aw6zyyM4lY8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDOP+MZbMkDmqZExp80WvOpRVtamMB8GA1UdIwQY MBaAFKl/+VedW6BF27kBoowsUViNBP0RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVhfNVY1MWJvRVhidVFHaWpDeFJXSTBFX1JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9mZTQ2YmQtNjdkYS00ZGZlLTljYjQt ZTI1ZDM4ZjVjOTMwLzEvcVhfNVY1MWJvRVhidVFHaWpDeFJXSTBFX1JFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9mZTQ2YmQtNjdkYS00ZGZlLTljYjQtZTI1ZDM4ZjVjOTMw LzEvcVhfNVY1MWJvRVhidVFHaWpDeFJXSTBFX1JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr9C1/GqQ 9w4dwa4RfcgtGs/bg7Y1miO4Twzpr6mQciY1KoJY0DHwDnqidhJlgbXN3Vw0yxA0 rFHCQ2i3lNwiYsr/IWGs5ub8o0ZJLCAjFYQwCqeUWqL8YKxLFJwW/gXrde5p2pxr sZ5qVWzNbomIBRy6LYL0d/VoTw70sJUw/mRfa9FtxLV8va0J7phdUs8W+Mqv2Tmw LvwFIYngM7PpIVALysr96EPKXHEKv5FOoF2KyOcssFn/1WF1cRR16M42we53p7NQ QmB7ek3uDA1sd9PTSQV2zCLH2ImaEGNWAAPBCKT5fZSISkHduPr3MQW2eSztqRiu mkxtkq66LLb/7w== -----END CERTIFICATE-----Generated at Sun Dec 21 12:55:06 2025 by rpki-client