This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft File: qS5dl54DJTmZRrI5CCLTDx0vNeE.mft (raw, json) Hash identifier: caX0oz+RofFHNla3ZKnaN96SqBzjrmoL2Yt9jFQnuJs= Subject key identifier: 62:0A:58:7C:FE:60:E7:75:14:54:0C:69:6D:2D:64:B3:AF:48:77:05 Authority key identifier: A9:2E:5D:97:9E:03:25:39:99:46:B2:39:08:22:D3:0F:1D:2F:35:E1 Certificate issuer: /CN=a92e5d979e0325399946b2390822d30f1d2f35e1 Certificate serial: 019B3F11C6D4B9ACEADC826B49421C57CF86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft Manifest number: 023E Signing time: Sun 21 Dec 2025 04:01:28 +0000 Manifest this update: Sun 21 Dec 2025 04:01:28 +0000 Manifest next update: Mon 22 Dec 2025 04:01:28 +0000 Files and hashes: 1: JQJmD49tR8jandeFHJ1IkrOGoDQ.roa (hash: qBRt18tQW7myUfjqyk6Za7F1LghK7qoZn+vndFJYSpM=) 2: qS5dl54DJTmZRrI5CCLTDx0vNeE.crl (hash: xiLdtaZ/VOSsJDpKoE67g7VB4E93b3VGQilHtF+UaIQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:c6:d4:b9:ac:ea:dc:82:6b:49:42:1c:57:cf:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a92e5d979e0325399946b2390822d30f1d2f35e1 Validity Not Before: Dec 21 04:01:28 2025 GMT Not After : Dec 22 04:01:28 2025 GMT Subject: CN=620a587cfe60e77514540c696d2d64b3af487705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:65:73:a3:bc:05:91:60:52:6b:3a:a2:43:96: 34:53:0d:21:3a:49:52:ed:20:ff:65:5e:81:d0:1c: 11:87:a8:5d:95:5c:fc:9a:ac:2c:5b:91:3b:3c:10: c6:53:53:4d:c6:11:22:8c:a3:e4:33:c6:62:2b:36: eb:e4:89:57:2d:c4:b7:bb:76:4a:91:1e:40:05:b3: 5c:71:3a:d0:cf:08:c7:61:45:90:bf:d0:3f:94:33: 5d:99:da:44:77:6b:e1:6a:d0:0b:57:2f:1f:1a:87: a5:fd:5b:31:0a:51:c0:90:d8:b0:2b:9c:82:53:ca: 79:af:1b:02:90:6e:f8:82:a5:b8:81:8e:c6:1b:bb: 11:25:19:73:60:ba:42:78:37:77:43:12:03:19:6e: 2c:51:c6:af:28:27:e3:88:fe:f1:16:a8:e8:41:20: 83:4e:ac:08:b9:93:ac:d7:24:90:66:38:38:b9:69: 5e:5e:d9:fe:49:2d:b4:5c:fc:d6:6c:8c:b3:e1:fb: d4:27:19:44:d5:e1:52:f8:36:ce:07:7e:24:a9:f7: 3b:07:c0:3e:bd:37:db:28:a2:c0:92:04:04:80:7b: b8:f7:a6:38:b4:a3:e1:b6:91:29:0c:10:26:7d:5b: ee:66:f4:bb:22:42:86:b0:44:24:db:45:b7:d3:10: c9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:0A:58:7C:FE:60:E7:75:14:54:0C:69:6D:2D:64:B3:AF:48:77:05 X509v3 Authority Key Identifier: keyid:A9:2E:5D:97:9E:03:25:39:99:46:B2:39:08:22:D3:0F:1D:2F:35:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:c1:cf:c5:52:b7:8d:b8:28:c2:c8:e0:00:7c:ce:cb:70:da: