This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft File: q5z9FXRB9pQo3R9jYcpPSuQss4o.mft (raw, json) Hash identifier: +fFgWkpAOkE+59kxJtSgLfNPtFOamvH8PgixTzxzBhI= Subject key identifier: F2:4F:F0:B2:CB:E2:29:0A:A7:1E:FD:7B:2A:25:8B:BC:A4:C6:F7:AD Authority key identifier: AB:9C:FD:15:74:41:F6:94:28:DD:1F:63:61:CA:4F:4A:E4:2C:B3:8A Certificate issuer: /CN=ab9cfd157441f69428dd1f6361ca4f4ae42cb38a Certificate serial: 019B292DFF43A410E584C53CC8FE80DC2C7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft Manifest number: 177F Signing time: Tue 16 Dec 2025 22:00:38 +0000 Manifest this update: Tue 16 Dec 2025 22:00:38 +0000 Manifest next update: Wed 17 Dec 2025 22:00:38 +0000 Files and hashes: 1: dCfTqcxg62Lir67qVkgBChTuqA4.roa (hash: UBu+ymeFM9aQ8J18E3tvVpuPsYqEYn9P+xx2d6+/UxI=) 2: q5z9FXRB9pQo3R9jYcpPSuQss4o.crl (hash: AxR3I7wCFF90KCE5BWXSj/GZ6IvVGgK0J1MS59HT9fc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 22:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:2d:ff:43:a4:10:e5:84:c5:3c:c8:fe:80:dc:2c:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab9cfd157441f69428dd1f6361ca4f4ae42cb38a Validity Not Before: Dec 16 22:00:38 2025 GMT Not After : Dec 17 22:00:38 2025 GMT Subject: CN=f24ff0b2cbe2290aa71efd7b2a258bbca4c6f7ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0b:79:5a:80:0e:cb:35:f7:32:b5:56:7d:fe: 77:3c:b1:12:c9:e9:48:5b:72:bd:6d:95:ac:60:69: a0:28:a5:b0:42:b0:f0:eb:a7:cc:80:31:d7:db:9c: 8f:d0:c6:8f:b1:df:4c:52:5a:b1:62:16:de:ac:68: b7:12:88:1e:93:12:f1:98:c6:6b:9f:c0:cb:62:7d: 75:2f:7f:6e:b9:b1:76:e1:a0:e8:f9:c6:e5:e9:6a: cc:8d:7b:38:c4:6a:d4:c9:a0:ca:a8:6b:1c:f0:44: 77:b7:32:87:7b:9d:e7:59:be:59:89:04:2a:63:8e: be:bb:4e:78:a2:bd:28:0e:1a:93:52:f6:a7:3c:df: 78:9c:e1:d6:34:da:2f:90:d3:6c:56:6e:7a:20:3b: 99:b6:e8:73:ca:bb:7e:ac:c4:38:ca:12:0f:8d:09: 05:d6:13:4f:40:16:6f:2f:19:01:84:2c:94:a6:cd: f9:b4:76:2d:76:a2:ea:2c:8a:9c:30:02:d2:ed:93: 67:77:65:ce:d7:37:42:9a:62:d4:1c:e5:d7:35:63: 80:52:f5:92:81:17:8e:73:9d:52:d5:b2:e0:b6:c5: b9:61:c8:a0:c5:69:57:7a:be:2f:13:7f:33:9c:7e: f5:4a:21:1e:ea:6b:eb:c0:56:01:75:4c:e3:d8:6a: 0e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:4F:F0:B2:CB:E2:29:0A:A7:1E:FD:7B:2A:25:8B:BC:A4:C6:F7:AD X509v3 Authority Key Identifier: keyid:AB:9C:FD:15:74:41:F6:94:28:DD:1F:63:61:CA:4F:4A:E4:2C:B3:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:ab:95:60:4f:fb:ba:9f:b0:f2:c0:d4:be:67:68:85:b7:73: 