This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft File: Qj2TBU8GPPiikYYXNfkAWauewWk.mft (raw, json) Hash identifier: F977YmqdxgoPBEuVRSuBAcCj+E6Dztn19BECMQNkV6I= Subject key identifier: 07:F5:62:D2:FE:61:F8:F1:72:93:C6:F4:59:FF:18:54:46:85:98:D7 Authority key identifier: 42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69 Certificate issuer: /CN=423d93054f063cf8a291861735f90059ab9ec169 Certificate serial: 019B4437FB2E7C4AEBCF3D19A5B127A5E140 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft Manifest number: 1791 Signing time: Mon 22 Dec 2025 04:01:17 +0000 Manifest this update: Mon 22 Dec 2025 04:01:17 +0000 Manifest next update: Tue 23 Dec 2025 04:01:17 +0000 Files and hashes: 1: Fxqjt6X76bxQBXWwSZ7TE0DXZ4E.roa (hash: 1w4Y/QhTTxCziVVyNTfr4p7dQVzXdB6YpDvNxykMieU=) 2: Khu0iUVuTs8ZYAwuEt_S3XCnJdE.roa (hash: 0AzGfOb5OfWgiAbeRL3c+g44yXgjZKIdXOkCd1IWoeo=) 3: MwggIWb8xKY_Gmyt-jhjyCB3Knk.roa (hash: 2e03nmncmnuNRXI/WbH4mmPniZO75Z2kJ+MSZTXtduk=) 4: Qj2TBU8GPPiikYYXNfkAWauewWk.crl (hash: KLvbwy8tPhTGL/HRN5Lh29KRTiFw5AHl/ILqGHUEpss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:37:fb:2e:7c:4a:eb:cf:3d:19:a5:b1:27:a5:e1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=423d93054f063cf8a291861735f90059ab9ec169 Validity Not Before: Dec 22 04:01:17 2025 GMT Not After : Dec 23 04:01:17 2025 GMT Subject: CN=07f562d2fe61f8f17293c6f459ff1854468598d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9e:c6:60:21:d9:de:e0:5a:9a:20:40:75:3d: cb:91:1b:3c:98:97:13:dd:f3:15:64:68:fa:ad:ef: 81:97:12:a3:74:ca:ae:c2:e1:b5:1e:04:09:47:dd: ff:e0:a0:5e:09:d8:81:fa:03:c8:5c:2c:44:bf:fe: 4e:a2:d5:04:c2:95:60:f0:52:54:a1:fa:ba:66:70: 4d:aa:a9:19:a9:17:4c:25:20:14:55:3b:52:23:82: 6a:d0:25:69:97:9d:7d:59:90:48:44:18:22:9a:4f: c7:87:c3:47:33:be:26:d6:1c:7e:82:d1:b2:ea:9e: 95:55:24:6f:64:ea:b0:a1:51:a5:38:9c:ae:ff:9b: 05:81:1d:97:5b:77:ac:db:9e:4e:62:a0:41:cf:0a: 48:a9:ef:b5:57:50:d1:32:31:c3:68:0c:90:bb:97: 50:90:29:75:ad:6f:dc:5f:c3:d7:ae:b0:73:bb:d3: 40:5a:6b:b6:91:f4:48:e3:a6:3d:32:51:9e:ab:1a: 33:fa:9b:93:6e:26:57:81:52:72:95:d3:13:51:49: b8:8f:2d:96:94:55:4f:05:b1:a0:cd:3f:8f:93:10: 63:5f:de:86:1a:01:a5:f3:10:92:3f:f3:55:56:c8: b5:88:d8:d1:b0:a0:1b:1d:37:2f:61:db:5b:05:e0: 88:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:F5:62:D2:FE:61:F8:F1:72:93:C6:F4:59:FF:18:54:46:85:98:D7 X509v3 Authority Key Identifier: keyid:42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:f5:94:4f:8c:55:ef:fc:25:f6:38:7e:31:75:02:69:e3:1a: