This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft File: Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft (raw, json) Hash identifier: Aq2reKvF6tVpuf6/gygUsB6IkUQyjC7s4VPFJhXuDFs= Subject key identifier: B2:DE:CE:10:68:3F:50:D4:0B:B3:70:60:03:D0:11:09:56:59:34:E4 Authority key identifier: 43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB Certificate issuer: /CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb Certificate serial: 019B36455DEDAAC289BF928339CCBC8BC821 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft Manifest number: 1799 Signing time: Fri 19 Dec 2025 11:01:14 +0000 Manifest this update: Fri 19 Dec 2025 11:01:14 +0000 Manifest next update: Sat 20 Dec 2025 11:01:14 +0000 Files and hashes: 1: M9YJnMZq-Qo4sKyFoXRkAaUtrDA.roa (hash: lb64jsKs0riSb1j7+rgbV5185uMxPtGDDu6H1Pf3T8s=) 2: P0fCccGAGT3P2tDw-rs5ORyPyrw.roa (hash: zsjstCOlxud3vr07JZ7SKJe39jYJRrodk6RlxTPhlQE=) 3: Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl (hash: jNOsQ0wFu7fUfrl6SO49EJvDSRP021afwulmppoTJZY=) 4: bOyfi-z2wqC5OBTk4v100ve7CxI.roa (hash: WiyMw0UdlKQAlB0ieoJy4RAqYir7UCqclb4nu/UNQCk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:45:5d:ed:aa:c2:89:bf:92:83:39:cc:bc:8b:c8:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb Validity Not Before: Dec 19 11:01:14 2025 GMT Not After : Dec 20 11:01:14 2025 GMT Subject: CN=b2dece10683f50d40bb3706003d01109565934e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ac:9b:c7:0c:51:5f:e4:26:8b:dd:b4:c1:ef: 20:28:db:eb:f8:b4:1a:92:35:34:30:20:f0:97:f0: f8:16:73:51:b2:eb:ae:9a:7c:b2:24:32:9d:2a:9a: ec:08:f0:7e:c8:23:e0:48:78:fe:ab:da:22:b3:7c: 55:f3:4a:5e:88:f6:81:8a:72:83:0a:4a:bc:9b:94: e2:8c:fc:7d:34:ad:ca:30:ec:64:65:ec:03:75:da: 4b:38:82:87:bc:44:e0:79:7e:eb:a8:fe:96:78:ea: 6f:f5:ab:37:d1:fc:e8:0c:38:4a:c2:91:85:5d:9d: ea:7b:1b:6f:6c:67:b5:6c:6a:33:d0:56:b8:78:30: d6:4a:d5:51:b3:3c:b3:7b:e8:d2:49:6a:98:f3:29: c0:02:f5:52:1a:68:d1:6a:3d:15:cd:c0:60:39:06: 92:28:37:e4:ac:9e:fa:23:3b:29:fd:29:43:56:c8: 3c:bb:28:f5:b5:07:a3:e2:a9:d3:22:1d:5d:8c:f0: 74:36:f5:90:ec:52:4a:a1:1c:2a:66:54:1f:1e:47: a7:01:3d:d7:a4:31:00:d3:ac:27:03:dc:86:37:2b: 46:22:3c:85:92:26:17:2f:ef:b7:dd:73:17:6a:21: a6:dc:2d:7c:fd:ce:7f:e6:e4:c3:da:a5:b3:59:31: 1c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:DE:CE:10:68:3F:50:D4:0B:B3:70:60:03:D0:11:09:56:59:34:E4 X509v3 Authority Key Identifier: keyid:43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:0c:62:cf:40:75:20:79:68:5e:d4:65:6a:7c:78:2a:54:14: 