This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft File: q5z9FXRB9pQo3R9jYcpPSuQss4o.mft (raw, json) Hash identifier: jSadzQA4gnUnkZT1nKMA+CRQFUHGvCo6S0N5zSTNzgo= Subject key identifier: 85:DC:F1:CE:28:71:91:CA:E5:DA:AF:94:85:B6:62:B6:5E:D5:2C:6D Authority key identifier: AB:9C:FD:15:74:41:F6:94:28:DD:1F:63:61:CA:4F:4A:E4:2C:B3:8A Certificate issuer: /CN=ab9cfd157441f69428dd1f6361ca4f4ae42cb38a Certificate serial: 019B631DBEE4AF09EA8F07C62D6F35B0F326 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft Manifest number: 179D Signing time: Sun 28 Dec 2025 04:00:52 +0000 Manifest this update: Sun 28 Dec 2025 04:00:52 +0000 Manifest next update: Mon 29 Dec 2025 04:00:52 +0000 Files and hashes: 1: dCfTqcxg62Lir67qVkgBChTuqA4.roa (hash: UBu+ymeFM9aQ8J18E3tvVpuPsYqEYn9P+xx2d6+/UxI=) 2: q5z9FXRB9pQo3R9jYcpPSuQss4o.crl (hash: bRkWZD+d3OhEmXGlHlkQPFwuA56LBuZaohtJ8F34ojw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1d:be:e4:af:09:ea:8f:07:c6:2d:6f:35:b0:f3:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab9cfd157441f69428dd1f6361ca4f4ae42cb38a Validity Not Before: Dec 28 04:00:52 2025 GMT Not After : Dec 29 04:00:52 2025 GMT Subject: CN=85dcf1ce287191cae5daaf9485b662b65ed52c6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8f:3c:b2:64:6e:4a:52:63:2c:91:6c:51:e6: 9a:5f:04:cf:12:58:2f:a0:82:82:01:3a:c0:72:f2: 95:0f:51:6c:9c:ad:6e:0b:6a:ba:9b:5b:ea:73:e8: fc:39:24:cd:ed:7a:96:db:81:78:b1:ed:56:66:f0: 23:ea:7a:b1:75:34:0e:7d:31:b2:35:2a:ce:13:58: c8:0b:33:7a:fc:b1:e9:5d:82:93:42:15:a8:bf:21: c8:76:b2:60:13:4d:e8:6b:12:58:a1:be:27:c2:6f: ed:e7:ae:6b:5f:14:58:1c:4c:32:27:3c:ac:90:69: 75:96:3c:d1:e4:14:2b:41:19:f7:ed:17:7c:24:e7: 14:17:86:a9:15:01:9a:6e:2b:e8:3b:7c:36:18:da: d2:93:0e:dd:87:39:ae:8d:23:2c:2f:31:ef:59:b0: 06:d2:07:3f:07:2a:2d:ce:d5:f0:64:78:b7:9e:eb: 79:bb:93:ec:49:0f:ae:61:b4:86:82:25:16:66:e7: 0d:b9:08:68:28:be:bf:45:67:60:9f:a3:1c:40:93: 42:ce:4e:7d:78:99:87:ae:c0:2a:69:ea:d9:3b:b7: 3f:7e:1e:68:2b:be:26:5c:8e:dd:5b:aa:e3:75:e2: 19:ab:43:51:d4:50:1c:ab:fa:3a:5f:74:0c:56:06: c8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:DC:F1:CE:28:71:91:CA:E5:DA:AF:94:85:B6:62:B6:5E:D5:2C:6D X509v3 Authority Key Identifier: keyid:AB:9C:FD:15:74:41:F6:94:28:DD:1F:63:61:CA:4F:4A:E4:2C:B3:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:4a:5b:e4:16:ab:b2:1a:ca:8a:10:24:c3:74:3e:4c:18:3c: c9:eb:03:5b:2a:ae:11:96:b5:a3:24:d1:5a:80:0e:55:0a:98: d0:0d:b2:2b:33:1b:8e:4a:58:12:1b:85:2b:f2:66:98:23:ba: a3:f7:ba:4b:f4:bb:5e:3b:7a:16:52:4f:3c:6d:16:e9:7a:10: ab:f9:66:89:9c:00:61:fc:0a:ca:fc:6f:0e:82:5e:eb:97:0c: ed:55:7b:32:ec:c8:e0:23:15:8a:32:9e:d0:b4:2f:ef:a7:9f: 89:95:63:71:cf:0a:bf:41:ee:9d:47:f1:ea:22:41:3a:bc:9f: f9:8e:4e:a3:18:be:7c:97:87:4c:af:82:7c:57:08:26:7a:df: d6:87:a4:cc:6c:eb:6b:a9:2e:b5:30:f7:93:4c:b3:41:22:93: 35:37:05:f4:96:55:55:8f:2e:6c:a6:de:33:be:84:2f:a2:8c: 89:c1:98:ee:4c:f7:44:6e:34:05:60:85:b7:5e:39:a8:3a:11: 3e:cc:f1:a5:f7:29:a2:ee:60:62:99:24:82:fa:73:a4:89:06: 36:df:c0:94:4e:35:4a:e6:20:94:82:08:b8:5c:ac:c7:b4:94: 36:31:d2:d5:db:0f:20:2c:64:9b:55:69:88:0b:09:bc:9f:a2: 48:12:f2:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjHb7krwnqjwfGLW81sPMmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiOWNmZDE1NzQ0MWY2OTQyOGRkMWY2MzYxY2E0ZjRhZTQy Y2IzOGEwHhcNMjUxMjI4MDQwMDUyWhcNMjUxMjI5MDQwMDUyWjAzMTEwLwYDVQQD Eyg4NWRjZjFjZTI4NzE5MWNhZTVkYWFmOTQ4NWI2NjJiNjVlZDUyYzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwI88smRuSlJjLJFsUeaaXwTPElgv oIKCATrAcvKVD1FsnK1uC2q6m1vqc+j8OSTN7XqW24F4se1WZvAj6nqxdTQOfTGy NSrOE1jICzN6/LHpXYKTQhWovyHIdrJgE03oaxJYob4nwm/t565rXxRYHEwyJzys kGl1ljzR5BQrQRn37Rd8JOcUF4apFQGabivoO3w2GNrSkw7dhzmujSMsLzHvWbAG 0gc/ByotztXwZHi3nut5u5PsSQ+uYbSGgiUWZucNuQhoKL6/RWdgn6McQJNCzk59 eJmHrsAqaerZO7c/fh5oK74mXI7dW6rjdeIZq0NR1FAcq/o6X3QMVgbIqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIXc8c4ocZHK5dqvlIW2YrZe1SxtMB8GA1UdIwQY MBaAFKuc/RV0QfaUKN0fY2HKT0rkLLOKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTV6OUZYUkI5cFFvM1I5alljcFBTdVFzczRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi83ZDMxNGUtNDJjZC00MmNlLTk4NWUt OTU0ZjI2OTEzZjQzLzEvcTV6OUZYUkI5cFFvM1I5alljcFBTdVFzczRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi83ZDMxNGUtNDJjZC00MmNlLTk4NWUtOTU0ZjI2OTEzZjQz LzEvcTV6OUZYUkI5cFFvM1I5alljcFBTdVFzczRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPUpb5Bar shrKihAkw3Q+TBg8yesDWyquEZa1oyTRWoAOVQqY0A2yKzMbjkpYEhuFK/JmmCO6 o/e6S/S7Xjt6FlJPPG0W6XoQq/lmiZwAYfwKyvxvDoJe65cM7VV7MuzI4CMVijKe 0LQv76efiZVjcc8Kv0HunUfx6iJBOryf+Y5Ooxi+fJeHTK+CfFcIJnrf1oekzGzr a6kutTD3k0yzQSKTNTcF9JZVVY8ubKbeM76EL6KMicGY7kz3RG40BWCFt145qDoR Pszxpfcpou5gYpkkgvpzpIkGNt/AlE41SuYglIIIuFysx7SUNjHS1dsPICxkm1Vp iAsJvJ+iSBLyYg== -----END CERTIFICATE-----Generated at Sun Dec 28 07:29:37 2025 by rpki-client