This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft File: q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft (raw, json) Hash identifier: aIMOy2/FIuEJ1QNMPtcnbiMin1nVFeWM+zEpHOmvJVc= Subject key identifier: 80:71:A7:15:69:84:2A:4D:08:72:0C:D2:7D:8C:31:C9:4E:2D:83:8E Authority key identifier: AB:91:D5:26:25:61:A9:DD:71:3D:FA:39:16:3D:EC:84:9F:EE:46:36 Certificate issuer: /CN=ab91d5262561a9dd713dfa39163dec849fee4636 Certificate serial: 019B3C0FEFE10BE56A6A00E9CB172C2F7042 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 14:00:35 +0000 Manifest this update: Sat 20 Dec 2025 14:00:35 +0000 Manifest next update: Sun 21 Dec 2025 14:00:35 +0000 Files and hashes: 1: 90qSTJbYoJhXhjJi4rtP_ZNlhJU.roa (hash: OSVSFtU4v1yfm+DOAOwZeidgdh2EY4LpmP/NOkKDmkg=) 2: JErXjXvKorGj9aJu1omld6wdpcs.roa (hash: kiyLNY+zTwPwB8AkdrotNIs7qiykrRwfggYUByu+C28=) 3: UscJiSEPN7-PYnIHOgT8LNjrioo.roa (hash: RVU014DpCH3z/tdVgprON9hggZk6wMumDABO2h4+Fx0=) 4: q5HVJiVhqd1xPfo5Fj3shJ_uRjY.crl (hash: HVxE1SGmnkWAUsmiDffykMoN76EQTwj7X2qngjTkqw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:0f:ef:e1:0b:e5:6a:6a:00:e9:cb:17:2c:2f:70:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab91d5262561a9dd713dfa39163dec849fee4636 Validity Not Before: Dec 20 14:00:35 2025 GMT Not After : Dec 21 14:00:35 2025 GMT Subject: CN=8071a71569842a4d08720cd27d8c31c94e2d838e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:49:90:3a:91:f2:96:2d:c7:63:63:b7:3a:01: 2d:83:1d:28:ba:03:d0:92:73:66:ba:72:2e:84:1d: 46:ea:1b:92:da:a6:da:2c:6a:4e:53:d1:3d:7b:1c: 89:13:ac:3c:42:7d:98:b8:40:65:89:a8:7b:6a:71: 52:c6:47:54:35:a7:e1:ac:2a:24:02:6e:4a:12:2b: 04:15:bd:f1:63:cd:48:65:e9:39:b6:e5:49:03:cc: ec:fc:bb:5f:f3:5a:04:ca:b1:46:1b:d0:c1:f5:8c: 2f:3b:12:40:15:1c:27:7a:ec:c4:a9:b1:21:c6:7f: e3:1d:04:a0:5e:c1:74:12:86:e1:84:cb:38:79:bc: c6:4c:c8:25:1a:8b:87:67:ae:aa:92:63:7b:0f:af: 0a:71:8e:6d:bb:6e:2a:06:b9:a9:55:f9:9a:c9:4b: 08:a5:43:02:ec:47:07:a1:1d:e5:e4:6f:50:7b:21: c2:24:80:7c:22:00:43:ad:7b:03:11:b7:11:31:6a: 44:ed:b2:54:4d:f3:cb:0c:35:8b:40:a1:5e:d7:49: e1:2c:cf:1e:c7:61:47:58:ba:80:04:47:fe:e9:dd: cb:44:8a:fc:60:5e:1d:91:77:cd:18:60:6f:c0:26: c2:14:d5:ac:fe:ba:0c:af:d2:37:5c:43:13:5d:2f: 1c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:71:A7:15:69:84:2A:4D:08:72:0C:D2:7D:8C:31:C9:4E:2D:83:8E X509v3 Authority Key Identifier: keyid:AB:91:D5:26:25:61:A9:DD:71:3D:FA:39:16:3D:EC:84:9F:EE:46:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:f5:2b:c8:6d:08:9b:d2:94:ca:3e:9d:2e:c8:42:42:ae:3b: 