9a:c7:e2:d1:fb:56:ea:47:a9:1a:ab:e6:ae:cf:c1:32:2e:da: f6:39:3a:ed:66:a4:0a:d1:71:02:24:41:0b:f5:b0:b7:f0:da: 3a:60:cb:d4:59:bd:31:b9:f6:4d:de:3f:e7:9d:91:df:bf:3d: 3d:d9:b6:d4:92:ee:2e:2a:ce:96:d7:98:99:2b:57:b2:98:c1: 58:40:f2:5c:ea:9d:b4:a9:42:fa:0b:bd:1c:55:32:38:9e:55: 60:b8:3d:cc:70:87:12:b0:52:35:73:a8:d6:b8:66:05:2d:77: d9:e1:7e:21:87:1f:7f:48:f1:25:5e:9f:1c:45:9f:63:bd:0a: 88:94:62:2d:96:87:b4:87:be:be:18:ed:7d:b2:19:7e:c7:05: b0:e2:cc:f1:37:b9:a8:1d:d6:77:94:c8:8c:9e:05:82:f5:7e: 66:28:82:48:91:98:dc:07:b7:b6:df:d6:be:6f:9d:10:87:c5: 38:e5:67:26:33:a2:ba:b9:6e:3a:94:05:0a:cc:b0:06:b1:38: 1a:19:10:8e:30:f4:7c:9e:27:cc:09:5f:aa:9f:b9:b6:74:63: a3:87:12:c9:e4:48:2d:d9:f4:c0:45:15:84:70:0d:8b:fa:cd: b5:b0:a3:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2RV3tqsKJv5KDOcy8i8ghMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzOTY1ZGQxZjZmMjRhNDZkN2NjNGJjY2ZlY2Q0MTUxYzZk ZDFiZmIwHhcNMjUxMjE5MTEwMTE0WhcNMjUxMjIwMTEwMTE0WjAzMTEwLwYDVQQD EyhiMmRlY2UxMDY4M2Y1MGQ0MGJiMzcwNjAwM2QwMTEwOTU2NTkzNGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7aybxwxRX+Qmi920we8gKNvr+LQa kjU0MCDwl/D4FnNRsuuumnyyJDKdKprsCPB+yCPgSHj+q9ois3xV80peiPaBinKD Ckq8m5TijPx9NK3KMOxkZewDddpLOIKHvETgeX7rqP6WeOpv9as30fzoDDhKwpGF XZ3qextvbGe1bGoz0Fa4eDDWStVRszyze+jSSWqY8ynAAvVSGmjRaj0VzcBgOQaS KDfkrJ76Izsp/SlDVsg8uyj1tQej4qnTIh1djPB0NvWQ7FJKoRwqZlQfHkenAT3X pDEA06wnA9yGNytGIjyFkiYXL++33XMXaiGm3C18/c5/5uTD2qWzWTEcawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLLezhBoP1DUC7NwYAPQEQlWWTTkMB8GA1UdIwQY MBaAFEOWXdH28kpG18xLzP7NQVHG3Rv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTVaZDBmYnlTa2JYekV2TV9zMUJVY2JkR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jNzMxYzQtOTE4My00ZGIzLWI3MGEt MzM5ODBjMDNmMDhlLzEvUTVaZDBmYnlTa2JYekV2TV9zMUJVY2JkR19zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9jNzMxYzQtOTE4My00ZGIzLWI3MGEtMzM5ODBjMDNmMDhl LzEvUTVaZDBmYnlTa2JYekV2TV9zMUJVY2JkR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUAxiz0B1 IHloXtRlanx4KlQUmsfi0ftW6kepGqvmrs/BMi7a9jk67WakCtFxAiRBC/Wwt/Da OmDL1Fm9Mbn2Td4/552R3789Pdm21JLuLirOlteYmStXspjBWEDyXOqdtKlC+gu9 HFUyOJ5VYLg9zHCHErBSNXOo1rhmBS132eF+IYcff0jxJV6fHEWfY70KiJRiLZaH tIe+vhjtfbIZfscFsOLM8Te5qB3Wd5TIjJ4FgvV+ZiiCSJGY3Ae3tt/Wvm+dEIfF OOVnJjOiurluOpQFCsywBrE4GhkQjjD0fJ4nzAlfqp+5tnRjo4cSyeRILdn0wEUV hHANi/rNtbCjsg== -----END CERTIFICATE-----Generated at Fri Dec 19 13:26:12 2025 by rpki-client