This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/QbA1V5NRFBbxRwW15pV14JEgMcE.mft File: QbA1V5NRFBbxRwW15pV14JEgMcE.mft (raw, json) Hash identifier: 9Tqi7866ZvZ6Tsgps3kRnM+WGg/zBsL1BxezFTri/u4= Subject key identifier: D0:B1:54:52:2B:C2:C2:02:3A:FE:6A:EA:EB:45:17:02:36:B2:B9:94 Authority key identifier: 41:B0:35:57:93:51:14:16:F1:47:05:B5:E6:95:75:E0:91:20:31:C1 Certificate issuer: /CN=41b0355793511416f14705b5e69575e0912031c1 Certificate serial: 019B115D1FE08579EF7173F57A512C35C283 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbA1V5NRFBbxRwW15pV14JEgMcE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/QbA1V5NRFBbxRwW15pV14JEgMcE.mft Manifest number: 05 Signing time: Fri 12 Dec 2025 07:01:14 +0000 Manifest this update: Fri 12 Dec 2025 07:01:14 +0000 Manifest next update: Sat 13 Dec 2025 07:01:14 +0000 Files and hashes: 1: 5elOGKL8W_ufOBLRC6OIFTVR06A.roa (hash: SQl7NbHxEwq3Bs2wpYv3mo1sDdx/MH354NYkReyx8KQ=) 2: QbA1V5NRFBbxRwW15pV14JEgMcE.crl (hash: 6qWhXxHKwXTN0PDd6/pFnVVtE+oTPOaOLgMlZYZfxn8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/QbA1V5NRFBbxRwW15pV14JEgMcE.crl rsync://rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/QbA1V5NRFBbxRwW15pV14JEgMcE.mft rsync://rpki.ripe.net/repository/DEFAULT/QbA1V5NRFBbxRwW15pV14JEgMcE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 07:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:5d:1f:e0:85:79:ef:71:73:f5:7a:51:2c:35:c2:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41b0355793511416f14705b5e69575e0912031c1 Validity Not Before: Dec 12 07:01:14 2025 GMT Not After : Dec 13 07:01:14 2025 GMT Subject: CN=d0b154522bc2c2023afe6aeaeb45170236b2b994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:25:ad:7d:d0:36:f7:15:86:d8:f5:a5:dc:bd: cb:83:6c:12:74:8a:0d:af:ad:9c:2d:2c:41:e2:f9: 89:5c:76:27:a4:0e:8d:5e:df:6a:88:80:6d:82:9a: ad:38:31:d6:98:51:3c:ac:75:3c:d8:ef:14:55:3d: f2:2b:0d:cb:bb:41:41:0d:3b:c6:29:0e:91:b2:25: 46:22:73:d1:6a:42:bb:c4:9a:43:45:e1:d1:31:d2: 02:2d:31:59:49:da:51:5e:81:31:ea:d6:04:c4:b1: 1f:66:34:50:05:05:be:ae:b2:63:2c:c1:78:9e:81: 3a:a7:d3:67:c4:a8:e5:96:45:b8:ae:3d:60:95:c1: 3f:fe:a4:14:62:c7:36:b2:22:a4:d7:28:fb:b3:f6: 61:99:6c:19:35:62:44:06:0b:da:5d:33:a5:6e:78: ec:95:a5:cc:ca:62:09:4f:6d:3c:00:94:b6:a5:f7: cc:1c:ad:eb:ac:62:fb:fd:9d:ac:e4:73:4e:b9:e8: 95:65:db:ad:f6:b1:18:93:0e:f3:4e:44:3e:82:98: 0d:6a:5c:a9:62:52:f4:e8:f1:5b:a7:92:ef:23:99: 43:1f:aa:41:3b:c3:1d:a0:6e:e7:7d:dd:b1:e6:49: 43:9f:b6:0f:9e:6e:85:23:e0:c4:09:44:c6:30:01: 44:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:B1:54:52:2B:C2:C2:02:3A:FE:6A:EA:EB:45:17:02:36:B2:B9:94 X509v3 Authority Key Identifier: