This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft File: qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft (raw, json) Hash identifier: NrnZuhgcmGLbhsXXjreNLPuZxmI4A84WO5jJfDnYaX4= Subject key identifier: B8:FA:BA:59:16:C2:B7:75:C0:82:89:44:B5:BF:E5:F8:F1:22:99:E4 Authority key identifier: A9:8E:59:43:C3:55:D4:8C:00:4E:6B:F4:A3:B6:CD:B8:C3:0A:DC:4C Certificate issuer: /CN=a98e5943c355d48c004e6bf4a3b6cdb8c30adc4c Certificate serial: 019B0F37974CBD20F78C7491E3816C8485FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft Manifest number: 1771 Signing time: Thu 11 Dec 2025 21:01:00 +0000 Manifest this update: Thu 11 Dec 2025 21:01:00 +0000 Manifest next update: Fri 12 Dec 2025 21:01:00 +0000 Files and hashes: 1: KE4XnKQhqPguqlRYcxIoqo981UE.roa (hash: az71zExo8C/1i/65qlceZGsCGShh0tDnt7kF10fzzW0=) 2: qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl (hash: tXvEBN5FGX3uSaaQkPiVGtLODqjmfEUwVxeCy5CkMtk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 21:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:97:4c:bd:20:f7:8c:74:91:e3:81:6c:84:85:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a98e5943c355d48c004e6bf4a3b6cdb8c30adc4c Validity Not Before: Dec 11 21:01:00 2025 GMT Not After : Dec 12 21:01:00 2025 GMT Subject: CN=b8faba5916c2b775c0828944b5bfe5f8f12299e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:88:50:4d:9a:c2:ef:ee:a1:51:0c:70:33:fc: 76:09:68:9f:96:34:a7:3b:aa:e7:dc:77:17:28:91: 58:e3:cd:ad:a5:17:89:38:50:cb:51:58:67:94:ee: cf:fd:96:36:fa:64:c4:20:60:e5:7c:b6:b4:c5:5b: 1f:93:d3:db:69:2b:d0:59:94:b5:65:a5:57:27:6a: f4:e6:c5:64:c7:26:8f:32:88:c3:20:fd:d6:fa:dc: 98:bd:d6:f0:a8:49:1a:d6:60:97:71:be:ab:39:62: 4a:1f:e2:5a:a8:4a:3e:cb:9d:0d:8c:7b:b1:fe:6e: c6:ef:6f:12:b8:22:06:56:0b:5a:65:fd:79:79:17: ff:e0:b5:fe:d5:41:c9:5e:9e:a7:50:4e:dd:2f:bc: c9:82:f8:c0:19:d6:60:bd:f3:ee:17:c5:27:c3:9d: cd:04:73:99:42:64:13:88:d8:98:4b:16:be:47:b9: fa:aa:72:f5:22:c9:60:01:34:57:f0:90:53:57:cc: a3:fe:96:5d:8f:c8:b4:4d:f9:e9:c0:f1:3f:ea:bc: f7:0c:61:a0:a6:52:dc:7a:85:5d:ec:72:97:9e:e0: c2:6b:77:eb:fd:e9:09:7f:1e:ed:e0:e3:75:a3:97: d4:76:f9:e0:65:b9:ff:0b:e6:23:8b:0a:b0:15:02: d4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:FA:BA:59:16:C2:B7:75:C0:82:89:44:B5:BF:E5:F8:F1:22:99:E4 X509v3 Authority Key Identifier: keyid:A9:8E:59:43:C3:55:D4:8C:00:4E:6B:F4:A3:B6:CD:B8:C3:0A:DC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:33:7a:68:ce:aa:0a:de:5c:c4:26:98:8e:d3:c5:06:e8:e7: 