This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft File: q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft (raw, json) Hash identifier: jbgBknUQcldhQBotHYtnLT2AI733y8t26VIX2zK9MX4= Subject key identifier: D8:DF:42:CC:2E:EC:33:FC:F9:83:C6:6D:74:28:45:CA:19:20:6D:63 Authority key identifier: AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B Certificate issuer: /CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b Certificate serial: 019B1C4E04031F18D0C25324103325106ED8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft Manifest number: 1782 Signing time: Sun 14 Dec 2025 10:00:33 +0000 Manifest this update: Sun 14 Dec 2025 10:00:33 +0000 Manifest next update: Mon 15 Dec 2025 10:00:33 +0000 Files and hashes: 1: 7XQS9fgmC0xNqPuIMhkAaeUEx0g.roa (hash: 30Yt0v1j2/2WiJgCszBG8BLPKcC0q4CL1Hk0j9TqmbM=) 2: CGRTCK3Ge4ADHzCWSkOhJS2ZO-g.roa (hash: qGlSQR4VzbycTQ4yuefrd6Ta0FRZb+PMZoj6HNp+HDk=) 3: q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl (hash: HbgPBXSLlXo9ly2/XroMDN5MLcqeiAmsQ/eVZwzMsFo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:4e:04:03:1f:18:d0:c2:53:24:10:33:25:10:6e:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b Validity Not Before: Dec 14 10:00:33 2025 GMT Not After : Dec 15 10:00:33 2025 GMT Subject: CN=d8df42cc2eec33fcf983c66d742845ca19206d63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f9:28:3e:2f:66:de:e8:9a:c5:a4:c3:b0:8d: ec:33:ca:58:77:8b:dc:2b:dc:36:f0:0a:89:c6:27: 28:28:0d:47:b8:cb:3f:50:c4:97:7e:a3:b8:e3:f2: b5:2f:5b:ac:f3:d4:52:ba:b1:6e:53:36:08:bf:1a: 2b:a1:67:94:4c:b6:09:00:b1:53:33:ba:6d:64:8a: c1:bc:de:1d:0e:fb:b6:93:f0:f1:29:7c:9f:2c:71: 06:b4:b5:e3:9d:e0:e2:93:7d:88:cf:1e:95:68:f4: eb:e1:37:d3:75:1d:b9:85:ff:ee:ad:c8:51:82:81: 23:75:cd:85:1f:d4:36:ac:11:f9:60:9c:c3:cd:0d: a2:2d:7e:92:ea:ca:f2:34:8e:08:95:64:14:8c:af: c1:30:71:b3:c9:51:46:04:2c:85:ca:1d:fa:2c:0d: ba:da:ab:ca:e7:f0:00:7b:bc:e4:6d:45:8e:43:a7: c2:74:e7:ae:e6:81:ed:62:ec:04:b9:d0:5a:58:f9: 34:a3:b3:ff:cc:c5:ae:ed:04:97:88:50:a4:21:16: 38:a5:51:97:13:6c:18:1c:17:3b:52:16:b5:c8:29: f4:b7:96:b6:ca:86:5d:8b:09:b8:5b:03:e8:bd:82: 77:7d:a0:ec:bd:05:cc:d7:09:3d:9d:8b:de:f5:28: c3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:DF:42:CC:2E:EC:33:FC:F9:83:C6:6D:74:28:45:CA:19:20:6D:63 X509v3 Authority Key Identifier: keyid:AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:1a:5e:fc:c5:7b:20:d5:54:0c:f6:78:01:ab:b1:6d:37:a9: 