This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft File: q5ioJj4GO4p709cYDnpKpklTRBw.mft (raw, json) Hash identifier: 8VtYDhdTTD8gi8z5mbeukIl0ccQHXQ75A89Cq6XArgc= Subject key identifier: 5B:E8:7F:E1:61:DE:9D:9E:20:52:08:8E:53:96:00:94:63:AE:01:04 Authority key identifier: AB:98:A8:26:3E:06:3B:8A:7B:D3:D7:18:0E:7A:4A:A6:49:53:44:1C Certificate issuer: /CN=ab98a8263e063b8a7bd3d7180e7a4aa64953441c Certificate serial: 019B39B3E450DD975E973479024228B553E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft Manifest number: 0653 Signing time: Sat 20 Dec 2025 03:00:49 +0000 Manifest this update: Sat 20 Dec 2025 03:00:49 +0000 Manifest next update: Sun 21 Dec 2025 03:00:49 +0000 Files and hashes: 1: kD0NYEJpgxaFFDcqPxx98oDLF4A.roa (hash: kEfgwntStfXPUtLxcdJZBEv9NrzPqg0tH8aS2VZkZpA=) 2: q5ioJj4GO4p709cYDnpKpklTRBw.crl (hash: Dvna9EbBQRtUkYQj1LQGi94/UM4QfiMbSl9lODwrbSM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b3:e4:50:dd:97:5e:97:34:79:02:42:28:b5:53:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab98a8263e063b8a7bd3d7180e7a4aa64953441c Validity Not Before: Dec 20 03:00:49 2025 GMT Not After : Dec 21 03:00:49 2025 GMT Subject: CN=5be87fe161de9d9e2052088e5396009463ae0104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:51:f6:d3:f3:b7:24:ce:51:40:61:1c:ba:62: c3:8f:ab:33:6e:cf:80:bd:c2:62:fe:bb:32:a9:a9: 5a:01:d6:8b:5c:97:f9:c8:f4:84:47:eb:34:af:0d: 18:5d:fb:84:39:6d:c6:58:1d:cc:5a:98:6e:c5:55: b9:e2:ab:62:ec:0f:99:19:71:18:88:ea:5d:0a:81: a4:50:fd:bc:17:f9:da:70:38:35:fe:5b:df:4d:30: d6:a2:e9:7d:b4:ac:27:e9:2e:9d:d7:6e:70:49:e2: bf:86:26:a3:23:96:f3:85:02:e8:6c:f9:a2:c5:90: 8e:e5:1b:5c:5d:58:9a:11:9b:ef:6c:c4:cd:a4:f4: 79:c7:94:72:e9:a3:24:2a:5c:d7:10:24:ef:66:e3: 7f:63:d1:3a:ae:4e:40:5d:df:19:68:ea:27:71:9a: ae:80:7f:cd:a6:ba:2a:dc:d1:a8:42:fa:b2:97:23: 2c:60:52:e0:eb:e2:92:db:49:97:16:a9:5b:d3:c5: 8d:91:7e:46:df:73:15:df:52:88:c0:1c:76:9e:d5: e2:e8:af:64:e3:7a:a7:18:4b:b5:68:d9:c3:cc:4a: f3:1a:3b:3c:c1:d1:6f:a1:4f:68:c9:2f:41:6d:56: 75:3e:c8:b9:43:22:9b:ab:17:fe:f7:b9:ab:24:fc: 26:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:E8:7F:E1:61:DE:9D:9E:20:52:08:8E:53:96:00:94:63:AE:01:04 X509v3 Authority Key Identifier: keyid:AB:98:A8:26:3E:06:3B:8A:7B:D3:D7:18:0E:7A:4A:A6:49:53:44:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:dc:c2:06:48:35:87:e4:3b:9f:63:dc:73:74:a2:e4:c9:65: e0:a3:ab:46:08:14:ae:66:1a:0b:cf:f8:80:e2:67:4f:82:62: fa:d3:74:c7:44:30:12:72:79:e9:bb:41:ca:2a:d2:d8:4c:19: ff:d1:62:cc:92:c2:28:da:79:57:19:07:16:b3:00:2b:e3:00: 60:cd:8d:1b:09:04:a0:bb:12:fc:5e:a4:98:32:43:bf:b4:f8: 7e:e7:a1:ee:18:6e:20:e2:a2:02:6b:dd:30:e5:50:f3:cb:2c: 2f:01:38:74:fe:e1:27:11:15:8a:09:8f:63:5e:96:8e:33:d5: 47:fe:91:65:d3:da:cf:b4:3f:de:74:eb:67:87:24:b0:8d:92: 1a:13:82:92:8e:ed:0e:7b:d4:8c:bf:85:a6:48:bf:f9:47:9b: 5c:d5:9e:ba:ea:8f:78:6b:a0:b3:ca:6d:d2:1f:7c:43:3a:9d: 34:2b:eb:08:5b:7f:f2:04:08:f6:4b:85:0f:ec:9b:73:5d:87: cd:85:a2:99:78:7c:61:50:91:94:3a:74:91:8f:63:63:b0:23: 38:94:11:cb:a8:ce:f5:6f:34:b8:05:6b:e0:ee:86:76:5d:f5: ee:8e:dc:ae:85:8d:1f:12:cb:90:0c:bd:fb:a9:e9:09:e0:c7: 2c:3f:97:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5s+RQ3ZdelzR5AkIotVPpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiOThhODI2M2UwNjNiOGE3YmQzZDcxODBlN2E0YWE2NDk1 MzQ0MWMwHhcNMjUxMjIwMDMwMDQ5WhcNMjUxMjIxMDMwMDQ5WjAzMTEwLwYDVQQD Eyg1YmU4N2ZlMTYxZGU5ZDllMjA1MjA4OGU1Mzk2MDA5NDYzYWUwMTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FH20/O3JM5RQGEcumLDj6szbs+A vcJi/rsyqalaAdaLXJf5yPSER+s0rw0YXfuEOW3GWB3MWphuxVW54qti7A+ZGXEY iOpdCoGkUP28F/nacDg1/lvfTTDWoul9tKwn6S6d125wSeK/hiajI5bzhQLobPmi xZCO5RtcXViaEZvvbMTNpPR5x5Ry6aMkKlzXECTvZuN/Y9E6rk5AXd8ZaOoncZqu gH/Nproq3NGoQvqylyMsYFLg6+KS20mXFqlb08WNkX5G33MV31KIwBx2ntXi6K9k 43qnGEu1aNnDzErzGjs8wdFvoU9oyS9BbVZ1Psi5QyKbqxf+97mrJPwmnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFvof+Fh3p2eIFIIjlOWAJRjrgEEMB8GA1UdIwQY MBaAFKuYqCY+BjuKe9PXGA56SqZJU0QcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTVpb0pqNEdPNHA3MDljWURucEtwa2xUUkJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8xMTlkMzQtNDA3YS00MjllLTkwNTYt NzYyOGNiYWYwZWM4LzEvcTVpb0pqNEdPNHA3MDljWURucEtwa2xUUkJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8xMTlkMzQtNDA3YS00MjllLTkwNTYtNzYyOGNiYWYwZWM4 LzEvcTVpb0pqNEdPNHA3MDljWURucEtwa2xUUkJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZtzCBkg1 h+Q7n2Pcc3Si5Mll4KOrRggUrmYaC8/4gOJnT4Ji+tN0x0QwEnJ56btByirS2EwZ /9FizJLCKNp5VxkHFrMAK+MAYM2NGwkEoLsS/F6kmDJDv7T4fueh7hhuIOKiAmvd MOVQ88ssLwE4dP7hJxEVigmPY16WjjPVR/6RZdPaz7Q/3nTrZ4cksI2SGhOCko7t DnvUjL+Fpki/+UebXNWeuuqPeGugs8pt0h98QzqdNCvrCFt/8gQI9kuFD+ybc12H zYWimXh8YVCRlDp0kY9jY7AjOJQRy6jO9W80uAVr4O6Gdl317o7croWNHxLLkAy9 +6npCeDHLD+X5g== -----END CERTIFICATE-----Generated at Sat Dec 20 07:40:08 2025 by rpki-client