30:f7:9d:7e:f9:b6:25:2f:c1:b7:fe:b0:69:f6:41:3a:d4:f7: 8f:33:87:d9:20:e8:51:ec:39:f5:eb:39:9a:39:9f:ae:a1:3b: b6:49:9d:b8:a3:59:99:36:b2:36:31:b5:14:bf:22:1d:d0:2a: e1:94:5b:2f:67:de:7d:c3:12:9a:17:dd:7f:44:85:73:c1:38: 34:84:56:5f:60:d8:37:d5:87:a1:f2:9e:60:63:bb:63:60:0e: c2:38:c3:66:46:7c:06:c7:07:fa:35:c7:f3:a6:5f:31:43:4c: 9c:45:1d:ba:47:ba:84:01:0c:27:7a:ee:8b:14:eb:29:72:a4: 4d:b3:61:54:67:4d:04:dd:8f:7f:21:c9:8c:22:77:49:35:78: 70:be:98:a1:15:03:fa:1c:3e:0f:2c:b9:9c:44:81:45:6f:c1: 7a:9e:ae:9c:54:5e:a5:94:65:53:ea:e7:2a:72:d9:6c:1c:e8: 39:0b:75:fb:20:3a:70:7a:e7:7d:af:94:98:96:79:21:eb:dd: a8:ed:18:8c:4f:a5:b8:0c:c8:50:84:bc:3b:b9:91:bb:03:7d: ff:1c:73:55:0c:c8:92:b4:38:b1:fc:4e:38:8a:26:fc:03:3b: 10:be:88:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN5dMvSD3jHSR44FshIX/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5OGU1OTQzYzM1NWQ0OGMwMDRlNmJmNGEzYjZjZGI4YzMw YWRjNGMwHhcNMjUxMjExMjEwMTAwWhcNMjUxMjEyMjEwMTAwWjAzMTEwLwYDVQQD EyhiOGZhYmE1OTE2YzJiNzc1YzA4Mjg5NDRiNWJmZTVmOGYxMjI5OWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYhQTZrC7+6hUQxwM/x2CWifljSn O6rn3HcXKJFY482tpReJOFDLUVhnlO7P/ZY2+mTEIGDlfLa0xVsfk9PbaSvQWZS1 ZaVXJ2r05sVkxyaPMojDIP3W+tyYvdbwqEka1mCXcb6rOWJKH+JaqEo+y50NjHux /m7G728SuCIGVgtaZf15eRf/4LX+1UHJXp6nUE7dL7zJgvjAGdZgvfPuF8Unw53N BHOZQmQTiNiYSxa+R7n6qnL1IslgATRX8JBTV8yj/pZdj8i0TfnpwPE/6rz3DGGg plLceoVd7HKXnuDCa3fr/ekJfx7t4ON1o5fUdvngZbn/C+YjiwqwFQLU9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLj6ulkWwrd1wIKJRLW/5fjxIpnkMB8GA1UdIwQY MBaAFKmOWUPDVdSMAE5r9KO2zbjDCtxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVk1WlE4TlYxSXdBVG12MG83Yk51TU1LM0V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9jZDkyY2QtN2ZlMy00MjIzLTgzNTAt M2M3NzNhNmM0MmY5LzEvcVk1WlE4TlYxSXdBVG12MG83Yk51TU1LM0V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9jZDkyY2QtN2ZlMy00MjIzLTgzNTAtM2M3NzNhNmM0MmY5 LzEvcVk1WlE4TlYxSXdBVG12MG83Yk51TU1LM0V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVjN6aM6q Ct5cxCaYjtPFBujnMPedfvm2JS/Bt/6wafZBOtT3jzOH2SDoUew59es5mjmfrqE7 tkmduKNZmTayNjG1FL8iHdAq4ZRbL2fefcMSmhfdf0SFc8E4NIRWX2DYN9WHofKe YGO7Y2AOwjjDZkZ8BscH+jXH86ZfMUNMnEUduke6hAEMJ3ruixTrKXKkTbNhVGdN BN2PfyHJjCJ3STV4cL6YoRUD+hw+Dyy5nESBRW/Bep6unFRepZRlU+rnKnLZbBzo OQt1+yA6cHrnfa+UmJZ5IevdqO0YjE+luAzIUIS8O7mRuwN9/xxzVQzIkrQ4sfxO OIom/AM7EL6IGQ== -----END CERTIFICATE-----Generated at Fri Dec 12 06:28:57 2025 by rpki-client