d9:69:c2:95:75:b4:71:4d:cd:b3:f4:d2:e5:d0:01:b2:a5:ef: a3:85:44:d4:96:ec:19:01:87:7d:99:bc:4f:66:60:4a:08:0e: 27:27:ca:e9:33:bb:78:bd:8d:63:1a:60:5b:f4:e1:85:82:b0: 83:4a:58:cc:cb:a1:7f:74:db:d9:31:96:08:b9:de:55:4c:ea: fa:28:b2:05:5a:2f:96:b3:47:e8:fb:96:a4:18:64:24:35:84: 46:1c:83:34:81:ea:53:9a:70:df:03:2f:e2:d1:18:e0:f6:bd: 1e:18:5c:bb:5b:80:95:9b:b7:fd:e9:96:56:93:80:39:fb:da: f3:73:f8:18:07:c7:35:b0:85:0a:53:23:0f:0d:56:74:21:27: 3a:61:cc:05:50:f7:cb:89:d8:7b:d2:6c:3f:68:57:2c:51:d4: d6:cf:b4:0d:7d:ff:4b:3a:78:37:b1:3a:14:2a:ff:dc:88:6a: 65:c9:74:9e:06:46:11:3c:ef:c3:e5:5d:54:7b:63:00:a9:01: 1d:e8:a3:49:ae:15:78:79:02:75:5b:7c:c4:d1:23:29:fb:27: c4:67:d3:37:b7:c5:68:d8:23:52:38:b3:72:06:16:de:51:df: 24:a6:4c:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EcbUuazq3IJrSUIcV8+GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5MmU1ZDk3OWUwMzI1Mzk5OTQ2YjIzOTA4MjJkMzBmMWQy ZjM1ZTEwHhcNMjUxMjIxMDQwMTI4WhcNMjUxMjIyMDQwMTI4WjAzMTEwLwYDVQQD Eyg2MjBhNTg3Y2ZlNjBlNzc1MTQ1NDBjNjk2ZDJkNjRiM2FmNDg3NzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WVzo7wFkWBSazqiQ5Y0Uw0hOklS 7SD/ZV6B0BwRh6hdlVz8mqwsW5E7PBDGU1NNxhEijKPkM8ZiKzbr5IlXLcS3u3ZK kR5ABbNccTrQzwjHYUWQv9A/lDNdmdpEd2vhatALVy8fGoel/VsxClHAkNiwK5yC U8p5rxsCkG74gqW4gY7GG7sRJRlzYLpCeDd3QxIDGW4sUcavKCfjiP7xFqjoQSCD TqwIuZOs1ySQZjg4uWleXtn+SS20XPzWbIyz4fvUJxlE1eFS+DbOB34kqfc7B8A+ vTfbKKLAkgQEgHu496Y4tKPhtpEpDBAmfVvuZvS7IkKGsEQk20W30xDJGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGIKWHz+YOd1FFQMaW0tZLOvSHcFMB8GA1UdIwQY MBaAFKkuXZeeAyU5mUayOQgi0w8dLzXhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVM1ZGw1NERKVG1aUnJJNUNDTFREeDB2TmVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84MTExNWUtYmNhMS00Mzc1LTgxMDAt YTQ3ZDE0MWNmYzVhLzEvcVM1ZGw1NERKVG1aUnJJNUNDTFREeDB2TmVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84MTExNWUtYmNhMS00Mzc1LTgxMDAtYTQ3ZDE0MWNmYzVh LzEvcVM1ZGw1NERKVG1aUnJJNUNDTFREeDB2TmVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKsHPxVK3 jbgowsjgAHzOy3Da2WnClXW0cU3Ns/TS5dABsqXvo4VE1JbsGQGHfZm8T2ZgSggO JyfK6TO7eL2NYxpgW/ThhYKwg0pYzMuhf3Tb2TGWCLneVUzq+iiyBVovlrNH6PuW pBhkJDWERhyDNIHqU5pw3wMv4tEY4Pa9Hhhcu1uAlZu3/emWVpOAOfva83P4GAfH NbCFClMjDw1WdCEnOmHMBVD3y4nYe9JsP2hXLFHU1s+0DX3/Szp4N7E6FCr/3Ihq Zcl0ngZGETzvw+VdVHtjAKkBHeijSa4VeHkCdVt8xNEjKfsnxGfTN7fFaNgjUjiz cgYW3lHfJKZMxw== -----END CERTIFICATE-----Generated at Sun Dec 21 12:41:57 2025 by rpki-client