0f:4b:26:c1:e9:d2:ab:14:17:71:1c:bb:f6:95:98:b6:9c:13: 5c:a8:72:eb:dd:14:20:21:2e:1e:84:87:9e:cf:69:e6:bf:a5: 35:ab:a3:95:14:53:da:bb:ac:46:04:53:4c:54:ff:26:98:1d: 95:d2:ab:54:f2:15:dc:af:cb:45:61:5d:81:a7:17:9b:a5:ba: 1c:07:75:71:50:e6:c2:52:74:95:ca:6a:d0:47:30:85:8e:cf: e8:05:d2:f0:ce:74:6d:e8:61:89:46:fd:6d:48:bb:ae:c8:50: 3c:40:6a:54:d3:d5:e1:3b:f9:3f:32:77:90:d8:61:3e:1b:d6: 02:45:0f:61:f5:45:3a:9b:61:c1:6c:4d:e9:f2:2f:6d:ed:38: 85:ed:e5:c6:55:4d:ee:28:46:a7:bd:f0:05:da:65:cc:30:a2: fa:a5:81:cf:f5:97:c2:6d:9a:63:66:62:38:64:5d:5d:b0:5e: d9:29:29:e2:5a:b1:47:1d:4d:c6:b4:1b:3c:9d:5e:d1:d8:d5: 15:98:d7:05:39:d8:79:28:a3:d9:62:5c:7c:c3:50:57:87:9d: 97:ce:e2:76:f2:5a:30:f8:08:29:b1:95:df:13:71:6c:1d:0e: e3:cc:5f:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscTgQDHxjQwlMkEDMlEG7YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiOWY4NGM2YTQ4ZDVjNmRmZTY0MTQ5ODczYjE0OGQxMTIw YjAwOWIwHhcNMjUxMjE0MTAwMDMzWhcNMjUxMjE1MTAwMDMzWjAzMTEwLwYDVQQD EyhkOGRmNDJjYzJlZWMzM2ZjZjk4M2M2NmQ3NDI4NDVjYTE5MjA2ZDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/koPi9m3uiaxaTDsI3sM8pYd4vc K9w28AqJxicoKA1HuMs/UMSXfqO44/K1L1us89RSurFuUzYIvxoroWeUTLYJALFT M7ptZIrBvN4dDvu2k/DxKXyfLHEGtLXjneDik32Izx6VaPTr4TfTdR25hf/urchR goEjdc2FH9Q2rBH5YJzDzQ2iLX6S6sryNI4IlWQUjK/BMHGzyVFGBCyFyh36LA26 2qvK5/AAe7zkbUWOQ6fCdOeu5oHtYuwEudBaWPk0o7P/zMWu7QSXiFCkIRY4pVGX E2wYHBc7Uha1yCn0t5a2yoZdiwm4WwPovYJ3faDsvQXM1wk9nYve9SjDrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNjfQswu7DP8+YPGbXQoRcoZIG1jMB8GA1UdIwQY MBaAFKufhMakjVxt/mQUmHOxSNESCwCbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTUtRXhxU05YRzMtWkJTWWM3RkkwUklMQUpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8zNjE3N2YtN2NkOC00YmQzLTg2ODkt MjEzZDY0YmVmZjcxLzEvcTUtRXhxU05YRzMtWkJTWWM3RkkwUklMQUpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8zNjE3N2YtN2NkOC00YmQzLTg2ODktMjEzZDY0YmVmZjcx LzEvcTUtRXhxU05YRzMtWkJTWWM3RkkwUklMQUpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAChpe/MV7 INVUDPZ4AauxbTepD0smwenSqxQXcRy79pWYtpwTXKhy690UICEuHoSHns9p5r+l NaujlRRT2rusRgRTTFT/JpgdldKrVPIV3K/LRWFdgacXm6W6HAd1cVDmwlJ0lcpq 0EcwhY7P6AXS8M50behhiUb9bUi7rshQPEBqVNPV4Tv5PzJ3kNhhPhvWAkUPYfVF OpthwWxN6fIvbe04he3lxlVN7ihGp73wBdplzDCi+qWBz/WXwm2aY2ZiOGRdXbBe 2Skp4lqxRx1NxrQbPJ1e0djVFZjXBTnYeSij2WJcfMNQV4edl87idvJaMPgIKbGV 3xNxbB0O48xfvA== -----END CERTIFICATE-----Generated at Sun Dec 14 19:31:50 2025 by rpki-client