This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft File: cQUbDizppMnmEh6YPRZf6rh-w1Q.mft (raw, json) Hash identifier: RBy1roI9TiIErX4UghkqgX5epYwWpIB/yy8yMfwxch8= Subject key identifier: 95:F1:A3:18:C7:B0:30:0B:E5:B9:66:77:74:3B:C7:48:05:D9:49:92 Authority key identifier: 71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54 Certificate issuer: /CN=71051b0e2ce9a4c9e6121e983d165feab87ec354 Certificate serial: 019B3F48ADB96AB68C7F2A6A4CDF77723229 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft Manifest number: 111F Signing time: Sun 21 Dec 2025 05:01:26 +0000 Manifest this update: Sun 21 Dec 2025 05:01:26 +0000 Manifest next update: Mon 22 Dec 2025 05:01:26 +0000 Files and hashes: 1: 77c7LwFJ33uk1xUKt1FAfMJrE9U.roa (hash: Xw/VJxGC8Vr3IxfSUZP9dX3SHM7xwIjH1eQJVicfbvU=) 2: cQUbDizppMnmEh6YPRZf6rh-w1Q.crl (hash: 83m11WjJw/9/3+F3bWgk4IAVtVS4VaXyo4OnaFhzT+A=) 3: ksfUG5eUsSmxI4_eXAlia-83kt8.roa (hash: Ve1sXWpLbI/ytU2pjBhiO6pODt6uVzJVCiwoLnmWH3M=) 4: mQfuYDhcQ_uLiN8TuC8vArT48n0.roa (hash: q6GrLFR9Jvk7SkT0Gz0aQLhMWCRoiLx7tXQ4Qt2xjP0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:ad:b9:6a:b6:8c:7f:2a:6a:4c:df:77:72:32:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71051b0e2ce9a4c9e6121e983d165feab87ec354 Validity Not Before: Dec 21 05:01:26 2025 GMT Not After : Dec 22 05:01:26 2025 GMT Subject: CN=95f1a318c7b0300be5b96677743bc74805d94992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:77:18:cf:16:c6:ea:38:bd:22:e0:11:e0:31: bd:12:d3:35:d8:6e:9b:c9:b4:79:c4:b9:13:71:62: 08:95:33:d6:7f:15:75:b2:2e:69:c1:ac:67:9e:d6: e8:f0:14:8b:dc:90:c8:62:8b:f7:32:e1:9f:93:bb: 43:c3:50:24:70:c3:c7:05:83:bb:f7:41:c1:7c:8d: 8a:b8:64:2b:22:b6:7a:43:3b:12:bf:bf:b2:82:f7: 04:14:bd:ff:b7:09:1c:bb:e1:ae:55:f9:80:d0:9a: 0d:07:39:22:2b:4d:b1:64:ba:19:00:5b:5e:62:7a: 4b:9f:92:4a:97:0e:38:ce:16:36:4a:c3:02:cb:0d: 52:f3:4e:03:37:20:32:14:66:36:52:f6:0f:5e:36: b6:56:63:d9:90:90:39:1c:68:78:3d:3f:c3:67:47: 4e:70:fe:0c:b1:42:0b:24:98:59:2f:19:f3:a5:eb: 67:fc:c3:53:6e:5c:41:30:b7:1a:35:25:f7:23:0f: 80:cf:35:95:37:8d:17:a5:5e:e6:80:8c:fd:7f:f0: bb:fa:98:f7:a2:7c:5e:c2:c8:4d:7c:88:ba:b6:fe: 1b:47:19:0a:55:54:ab:f4:df:51:ab:04:97:3f:88: 2c:35:ca:dc:5f:23:15:3f:5f:38:5f:e3:db:cc:dd: 34:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:F1:A3:18:C7:B0:30:0B:E5:B9:66:77:74:3B:C7:48:05:D9:49:92 X509v3 Authority Key Identifier: keyid:71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:83:b3:c8:e9:83:c1:05:42:64:f3:d9:66:1a:ff:f9:e6:7a: