This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft File: tQJsmXQJLiIFQkASgfm9_TVsKEI.mft (raw, json) Hash identifier: eOO1pTDeScFLFS6w82olRALiM8l/8RIvnQ6wLtuCDNg= Subject key identifier: 93:BE:E9:CA:C1:59:72:E5:E1:85:BD:B8:3D:85:09:F6:28:F8:6B:2E Authority key identifier: B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42 Certificate issuer: /CN=b5026c9974092e220542401281f9bdfd356c2842 Certificate serial: 019B3FB5F53EA86C3B577F1F766C655AECBF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft Manifest number: 0976 Signing time: Sun 21 Dec 2025 07:00:47 +0000 Manifest this update: Sun 21 Dec 2025 07:00:47 +0000 Manifest next update: Mon 22 Dec 2025 07:00:47 +0000 Files and hashes: 1: JyF5UhD9cVqjqquiR-hK995tZzw.roa (hash: 5AXS3YhQ0/Ke6SUL+/AhBjypj7cC6zgjHgX8v/ujINo=) 2: pTQKkEXtOvhz7EuIYUqt-o1qzFk.roa (hash: OW+foSbaeoc9zsDW/uMWemQINFvQAo39Gw9c3A0iOPI=) 3: tQJsmXQJLiIFQkASgfm9_TVsKEI.crl (hash: 9eS8pGnJhMdMWan+p84bX7uPliZhU86aUuP2OlRvthY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b5:f5:3e:a8:6c:3b:57:7f:1f:76:6c:65:5a:ec:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5026c9974092e220542401281f9bdfd356c2842 Validity Not Before: Dec 21 07:00:47 2025 GMT Not After : Dec 22 07:00:47 2025 GMT Subject: CN=93bee9cac15972e5e185bdb83d8509f628f86b2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:95:48:b9:c6:d7:6c:81:61:30:8d:36:9b:fa: 04:11:7a:fb:7b:1a:cd:9b:ec:f1:71:76:93:f9:66: 8d:4d:99:c6:fb:f3:93:9a:b4:5c:09:67:da:d0:29: 61:d1:89:2e:ba:b6:c9:f2:03:77:bc:ac:c7:29:7f: 6f:05:1d:09:90:99:24:00:29:77:5f:16:65:9f:14: 8e:44:10:cb:5c:b5:42:45:32:ae:b9:e3:56:83:fa: 30:cd:ca:79:ca:74:a9:b5:8b:cf:a9:7b:15:0d:dd: ee:84:65:94:d8:c2:90:77:fb:be:8a:fd:1d:39:68: 27:6a:7d:23:1b:c2:58:9e:6d:ea:fa:09:1c:af:90: 1c:7f:d0:a2:c3:5d:fd:ec:1b:ff:fb:97:f4:e7:10: eb:b1:2b:4c:fe:0b:43:82:c7:c8:d3:d4:4f:d8:21: b4:43:70:6a:16:49:11:18:8b:82:64:09:a1:10:40: 73:d5:51:5d:c5:b6:d1:f4:a7:9e:ea:f2:57:63:11: e2:fe:11:a3:76:ca:91:d4:c5:49:3c:da:f4:f1:26: 1d:2c:f6:61:9a:ee:07:fc:fb:5b:73:39:81:89:56: 96:9f:68:7c:b2:53:5e:74:3b:ef:13:7f:b6:02:12: dc:7c:88:81:2c:04:ae:9e:cb:23:51:30:90:b3:e2: f0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:BE:E9:CA:C1:59:72:E5:E1:85:BD:B8:3D:85:09:F6:28:F8:6B:2E X509v3 Authority Key Identifier: keyid:B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:a8:da:8a:f6:6c:2a:48:41:be:de:dd:8d:b0:bd:28:e3:92: 