48:89:ae:50:e5:54:ff:8c:4b:d7:a1:64:99:8e:be:05:90:63: 1c:fa:d6:5b:5d:45:c6:1d:78:7b:bd:c3:d8:02:df:d5:28:0f: 06:d8:dd:c9:55:57:cf:90:ea:be:a0:f5:24:68:d9:ea:68:0f: 23:75:d6:bc:6e:73:3b:47:c5:0f:93:63:0c:eb:9e:05:6c:22: 45:e7:e2:12:80:31:b2:3e:e9:9e:b8:7c:11:a5:4d:48:2d:39: d3:01:c7:b6:f2:9b:d1:09:f3:7b:42:83:0e:4d:3e:5d:b4:b0: a3:9f:a0:0f:4e:96:8c:c7:14:42:97:68:3a:ab:fd:66:8f:a9: 2b:cc:9a:72:25:a1:86:50:3e:df:f3:2a:f0:58:f3:03:7b:65: aa:a1:13:9f:7a:0b:49:6e:22:eb:22:ae:2f:5f:3d:e2:d7:ac: 01:f2:8b:9a:b6:54:b4:f5:fa:e9:a2:f4:8b:d2:61:35:2e:c7: 03:7d:cd:61:0c:de:82:e4:bd:29:93:74:7d:9b:8e:ff:3b:41: f6:a7:5a:f3:2b:94:62:ae:e3:b8:41:99:68:8b:5f:da:f3:14: c7:d9:c3:ca:a6:a2:ab:41:49:1b:1e:86:05:41:1d:bb:f8:f1: a4:c7:7b:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8D+/hC+VqagDpyxcsL3BCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiOTFkNTI2MjU2MWE5ZGQ3MTNkZmEzOTE2M2RlYzg0OWZl ZTQ2MzYwHhcNMjUxMjIwMTQwMDM1WhcNMjUxMjIxMTQwMDM1WjAzMTEwLwYDVQQD Eyg4MDcxYTcxNTY5ODQyYTRkMDg3MjBjZDI3ZDhjMzFjOTRlMmQ4MzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUmQOpHyli3HY2O3OgEtgx0ougPQ knNmunIuhB1G6huS2qbaLGpOU9E9exyJE6w8Qn2YuEBliah7anFSxkdUNafhrCok Am5KEisEFb3xY81IZek5tuVJA8zs/Ltf81oEyrFGG9DB9YwvOxJAFRwneuzEqbEh xn/jHQSgXsF0EobhhMs4ebzGTMglGouHZ66qkmN7D68KcY5tu24qBrmpVfmayUsI pUMC7EcHoR3l5G9QeyHCJIB8IgBDrXsDEbcRMWpE7bJUTfPLDDWLQKFe10nhLM8e x2FHWLqABEf+6d3LRIr8YF4dkXfNGGBvwCbCFNWs/roMr9I3XEMTXS8cXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIBxpxVphCpNCHIM0n2MMclOLYOOMB8GA1UdIwQY MBaAFKuR1SYlYandcT36ORY97ISf7kY2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTVIVkppVmhxZDF4UGZvNUZqM3NoSl91UmpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85MWU4ODItYmE4YS00NGM1LTliMGQt Mjc1MjQyYWE2Nzc1LzEvcTVIVkppVmhxZDF4UGZvNUZqM3NoSl91UmpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi85MWU4ODItYmE4YS00NGM1LTliMGQtMjc1MjQyYWE2Nzc1 LzEvcTVIVkppVmhxZDF4UGZvNUZqM3NoSl91UmpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkvUryG0I m9KUyj6dLshCQq47SImuUOVU/4xL16FkmY6+BZBjHPrWW11Fxh14e73D2ALf1SgP BtjdyVVXz5DqvqD1JGjZ6mgPI3XWvG5zO0fFD5NjDOueBWwiRefiEoAxsj7pnrh8 EaVNSC050wHHtvKb0Qnze0KDDk0+XbSwo5+gD06WjMcUQpdoOqv9Zo+pK8yaciWh hlA+3/Mq8FjzA3tlqqETn3oLSW4i6yKuL1894tesAfKLmrZUtPX66aL0i9JhNS7H A33NYQzeguS9KZN0fZuO/ztB9qda8yuUYq7juEGZaItf2vMUx9nDyqaiq0FJGx6G BUEdu/jxpMd7LA== -----END CERTIFICATE-----Generated at Sat Dec 20 16:18:20 2025 by rpki-client