This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft File: qS5dl54DJTmZRrI5CCLTDx0vNeE.mft (raw, json) Hash identifier: vBzc+ci7eHwOvbJa5EGnkz3YCqI0TuvjQkc+mdzfkTg= Subject key identifier: 65:3C:D6:54:6B:79:FE:19:BE:C8:0C:E7:97:54:23:E6:F4:DA:67:CB Authority key identifier: A9:2E:5D:97:9E:03:25:39:99:46:B2:39:08:22:D3:0F:1D:2F:35:E1 Certificate issuer: /CN=a92e5d979e0325399946b2390822d30f1d2f35e1 Certificate serial: 019B10B83E18A6EA6DADEB99EAEEA415AE14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft Manifest number: 0226 Signing time: Fri 12 Dec 2025 04:01:08 +0000 Manifest this update: Fri 12 Dec 2025 04:01:08 +0000 Manifest next update: Sat 13 Dec 2025 04:01:08 +0000 Files and hashes: 1: JQJmD49tR8jandeFHJ1IkrOGoDQ.roa (hash: qBRt18tQW7myUfjqyk6Za7F1LghK7qoZn+vndFJYSpM=) 2: qS5dl54DJTmZRrI5CCLTDx0vNeE.crl (hash: s9HPNPrc/YJkv1feg7SP3eDoQ6/jVdMdbnMXm0tYU1Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 04:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:b8:3e:18:a6:ea:6d:ad:eb:99:ea:ee:a4:15:ae:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a92e5d979e0325399946b2390822d30f1d2f35e1 Validity Not Before: Dec 12 04:01:08 2025 GMT Not After : Dec 13 04:01:08 2025 GMT Subject: CN=653cd6546b79fe19bec80ce7975423e6f4da67cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ae:00:63:63:0e:94:aa:95:0c:6d:a3:dc:1c: 4f:94:e0:31:98:7b:80:2b:39:86:f6:5c:7a:21:75: 95:bb:43:24:bd:39:a2:11:15:ad:bf:17:39:93:38: 60:be:89:f4:61:81:e8:45:47:f4:b4:49:f9:38:d3: 5a:bb:de:9f:c2:a8:f3:38:9c:3c:06:8c:94:92:1b: 7e:fe:9b:0d:2d:ec:4d:1f:88:10:34:79:02:cc:4c: 76:b3:1e:15:aa:b9:c5:73:d5:30:31:a6:5e:3e:98: 39:48:38:39:bb:b9:9c:2b:2f:82:31:00:e2:7f:54: 05:bd:ca:f3:84:38:13:5e:f4:8c:44:03:a4:10:51: ab:e4:52:15:cb:b9:b2:ba:14:b9:2f:71:e4:b6:96: cc:a6:19:77:5f:3c:bf:52:26:94:86:d8:05:9b:9c: 2a:35:b1:19:ec:d3:ba:27:7b:06:4c:b9:ba:30:19: 3d:e5:34:a2:d4:b4:7e:03:7e:9b:3d:51:5c:f7:12: 09:14:d4:61:a2:ec:19:2a:99:87:ca:a2:0a:03:a0: 3c:1b:04:48:d0:b3:b1:fa:99:c0:77:b6:e8:c1:18: 0d:43:dc:63:bd:ce:22:d7:b3:cf:56:c1:6d:7b:ca: 46:27:e7:13:df:f9:ac:f3:30:aa:8b:64:31:97:51: 5a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:3C:D6:54:6B:79:FE:19:BE:C8:0C:E7:97:54:23:E6:F4:DA:67:CB X509v3 Authority Key Identifier: keyid:A9:2E:5D:97:9E:03:25:39:99:46:B2:39:08:22:D3:0F:1D:2F:35:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:03:2f:d2:1d:10:24:1b:b1:41:3f:01:c1:5b:62:26:c3:3d: 