98:98:ec:5e:17:d5:65:0d:e8:b5:b4:5f:a0:85:a6:ee:0a:09: ac:50:56:68:8c:79:bc:36:48:f0:00:57:44:56:0a:8d:f5:7f: 0b:0a:a1:9b:71:eb:7d:24:af:33:33:ab:2d:df:45:61:9d:c7: 36:fc:4e:89:b3:21:5b:f2:8c:3b:bc:75:69:62:43:45:7e:1f: bb:5d:a6:53:07:1f:e7:2e:4d:65:27:1b:08:ba:ca:1a:ab:6f: d8:3e:d9:06:d7:b6:67:b1:12:46:de:2d:b0:ae:70:ca:b0:39: f8:9f:36:06:cb:15:44:9b:14:65:7d:bf:68:07:14:b7:85:94: 27:49:96:20:ce:47:4a:91:2e:c4:60:38:27:81:13:4c:77:b3: b5:fc:b6:a9:94:d2:4d:43:3d:69:b3:7a:c5:fb:75:05:bc:6d: 01:af:4a:1c:e8:57:79:86:34:e0:3c:5c:22:b5:73:f3:26:3e: 96:2d:9e:77:2c:d9:c6:52:e9:db:29:9f:65:78:dd:21:10:07: 91:dc:88:b6:8c:2f:4c:7d:c3:75:80:81:5d:3d:e9:3f:27:2c: 33:34:7a:f8:90:f3:15:f9:b8:4e:2c:d1:55:ba:97:9d:4a:a9: 77:24:9f:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tfU+qGw7V38fdmxlWuy/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MDI2Yzk5NzQwOTJlMjIwNTQyNDAxMjgxZjliZGZkMzU2 YzI4NDIwHhcNMjUxMjIxMDcwMDQ3WhcNMjUxMjIyMDcwMDQ3WjAzMTEwLwYDVQQD Eyg5M2JlZTljYWMxNTk3MmU1ZTE4NWJkYjgzZDg1MDlmNjI4Zjg2YjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpVIucbXbIFhMI02m/oEEXr7exrN m+zxcXaT+WaNTZnG+/OTmrRcCWfa0Clh0YkuurbJ8gN3vKzHKX9vBR0JkJkkACl3 XxZlnxSORBDLXLVCRTKuueNWg/owzcp5ynSptYvPqXsVDd3uhGWU2MKQd/u+iv0d OWgnan0jG8JYnm3q+gkcr5Acf9Ciw1397Bv/+5f05xDrsStM/gtDgsfI09RP2CG0 Q3BqFkkRGIuCZAmhEEBz1VFdxbbR9Kee6vJXYxHi/hGjdsqR1MVJPNr08SYdLPZh mu4H/PtbczmBiVaWn2h8slNedDvvE3+2AhLcfIiBLASunssjUTCQs+LwdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJO+6crBWXLl4YW9uD2FCfYo+GsuMB8GA1UdIwQY MBaAFLUCbJl0CS4iBUJAEoH5vf01bChCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFFKc21YUUpMaUlGUWtBU2dmbTlfVFZzS0VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9hZjYyMzItYTRmNS00MjQ0LTk0MzYt ZWVhMjY3YTU4NDk0LzEvdFFKc21YUUpMaUlGUWtBU2dmbTlfVFZzS0VJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9hZjYyMzItYTRmNS00MjQ0LTk0MzYtZWVhMjY3YTU4NDk0 LzEvdFFKc21YUUpMaUlGUWtBU2dmbTlfVFZzS0VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZKjaivZs KkhBvt7djbC9KOOSmJjsXhfVZQ3otbRfoIWm7goJrFBWaIx5vDZI8ABXRFYKjfV/ Cwqhm3HrfSSvMzOrLd9FYZ3HNvxOibMhW/KMO7x1aWJDRX4fu12mUwcf5y5NZScb CLrKGqtv2D7ZBte2Z7ESRt4tsK5wyrA5+J82BssVRJsUZX2/aAcUt4WUJ0mWIM5H SpEuxGA4J4ETTHeztfy2qZTSTUM9abN6xft1BbxtAa9KHOhXeYY04DxcIrVz8yY+ li2edyzZxlLp2ymfZXjdIRAHkdyItowvTH3DdYCBXT3pPycsMzR6+JDzFfm4TizR VbqXnUqpdySfnQ== -----END CERTIFICATE-----Generated at Sun Dec 21 11:07:04 2025 by rpki-client