This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/fe46bd-67da-4dfe-9cb4-e25d38f5c930/1/qX_5V51boEXbuQGijCxRWI0E_RE.mft File: qX_5V51boEXbuQGijCxRWI0E_RE.mft (raw, json) Hash identifier: k7mJc39CJXiXILvXHvObkfPgmLx2ltgrU1F24WrA7Nc= Subject key identifier: E9:94:AE:12:1F:F5:23:9F:7D:21:5E:B6:42:A5:65:79:0A:20:37:8B Authority key identifier: A9:7F:F9:57:9D:5B:A0:45:DB:B9:01:A2:8C:2C:51:58:8D:04:FD:11 Certificate issuer: /CN=a97ff9579d5ba045dbb901a28c2c51588d04fd11 Certificate serial: 019B5A51A038948D88A93D3F9306C0FE57F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qX_5V51boEXbuQGijCxRWI0E_RE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/fe46bd-67da-4dfe-9cb4-e25d38f5c930/1/qX_5V51boEXbuQGijCxRWI0E_RE.mft Manifest number: 0124 Signing time: Fri 26 Dec 2025 11:00:57 +0000 Manifest this update: Fri 26 Dec 2025 11:00:57 +0000 Manifest next update: Sat 27 Dec 2025 11:00:57 +0000 Files and hashes: 1: iUuETCEbGtwWmtCdQKzT9MtsuME.roa (hash: MRtjhtm+DjeKhdCjunhlsOl8ue7lCEfAuSo2rForAtw=) 2: qX_5V51boEXbuQGijCxRWI0E_RE.crl (hash: IbDEfSbTdDUlcdf1uckdW7eWMr2O6XtIQLd+ClPW6w0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/fe46bd-67da-4dfe-9cb4-e25d38f5c930/1/qX_5V51boEXbuQGijCxRWI0E_RE.crl rsync://rpki.ripe.net/repository/DEFAULT/43/fe46bd-67da-4dfe-9cb4-e25d38f5c930/1/qX_5V51boEXbuQGijCxRWI0E_RE.mft rsync://rpki.ripe.net/repository/DEFAULT/qX_5V51boEXbuQGijCxRWI0E_RE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:a0:38:94:8d:88:a9:3d:3f:93:06:c0:fe:57:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a97ff9579d5ba045dbb901a28c2c51588d04fd11 Validity Not Before: Dec 26 11:00:57 2025 GMT Not After : Dec 27 11:00:57 2025 GMT Subject: CN=e994ae121ff5239f7d215eb642a565790a20378b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:36:f8:8e:db:f7:c3:02:5c:f1:0e:fe:c9:25: 58:f7:43:60:5a:75:15:4e:09:41:5f:de:d5:27:48: a9:3c:7c:74:16:09:89:87:80:96:bf:c4:bd:06:3f: 1b:d6:2b:91:8a:3f:bb:8a:14:88:43:79:de:a6:e8: 89:04:36:ac:be:bd:d1:e0:56:3e:6f:1e:55:02:a3: 65:2f:6b:25:15:8f:81:22:44:25:83:9a:a3:2d:cf: aa:60:f9:08:c4:f4:02:e9:2e:51:b7:2f:c0:af:e8: 73:cc:34:f2:c9:3f:cd:85:da:44:8c:90:ab:2f:7c: 9e:5b:7a:5d:cf:f6:c9:7f:2b:c6:5c:6c:8b:d9:70: 59:58:5c:ee:a7:1f:c3:3e:8a:a9:df:7e:ec:85:6b: d3:ad:ab:b7:62:ab:a6:3a:98:ea:3e:8c:c4:14:94: 22:3a:87:5b:92:8f:b7:7e:d4:c8:b8:e5:dc:d2:c2: c0:96:cd:2c:fa:59:c4:55:51:f1:37:71:e3:d3:8b: 82:37:04:48:6c:5b:ce:f2:22:55:cb:23:5a:70:d2: 80:03:f3:c5:26:ef:64:65:73:00:6d:14:18:4f:ad: 71:04:4d:01:1f:04:6b:c7:b4:30:38:49:15:7d:2f: f8:b1:2a:4e:24:b4:67:67:f0:3a:0f:ca:57:12:83: d0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:94:AE:12:1F:F5:23:9F:7D:21:5E:B6:42:A5:65:79:0A:20:37:8B X509v3 Authority Key Identifier: