This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft File: tQJsmXQJLiIFQkASgfm9_TVsKEI.mft (raw, json) Hash identifier: piDXsaUWwMg78StMdvGNT57rBnC39SvDRVm5INFoQtU= Subject key identifier: 50:E6:3F:EB:4C:EC:99:B7:0A:8A:AD:9F:DD:03:5D:FC:E9:15:3E:8E Authority key identifier: B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42 Certificate issuer: /CN=b5026c9974092e220542401281f9bdfd356c2842 Certificate serial: 019ABC63AC7CD12619FADAFE8F6ABE19DF24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft Manifest number: 0932 Signing time: Tue 25 Nov 2025 19:00:40 +0000 Manifest this update: Tue 25 Nov 2025 19:00:40 +0000 Manifest next update: Wed 26 Nov 2025 19:00:40 +0000 Files and hashes: 1: JyF5UhD9cVqjqquiR-hK995tZzw.roa (hash: 5AXS3YhQ0/Ke6SUL+/AhBjypj7cC6zgjHgX8v/ujINo=) 2: pTQKkEXtOvhz7EuIYUqt-o1qzFk.roa (hash: OW+foSbaeoc9zsDW/uMWemQINFvQAo39Gw9c3A0iOPI=) 3: tQJsmXQJLiIFQkASgfm9_TVsKEI.crl (hash: oS2TEiyVULCdWeWyh3wG728LaRF1q7d+UgLiDu1EMmg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Nov 2025 19:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bc:63:ac:7c:d1:26:19:fa:da:fe:8f:6a:be:19:df:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5026c9974092e220542401281f9bdfd356c2842 Validity Not Before: Nov 25 19:00:40 2025 GMT Not After : Nov 26 19:00:40 2025 GMT Subject: CN=50e63feb4cec99b70a8aad9fdd035dfce9153e8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:35:84:d0:95:40:82:65:3f:4c:6e:05:b2:d6: 0d:83:1d:3c:f2:23:f1:0f:d2:39:30:6e:2b:dd:1c: c7:1f:25:e2:71:7e:db:3e:dc:79:ca:48:68:80:4a: 45:78:6f:65:7e:4c:41:e1:4c:82:2b:30:7a:b2:47: 62:3c:d4:15:1d:c1:b1:9a:7d:4f:89:f5:9c:00:43: 2f:90:3f:03:e2:23:0e:de:53:e3:8c:9b:d3:f2:99: 3a:b8:18:e6:84:09:03:97:73:b2:90:35:34:e6:94: 1c:91:30:bd:e0:7e:da:91:31:d8:e8:ef:47:59:39: 28:97:d9:f3:43:5a:d8:d9:c2:1f:a3:ac:8f:46:d1: 45:a8:5e:b8:55:0d:9c:a4:1b:3c:92:4e:8e:8a:5d: a0:be:b3:aa:ba:29:3d:7a:f2:97:83:cb:56:4b:15: 24:db:99:eb:01:36:97:01:0c:bb:bd:17:e0:27:f8: 1d:2b:13:70:e5:db:d7:ec:9d:56:d8:31:c6:3c:ff: 8c:5d:91:fe:cf:9d:0a:d6:01:b8:b3:6a:83:31:3b: 68:42:71:02:a7:6e:5b:3e:4c:aa:6f:15:89:fe:b3: d3:6a:80:2b:7c:ee:81:d8:9e:af:1f:b1:56:d7:4c: dc:54:d9:79:ce:83:0b:65:60:b8:54:85:26:d5:65: 83:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:E6:3F:EB:4C:EC:99:B7:0A:8A:AD:9F:DD:03:5D:FC:E9:15:3E:8E X509v3 Authority Key Identifier: keyid:B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:49:c2:5c:ef:4e:42:2c:48:2b:c2:6d:47:6e:1c:f2:ac:85: 