This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft File: Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft (raw, json) Hash identifier: tNsCrnd2w27DtxftFCsmIDkrDGszTArhrjbiGYOpVH0= Subject key identifier: 2E:61:56:D9:F0:CE:39:59:98:EC:3A:DF:97:9B:4C:8B:D5:BD:F4:75 Authority key identifier: 43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB Certificate issuer: /CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb Certificate serial: 019B3A219C8BC1E2E426C70490754686D9DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft Manifest number: 179B Signing time: Sat 20 Dec 2025 05:00:39 +0000 Manifest this update: Sat 20 Dec 2025 05:00:39 +0000 Manifest next update: Sun 21 Dec 2025 05:00:39 +0000 Files and hashes: 1: M9YJnMZq-Qo4sKyFoXRkAaUtrDA.roa (hash: lb64jsKs0riSb1j7+rgbV5185uMxPtGDDu6H1Pf3T8s=) 2: P0fCccGAGT3P2tDw-rs5ORyPyrw.roa (hash: zsjstCOlxud3vr07JZ7SKJe39jYJRrodk6RlxTPhlQE=) 3: Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl (hash: AuXxDMUmGMW/hDaf6uLvBLkXYZcaZrCTKdDghhYJtsA=) 4: bOyfi-z2wqC5OBTk4v100ve7CxI.roa (hash: WiyMw0UdlKQAlB0ieoJy4RAqYir7UCqclb4nu/UNQCk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:9c:8b:c1:e2:e4:26:c7:04:90:75:46:86:d9:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb Validity Not Before: Dec 20 05:00:39 2025 GMT Not After : Dec 21 05:00:39 2025 GMT Subject: CN=2e6156d9f0ce395998ec3adf979b4c8bd5bdf475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:44:4c:a0:71:09:bd:d3:ef:18:64:58:ff:d6: 8e:05:e3:62:7f:3f:0d:ea:91:eb:37:ca:77:17:41: 57:5a:2f:95:d0:4f:72:28:71:1e:28:91:5e:2d:ef: 32:10:a4:eb:6e:7b:a8:82:ad:d2:c8:56:6b:a3:a6: 31:c5:5c:54:43:dc:b6:29:47:c0:81:04:45:be:67: 09:94:2a:94:08:f3:68:70:a3:f5:74:c9:a4:85:d3: f7:e5:5d:8b:26:55:4b:e1:8d:5e:47:40:d1:94:d4: e8:a2:e7:a2:ad:d6:83:c6:73:24:83:99:08:03:73: 78:ed:c1:7a:2f:9b:aa:97:72:c8:32:62:6b:fe:27: cc:6e:ef:c5:93:8f:c1:7e:71:de:c3:bf:0c:a0:0c: 23:12:8a:25:8c:68:e5:5b:4d:b6:b8:51:86:65:bc: a1:30:aa:0d:61:e0:49:9e:0a:6b:42:80:e6:6b:69: 8b:65:0c:fd:d0:0d:97:01:c0:4e:ee:76:49:86:ce: 53:e9:39:08:9f:68:18:e9:a7:b9:f8:63:84:3d:58: 53:0e:25:e6:7f:36:bb:d9:a9:c9:8d:60:6f:de:e0: 58:84:fc:84:1d:fe:bf:18:21:bc:e8:6b:3a:23:b1: 45:3c:b7:68:4e:03:3d:25:70:22:4c:31:9c:39:34: 55:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:61:56:D9:F0:CE:39:59:98:EC:3A:DF:97:9B:4C:8B:D5:BD:F4:75 X509v3 Authority Key Identifier: keyid:43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:79:36:23:53:5e:53:6b:d5:56:9a:a0:f8:49:64:42:15:33: cb:a9:8e:7b:dc:14:ad:f7:8e:b5:9d:b7:2c:32:e4:1a:cc:7a: 89:f1:21:39:a1:a0:2b:18:57:15:6d:01:ea:e5:cd:eb:2e:74: 44:2f:6a:37:7b:93:e1:7f:46:c3:a2:64:ba:92:9a:bb:db:57: 5b:e9:0d:a5:c7:1e:33:a5:43:f0:a0:b0:22:bf:a5:d6:03:e3: 2b:ef:04:e1:13:87:16:bb:ee:d9:3f:ab:7c:1d:2e:9f:0f:77: e6:4d:9d:16:27:03:e6:f9:1e:49:d9:7b:dd:e7:25:13:68:1a: b5:75:3e:bd:ce:db:dd:0d:f9:0c:d1:09:c9:88:90:25:9c:9d: ff:c7:13:ac:19:7d:7e:fd:29:68:a5:ce:32:8d:28:f4:71:17: 61:79:c9:5a:aa:0d:98:03:ce:fe:b8:9d:db:e1:99:c2:2a:80: dc:be:8d:f5:72:d0:84:50:f1:73:f6:a4:58:db:cc:8b:a6:b2: e8:33:db:9d:dc:99:eb:41:05:cc:ed:30:c6:07:b4:24:6d:40: 2a:c3:9f:79:52:3c:8d:05:44:b1:52:25:46:e2:0e:b3:c6:e5: 3a:ea:35:6d:56:18:0d:07:c4:8c:7c:3b:f6:31:f9:35:68:67: 39:e8:53:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IZyLweLkJscEkHVGhtnaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzOTY1ZGQxZjZmMjRhNDZkN2NjNGJjY2ZlY2Q0MTUxYzZk ZDFiZmIwHhcNMjUxMjIwMDUwMDM5WhcNMjUxMjIxMDUwMDM5WjAzMTEwLwYDVQQD EygyZTYxNTZkOWYwY2UzOTU5OThlYzNhZGY5NzliNGM4YmQ1YmRmNDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkRMoHEJvdPvGGRY/9aOBeNifz8N 6pHrN8p3F0FXWi+V0E9yKHEeKJFeLe8yEKTrbnuogq3SyFZro6YxxVxUQ9y2KUfA gQRFvmcJlCqUCPNocKP1dMmkhdP35V2LJlVL4Y1eR0DRlNTooueirdaDxnMkg5kI A3N47cF6L5uql3LIMmJr/ifMbu/Fk4/BfnHew78MoAwjEooljGjlW022uFGGZbyh MKoNYeBJngprQoDma2mLZQz90A2XAcBO7nZJhs5T6TkIn2gY6ae5+GOEPVhTDiXm fza72anJjWBv3uBYhPyEHf6/GCG86Gs6I7FFPLdoTgM9JXAiTDGcOTRVZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC5hVtnwzjlZmOw635ebTIvVvfR1MB8GA1UdIwQY MBaAFEOWXdH28kpG18xLzP7NQVHG3Rv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTVaZDBmYnlTa2JYekV2TV9zMUJVY2JkR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jNzMxYzQtOTE4My00ZGIzLWI3MGEt MzM5ODBjMDNmMDhlLzEvUTVaZDBmYnlTa2JYekV2TV9zMUJVY2JkR19zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9jNzMxYzQtOTE4My00ZGIzLWI3MGEtMzM5ODBjMDNmMDhl LzEvUTVaZDBmYnlTa2JYekV2TV9zMUJVY2JkR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC3k2I1Ne U2vVVpqg+ElkQhUzy6mOe9wUrfeOtZ23LDLkGsx6ifEhOaGgKxhXFW0B6uXN6y50 RC9qN3uT4X9Gw6JkupKau9tXW+kNpcceM6VD8KCwIr+l1gPjK+8E4ROHFrvu2T+r fB0unw935k2dFicD5vkeSdl73eclE2gatXU+vc7b3Q35DNEJyYiQJZyd/8cTrBl9 fv0paKXOMo0o9HEXYXnJWqoNmAPO/rid2+GZwiqA3L6N9XLQhFDxc/akWNvMi6ay 6DPbndyZ60EFzO0wxge0JG1AKsOfeVI8jQVEsVIlRuIOs8blOuo1bVYYDQfEjHw7 9jH5NWhnOehT2A== -----END CERTIFICATE-----Generated at Sat Dec 20 09:02:09 2025 by rpki-client