This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft File: Qj2TBU8GPPiikYYXNfkAWauewWk.mft (raw, json) Hash identifier: z4UuVoRksewVLOsO/8pnVUu5IY8NKBRn5dM9iONPQsg= Subject key identifier: 16:B7:04:5C:AC:E7:95:AA:2F:8F:A7:1C:2C:69:F2:82:BC:C1:29:C3 Authority key identifier: 42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69 Certificate issuer: /CN=423d93054f063cf8a291861735f90059ab9ec169 Certificate serial: 019B10141DDF12F6431C3D406858CD9F85C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft Manifest number: 1776 Signing time: Fri 12 Dec 2025 01:01:52 +0000 Manifest this update: Fri 12 Dec 2025 01:01:52 +0000 Manifest next update: Sat 13 Dec 2025 01:01:52 +0000 Files and hashes: 1: Fxqjt6X76bxQBXWwSZ7TE0DXZ4E.roa (hash: 1w4Y/QhTTxCziVVyNTfr4p7dQVzXdB6YpDvNxykMieU=) 2: Khu0iUVuTs8ZYAwuEt_S3XCnJdE.roa (hash: 0AzGfOb5OfWgiAbeRL3c+g44yXgjZKIdXOkCd1IWoeo=) 3: MwggIWb8xKY_Gmyt-jhjyCB3Knk.roa (hash: 2e03nmncmnuNRXI/WbH4mmPniZO75Z2kJ+MSZTXtduk=) 4: Qj2TBU8GPPiikYYXNfkAWauewWk.crl (hash: kR0P6OR+a7SQIs9iV2rHx2iyciIHTRLOPYU1aFNgNrY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:14:1d:df:12:f6:43:1c:3d:40:68:58:cd:9f:85:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=423d93054f063cf8a291861735f90059ab9ec169 Validity Not Before: Dec 12 01:01:52 2025 GMT Not After : Dec 13 01:01:52 2025 GMT Subject: CN=16b7045cace795aa2f8fa71c2c69f282bcc129c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:29:5a:b1:25:98:00:36:55:2e:1c:8f:4f:13: 0f:10:5c:0f:04:1b:39:26:c6:0d:99:75:b7:84:6a: 66:91:65:fe:6d:53:81:37:0c:6b:64:4a:77:30:13: bb:03:3a:3b:19:57:9e:fe:cf:e6:be:73:c4:0b:ae: 61:6e:61:dd:a8:89:6f:49:ca:48:cf:02:cd:f5:20: d8:75:b3:29:92:5f:8e:d2:7e:09:5e:5c:af:f1:37: 47:66:76:43:40:f7:ee:0d:b2:c5:fd:95:54:fc:1e: 85:31:d3:45:0f:6c:98:20:d6:31:74:2f:1d:c6:df: 86:d3:35:f1:ab:dd:7e:c4:91:e9:5c:e8:b3:94:0b: 4b:ab:f5:ab:a9:53:74:a3:2d:84:a0:7b:19:1d:33: cc:5f:68:de:6c:f8:96:49:94:e9:55:43:d1:d5:90: 10:72:bc:af:cb:73:71:87:0c:6f:7c:bb:25:2c:50: de:55:7f:de:61:24:3e:64:87:27:f6:f9:2a:4c:a1: 67:ee:d0:75:7d:45:ff:08:e9:5d:43:10:3e:2a:7e: 28:30:5e:eb:9e:95:d7:7e:59:d3:c9:c7:34:3a:e1: 80:bb:43:c2:17:4b:0a:cc:01:71:3a:71:21:27:e4: 2e:d9:44:5d:dc:a1:d1:8e:81:83:81:04:e7:ab:af: 70:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:B7:04:5C:AC:E7:95:AA:2F:8F:A7:1C:2C:69:F2:82:BC:C1:29:C3 X509v3 Authority Key Identifier: keyid:42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:b8:cb:d3:f6:9e:08:7b:5d:a2:90:76:d0:54:21:ce:ab:7e: 