This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft File: Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft (raw, json) Hash identifier: QJwaR7S5ftS9PINcq1B7C2GX3000QjlQUhMphS6HeOE= Subject key identifier: 01:6B:E3:0C:C7:CA:A6:33:94:0C:55:3C:51:47:51:EA:1D:BF:2D:11 Authority key identifier: 43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB Certificate issuer: /CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb Certificate serial: 019B1B3C3B252B7BE57D84CA75EB3C78BACF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft Manifest number: 178B Signing time: Sun 14 Dec 2025 05:01:30 +0000 Manifest this update: Sun 14 Dec 2025 05:01:30 +0000 Manifest next update: Mon 15 Dec 2025 05:01:30 +0000 Files and hashes: 1: M9YJnMZq-Qo4sKyFoXRkAaUtrDA.roa (hash: lb64jsKs0riSb1j7+rgbV5185uMxPtGDDu6H1Pf3T8s=) 2: P0fCccGAGT3P2tDw-rs5ORyPyrw.roa (hash: zsjstCOlxud3vr07JZ7SKJe39jYJRrodk6RlxTPhlQE=) 3: Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl (hash: MBPUKdMtOr0T0BE5dEBC7eWZ7+Rj9gA09NE1iUfv1wQ=) 4: bOyfi-z2wqC5OBTk4v100ve7CxI.roa (hash: WiyMw0UdlKQAlB0ieoJy4RAqYir7UCqclb4nu/UNQCk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:3c:3b:25:2b:7b:e5:7d:84:ca:75:eb:3c:78:ba:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb Validity Not Before: Dec 14 05:01:30 2025 GMT Not After : Dec 15 05:01:30 2025 GMT Subject: CN=016be30cc7caa633940c553c514751ea1dbf2d11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f6:72:5a:67:e5:8e:9b:87:36:d2:02:2a:63: 81:27:92:8a:d4:3f:72:7f:54:9c:90:14:d6:58:bf: 0c:57:e6:89:71:ed:6f:ff:fd:d6:a5:63:27:46:c5: 48:be:12:d8:a1:46:f8:fc:4a:19:f8:a3:e5:aa:68: 34:91:32:63:f2:50:6c:03:28:95:ee:48:43:53:9d: 40:7d:a3:70:b5:c1:ef:ef:db:d5:53:05:9d:f6:ce: 5f:c5:c0:5f:60:ad:28:42:0d:12:53:ba:a6:c3:4c: 9a:4d:eb:6b:02:9f:46:0f:8e:51:23:83:47:44:3a: 6f:d3:be:61:6a:aa:0d:b5:c3:56:dd:c4:58:e1:08: 0a:ae:07:b9:fb:03:92:c7:ba:c1:e4:6a:0f:40:20: 18:56:59:8b:60:62:06:c4:ce:51:e3:e5:e7:e9:be: ea:aa:f5:0c:9b:42:a0:df:17:3e:23:7f:41:44:84: 1d:c0:ff:7d:37:64:69:e5:42:c8:8f:70:b5:8a:55: c6:8b:e8:a6:99:10:ea:5a:29:c4:98:a0:0a:bc:67: 76:9c:55:6c:7a:7e:45:a1:b0:6d:4e:e0:27:a6:34: 81:3a:4f:99:d7:f3:63:0d:f5:91:b5:62:4b:13:8e: 61:f6:3c:6e:e5:9e:12:98:c3:25:94:a6:97:da:47: e0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:6B:E3:0C:C7:CA:A6:33:94:0C:55:3C:51:47:51:EA:1D:BF:2D:11 X509v3 Authority Key Identifier: keyid:43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:5a:b5:85:c4:70:8a:73:14:77:55:7d:a7:49:29:ce:0b:8c: 