This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft File: rqwbISmrusZTn4DaZVDElyHQqMQ.mft (raw, json) Hash identifier: HtwgCKJFrQKbyoakQExICz1E/qO9nxXn40qWNm6VKQI= Subject key identifier: 99:52:C0:6A:6C:06:F8:2B:A5:21:A0:4A:9C:94:12:30:8A:1D:59:4B Authority key identifier: AE:AC:1B:21:29:AB:BA:C6:53:9F:80:DA:65:50:C4:97:21:D0:A8:C4 Certificate issuer: /CN=aeac1b2129abbac6539f80da6550c49721d0a8c4 Certificate serial: 019B066C0D14E87A36789555E058210F48F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft Manifest number: 176C Signing time: Wed 10 Dec 2025 04:01:43 +0000 Manifest this update: Wed 10 Dec 2025 04:01:43 +0000 Manifest next update: Thu 11 Dec 2025 04:01:43 +0000 Files and hashes: 1: G8jEBCJ40YxdeYHhh1JxuOrWu8k.roa (hash: u6YIbtm6mXClFsqPd0bMxYAJYLNOq1ta01JHXpi1Jvg=) 2: brfKmaHZgWhn9Y1IgcosJigVegE.roa (hash: hRHZ0HKst4J6nqgNJucpnxIpgDhzIMo76gGJN9N1kSE=) 3: rqwbISmrusZTn4DaZVDElyHQqMQ.crl (hash: oS4n9iPlxH8lkuoTdMiBwl9yY8WlObm565qu+XDoEKk=) 4: tTyobIMETJWMRqGGbvqF3q_JzFs.roa (hash: oRSuTrzckp8V2s4ne2mBwQQ1J529VLuwAhGtgjqw+Go=) 5: wd0T2jlDARdpvazu9WfBcqzqFRI.roa (hash: uy8OHigRvAXPuAD5Z6pOXMag0Udux534TcZIu/uohEw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 04:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:6c:0d:14:e8:7a:36:78:95:55:e0:58:21:0f:48:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aeac1b2129abbac6539f80da6550c49721d0a8c4 Validity Not Before: Dec 10 04:01:43 2025 GMT Not After : Dec 11 04:01:43 2025 GMT Subject: CN=9952c06a6c06f82ba521a04a9c9412308a1d594b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:14:56:db:05:7c:3b:8d:74:83:9d:a4:83:09: e8:cd:a2:0f:ac:3a:8d:ac:6e:4a:0e:e3:6e:ec:37: 01:b8:10:6b:bb:4b:d6:da:f5:ea:d5:54:a2:8c:87: 50:82:78:92:aa:1c:d7:64:9b:3a:f9:34:b0:95:bc: d1:e9:e2:6b:a5:ea:67:42:8b:cb:cd:47:ff:72:98: 8b:d9:cf:69:e8:a3:eb:c4:fb:c0:52:19:52:36:b5: 63:8c:54:c3:83:22:7f:cf:e3:8a:6e:09:c3:50:8b: 46:d6:0c:e7:d5:f7:81:37:fa:cd:e0:be:d7:3c:53: 94:89:34:82:32:ff:11:e8:d0:b1:20:bc:6a:60:cc: 96:37:4c:0d:c0:72:4d:ad:8c:68:b4:d2:2e:51:8a: 50:9f:f2:79:4d:4e:43:58:cc:0a:37:38:ed:dd:d1: c6:bd:fd:31:2b:47:c9:ea:bf:ec:d5:ee:45:7d:1f: 0a:e4:00:40:51:77:b8:ea:04:f2:e5:78:1f:cf:48: 99:a0:47:4f:12:45:cb:b8:2c:c3:cb:07:bd:d0:0c: c4:7d:f5:0b:b8:f3:02:0d:07:bd:65:4b:33:b6:e5: a5:a8:36:b7:eb:f9:16:99:67:1d:47:6f:1f:bd:16: f3:8e:c8:60:fa:76:69:27:61:cf:fa:4a:24:0c:3d: a6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:52:C0:6A:6C:06:F8:2B:A5:21:A0:4A:9C:94:12:30:8A:1D:59:4B X509v3 Authority Key Identifier: keyid:AE:AC:1B:21:29:AB:BA:C6:53:9F:80:DA:65:50:C4:97:21:D0:A8:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:32:70:a8:8a:37:47:46:fc:a8:27:f2:d9:88:c1:26:09:10: 7d:89:f2:0d:13:80:bb:8f:ba:ca:a8:d1:31:6f:e8:a2:73:59: 64:55:e9:01:ed:19:00:68:68:25:fd:47:26:98:9b:4d:15:8e: a2:c7:9f:5a:37:18:96:0a:e9:5a:27:36:ac:b5:c6:48:7b:1c: 4a:34:30:8b:14:f0:ab:94:21:22:ec:fa:33:69:27:96:15:08: 40:e6:bb:94:fe:cf:91:9e:76:7f:eb:dd:d0:9d:9d:b3:07:c5: 89:48:d8:11:09:07:70:5c:ec:cb:9f:4e:bf:7c:26:33:a7:3e: 1d:d0:6b:3e:c2:d6:7e:a9:13:54:c0:88:cd:a4:a9:22:f9:6a: 5f:76:4f:8e:4b:89:66:fe:56:51:a0:d3:8b:e3:b9:32:d2:9b: 0a:65:e7:d6:9b:84:39:70:4d:31:e9:42:6f:53:45:44:f2:1f: fa:c3:51:7d:a7:70:21:0b:e0:15:92:6d:0d:a1:75:8d:95:de: c7:ce:8b:ac:96:ad:da:02:93:49:77:04:fb:15:76:3b:42:cb: 3e:ba:40:db:1f:75:fe:f3:d5:0b:e1:ca:2e:74:9c:20:99:59: ca:72:e4:09:41:ba:8c:ef:c1:9e:63:18:ab:f5:9e:ee:b2:13: 4a:d1:11:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsGbA0U6Ho2eJVV4FghD0jwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYWMxYjIxMjlhYmJhYzY1MzlmODBkYTY1NTBjNDk3MjFk MGE4YzQwHhcNMjUxMjEwMDQwMTQzWhcNMjUxMjExMDQwMTQzWjAzMTEwLwYDVQQD Eyg5OTUyYzA2YTZjMDZmODJiYTUyMWEwNGE5Yzk0MTIzMDhhMWQ1OTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6RRW2wV8O410g52kgwnozaIPrDqN rG5KDuNu7DcBuBBru0vW2vXq1VSijIdQgniSqhzXZJs6+TSwlbzR6eJrpepnQovL zUf/cpiL2c9p6KPrxPvAUhlSNrVjjFTDgyJ/z+OKbgnDUItG1gzn1feBN/rN4L7X PFOUiTSCMv8R6NCxILxqYMyWN0wNwHJNrYxotNIuUYpQn/J5TU5DWMwKNzjt3dHG vf0xK0fJ6r/s1e5FfR8K5ABAUXe46gTy5Xgfz0iZoEdPEkXLuCzDywe90AzEffUL uPMCDQe9ZUsztuWlqDa36/kWmWcdR28fvRbzjshg+nZpJ2HP+kokDD2m2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJlSwGpsBvgrpSGgSpyUEjCKHVlLMB8GA1UdIwQY MBaAFK6sGyEpq7rGU5+A2mVQxJch0KjEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnF3YklTbXJ1c1pUbjREYVpWREVseUhRcU1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9iOWJiN2YtMTY2ZC00MWFmLWExZGIt ODY2YjJiMDIxZmM1LzEvcnF3YklTbXJ1c1pUbjREYVpWREVseUhRcU1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9iOWJiN2YtMTY2ZC00MWFmLWExZGItODY2YjJiMDIxZmM1 LzEvcnF3YklTbXJ1c1pUbjREYVpWREVseUhRcU1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOTJwqIo3 R0b8qCfy2YjBJgkQfYnyDROAu4+6yqjRMW/oonNZZFXpAe0ZAGhoJf1HJpibTRWO osefWjcYlgrpWic2rLXGSHscSjQwixTwq5QhIuz6M2knlhUIQOa7lP7PkZ52f+vd 0J2dswfFiUjYEQkHcFzsy59Ov3wmM6c+HdBrPsLWfqkTVMCIzaSpIvlqX3ZPjkuJ Zv5WUaDTi+O5MtKbCmXn1puEOXBNMelCb1NFRPIf+sNRfadwIQvgFZJtDaF1jZXe x86LrJat2gKTSXcE+xV2O0LLPrpA2x91/vPVC+HKLnScIJlZynLkCUG6jO/BnmMY q/We7rITStERtQ== -----END CERTIFICATE-----Generated at Wed Dec 10 11:40:12 2025 by rpki-client