This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft File: cQUbDizppMnmEh6YPRZf6rh-w1Q.mft (raw, json) Hash identifier: /EAtII1SMxWR9BM/annCOG9ChWO1ECtAXyp3wYiYFMU= Subject key identifier: 97:4A:88:BE:17:CC:B6:54:CC:3F:FD:96:98:C3:52:D7:74:36:05:97 Authority key identifier: 71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54 Certificate issuer: /CN=71051b0e2ce9a4c9e6121e983d165feab87ec354 Certificate serial: 019B4ADF317184169422C9A3D70A2E30ED7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft Manifest number: 1125 Signing time: Tue 23 Dec 2025 11:01:39 +0000 Manifest this update: Tue 23 Dec 2025 11:01:39 +0000 Manifest next update: Wed 24 Dec 2025 11:01:39 +0000 Files and hashes: 1: 77c7LwFJ33uk1xUKt1FAfMJrE9U.roa (hash: Xw/VJxGC8Vr3IxfSUZP9dX3SHM7xwIjH1eQJVicfbvU=) 2: cQUbDizppMnmEh6YPRZf6rh-w1Q.crl (hash: G/2vCJa3qsOHoavbXz2I3agmtQXA8wNniOnG5LfhJks=) 3: ksfUG5eUsSmxI4_eXAlia-83kt8.roa (hash: Ve1sXWpLbI/ytU2pjBhiO6pODt6uVzJVCiwoLnmWH3M=) 4: mQfuYDhcQ_uLiN8TuC8vArT48n0.roa (hash: q6GrLFR9Jvk7SkT0Gz0aQLhMWCRoiLx7tXQ4Qt2xjP0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 11:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:df:31:71:84:16:94:22:c9:a3:d7:0a:2e:30:ed:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71051b0e2ce9a4c9e6121e983d165feab87ec354 Validity Not Before: Dec 23 11:01:39 2025 GMT Not After : Dec 24 11:01:39 2025 GMT Subject: CN=974a88be17ccb654cc3ffd9698c352d774360597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:46:6f:48:f7:88:9e:24:24:1f:3d:ce:2b:44: 55:79:e0:29:73:ba:a3:df:76:94:e0:a0:10:e5:b6: 06:a8:49:ab:ef:a7:e9:c0:24:e2:12:2b:d2:62:54: d2:9b:7b:07:71:e6:36:7e:36:5b:06:6f:c0:16:94: 82:20:6a:c5:8f:2c:4f:c7:0c:e3:05:9f:eb:47:42: 67:6d:e2:9e:dc:35:c6:2d:e5:a4:60:d5:00:57:c0: 25:67:18:71:ce:c9:ca:9f:59:78:9a:c3:35:f2:38: ed:f6:29:aa:f4:c4:9f:4f:e2:0d:ea:f6:6f:3f:fc: fb:7b:bf:98:0c:f6:61:74:2e:e5:6c:5e:dd:f9:96: 28:d4:89:1a:9d:5b:c8:46:c3:75:cc:0f:89:ae:91: dc:c4:55:03:69:3d:94:65:1a:4d:04:0f:f5:45:d2: f0:25:5a:ff:30:eb:38:3f:41:ed:a6:69:68:af:3f: e0:60:00:ae:84:5e:39:df:57:fc:3d:24:d0:b8:09: 45:4c:cc:a6:7c:ae:e1:49:c3:ce:3e:4b:fa:e8:02: 0e:20:cf:0c:fa:8c:db:ba:44:79:90:2c:c0:85:a1: 01:61:97:f2:40:28:4c:8a:fd:aa:ac:a8:36:83:ef: 15:07:63:91:27:e7:aa:d2:f3:03:f5:57:ae:6a:9e: b4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:4A:88:BE:17:CC:B6:54:CC:3F:FD:96:98:C3:52:D7:74:36:05:97 X509v3 Authority Key Identifier: keyid:71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:f5:98:4d:02:4b:12:bd:5d:5e:a0:3a:f0:37:30:a0:29:3a: ab:ab:75:a5:b3:0e:d2:da:b7:0a:1a:66:01:8d:62:52:3e:82: 36:58:61:d0:ef:bd:8f:88:c9:25:f4:00:dd:8e:2b:57:5d:b6: db:e0:67:cf:42:db:ed:4c:d0:64:cf:7f:dc:53:e5:e7:f8:e1: cd:21:4f:22:81:d0:6a:8c:48:79:a0:df:0a:ee:65:2f:05:9d: ae:34:47:87:e6:82:d9:38:65:a0:b6:26:bc:a7:b3:6a:b1:ca: 0f:a4:19:b2:76:d4:72:83:8d:a5:0a:5e:a5:38:90:d0:5f:92: 2d:5e:52:7f:9e:95:d8:d1:20:e1:f6:6f:f2:34:5b:48:a7:99: 61:a8:d0:56:da:27:ac:4d:60:35:70:f4:28:83:ce:4b:e8:c4: ac:1a:fe:38:66:fd:0f:b8:8d:72:54:2a:63:79:de:9f:3c:79: ce:81:42:ec:69:90:d9:17:31:ac:f1:0b:a1:c0:13:71:b8:51: 69:8a:d0:7f:e6:a4:0e:c8:de:05:e1:9d:f2:ee:98:04:3e:10: 22:0a:4e:e7:99:f8:d0:5f:a6:af:a5:aa:bd:ab:36:d2:f7:01: ae:f3:13:cb:f8:e2:56:08:43:92:d7:9f:ff:8d:b7:97:2e:d8: f8:b6:fd:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtK3zFxhBaUIsmj1wouMO18MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMDUxYjBlMmNlOWE0YzllNjEyMWU5ODNkMTY1ZmVhYjg3 ZWMzNTQwHhcNMjUxMjIzMTEwMTM5WhcNMjUxMjI0MTEwMTM5WjAzMTEwLwYDVQQD Eyg5NzRhODhiZTE3Y2NiNjU0Y2MzZmZkOTY5OGMzNTJkNzc0MzYwNTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0ZvSPeIniQkHz3OK0RVeeApc7qj 33aU4KAQ5bYGqEmr76fpwCTiEivSYlTSm3sHceY2fjZbBm/AFpSCIGrFjyxPxwzj BZ/rR0JnbeKe3DXGLeWkYNUAV8AlZxhxzsnKn1l4msM18jjt9imq9MSfT+IN6vZv P/z7e7+YDPZhdC7lbF7d+ZYo1IkanVvIRsN1zA+JrpHcxFUDaT2UZRpNBA/1RdLw JVr/MOs4P0Htpmlorz/gYACuhF4531f8PSTQuAlFTMymfK7hScPOPkv66AIOIM8M +ozbukR5kCzAhaEBYZfyQChMiv2qrKg2g+8VB2ORJ+eq0vMD9Veuap60wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJdKiL4XzLZUzD/9lpjDUtd0NgWXMB8GA1UdIwQY MBaAFHEFGw4s6aTJ5hIemD0WX+q4fsNUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1FVYkRpenBwTW5tRWg2WVBSWmY2cmgtdzFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9lNTE1ODMtZjU1Yy00OTNiLWI5NTAt NzM2YWI4MzQ5NGFjLzEvY1FVYkRpenBwTW5tRWg2WVBSWmY2cmgtdzFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9lNTE1ODMtZjU1Yy00OTNiLWI5NTAtNzM2YWI4MzQ5NGFj LzEvY1FVYkRpenBwTW5tRWg2WVBSWmY2cmgtdzFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdfWYTQJL Er1dXqA68DcwoCk6q6t1pbMO0tq3ChpmAY1iUj6CNlhh0O+9j4jJJfQA3Y4rV122 2+Bnz0Lb7UzQZM9/3FPl5/jhzSFPIoHQaoxIeaDfCu5lLwWdrjRHh+aC2ThloLYm vKezarHKD6QZsnbUcoONpQpepTiQ0F+SLV5Sf56V2NEg4fZv8jRbSKeZYajQVton rE1gNXD0KIPOS+jErBr+OGb9D7iNclQqY3nenzx5zoFC7GmQ2RcxrPELocATcbhR aYrQf+akDsjeBeGd8u6YBD4QIgpO55n40F+mr6Wqvas20vcBrvMTy/jiVghDktef /423ly7Y+Lb9DQ== -----END CERTIFICATE-----Generated at Tue Dec 23 20:42:49 2025 by rpki-client