45:97:e5:59:db:d8:54:b3:37:6e:74:df:03:a7:d0:87:46:9c: 70:1a:b7:5b:dd:b0:a4:0a:24:a9:59:72:bb:e8:ea:11:32:e2: a9:cd:35:ee:c2:25:52:3a:60:e0:77:60:fd:84:61:69:fa:2d: fa:8b:b2:e5:04:22:6a:c2:8c:36:54:57:2e:29:32:aa:c9:56: d8:8c:2d:aa:0d:5e:b2:bb:5f:0e:e3:5f:43:26:6b:15:f2:f9: a1:3c:d4:9e:1a:4c:b4:12:a2:8a:ba:11:04:cd:06:64:18:c7: 4e:fe:65:37:d8:fe:86:6e:14:4f:2c:7b:9d:17:26:78:0a:eb: 12:89:62:03:06:86:1d:f4:f7:4c:35:35:ab:21:68:8c:f4:96: d3:a7:c5:07:44:0e:1d:74:14:36:17:28:27:b4:cb:e0:85:a1: ce:71:c5:bf:4d:f6:8e:4b:d8:2b:0a:1a:09:69:15:d9:d4:c8: e7:1e:b8:9d:d3:23:79:13:f1:05:30:e3:3f:8a:fb:31:cc:56: 9f:c2:d1:ef:43:6a:3d:ed:a5:96:cc:74:6b:a0:b5:64:9b:4b: 06:a5:d1:5d:9f:1e:96:e7:51:44:cd:ec:9a:7e:81:5a:a2:89: 08:19:4a:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbPDslK3vlfYTKdes8eLrPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzOTY1ZGQxZjZmMjRhNDZkN2NjNGJjY2ZlY2Q0MTUxYzZk ZDFiZmIwHhcNMjUxMjE0MDUwMTMwWhcNMjUxMjE1MDUwMTMwWjAzMTEwLwYDVQQD EygwMTZiZTMwY2M3Y2FhNjMzOTQwYzU1M2M1MTQ3NTFlYTFkYmYyZDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPZyWmfljpuHNtICKmOBJ5KK1D9y f1SckBTWWL8MV+aJce1v//3WpWMnRsVIvhLYoUb4/EoZ+KPlqmg0kTJj8lBsAyiV 7khDU51AfaNwtcHv79vVUwWd9s5fxcBfYK0oQg0SU7qmw0yaTetrAp9GD45RI4NH RDpv075haqoNtcNW3cRY4QgKrge5+wOSx7rB5GoPQCAYVlmLYGIGxM5R4+Xn6b7q qvUMm0Kg3xc+I39BRIQdwP99N2Rp5ULIj3C1ilXGi+immRDqWinEmKAKvGd2nFVs en5FobBtTuAnpjSBOk+Z1/NjDfWRtWJLE45h9jxu5Z4SmMMllKaX2kfgGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAFr4wzHyqYzlAxVPFFHUeodvy0RMB8GA1UdIwQY MBaAFEOWXdH28kpG18xLzP7NQVHG3Rv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTVaZDBmYnlTa2JYekV2TV9zMUJVY2JkR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jNzMxYzQtOTE4My00ZGIzLWI3MGEt MzM5ODBjMDNmMDhlLzEvUTVaZDBmYnlTa2JYekV2TV9zMUJVY2JkR19zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9jNzMxYzQtOTE4My00ZGIzLWI3MGEtMzM5ODBjMDNmMDhl LzEvUTVaZDBmYnlTa2JYekV2TV9zMUJVY2JkR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcFq1hcRw inMUd1V9p0kpzguMRZflWdvYVLM3bnTfA6fQh0accBq3W92wpAokqVlyu+jqETLi qc017sIlUjpg4Hdg/YRhafot+ouy5QQiasKMNlRXLikyqslW2Iwtqg1esrtfDuNf QyZrFfL5oTzUnhpMtBKiiroRBM0GZBjHTv5lN9j+hm4UTyx7nRcmeArrEoliAwaG HfT3TDU1qyFojPSW06fFB0QOHXQUNhcoJ7TL4IWhznHFv032jkvYKwoaCWkV2dTI 5x64ndMjeRPxBTDjP4r7McxWn8LR70NqPe2llsx0a6C1ZJtLBqXRXZ8eludRRM3s mn6BWqKJCBlKxQ== -----END CERTIFICATE-----Generated at Sun Dec 14 13:56:06 2025 by rpki-client