This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft File: Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft (raw, json) Hash identifier: EbG7jpi4sRjqexb+R14OsQ63sdd6IaRqumTY8QZRVOk= Subject key identifier: 17:BB:18:A9:F7:17:AD:98:5D:0C:0D:56:09:17:22:9F:D6:2C:72:C3 Authority key identifier: 43:9C:ED:98:05:A3:C5:D9:34:E2:C5:21:A1:7A:8A:B9:4F:11:AE:C5 Certificate issuer: /CN=439ced9805a3c5d934e2c521a17a8ab94f11aec5 Certificate serial: 019B48F04555B24A72BC3B5EB4802BB1EE43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft Manifest number: 06C4 Signing time: Tue 23 Dec 2025 02:01:04 +0000 Manifest this update: Tue 23 Dec 2025 02:01:04 +0000 Manifest next update: Wed 24 Dec 2025 02:01:04 +0000 Files and hashes: 1: Ku3HRyioj0ql8ozTbPCiAHlL8-E.roa (hash: gtf9gLEz02KrYfoccfEAryEzPGbpHsjqTO4FxJ768C8=) 2: Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl (hash: RKWjt1LGVGxjNCy3TGRbDt5q5yYiGgQ9k0RN1L8w8ZY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:f0:45:55:b2:4a:72:bc:3b:5e:b4:80:2b:b1:ee:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439ced9805a3c5d934e2c521a17a8ab94f11aec5 Validity Not Before: Dec 23 02:01:04 2025 GMT Not After : Dec 24 02:01:04 2025 GMT Subject: CN=17bb18a9f717ad985d0c0d560917229fd62c72c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e6:e6:a1:d5:bc:26:7a:fb:79:08:08:72:8d: f2:8f:4a:d8:5e:e0:68:52:19:3f:b0:4d:cb:a7:b2: 77:56:b5:04:bc:1d:47:d5:3f:0c:1b:94:6c:bb:8c: 4a:b1:03:f0:db:54:6f:34:c0:ee:24:44:02:86:c4: 98:80:d4:d5:9b:26:62:d6:8e:ad:6f:b7:8f:9b:67: 56:0e:00:5b:81:cc:dc:f8:3b:76:0f:42:31:98:f3: 39:e7:4b:c0:61:22:91:e7:b7:57:81:0a:6d:85:24: 5c:28:cb:3c:c5:75:74:d1:d6:d8:e2:e1:1e:00:bf: b4:26:c0:f8:25:34:9c:36:09:e7:9d:ff:1b:76:0d: 2a:8c:bd:91:c3:4d:57:dc:56:0f:3b:e4:15:c6:28: a9:48:f6:9c:ef:c1:65:6d:65:4b:fb:34:8c:ad:7b: 5a:6e:2c:2b:3c:80:20:aa:63:81:76:fe:3d:13:c0: 39:a7:f6:ed:57:a5:4c:ed:66:2f:d9:2f:13:ca:78: 7e:38:ed:27:e9:9e:c5:38:05:8f:2a:78:90:71:27: 47:62:36:c0:35:e2:d8:3e:11:a2:7c:a8:ce:e1:ab: 53:c0:42:2c:16:74:9e:41:b6:00:cc:bd:3f:69:8e: ca:13:c9:f9:36:e0:bc:f6:05:26:63:f6:8b:65:b3: 10:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:BB:18:A9:F7:17:AD:98:5D:0C:0D:56:09:17:22:9F:D6:2C:72:C3 X509v3 Authority Key Identifier: keyid:43:9C:ED:98:05:A3:C5:D9:34:E2:C5:21:A1:7A:8A:B9:4F:11:AE:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:87:51:50:d0:e3:03:b4:64:68:22:ee:08:ed:f7:b0:71:13: 