f9:68:92:7a:2b:49:c0:2e:38:95:59:fc:86:15:25:fa:bc:3e: 84:b2:5e:ac:9e:05:63:7a:9f:a8:ae:bb:11:48:b2:60:bc:9b: cd:8e:dd:19:92:c7:de:90:a1:54:85:b8:ff:8f:a2:af:1a:30: c6:52:fb:17:a3:9b:46:38:02:c0:25:f9:bf:aa:34:43:74:a9: 40:be:8b:e1:07:e5:98:a3:77:1b:82:59:d5:1e:04:e2:5e:50: d2:cf:a6:86:26:c4:05:88:4b:e9:c2:92:da:76:a2:5c:d4:60: 13:21:20:95:06:2c:1c:4d:61:be:65:98:bf:24:59:52:82:11: 52:27:56:6c:f1:c4:0f:ce:7f:c2:94:ef:c5:a3:90:17:0a:76: 9c:de:10:35:4b:e7:65:39:c8:a5:3a:f2:cd:dd:36:57:f9:85: b0:79:8b:f9:d6:32:90:99:d2:cf:93:8e:1b:52:f6:2f:7b:00: 15:3b:d8:2e:4b:38:02:e5:68:b5:df:d3:f3:f9:11:68:0e:38: 1d:43:1d:3c:4b:7f:8f:25:dd:1e:83:4b:7a:00:ce:5e:45:59: 6f:5f:e1:d7:75:4d:d7:d1:dd:dc:3e:32:da:4e:09:d8:9b:df: 12:55:cb:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SK25araMfypqTN93cjIpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMDUxYjBlMmNlOWE0YzllNjEyMWU5ODNkMTY1ZmVhYjg3 ZWMzNTQwHhcNMjUxMjIxMDUwMTI2WhcNMjUxMjIyMDUwMTI2WjAzMTEwLwYDVQQD Eyg5NWYxYTMxOGM3YjAzMDBiZTViOTY2Nzc3NDNiYzc0ODA1ZDk0OTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuncYzxbG6ji9IuAR4DG9EtM12G6b ybR5xLkTcWIIlTPWfxV1si5pwaxnntbo8BSL3JDIYov3MuGfk7tDw1AkcMPHBYO7 90HBfI2KuGQrIrZ6QzsSv7+ygvcEFL3/twkcu+GuVfmA0JoNBzkiK02xZLoZAFte YnpLn5JKlw44zhY2SsMCyw1S804DNyAyFGY2UvYPXja2VmPZkJA5HGh4PT/DZ0dO cP4MsUILJJhZLxnzpetn/MNTblxBMLcaNSX3Iw+AzzWVN40XpV7mgIz9f/C7+pj3 onxewshNfIi6tv4bRxkKVVSr9N9RqwSXP4gsNcrcXyMVP184X+PbzN00YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJXxoxjHsDAL5blmd3Q7x0gF2UmSMB8GA1UdIwQY MBaAFHEFGw4s6aTJ5hIemD0WX+q4fsNUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1FVYkRpenBwTW5tRWg2WVBSWmY2cmgtdzFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9lNTE1ODMtZjU1Yy00OTNiLWI5NTAt NzM2YWI4MzQ5NGFjLzEvY1FVYkRpenBwTW5tRWg2WVBSWmY2cmgtdzFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9lNTE1ODMtZjU1Yy00OTNiLWI5NTAtNzM2YWI4MzQ5NGFj LzEvY1FVYkRpenBwTW5tRWg2WVBSWmY2cmgtdzFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdIOzyOmD wQVCZPPZZhr/+eZ6+WiSeitJwC44lVn8hhUl+rw+hLJerJ4FY3qfqK67EUiyYLyb zY7dGZLH3pChVIW4/4+irxowxlL7F6ObRjgCwCX5v6o0Q3SpQL6L4QflmKN3G4JZ 1R4E4l5Q0s+mhibEBYhL6cKS2naiXNRgEyEglQYsHE1hvmWYvyRZUoIRUidWbPHE D85/wpTvxaOQFwp2nN4QNUvnZTnIpTryzd02V/mFsHmL+dYykJnSz5OOG1L2L3sA FTvYLks4AuVotd/T8/kRaA44HUMdPEt/jyXdHoNLegDOXkVZb1/h13VN19Hd3D4y 2k4J2JvfElXLrQ== -----END CERTIFICATE-----Generated at Sun Dec 21 06:43:08 2025 by rpki-client