keyid:41:B0:35:57:93:51:14:16:F1:47:05:B5:E6:95:75:E0:91:20:31:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbA1V5NRFBbxRwW15pV14JEgMcE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/QbA1V5NRFBbxRwW15pV14JEgMcE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/QbA1V5NRFBbxRwW15pV14JEgMcE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:64:9b:83:de:95:e2:12:bf:9b:33:cb:c4:a0:85:03:ad:5a: 26:c4:a1:7c:4f:88:b3:74:3b:45:14:de:3a:49:3a:00:4f:10: 97:78:2f:53:0c:e5:4b:27:c2:8f:ea:fc:cc:1c:f1:96:6c:85: bd:1c:4c:1c:79:27:92:2a:b9:f1:aa:d6:60:5e:7c:c2:ab:14: 32:53:f0:f8:04:dc:73:c9:3c:79:61:c3:d1:60:88:b7:89:5d: 7f:9c:9b:76:d6:c5:92:e0:b5:d9:7c:ba:11:51:a1:56:d4:aa: fb:53:bd:f9:14:6a:06:05:9f:6c:78:22:09:0e:5d:d1:1f:8b: 58:67:f6:b1:70:e1:8e:86:6e:db:ae:d3:ec:1f:05:cb:6a:79: 88:17:55:b4:21:46:09:db:ed:6e:6b:99:78:9f:51:9f:e7:08: 6c:25:7c:40:5f:bc:e1:54:44:1a:fb:30:17:5d:64:05:c1:07: 13:9c:f3:f1:78:53:ae:22:e7:65:87:75:69:ad:0b:44:08:60: f1:49:08:34:71:cc:b5:a3:56:dc:9d:b8:55:1d:b3:94:ab:71: 4d:b1:74:dd:fb:bb:bd:35:33:3a:27:96:45:96:0a:37:93:6e: f5:83:9e:7c:e0:80:d5:08:90:2d:12:32:85:d1:75:03:76:bd: d1:1d:be:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRXR/ghXnvcXP1elEsNcKDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxYjAzNTU3OTM1MTE0MTZmMTQ3MDViNWU2OTU3NWUwOTEy MDMxYzEwHhcNMjUxMjEyMDcwMTE0WhcNMjUxMjEzMDcwMTE0WjAzMTEwLwYDVQQD EyhkMGIxNTQ1MjJiYzJjMjAyM2FmZTZhZWFlYjQ1MTcwMjM2YjJiOTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSWtfdA29xWG2PWl3L3Lg2wSdIoN r62cLSxB4vmJXHYnpA6NXt9qiIBtgpqtODHWmFE8rHU82O8UVT3yKw3Lu0FBDTvG KQ6RsiVGInPRakK7xJpDReHRMdICLTFZSdpRXoEx6tYExLEfZjRQBQW+rrJjLMF4 noE6p9NnxKjllkW4rj1glcE//qQUYsc2siKk1yj7s/ZhmWwZNWJEBgvaXTOlbnjs laXMymIJT208AJS2pffMHK3rrGL7/Z2s5HNOueiVZdut9rEYkw7zTkQ+gpgNalyp YlL06PFbp5LvI5lDH6pBO8MdoG7nfd2x5klDn7YPnm6FI+DECUTGMAFEfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNCxVFIrwsICOv5q6utFFwI2srmUMB8GA1UdIwQY MBaAFEGwNVeTURQW8UcFteaVdeCRIDHBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWJBMVY1TlJGQmJ4UndXMTVwVjE0SkVnTWNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9hOGJkYTctMjQ1MC00ZWE1LTgyN2Mt MGY3NTg5YmMwY2UwLzEvUWJBMVY1TlJGQmJ4UndXMTVwVjE0SkVnTWNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9hOGJkYTctMjQ1MC00ZWE1LTgyN2MtMGY3NTg5YmMwY2Uw LzEvUWJBMVY1TlJGQmJ4UndXMTVwVjE0SkVnTWNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApWSbg96V 4hK/mzPLxKCFA61aJsShfE+Is3Q7RRTeOkk6AE8Ql3gvUwzlSyfCj+r8zBzxlmyF vRxMHHknkiq58arWYF58wqsUMlPw+ATcc8k8eWHD0WCIt4ldf5ybdtbFkuC12Xy6 EVGhVtSq+1O9+RRqBgWfbHgiCQ5d0R+LWGf2sXDhjoZu267T7B8Fy2p5iBdVtCFG CdvtbmuZeJ9Rn+cIbCV8QF+84VREGvswF11kBcEHE5zz8XhTriLnZYd1aa0LRAhg 8UkINHHMtaNW3J24VR2zlKtxTbF03fu7vTUzOieWRZYKN5Nu9YOefOCA1QiQLRIy hdF1A3a90R2+kQ== -----END CERTIFICATE-----Generated at Fri Dec 12 11:29:27 2025 by rpki-client