bb:65:ba:49:d5:71:f2:66:5f:5b:22:af:87:64:5c:2c:f8:29: 14:d7:16:b1:e9:c4:d4:b9:b1:75:15:bc:66:ff:6d:57:f5:4f: 18:b8:a2:56:5c:cb:f9:b4:14:b5:fe:6f:90:6f:20:7a:8b:e0: 93:f0:bc:5b:1c:74:eb:8a:21:b8:7c:59:ff:f7:a6:8b:c7:c8: 20:44:3a:c5:ac:0c:cf:61:96:14:54:59:1a:63:90:17:a6:0d: 08:07:bb:9a:90:4b:bc:5f:80:3c:a9:13:89:f3:e3:a3:72:91: 56:de:9d:01:59:5f:80:33:6f:d1:73:1a:28:ad:fb:6d:c8:fe: d5:b1:05:7b:1a:bd:70:96:5b:80:ff:fb:9f:da:b7:bd:1a:13: a4:a4:b0:fe:df:69:df:2b:26:ad:cb:1f:fe:25:b5:aa:79:ee: d4:0c:9a:d5:6f:94:73:dc:93:bb:4e:26:16:34:9b:90:87:1c: 1a:56:53:76:31:bf:4e:d0:e1:a2:59:66:0b:7d:df:b5:49:82: e0:25:5b:97:c1:8d:cf:c1:48:79:9f:11:96:e1:c1:6b:9d:4e: 53:a5:6a:7c:7e:ac:4c:77:09:6b:8b:06:85:39:ba:8c:02:56: 8c:7e:69:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEN/sufErrzz0ZpbEnpeFAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyM2Q5MzA1NGYwNjNjZjhhMjkxODYxNzM1ZjkwMDU5YWI5 ZWMxNjkwHhcNMjUxMjIyMDQwMTE3WhcNMjUxMjIzMDQwMTE3WjAzMTEwLwYDVQQD EygwN2Y1NjJkMmZlNjFmOGYxNzI5M2M2ZjQ1OWZmMTg1NDQ2ODU5OGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJ7GYCHZ3uBamiBAdT3LkRs8mJcT 3fMVZGj6re+BlxKjdMquwuG1HgQJR93/4KBeCdiB+gPIXCxEv/5OotUEwpVg8FJU ofq6ZnBNqqkZqRdMJSAUVTtSI4Jq0CVpl519WZBIRBgimk/Hh8NHM74m1hx+gtGy 6p6VVSRvZOqwoVGlOJyu/5sFgR2XW3es255OYqBBzwpIqe+1V1DRMjHDaAyQu5dQ kCl1rW/cX8PXrrBzu9NAWmu2kfRI46Y9MlGeqxoz+puTbiZXgVJyldMTUUm4jy2W lFVPBbGgzT+PkxBjX96GGgGl8xCSP/NVVsi1iNjRsKAbHTcvYdtbBeCITwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAf1YtL+YfjxcpPG9Fn/GFRGhZjXMB8GA1UdIwQY MBaAFEI9kwVPBjz4opGGFzX5AFmrnsFpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWoyVEJVOEdQUGlpa1lZWE5ma0FXYXVld1drLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8wYzJlYzMtMzg0NC00YjVmLTlmNTgt NWYxYjY5MDQ4ZmUyLzEvUWoyVEJVOEdQUGlpa1lZWE5ma0FXYXVld1drLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8wYzJlYzMtMzg0NC00YjVmLTlmNTgtNWYxYjY5MDQ4ZmUy LzEvUWoyVEJVOEdQUGlpa1lZWE5ma0FXYXVld1drLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhvWUT4xV 7/wl9jh+MXUCaeMau2W6SdVx8mZfWyKvh2RcLPgpFNcWsenE1LmxdRW8Zv9tV/VP GLiiVlzL+bQUtf5vkG8geovgk/C8Wxx064ohuHxZ//emi8fIIEQ6xawMz2GWFFRZ GmOQF6YNCAe7mpBLvF+APKkTifPjo3KRVt6dAVlfgDNv0XMaKK37bcj+1bEFexq9 cJZbgP/7n9q3vRoTpKSw/t9p3ysmrcsf/iW1qnnu1Aya1W+Uc9yTu04mFjSbkIcc GlZTdjG/TtDhollmC33ftUmC4CVbl8GNz8FIeZ8RluHBa51OU6VqfH6sTHcJa4sG hTm6jAJWjH5pCQ== -----END CERTIFICATE-----Generated at Mon Dec 22 06:30:27 2025 by rpki-client