22:20:5c:d0:07:75:87:8a:cd:5b:fe:ec:95:d3:96:ca:87:8b: fe:4a:5b:65:63:ac:24:08:52:d0:2c:65:46:3b:1f:08:9e:2a: 5c:81:fd:c4:a6:8d:17:56:8f:c7:5c:00:37:d7:01:fc:82:00: b7:10:95:33:ef:38:26:8d:a1:3c:57:46:6c:91:66:cc:f7:c9: 1b:31:fd:6a:b2:9e:21:29:eb:e0:d2:29:12:f4:f4:2a:ed:27: 97:b1:9f:4c:a3:1a:9c:a0:37:a4:2e:0c:91:b7:32:44:cd:22: 5d:33:c8:60:62:4d:55:5d:5e:d7:2f:8b:a8:a6:95:50:ee:ba: ba:a3:46:6d:26:63:0e:a0:26:ed:cb:21:f0:85:a6:9a:06:02: a8:1d:48:21:22:f8:78:15:f8:cb:d4:fb:d0:ec:bc:48:1b:cb: 3b:fe:c7:f6:04:86:f5:22:53:0b:3f:bb:94:11:0c:53:5e:87: fe:b8:dc:88:c3:76:a3:f5:94:fb:37:4c:ab:e8:8c:01:4d:f2: a2:c2:83:f0:e1:37:a5:51:5b:9d:96:1e:2b:e2:f8:90:c4:a5: fa:0e:5c:66:32:6b:6d:a0:5a:3e:b7:e8:2e:ab:f6:fd:56:59: 75:a5:5c:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZspLf9DpBDlhMU8yP6A3Cx+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiOWNmZDE1NzQ0MWY2OTQyOGRkMWY2MzYxY2E0ZjRhZTQy Y2IzOGEwHhcNMjUxMjE2MjIwMDM4WhcNMjUxMjE3MjIwMDM4WjAzMTEwLwYDVQQD EyhmMjRmZjBiMmNiZTIyOTBhYTcxZWZkN2IyYTI1OGJiY2E0YzZmN2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAt5WoAOyzX3MrVWff53PLESyelI W3K9bZWsYGmgKKWwQrDw66fMgDHX25yP0MaPsd9MUlqxYhberGi3EogekxLxmMZr n8DLYn11L39uubF24aDo+cbl6WrMjXs4xGrUyaDKqGsc8ER3tzKHe53nWb5ZiQQq Y46+u054or0oDhqTUvanPN94nOHWNNovkNNsVm56IDuZtuhzyrt+rMQ4yhIPjQkF 1hNPQBZvLxkBhCyUps35tHYtdqLqLIqcMALS7ZNnd2XO1zdCmmLUHOXXNWOAUvWS gReOc51S1bLgtsW5YcigxWlXer4vE38znH71SiEe6mvrwFYBdUzj2GoORQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPJP8LLL4ikKpx79eyoli7ykxvetMB8GA1UdIwQY MBaAFKuc/RV0QfaUKN0fY2HKT0rkLLOKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTV6OUZYUkI5cFFvM1I5alljcFBTdVFzczRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi83ZDMxNGUtNDJjZC00MmNlLTk4NWUt OTU0ZjI2OTEzZjQzLzEvcTV6OUZYUkI5cFFvM1I5alljcFBTdVFzczRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi83ZDMxNGUtNDJjZC00MmNlLTk4NWUtOTU0ZjI2OTEzZjQz LzEvcTV6OUZYUkI5cFFvM1I5alljcFBTdVFzczRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcauVYE/7 up+w8sDUvmdohbdzIiBc0Ad1h4rNW/7sldOWyoeL/kpbZWOsJAhS0CxlRjsfCJ4q XIH9xKaNF1aPx1wAN9cB/IIAtxCVM+84Jo2hPFdGbJFmzPfJGzH9arKeISnr4NIp EvT0Ku0nl7GfTKManKA3pC4MkbcyRM0iXTPIYGJNVV1e1y+LqKaVUO66uqNGbSZj DqAm7csh8IWmmgYCqB1IISL4eBX4y9T70Oy8SBvLO/7H9gSG9SJTCz+7lBEMU16H /rjciMN2o/WU+zdMq+iMAU3yosKD8OE3pVFbnZYeK+L4kMSl+g5cZjJrbaBaPrfo Lqv2/VZZdaVclQ== -----END CERTIFICATE-----Generated at Wed Dec 17 07:57:06 2025 by rpki-client