This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft File: 5BqMQuzom1-_whDce1VMcupPNUQ.mft (raw, json) Hash identifier: d3z+RFcubMikLRb2ob8dGP2sNVUlPF83S8YjACakr0E= Subject key identifier: 0E:FB:6D:C6:12:66:C1:6D:E4:AB:E0:8E:B7:C2:EA:13:F1:63:F8:B9 Authority key identifier: E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44 Certificate issuer: /CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544 Certificate serial: 019B085A6E031E9996EBDB37AEFF527F9AAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft Manifest number: 176D Signing time: Wed 10 Dec 2025 13:01:42 +0000 Manifest this update: Wed 10 Dec 2025 13:01:42 +0000 Manifest next update: Thu 11 Dec 2025 13:01:42 +0000 Files and hashes: 1: 5BqMQuzom1-_whDce1VMcupPNUQ.crl (hash: cRmDukLjFxO51+cXBGrGxu2wc9IyFx6PTzsea/NNQGs=) 2: HK-o-7NfDvPjOf99JzJL3ciySc8.roa (hash: DfwAR936JyRgw/jNJGOSmvyuLlvSXJeaVAPRyL2njSw=) 3: HMayfNdgxzPgTIksbOz-A7oqLCk.roa (hash: 3k2Q130datVFrgfiHucYcHqZP3tKnpk1Z1BK3tttEV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:5a:6e:03:1e:99:96:eb:db:37:ae:ff:52:7f:9a:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544 Validity Not Before: Dec 10 13:01:42 2025 GMT Not After : Dec 11 13:01:42 2025 GMT Subject: CN=0efb6dc61266c16de4abe08eb7c2ea13f163f8b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1b:86:2f:4f:4a:54:97:b3:f5:01:17:4e:c5: d6:bb:47:ba:6e:7a:0e:ea:4f:f7:d4:1d:20:11:e6: 7b:c0:ce:c9:5c:96:cd:7f:63:3c:a0:62:a8:b1:84: df:0f:7e:1e:5c:b7:b5:2d:82:c2:a7:9c:d5:5b:1d: ee:f4:c2:7a:6a:27:8b:d7:ac:8a:c4:13:a3:5b:0b: 58:5d:83:51:c0:4f:4e:9c:30:4a:73:0a:41:85:5e: a2:9d:9e:64:33:9f:76:b3:2d:66:5b:d0:15:2f:4e: 1e:ec:07:b7:72:cb:77:42:be:9b:50:f0:8f:7e:ca: 7a:57:67:5b:9a:08:bc:c7:20:4f:5c:08:41:ff:ea: 4f:2a:cc:01:16:f9:0c:66:05:f3:f4:d6:5d:14:22: e9:ab:77:c1:91:7a:8e:b9:4d:2e:a5:81:81:47:7c: c6:1d:19:e6:31:d9:fd:63:9c:31:d0:28:ac:3d:4a: 25:a5:24:5b:27:43:57:07:e8:56:1e:28:ac:bc:53: 46:e6:4b:a0:7a:c2:02:32:ec:8c:79:9a:c1:1d:86: 3f:73:8b:97:7a:13:d2:7e:cd:b8:6d:63:2b:ae:a7: 46:28:8e:19:99:59:47:b5:15:3a:03:a5:9f:3e:53: ef:79:bf:4c:4f:bb:ae:99:fa:21:b0:0d:4d:3d:bf: fb:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:FB:6D:C6:12:66:C1:6D:E4:AB:E0:8E:B7:C2:EA:13:F1:63:F8:B9 X509v3 Authority Key Identifier: keyid:E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:85:9f:c9:a3:28:2e:87:aa:f7:32:a5:2d:1d:87:69:5e:9d: dd:37:22:96:c6:43:6f:80:0b:3f:b6:1d:de:03:1b:19:20:6b: cf:82:ca:f9:0e:a8:8f:58:7e:3a:89:06:5d:05:cc:e0:2a:05: 1d:d5:ad:d1:b4:34:84:2e:b6:ad:68:1c:d4:a6:86:b3:e3:a0: f9:25:75:7f:ba:1d:87:6a:57:91:0b:c9:79:4b:4a:9e:03:c5: b7:64:68:ca:f4:bf:e0:af:4b:1e:e2:e4:2c:02:9c:38:60:0f: a3:d8:4c:15:9f:f1:f6:d1:d6:0f:87:a1:2b:24:12:89:80:07: 74:7c:d3:15:ac:49:20:68:0e:1c:5c:fc:4e:e4:cb:16:26:7f: ce:f7:6a:a7:63:28:e7:4e:a8:6f:0b:1e:af:f0:05:b4:22:e2: c9:54:ef:85:a8:85:b0:16:17:92:31:fa:da:05:a2:6d:44:05: e2:85:04:f9:00:b4:8d:93:62:69:10:31:a9:ec:d5:82:b3:0f: 33:40:16:94:56:de:51:60:1d:19:27:6e:01:7a:e7:e1:7d:e3: a7:b0:cc:7b:56:04:e5:45:e6:f6:2d:54:79:9b:5a:11:23:49: b8:a0:98:c3:92:da:dc:f9:16:0d:43:b9:d8:bf:0a:ef:6a:76: 8c:fa:8c:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsIWm4DHpmW69s3rv9Sf5qsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0MWE4YzQyZWNlODliNWZiZmMyMTBkYzdiNTU0YzcyZWE0 ZjM1NDQwHhcNMjUxMjEwMTMwMTQyWhcNMjUxMjExMTMwMTQyWjAzMTEwLwYDVQQD EygwZWZiNmRjNjEyNjZjMTZkZTRhYmUwOGViN2MyZWExM2YxNjNmOGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRuGL09KVJez9QEXTsXWu0e6bnoO 6k/31B0gEeZ7wM7JXJbNf2M8oGKosYTfD34eXLe1LYLCp5zVWx3u9MJ6aieL16yK xBOjWwtYXYNRwE9OnDBKcwpBhV6inZ5kM592sy1mW9AVL04e7Ae3cst3Qr6bUPCP fsp6V2dbmgi8xyBPXAhB/+pPKswBFvkMZgXz9NZdFCLpq3fBkXqOuU0upYGBR3zG HRnmMdn9Y5wx0CisPUolpSRbJ0NXB+hWHiisvFNG5kugesICMuyMeZrBHYY/c4uX ehPSfs24bWMrrqdGKI4ZmVlHtRU6A6WfPlPveb9MT7uumfohsA1NPb/7WQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA77bcYSZsFt5KvgjrfC6hPxY/i5MB8GA1UdIwQY MBaAFOQajELs6Jtfv8IQ3HtVTHLqTzVEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUJxTVF1em9tMS1fd2hEY2UxVk1jdXBQTlVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kMTljMmQtMzhjMy00NTI2LWE3Y2Yt MWQ2NjZjNDIyYzZhLzEvNUJxTVF1em9tMS1fd2hEY2UxVk1jdXBQTlVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9kMTljMmQtMzhjMy00NTI2LWE3Y2YtMWQ2NjZjNDIyYzZh LzEvNUJxTVF1em9tMS1fd2hEY2UxVk1jdXBQTlVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYYWfyaMo Loeq9zKlLR2HaV6d3TcilsZDb4ALP7Yd3gMbGSBrz4LK+Q6oj1h+OokGXQXM4CoF HdWt0bQ0hC62rWgc1KaGs+Og+SV1f7odh2pXkQvJeUtKngPFt2RoyvS/4K9LHuLk LAKcOGAPo9hMFZ/x9tHWD4ehKyQSiYAHdHzTFaxJIGgOHFz8TuTLFiZ/zvdqp2Mo 506obwser/AFtCLiyVTvhaiFsBYXkjH62gWibUQF4oUE+QC0jZNiaRAxqezVgrMP M0AWlFbeUWAdGSduAXrn4X3jp7DMe1YE5UXm9i1UeZtaESNJuKCYw5La3PkWDUO5 2L8K72p2jPqMkg== -----END CERTIFICATE-----Generated at Wed Dec 10 18:26:59 2025 by rpki-client