This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft File: qs5nJaCg3dFoBICoN4XSzVe_arA.mft (raw, json) Hash identifier: jdwa9VSc70pdJbw5VqaSCJfrMWdvz09KoYeMSN6uRPI= Subject key identifier: A6:F2:F3:B8:7E:86:11:CB:53:C8:FE:5B:86:7D:2D:59:5D:28:ED:42 Authority key identifier: AA:CE:67:25:A0:A0:DD:D1:68:04:80:A8:37:85:D2:CD:57:BF:6A:B0 Certificate issuer: /CN=aace6725a0a0ddd1680480a83785d2cd57bf6ab0 Certificate serial: 019B38A1D58BBC8686142C67BFCB385856E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft Manifest number: 0BC5 Signing time: Fri 19 Dec 2025 22:01:28 +0000 Manifest this update: Fri 19 Dec 2025 22:01:28 +0000 Manifest next update: Sat 20 Dec 2025 22:01:28 +0000 Files and hashes: 1: LGoIVCfyeg-EZH_cOgrdiy2TPwk.roa (hash: dGCLqqCykyXwmqrTu57eC+iNpUcOeyFsBoySlkBpsAY=) 2: f00necdCYsOtLA09vtcvA-KOmsA.roa (hash: Ln1z19NPMKA7PbsbJsMQ04rbx28+DicO/rDcVFYN3W8=) 3: qs5nJaCg3dFoBICoN4XSzVe_arA.crl (hash: AUqNApbeX2L11dWZgsz8W08H45wc4FJ2JLCsjRMy2PY=) 4: tPirfcovOkq_f6ORw4qTDcBMYwM.roa (hash: YI04iLKTA2ElngcnawjReFNoZnCJvny+G11HRulhdOo=) 5: wCVsvqWRahQ-a8qZpU_P5hfC6fo.roa (hash: zXnXIwQPC/ukVsvs/CWHd4opckhB/IeyNk2RyXjvBzs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:d5:8b:bc:86:86:14:2c:67:bf:cb:38:58:56:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aace6725a0a0ddd1680480a83785d2cd57bf6ab0 Validity Not Before: Dec 19 22:01:28 2025 GMT Not After : Dec 20 22:01:28 2025 GMT Subject: CN=a6f2f3b87e8611cb53c8fe5b867d2d595d28ed42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ed:4e:14:d3:6b:ab:b8:07:5d:11:5d:a8:84: a6:ec:a1:a6:36:04:7a:2e:27:b9:31:6d:b5:96:7e: 60:b8:4f:be:b0:bb:77:9e:4a:0e:89:1d:34:e0:5a: f3:50:ee:e1:0f:b2:37:da:51:b0:df:bf:08:5e:fa: d1:36:d5:fd:27:c7:9f:fb:d8:91:68:47:a2:32:e3: 8a:49:30:24:51:19:9f:36:7e:c7:8c:f8:d0:41:fc: d1:f5:e4:bb:6a:99:b4:c2:01:80:ae:97:fc:f7:df: 18:9e:2a:65:06:e8:13:09:71:31:54:22:40:9c:a3: 93:35:e7:90:16:2f:d6:e4:95:2e:a8:4e:22:da:43: 7a:aa:fb:93:d2:a2:6c:f5:cb:6d:be:59:f3:1d:d1: 15:a5:91:fa:8e:70:ca:3b:39:bf:93:75:ca:fe:cd: 7b:70:f1:02:f7:2a:a1:86:75:a4:f1:3a:76:16:94: 06:3c:20:5d:fd:89:40:91:75:52:13:1e:e4:44:12: 16:ee:b3:f7:b2:4d:a5:03:c2:aa:46:f9:95:f9:2d: ce:3b:79:aa:75:2e:53:5e:29:e1:a9:21:68:31:d8: e9:a5:b6:55:b5:f2:c3:1a:64:c8:0e:3d:f3:11:05: 42:73:ba:27:22:bc:65:78:fc:b2:8f:0b:b8:a6:c1: a6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:F2:F3:B8:7E:86:11:CB:53:C8:FE:5B:86:7D:2D:59:5D:28:ED:42 X509v3 Authority Key Identifier: keyid:AA:CE:67:25:A0:A0:DD:D1:68:04:80:A8:37:85:D2:CD:57:BF:6A:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:52:f9:df:ac:7a:7c:0e:13:23:c8:ac:a6:77:b7:24:aa:50: 34:38:9e:69:36:5a:69:0f:f2:b8:c8:dc:56:8f:15:9d:d9:33: 43:8b:ee:b3:6b:a3:1d:2e:d9:9b:85:f6:eb:a0:0e:6c:1b:b6: ee:2b:89:42:29:33:0e:75:88:8c:61:74:84:1d:4d:a1:a4:51: e3:66:52:43:25:9d:7e:0d:c6:1d:db:e3:66:54:e3:9d:4a:26: e4:04:42:44:db:bb:ba:6f:00:3e:12:63:95:0e:ba:13:0c:32: cc:3c:3f:1e:a0:78:4f:8e:1e:69:f8:3b:ab:a8:6b:32:b5:53: 3b:83:55:dd:79:cd:89:01:58:48:b9:53:e6:54:ce:fb:ba:1a: 36:bc:17:04:ed:71:97:e1:c3:d0:d6:db:dc:90:b9:af:84:24: 0e:48:c5:c6:ac:aa:34:77:90:33:26:d3:6b:87:c0:f9:18:4b: 2e:94:6e:be:c0:18:a1:07:14:25:cf:79:e4:ed:ec:5e:2f:1b: 1a:6d:22:ef:3e:04:44:47:30:49:76:ae:54:53:b9:0d:30:43: 16:90:f4:a4:59:2d:4f:84:62:2c:c7:8a:14:48:31:f2:a5:55: 2d:c2:76:26:06:e4:fc:0c:11:fb:09:14:ed:b7:7a:e4:18:33: 38:72:13:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4odWLvIaGFCxnv8s4WFboMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhY2U2NzI1YTBhMGRkZDE2ODA0ODBhODM3ODVkMmNkNTdi ZjZhYjAwHhcNMjUxMjE5MjIwMTI4WhcNMjUxMjIwMjIwMTI4WjAzMTEwLwYDVQQD EyhhNmYyZjNiODdlODYxMWNiNTNjOGZlNWI4NjdkMmQ1OTVkMjhlZDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqu1OFNNrq7gHXRFdqISm7KGmNgR6 Lie5MW21ln5guE++sLt3nkoOiR004FrzUO7hD7I32lGw378IXvrRNtX9J8ef+9iR aEeiMuOKSTAkURmfNn7HjPjQQfzR9eS7apm0wgGArpf8998YniplBugTCXExVCJA nKOTNeeQFi/W5JUuqE4i2kN6qvuT0qJs9cttvlnzHdEVpZH6jnDKOzm/k3XK/s17 cPEC9yqhhnWk8Tp2FpQGPCBd/YlAkXVSEx7kRBIW7rP3sk2lA8KqRvmV+S3OO3mq dS5TXinhqSFoMdjppbZVtfLDGmTIDj3zEQVCc7onIrxlePyyjwu4psGmEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKby87h+hhHLU8j+W4Z9LVldKO1CMB8GA1UdIwQY MBaAFKrOZyWgoN3RaASAqDeF0s1Xv2qwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXM1bkphQ2czZEZvQklDb040WFN6VmVfYXJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84MTEyZmYtYjIxNi00MDZmLThmNTkt NzJhMDgyY2RiMTgyLzEvcXM1bkphQ2czZEZvQklDb040WFN6VmVfYXJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS84MTEyZmYtYjIxNi00MDZmLThmNTktNzJhMDgyY2RiMTgy LzEvcXM1bkphQ2czZEZvQklDb040WFN6VmVfYXJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVFL536x6 fA4TI8ispne3JKpQNDieaTZaaQ/yuMjcVo8VndkzQ4vus2ujHS7Zm4X266AObBu2 7iuJQikzDnWIjGF0hB1NoaRR42ZSQyWdfg3GHdvjZlTjnUom5ARCRNu7um8APhJj lQ66EwwyzDw/HqB4T44eafg7q6hrMrVTO4NV3XnNiQFYSLlT5lTO+7oaNrwXBO1x l+HD0Nbb3JC5r4QkDkjFxqyqNHeQMybTa4fA+RhLLpRuvsAYoQcUJc955O3sXi8b Gm0i7z4EREcwSXauVFO5DTBDFpD0pFktT4RiLMeKFEgx8qVVLcJ2Jgbk/AwR+wkU 7bd65BgzOHITmA== -----END CERTIFICATE-----Generated at Sat Dec 20 08:09:23 2025 by rpki-client