3c:50:6a:4b:0d:87:79:7a:e7:0b:d5:9c:d1:0b:e4:26:eb:48: 61:85:5e:f5:a2:c4:44:f6:36:51:33:d7:c3:4e:b0:93:06:4e: 66:cb:b3:6b:c5:27:cc:01:f4:c6:2b:a1:84:4e:b2:d5:49:ac: 01:f9:62:86:90:e1:94:f7:94:e3:4e:29:7c:e3:52:5b:36:de: 2e:8b:46:42:4f:7e:1f:ac:32:b4:c7:02:c6:35:2c:4d:90:88: f2:66:57:c9:ca:3c:4a:ab:d5:b0:47:af:a0:72:34:98:5b:bd: f7:b6:43:0e:d9:3d:d4:c6:c6:7d:11:88:47:ea:9e:df:73:95: e2:c1:11:68:de:ff:32:16:02:0f:ce:af:2c:a5:e6:30:96:d2: 72:06:1f:67:62:4f:36:d9:19:c5:a5:fa:0b:7c:b0:8c:10:aa: ea:d4:e6:6b:8d:0d:28:59:8b:04:08:98:37:65:07:59:6b:3b: 7b:74:65:5f:e9:3c:5f:e0:ef:66:a6:fc:65:c7:2c:60:f8:40: bd:f5:4c:06:71:58:d0:e2:21:16:a9:8f:20:57:a8:23:68:33: 03:a6:e2:0f:d6:d0:a5:df:0f:06:49:e7:39:b9:7d:c1:64:20: c5:4a:1a:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFB3fEvZDHD1AaFjNn4XBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyM2Q5MzA1NGYwNjNjZjhhMjkxODYxNzM1ZjkwMDU5YWI5 ZWMxNjkwHhcNMjUxMjEyMDEwMTUyWhcNMjUxMjEzMDEwMTUyWjAzMTEwLwYDVQQD EygxNmI3MDQ1Y2FjZTc5NWFhMmY4ZmE3MWMyYzY5ZjI4MmJjYzEyOWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ilasSWYADZVLhyPTxMPEFwPBBs5 JsYNmXW3hGpmkWX+bVOBNwxrZEp3MBO7Azo7GVee/s/mvnPEC65hbmHdqIlvScpI zwLN9SDYdbMpkl+O0n4JXlyv8TdHZnZDQPfuDbLF/ZVU/B6FMdNFD2yYINYxdC8d xt+G0zXxq91+xJHpXOizlAtLq/WrqVN0oy2EoHsZHTPMX2jebPiWSZTpVUPR1ZAQ cryvy3NxhwxvfLslLFDeVX/eYSQ+ZIcn9vkqTKFn7tB1fUX/COldQxA+Kn4oMF7r npXXflnTycc0OuGAu0PCF0sKzAFxOnEhJ+Qu2URd3KHRjoGDgQTnq69wkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBa3BFys55WqL4+nHCxp8oK8wSnDMB8GA1UdIwQY MBaAFEI9kwVPBjz4opGGFzX5AFmrnsFpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWoyVEJVOEdQUGlpa1lZWE5ma0FXYXVld1drLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8wYzJlYzMtMzg0NC00YjVmLTlmNTgt NWYxYjY5MDQ4ZmUyLzEvUWoyVEJVOEdQUGlpa1lZWE5ma0FXYXVld1drLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8wYzJlYzMtMzg0NC00YjVmLTlmNTgtNWYxYjY5MDQ4ZmUy LzEvUWoyVEJVOEdQUGlpa1lZWE5ma0FXYXVld1drLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKrjL0/ae CHtdopB20FQhzqt+PFBqSw2HeXrnC9Wc0QvkJutIYYVe9aLERPY2UTPXw06wkwZO Zsuza8UnzAH0xiuhhE6y1UmsAflihpDhlPeU404pfONSWzbeLotGQk9+H6wytMcC xjUsTZCI8mZXyco8SqvVsEevoHI0mFu997ZDDtk91MbGfRGIR+qe33OV4sERaN7/ MhYCD86vLKXmMJbScgYfZ2JPNtkZxaX6C3ywjBCq6tTma40NKFmLBAiYN2UHWWs7 e3RlX+k8X+DvZqb8ZccsYPhAvfVMBnFY0OIhFqmPIFeoI2gzA6biD9bQpd8PBknn Obl9wWQgxUoaMQ== -----END CERTIFICATE-----Generated at Fri Dec 12 04:02:07 2025 by rpki-client