16:23:83:54:b9:f5:f3:97:23:60:8d:e3:21:83:62:e2:b6:41: ba:80:96:cd:12:94:02:05:c4:ee:8b:47:9f:68:14:aa:03:1e: dd:7f:c9:a9:d2:4b:0d:1c:ac:c1:64:41:ea:78:e4:fa:f0:58: 48:bd:1e:3d:ca:80:3f:bb:d3:21:87:28:ee:77:80:29:dc:11: 58:a2:fa:6c:c8:9a:84:88:db:25:60:01:44:56:39:4c:94:61: c8:16:0f:9c:d7:79:8f:36:48:1d:16:61:01:26:8d:43:29:6d: 8b:1b:12:73:37:82:4f:02:01:e6:1a:2f:a0:d2:13:23:21:0a: 71:e2:28:b2:f1:b0:10:8d:a8:ae:6b:ef:80:4f:59:49:c9:bf: 86:3b:d8:3d:f6:2c:a0:b4:7a:a9:5a:f2:6a:27:ed:0c:d7:7a: 90:ed:1f:5f:41:48:a4:42:33:2b:43:f8:23:ad:25:8a:c2:b8: 04:6f:12:9c:9d:d6:58:5c:67:b2:2e:58:ba:c4:82:e0:ed:fe: 23:6c:d6:f0:9c:2f:cf:60:43:70:c5:5c:a3:c0:8a:3a:3c:4d: c2:ae:2f:b5:23:63:74:57:d6:ae:4b:5a:58:43:6e:93:11:2f: 57:4f:b3:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQuD4YpuptreuZ6u6kFa4UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5MmU1ZDk3OWUwMzI1Mzk5OTQ2YjIzOTA4MjJkMzBmMWQy ZjM1ZTEwHhcNMjUxMjEyMDQwMTA4WhcNMjUxMjEzMDQwMTA4WjAzMTEwLwYDVQQD Eyg2NTNjZDY1NDZiNzlmZTE5YmVjODBjZTc5NzU0MjNlNmY0ZGE2N2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuK4AY2MOlKqVDG2j3BxPlOAxmHuA KzmG9lx6IXWVu0MkvTmiERWtvxc5kzhgvon0YYHoRUf0tEn5ONNau96fwqjzOJw8 BoyUkht+/psNLexNH4gQNHkCzEx2sx4VqrnFc9UwMaZePpg5SDg5u7mcKy+CMQDi f1QFvcrzhDgTXvSMRAOkEFGr5FIVy7myuhS5L3HktpbMphl3Xzy/UiaUhtgFm5wq NbEZ7NO6J3sGTLm6MBk95TSi1LR+A36bPVFc9xIJFNRhouwZKpmHyqIKA6A8GwRI 0LOx+pnAd7bowRgNQ9xjvc4i17PPVsFte8pGJ+cT3/ms8zCqi2Qxl1FaYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGU81lRref4ZvsgM55dUI+b02mfLMB8GA1UdIwQY MBaAFKkuXZeeAyU5mUayOQgi0w8dLzXhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVM1ZGw1NERKVG1aUnJJNUNDTFREeDB2TmVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84MTExNWUtYmNhMS00Mzc1LTgxMDAt YTQ3ZDE0MWNmYzVhLzEvcVM1ZGw1NERKVG1aUnJJNUNDTFREeDB2TmVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84MTExNWUtYmNhMS00Mzc1LTgxMDAtYTQ3ZDE0MWNmYzVh LzEvcVM1ZGw1NERKVG1aUnJJNUNDTFREeDB2TmVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANwMv0h0Q JBuxQT8BwVtiJsM9FiODVLn185cjYI3jIYNi4rZBuoCWzRKUAgXE7otHn2gUqgMe 3X/JqdJLDRyswWRB6njk+vBYSL0ePcqAP7vTIYco7neAKdwRWKL6bMiahIjbJWAB RFY5TJRhyBYPnNd5jzZIHRZhASaNQyltixsSczeCTwIB5hovoNITIyEKceIosvGw EI2ormvvgE9ZScm/hjvYPfYsoLR6qVryaiftDNd6kO0fX0FIpEIzK0P4I60lisK4 BG8SnJ3WWFxnsi5YusSC4O3+I2zW8Jwvz2BDcMVco8CKOjxNwq4vtSNjdFfWrkta WENukxEvV0+zyQ== -----END CERTIFICATE-----Generated at Fri Dec 12 13:03:13 2025 by rpki-client