This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/42bed4-44d7-480b-bbda-16ab5746ef4e/1/qtT1OyE_1fbkbdPuO36dKH_JFzI.mft File: qtT1OyE_1fbkbdPuO36dKH_JFzI.mft (raw, json) Hash identifier: arLDB5SLiY5JpGxkt2JAafRzKT9GqJQBQHf4hh8I9+I= Subject key identifier: E1:00:60:32:2A:F0:76:D6:BF:C3:50:35:71:89:38:3E:48:52:37:6C Authority key identifier: AA:D4:F5:3B:21:3F:D5:F6:E4:6D:D3:EE:3B:7E:9D:28:7F:C9:17:32 Certificate issuer: /CN=aad4f53b213fd5f6e46dd3ee3b7e9d287fc91732 Certificate serial: 019B45EED3CE035B6C7E2C556E9F507469C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qtT1OyE_1fbkbdPuO36dKH_JFzI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/42bed4-44d7-480b-bbda-16ab5746ef4e/1/qtT1OyE_1fbkbdPuO36dKH_JFzI.mft Manifest number: B5 Signing time: Mon 22 Dec 2025 12:00:38 +0000 Manifest this update: Mon 22 Dec 2025 12:00:38 +0000 Manifest next update: Tue 23 Dec 2025 12:00:38 +0000 Files and hashes: 1: QH7PkD5ZK8D91RHK6lOrj_AnwS0.roa (hash: 3W6raDOuTY1+pLUCyy05Kr7smlg3BwEP4vah6MOQHS0=) 2: qtT1OyE_1fbkbdPuO36dKH_JFzI.crl (hash: ToghaivOw9EY1XwboKcZ8LFqDXqVx5muZjjkxsctJc8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/42bed4-44d7-480b-bbda-16ab5746ef4e/1/qtT1OyE_1fbkbdPuO36dKH_JFzI.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/42bed4-44d7-480b-bbda-16ab5746ef4e/1/qtT1OyE_1fbkbdPuO36dKH_JFzI.mft rsync://rpki.ripe.net/repository/DEFAULT/qtT1OyE_1fbkbdPuO36dKH_JFzI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:ee:d3:ce:03:5b:6c:7e:2c:55:6e:9f:50:74:69:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aad4f53b213fd5f6e46dd3ee3b7e9d287fc91732 Validity Not Before: Dec 22 12:00:38 2025 GMT Not After : Dec 23 12:00:38 2025 GMT Subject: CN=e10060322af076d6bfc350357189383e4852376c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e3:1e:8c:40:0e:57:4e:05:ae:a6:2c:7d:06: 94:68:d0:c9:d5:78:5e:83:ea:7f:e4:10:ad:fa:ce: 9c:e9:40:1b:16:4f:51:48:82:b2:13:55:3d:75:d4: 03:e8:89:46:bf:d2:0c:df:6d:3b:85:ce:07:d0:81: bb:25:16:67:2e:ff:95:c1:f9:a6:a4:3c:82:c9:4e: 5f:0f:80:69:89:8c:19:04:f1:bf:e1:5f:94:cd:54: 04:55:bd:b1:dc:23:a8:8a:c8:0c:1c:3b:1a:b1:6f: 39:61:6b:91:22:a8:3f:6d:1f:6a:d5:be:a8:f8:ff: e2:07:77:d2:4e:f1:28:0d:b4:4d:91:85:b7:1f:a2: a6:e5:e8:53:60:c3:27:ab:0b:00:dd:f4:41:29:95: ce:b8:69:d4:fe:86:9b:2f:d3:4b:85:63:63:11:94: 84:f4:ec:17:75:77:35:e5:dd:d0:ce:d2:96:63:14: e5:9e:ca:fe:4c:fb:29:23:2d:9f:08:a2:c0:71:9e: 51:39:28:77:84:88:ed:d1:b5:f7:cc:07:5c:f7:f4: 33:ed:71:9a:d3:86:4b:45:d2:80:14:05:1d:f5:e5: 09:e9:b8:8e:e1:85:fe:f5:84:1c:de:32:cf:3e:cf: 80:27:2a:da:6b:2b:38:05:03:12:9b:3e:2b:9e:1f: 81:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:00:60:32:2A:F0:76:D6:BF:C3:50:35:71:89:38:3E:48:52:37:6C X509v3 Authority Key Identifier: keyid:AA:D4:F5:3B:21:3F:D5:F6:E4:6D:D3:EE:3B:7E:9D:28:7F:C9:17:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qtT1OyE_1fbkbdPuO36dKH_JFzI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/42bed4-44d7-480b-bbda-16ab5746ef4e/1/qtT1OyE_1fbkbdPuO36dKH_JFzI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/42bed4-44d7-480b-bbda-16ab5746ef4e/1/qtT1OyE_1fbkbdPuO36dKH_JFzI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:e4:b5:f4:a7:ff:cb:16:7a:f6:48:ba:b9:e2:36:e1:d8:89: e5:c3:2a:7c:57:4c:a0:cf:c3:07:cf:a6:49:f7:0a:17:db:9e: d5:76:8b:ab:b9:3a:ba:bf:ca:55:84:35:b2:cf:f2:b1:00:3c: 6d:90:f9:16:46:b7:b9:59:c5:3c:05:3a:4a:4c:78:2a:9a:2f: 62:b9:68:a4:3c:a0:91:f0:0b:5d:ec:3b:87:3f:f6:66:ee:24: 96:73:83:5f:b1:44:34:05:c7:a5:35:01:bc:c2:93:4f:52:9b: 7c:c9:28:dd:64:7c:ed:16:44:65:36:47:f9:d2:f8:5c:f0:47: 8e:09:1b:5f:92:01:5b:e0:a6:15:7a:ce:96:c3:80:72:4d:c9: 9f:21:50:5f:ca:ed:9d:01:d5:86:5c:de:2b:f9:e4:8b:84:61: 66:1d:79:d3:19:d5:e0:3f:19:29:fd:a1:b3:1b:60:ca:56:78: ba:96:6b:3c:e5:a9:b3:03:cd:c8:63:2d:2c:ef:19:43:62:cf: 9c:98:47:1b:7a:01:59:2e:95:6f:9f:44:92:a4:62:71:98:5a: a9:c8:49:9b:9d:e0:52:82:a6:e0:31:a8:43:5e:86:e2:13:0a: bd:b9:18:54:37:2f:ec:bf:c4:2a:3e:45:8b:42:5d:62:8c:21: 99:52:59:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtF7tPOA1tsfixVbp9QdGnEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhZDRmNTNiMjEzZmQ1ZjZlNDZkZDNlZTNiN2U5ZDI4N2Zj OTE3MzIwHhcNMjUxMjIyMTIwMDM4WhcNMjUxMjIzMTIwMDM4WjAzMTEwLwYDVQQD EyhlMTAwNjAzMjJhZjA3NmQ2YmZjMzUwMzU3MTg5MzgzZTQ4NTIzNzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuMejEAOV04FrqYsfQaUaNDJ1Xhe g+p/5BCt+s6c6UAbFk9RSIKyE1U9ddQD6IlGv9IM3207hc4H0IG7JRZnLv+Vwfmm pDyCyU5fD4BpiYwZBPG/4V+UzVQEVb2x3COoisgMHDsasW85YWuRIqg/bR9q1b6o +P/iB3fSTvEoDbRNkYW3H6Km5ehTYMMnqwsA3fRBKZXOuGnU/oabL9NLhWNjEZSE 9OwXdXc15d3QztKWYxTlnsr+TPspIy2fCKLAcZ5ROSh3hIjt0bX3zAdc9/Qz7XGa 04ZLRdKAFAUd9eUJ6biO4YX+9YQc3jLPPs+AJyraays4BQMSmz4rnh+BzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOEAYDIq8HbWv8NQNXGJOD5IUjdsMB8GA1UdIwQY MBaAFKrU9TshP9X25G3T7jt+nSh/yRcyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXRUMU95RV8xZmJrYmRQdU8zNmRLSF9KRnpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS80MmJlZDQtNDRkNy00ODBiLWJiZGEt MTZhYjU3NDZlZjRlLzEvcXRUMU95RV8xZmJrYmRQdU8zNmRLSF9KRnpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS80MmJlZDQtNDRkNy00ODBiLWJiZGEtMTZhYjU3NDZlZjRl LzEvcXRUMU95RV8xZmJrYmRQdU8zNmRLSF9KRnpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE+S19Kf/ yxZ69ki6ueI24diJ5cMqfFdMoM/DB8+mSfcKF9ue1XaLq7k6ur/KVYQ1ss/ysQA8 bZD5Fka3uVnFPAU6Skx4KpovYrlopDygkfALXew7hz/2Zu4klnODX7FENAXHpTUB vMKTT1KbfMko3WR87RZEZTZH+dL4XPBHjgkbX5IBW+CmFXrOlsOAck3JnyFQX8rt nQHVhlzeK/nki4RhZh150xnV4D8ZKf2hsxtgylZ4upZrPOWpswPNyGMtLO8ZQ2LP nJhHG3oBWS6Vb59EkqRicZhaqchJm53gUoKm4DGoQ16G4hMKvbkYVDcv7L/EKj5F i0JdYowhmVJZMQ== -----END CERTIFICATE-----Generated at Mon Dec 22 15:26:57 2025 by rpki-client