0b:c4:8f:64:53:f6:7d:3c:3b:47:cc:ed:6d:e6:8a:e6:6e:dc: 55:4c:b5:45:db:3e:4e:e7:43:9d:36:80:2e:c8:43:13:2a:7d: 75:ad:ef:2a:56:55:94:ba:4e:9e:07:bb:1e:aa:84:7b:92:67: 7e:5e:ae:1e:2e:97:b1:ae:fc:75:51:5f:58:1b:15:13:8f:03: 10:d9:bc:a7:8f:62:e3:8f:95:c0:33:78:1b:88:e6:3d:cd:b5: 96:1a:41:c4:d3:70:e5:d8:8c:df:60:28:c9:0e:17:c3:93:45: 19:16:72:ca:4f:3d:eb:af:91:27:30:62:f1:0c:c1:c6:e5:fc: 4d:95:76:9c:9b:b7:ca:0e:a0:61:2a:75:53:93:0a:a3:bc:8c: 6f:9d:29:50:ec:18:1f:09:bd:24:66:ee:46:24:9c:11:6e:d9: d5:6e:60:ad:8a:ba:26:09:79:88:6f:c9:78:b7:50:f2:85:13: b6:70:b7:c3:96:98:c6:ce:4b:2e:a5:48:0d:d9:20:26:24:6f: 50:ba:a0:97:ce:93:bb:69:55:a3:3e:7e:27:64:9b:9c:63:18: 7d:2d:14:eb:c3:63:c2:a3:f3:0a:39:5b:c5:e6:1b:94:b3:dc: 7c:9b:4e:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZq8Y6x80SYZ+tr+j2q+Gd8kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MDI2Yzk5NzQwOTJlMjIwNTQyNDAxMjgxZjliZGZkMzU2 YzI4NDIwHhcNMjUxMTI1MTkwMDQwWhcNMjUxMTI2MTkwMDQwWjAzMTEwLwYDVQQD Eyg1MGU2M2ZlYjRjZWM5OWI3MGE4YWFkOWZkZDAzNWRmY2U5MTUzZThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDWE0JVAgmU/TG4FstYNgx088iPx D9I5MG4r3RzHHyXicX7bPtx5ykhogEpFeG9lfkxB4UyCKzB6skdiPNQVHcGxmn1P ifWcAEMvkD8D4iMO3lPjjJvT8pk6uBjmhAkDl3OykDU05pQckTC94H7akTHY6O9H WTkol9nzQ1rY2cIfo6yPRtFFqF64VQ2cpBs8kk6Oil2gvrOquik9evKXg8tWSxUk 25nrATaXAQy7vRfgJ/gdKxNw5dvX7J1W2DHGPP+MXZH+z50K1gG4s2qDMTtoQnEC p25bPkyqbxWJ/rPTaoArfO6B2J6vH7FW10zcVNl5zoMLZWC4VIUm1WWDMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFDmP+tM7Jm3Coqtn90DXfzpFT6OMB8GA1UdIwQY MBaAFLUCbJl0CS4iBUJAEoH5vf01bChCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFFKc21YUUpMaUlGUWtBU2dmbTlfVFZzS0VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9hZjYyMzItYTRmNS00MjQ0LTk0MzYt ZWVhMjY3YTU4NDk0LzEvdFFKc21YUUpMaUlGUWtBU2dmbTlfVFZzS0VJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9hZjYyMzItYTRmNS00MjQ0LTk0MzYtZWVhMjY3YTU4NDk0 LzEvdFFKc21YUUpMaUlGUWtBU2dmbTlfVFZzS0VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhUnCXO9O QixIK8JtR24c8qyFC8SPZFP2fTw7R8ztbeaK5m7cVUy1Rds+TudDnTaALshDEyp9 da3vKlZVlLpOnge7HqqEe5Jnfl6uHi6Xsa78dVFfWBsVE48DENm8p49i44+VwDN4 G4jmPc21lhpBxNNw5diM32AoyQ4Xw5NFGRZyyk8966+RJzBi8QzBxuX8TZV2nJu3 yg6gYSp1U5MKo7yMb50pUOwYHwm9JGbuRiScEW7Z1W5grYq6Jgl5iG/JeLdQ8oUT tnC3w5aYxs5LLqVIDdkgJiRvULqgl86Tu2lVoz5+J2SbnGMYfS0U68NjwqPzCjlb xeYblLPcfJtOZA== -----END CERTIFICATE-----Generated at Wed Nov 26 03:00:38 2025 by rpki-client