keyid:A9:7F:F9:57:9D:5B:A0:45:DB:B9:01:A2:8C:2C:51:58:8D:04:FD:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qX_5V51boEXbuQGijCxRWI0E_RE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/fe46bd-67da-4dfe-9cb4-e25d38f5c930/1/qX_5V51boEXbuQGijCxRWI0E_RE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/fe46bd-67da-4dfe-9cb4-e25d38f5c930/1/qX_5V51boEXbuQGijCxRWI0E_RE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:88:e1:16:19:72:bf:b6:fb:46:d5:e8:60:62:26:16:33:57: 24:be:2b:bc:d0:58:57:d1:57:b9:73:21:62:31:f8:0e:e7:1d: 80:32:2f:dd:1b:2c:6c:df:9b:90:16:3a:86:80:a9:1e:4e:0c: 2c:8f:0e:e8:f5:10:04:b9:17:24:d7:b3:8c:a7:8a:a2:d2:3b: a5:63:05:7a:59:42:10:08:2d:4b:25:7d:11:0a:37:63:f3:ae: f3:b0:7a:96:fd:22:ff:72:b3:f4:f0:52:c9:ab:21:7f:ef:ce: 8c:ff:a5:bb:f5:ad:d7:3b:16:34:12:5b:0f:5f:c4:cb:75:1f: e5:00:4c:c3:ab:9a:d1:c8:8f:59:a0:b3:6b:b2:7c:0d:46:1b: 8d:63:41:f8:2e:78:a0:6f:f2:0b:7a:ea:fd:26:59:c2:49:ed: a1:07:2e:08:a6:1c:01:c6:97:fa:39:b8:d4:40:9b:c3:69:15: de:82:b4:1c:7c:80:51:d9:11:84:20:f3:70:61:95:64:28:ce: 72:a1:5a:6b:82:67:09:d1:ce:78:1e:43:27:c0:0f:9c:9e:da: e0:c4:b9:12:fb:07:92:0c:dc:5c:98:d4:6d:a5:d8:65:52:d0: aa:7d:c3:03:d6:5a:c8:7e:78:63:bb:15:9e:ad:c2:fd:1f:1f: e2:84:d5:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUaA4lI2IqT0/kwbA/lf4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5N2ZmOTU3OWQ1YmEwNDVkYmI5MDFhMjhjMmM1MTU4OGQw NGZkMTEwHhcNMjUxMjI2MTEwMDU3WhcNMjUxMjI3MTEwMDU3WjAzMTEwLwYDVQQD EyhlOTk0YWUxMjFmZjUyMzlmN2QyMTVlYjY0MmE1NjU3OTBhMjAzNzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTb4jtv3wwJc8Q7+ySVY90NgWnUV TglBX97VJ0ipPHx0FgmJh4CWv8S9Bj8b1iuRij+7ihSIQ3nepuiJBDasvr3R4FY+ bx5VAqNlL2slFY+BIkQlg5qjLc+qYPkIxPQC6S5Rty/Ar+hzzDTyyT/NhdpEjJCr L3yeW3pdz/bJfyvGXGyL2XBZWFzupx/DPoqp337shWvTrau3YqumOpjqPozEFJQi Oodbko+3ftTIuOXc0sLAls0s+lnEVVHxN3Hj04uCNwRIbFvO8iJVyyNacNKAA/PF Ju9kZXMAbRQYT61xBE0BHwRrx7QwOEkVfS/4sSpOJLRnZ/A6D8pXEoPQewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOmUrhIf9SOffSFetkKlZXkKIDeLMB8GA1UdIwQY MBaAFKl/+VedW6BF27kBoowsUViNBP0RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVhfNVY1MWJvRVhidVFHaWpDeFJXSTBFX1JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9mZTQ2YmQtNjdkYS00ZGZlLTljYjQt ZTI1ZDM4ZjVjOTMwLzEvcVhfNVY1MWJvRVhidVFHaWpDeFJXSTBFX1JFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9mZTQ2YmQtNjdkYS00ZGZlLTljYjQtZTI1ZDM4ZjVjOTMw LzEvcVhfNVY1MWJvRVhidVFHaWpDeFJXSTBFX1JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhojhFhly v7b7RtXoYGImFjNXJL4rvNBYV9FXuXMhYjH4DucdgDIv3RssbN+bkBY6hoCpHk4M LI8O6PUQBLkXJNezjKeKotI7pWMFellCEAgtSyV9EQo3Y/Ou87B6lv0i/3Kz9PBS yashf+/OjP+lu/Wt1zsWNBJbD1/Ey3Uf5QBMw6ua0ciPWaCza7J8DUYbjWNB+C54 oG/yC3rq/SZZwkntoQcuCKYcAcaX+jm41ECbw2kV3oK0HHyAUdkRhCDzcGGVZCjO cqFaa4JnCdHOeB5DJ8APnJ7a4MS5EvsHkgzcXJjUbaXYZVLQqn3DA9ZayH54Y7sV nq3C/R8f4oTVoA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:05:35 2025 by rpki-client