This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft File: qs5nJaCg3dFoBICoN4XSzVe_arA.mft (raw, json) Hash identifier: 9m8Fv4yizuiDDm7OB4gwD70OLDYTOuJwK85X1vZLhDQ= Subject key identifier: D6:C1:21:27:B4:53:5C:B6:18:3F:8F:C0:FE:A9:1C:1D:57:4E:89:15 Authority key identifier: AA:CE:67:25:A0:A0:DD:D1:68:04:80:A8:37:85:D2:CD:57:BF:6A:B0 Certificate issuer: /CN=aace6725a0a0ddd1680480a83785d2cd57bf6ab0 Certificate serial: 019B5B64C03E76151D217FE33F7F21398619 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft Manifest number: 0BD7 Signing time: Fri 26 Dec 2025 16:01:27 +0000 Manifest this update: Fri 26 Dec 2025 16:01:27 +0000 Manifest next update: Sat 27 Dec 2025 16:01:27 +0000 Files and hashes: 1: LGoIVCfyeg-EZH_cOgrdiy2TPwk.roa (hash: dGCLqqCykyXwmqrTu57eC+iNpUcOeyFsBoySlkBpsAY=) 2: f00necdCYsOtLA09vtcvA-KOmsA.roa (hash: Ln1z19NPMKA7PbsbJsMQ04rbx28+DicO/rDcVFYN3W8=) 3: qs5nJaCg3dFoBICoN4XSzVe_arA.crl (hash: lKvgfpeLkgf3JhYc/b+AeiSjgifWYidrP+DSNQ2Ejxo=) 4: tPirfcovOkq_f6ORw4qTDcBMYwM.roa (hash: YI04iLKTA2ElngcnawjReFNoZnCJvny+G11HRulhdOo=) 5: wCVsvqWRahQ-a8qZpU_P5hfC6fo.roa (hash: zXnXIwQPC/ukVsvs/CWHd4opckhB/IeyNk2RyXjvBzs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:64:c0:3e:76:15:1d:21:7f:e3:3f:7f:21:39:86:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aace6725a0a0ddd1680480a83785d2cd57bf6ab0 Validity Not Before: Dec 26 16:01:27 2025 GMT Not After : Dec 27 16:01:27 2025 GMT Subject: CN=d6c12127b4535cb6183f8fc0fea91c1d574e8915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6b:7e:40:e8:b9:bd:35:89:a9:73:5c:9e:37: b6:4a:df:14:6e:bb:61:28:93:95:02:bd:a2:f7:bd: df:8b:a0:a9:4d:48:ee:1f:73:a3:4f:29:b7:75:1d: f6:86:ab:2c:ed:b5:56:b5:e9:8a:e2:f0:de:09:5a: 9f:d9:ec:7f:71:37:03:a4:93:ed:ce:46:fb:dd:57: 6c:3d:10:99:c4:5c:83:95:86:23:9f:d5:cd:aa:9d: bb:d7:30:2d:a7:23:c1:99:d0:cd:8f:57:29:7b:57: ae:5c:16:37:04:55:48:38:95:03:d0:97:29:b9:4a: a8:8e:28:20:a7:9e:6b:3b:a7:e9:55:00:c3:bf:46: 99:0b:f2:64:c5:19:6e:fd:65:13:ba:0c:03:86:73: 3c:f9:a1:d6:aa:2c:78:8d:23:82:ad:65:71:f6:59: e9:1b:10:54:82:d9:18:a5:65:2b:45:60:41:b8:ce: b1:d6:f1:43:80:33:eb:0c:d7:39:0f:6a:6e:ad:3c: 90:0e:63:4b:f8:2d:62:0f:bd:2e:dc:67:71:c6:75: 38:fd:91:2f:58:5f:48:d5:e6:e4:e7:92:20:dd:cb: aa:99:9e:02:45:7b:2c:ef:e4:f9:45:f1:3c:58:47: 5b:fd:05:fa:c6:5b:76:cc:9d:87:ae:1d:fa:8c:32: 99:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C1:21:27:B4:53:5C:B6:18:3F:8F:C0:FE:A9:1C:1D:57:4E:89:15 X509v3 Authority Key Identifier: keyid:AA:CE:67:25:A0:A0:DD:D1:68:04:80:A8:37:85:D2:CD:57:BF:6A:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:7b:ed:94:12:36:1f:65:3d:05:bb:bb:69:a7:2a:2b:21:18: 37:28:29:a0:bf:5f:d2:d1:43:eb:41:7a:07:5c:dc:e9:fc:2a: b2:bf:ab:3d:64:cf:14:3c:ac:f9:42:d0:95:fd:2d:90:d8:de: 35:d3:42:24:6b:9f:7a:fb:9d:f4:3d:06:59:f9:78:54:a7:84: c5:8a:19:8a:c2:fd:c4:0e:b0:aa:ac:d8:38:1b:c4:1e:fa:d8: 0e:07:cb:e9:ca:93:29:9d:cf:99:79:a7:d2:b1:7f:d4:43:dc: 0f:93:33:41:e2:10:7a:cf:52:00:4f:98:90:c6:15:87:e4:57: 63:ad:bd:98:9b:2c:a2:18:e1:f0:20:3d:ec:e5:95:0b:cd:cc: 12:25:7b:22:16:ae:09:ac:e7:f7:0b:80:a2:79:60:1a:ae:d6: ad:7b:19:49:31:fc:85:fe:7b:ad:e2:36:b9:97:0e:36:8f:c3: d4:c2:50:82:32:f1:a5:0a:e9:ea:88:da:01:cd:b3:8f:9b:8a: 2c:4e:5c:e4:82:a9:da:6e:d3:81:88:40:02:02:78:50:f7:b1: 01:84:d7:91:9e:ae:89:b2:7d:b4:24:9a:e4:d8:f7:ae:dd:8d: 02:2e:83:d0:9a:a6:34:b1:12:5c:c6:10:73:15:76:12:b0:ce: f3:30:a9:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbZMA+dhUdIX/jP38hOYYZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhY2U2NzI1YTBhMGRkZDE2ODA0ODBhODM3ODVkMmNkNTdi ZjZhYjAwHhcNMjUxMjI2MTYwMTI3WhcNMjUxMjI3MTYwMTI3WjAzMTEwLwYDVQQD EyhkNmMxMjEyN2I0NTM1Y2I2MTgzZjhmYzBmZWE5MWMxZDU3NGU4OTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2t+QOi5vTWJqXNcnje2St8Ubrth KJOVAr2i973fi6CpTUjuH3OjTym3dR32hqss7bVWtemK4vDeCVqf2ex/cTcDpJPt zkb73VdsPRCZxFyDlYYjn9XNqp271zAtpyPBmdDNj1cpe1euXBY3BFVIOJUD0Jcp uUqojiggp55rO6fpVQDDv0aZC/JkxRlu/WUTugwDhnM8+aHWqix4jSOCrWVx9lnp GxBUgtkYpWUrRWBBuM6x1vFDgDPrDNc5D2purTyQDmNL+C1iD70u3GdxxnU4/ZEv WF9I1ebk55Ig3cuqmZ4CRXss7+T5RfE8WEdb/QX6xlt2zJ2Hrh36jDKZqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNbBISe0U1y2GD+PwP6pHB1XTokVMB8GA1UdIwQY MBaAFKrOZyWgoN3RaASAqDeF0s1Xv2qwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXM1bkphQ2czZEZvQklDb040WFN6VmVfYXJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84MTEyZmYtYjIxNi00MDZmLThmNTkt NzJhMDgyY2RiMTgyLzEvcXM1bkphQ2czZEZvQklDb040WFN6VmVfYXJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS84MTEyZmYtYjIxNi00MDZmLThmNTktNzJhMDgyY2RiMTgy LzEvcXM1bkphQ2czZEZvQklDb040WFN6VmVfYXJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAnvtlBI2 H2U9Bbu7aacqKyEYNygpoL9f0tFD60F6B1zc6fwqsr+rPWTPFDys+ULQlf0tkNje NdNCJGufevud9D0GWfl4VKeExYoZisL9xA6wqqzYOBvEHvrYDgfL6cqTKZ3PmXmn 0rF/1EPcD5MzQeIQes9SAE+YkMYVh+RXY629mJssohjh8CA97OWVC83MEiV7Ihau Cazn9wuAonlgGq7WrXsZSTH8hf57reI2uZcONo/D1MJQgjLxpQrp6ojaAc2zj5uK LE5c5IKp2m7TgYhAAgJ4UPexAYTXkZ6uibJ9tCSa5Nj3rt2NAi6D0JqmNLESXMYQ cxV2ErDO8zCpkw== -----END CERTIFICATE-----Generated at Sat Dec 27 00:44:59 2025 by rpki-client