1c:8a:0b:6b:63:c8:59:2a:cc:59:08:ff:e3:f3:5e:24:3d:b9: 37:6d:54:55:b0:32:2f:7b:6d:11:dc:54:99:8d:a2:72:9b:53: d6:69:75:b2:47:6f:57:5e:44:7f:78:12:44:48:03:19:4b:f2: ef:10:22:72:a4:e8:72:70:df:3d:22:95:fd:d1:b1:7b:40:62: 8e:1b:dd:c4:53:83:4e:dc:d1:f7:61:3a:cf:36:07:cf:2d:88: 92:f9:11:66:85:f2:60:3e:41:e7:a3:af:01:1c:16:1b:a2:09: c8:ee:ec:e2:bd:18:96:a4:ac:16:ef:a1:4e:f3:56:00:a8:24: 6d:8e:e6:3a:22:e9:51:8a:9d:d5:4c:38:54:64:db:d3:95:00: fa:00:1f:cc:c0:19:e6:4a:b1:8a:ab:8f:51:d5:61:05:f2:c1: 32:7d:a1:fa:4e:bf:c5:7b:0c:57:22:e2:ee:dd:d7:b7:5f:81: d8:2f:f3:a2:59:44:c4:11:64:ac:e9:69:13:62:d6:34:e4:d8: c2:71:0b:13:fc:58:94:fd:95:6f:a4:4f:48:0a:f0:f8:ba:90: ce:86:f1:4e:ed:03:7a:7f:02:5c:aa:df:7d:be:50:7b:a5:50: a3:b3:27:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtI8EVVskpyvDtetIArse5DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzOWNlZDk4MDVhM2M1ZDkzNGUyYzUyMWExN2E4YWI5NGYx MWFlYzUwHhcNMjUxMjIzMDIwMTA0WhcNMjUxMjI0MDIwMTA0WjAzMTEwLwYDVQQD EygxN2JiMThhOWY3MTdhZDk4NWQwYzBkNTYwOTE3MjI5ZmQ2MmM3MmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvubmodW8Jnr7eQgIco3yj0rYXuBo Uhk/sE3Lp7J3VrUEvB1H1T8MG5Rsu4xKsQPw21RvNMDuJEQChsSYgNTVmyZi1o6t b7ePm2dWDgBbgczc+Dt2D0IxmPM550vAYSKR57dXgQpthSRcKMs8xXV00dbY4uEe AL+0JsD4JTScNgnnnf8bdg0qjL2Rw01X3FYPO+QVxiipSPac78FlbWVL+zSMrXta biwrPIAgqmOBdv49E8A5p/btV6VM7WYv2S8Tynh+OO0n6Z7FOAWPKniQcSdHYjbA NeLYPhGifKjO4atTwEIsFnSeQbYAzL0/aY7KE8n5NuC89gUmY/aLZbMQ3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBe7GKn3F62YXQwNVgkXIp/WLHLDMB8GA1UdIwQY MBaAFEOc7ZgFo8XZNOLFIaF6irlPEa7FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTV6dG1BV2p4ZGswNHNVaG9YcUt1VThScnNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83YjUwN2EtZmVjZC00YWUzLTgwNWQt YTc3ODM0NWFlZDg4LzEvUTV6dG1BV2p4ZGswNHNVaG9YcUt1VThScnNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC83YjUwN2EtZmVjZC00YWUzLTgwNWQtYTc3ODM0NWFlZDg4 LzEvUTV6dG1BV2p4ZGswNHNVaG9YcUt1VThScnNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGYdRUNDj A7RkaCLuCO33sHETHIoLa2PIWSrMWQj/4/NeJD25N21UVbAyL3ttEdxUmY2icptT 1ml1skdvV15Ef3gSREgDGUvy7xAicqTocnDfPSKV/dGxe0BijhvdxFODTtzR92E6 zzYHzy2IkvkRZoXyYD5B56OvARwWG6IJyO7s4r0YlqSsFu+hTvNWAKgkbY7mOiLp UYqd1Uw4VGTb05UA+gAfzMAZ5kqxiquPUdVhBfLBMn2h+k6/xXsMVyLi7t3Xt1+B 2C/zollExBFkrOlpE2LWNOTYwnELE/xYlP2Vb6RPSArw+LqQzobxTu0Den8CXKrf fb5Qe6VQo7Mn2A== -----END CERTIFICATE-----Generated at Tue Dec 23 04:15:09 2025 by rpki-client