This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft File: 5BqMQuzom1-_whDce1VMcupPNUQ.mft (raw, json) Hash identifier: wjXRJVI7n/eLZozgV+YFZmzvf7qXMceTnuagqSwfAAQ= Subject key identifier: 9A:D9:4E:7E:3C:EE:42:78:CA:2A:84:BE:10:2B:2F:87:E1:9F:58:6F Authority key identifier: E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44 Certificate issuer: /CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544 Certificate serial: 019B34C50AFB96D07FA46CE4ADBDE0812B8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 04:01:27 +0000 Manifest this update: Fri 19 Dec 2025 04:01:27 +0000 Manifest next update: Sat 20 Dec 2025 04:01:27 +0000 Files and hashes: 1: 5BqMQuzom1-_whDce1VMcupPNUQ.crl (hash: HpPhabKD/3HpPCx+t/FMjsiZEGPTDE/fYY0z9qWPm8A=) 2: HK-o-7NfDvPjOf99JzJL3ciySc8.roa (hash: DfwAR936JyRgw/jNJGOSmvyuLlvSXJeaVAPRyL2njSw=) 3: HMayfNdgxzPgTIksbOz-A7oqLCk.roa (hash: 3k2Q130datVFrgfiHucYcHqZP3tKnpk1Z1BK3tttEV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:0a:fb:96:d0:7f:a4:6c:e4:ad:bd:e0:81:2b:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544 Validity Not Before: Dec 19 04:01:27 2025 GMT Not After : Dec 20 04:01:27 2025 GMT Subject: CN=9ad94e7e3cee4278ca2a84be102b2f87e19f586f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bc:8b:9f:a8:09:e4:23:35:93:f7:2d:25:92: 45:7c:bd:0e:ae:76:29:0c:44:aa:bf:70:b0:10:5a: 74:f7:d2:ab:6a:99:d6:f1:b6:17:b3:38:6f:c0:03: 08:84:1f:b6:3f:2e:d7:58:d7:7a:fb:ba:27:54:32: f7:23:e8:8a:f0:57:87:71:4e:0d:ae:98:8e:a1:d7: 35:78:41:79:a4:29:e5:3c:5a:32:f4:89:0a:28:d3: fd:12:1a:bc:24:31:60:01:99:13:4b:43:cc:9e:95: d3:88:a0:06:f4:98:46:c1:72:08:8a:03:67:c7:70: fa:80:c8:4e:cd:cc:85:62:f8:4b:9a:e3:97:4b:63: 55:15:6e:15:76:5f:81:b0:98:14:b3:7c:be:6b:33: 20:36:81:0b:22:00:66:c1:83:2b:29:99:f3:2b:86: ca:42:d8:d0:1b:68:77:79:85:21:d6:be:ca:b8:f2: 6e:f1:e2:60:be:a5:33:72:88:49:31:3b:50:e1:fe: b4:b3:6b:45:b1:9c:b7:85:21:7c:6e:fb:cf:b7:03: e0:56:45:b0:36:bb:47:19:80:21:bc:7d:dc:0f:50: b2:cd:f8:75:90:75:70:94:16:de:80:14:43:36:a6: b2:fb:b3:33:e5:bc:53:94:a0:ba:d6:33:58:7f:e3: 7e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:D9:4E:7E:3C:EE:42:78:CA:2A:84:BE:10:2B:2F:87:E1:9F:58:6F X509v3 Authority Key Identifier: keyid:E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:3a:e8:f9:22:77:b9:f6:4b:ac:3a:59:7f:bc:c9:b1:60:24: da:4a:b0:f2:00:e5:3c:9c:be:d7:f3:e6:44:88:6b:e8:0e:7d: 77:4f:ae:88:a1:89:fc:fd:69:7f:e1:d4:5b:66:8f:38:4b:b6: 4a:4f:26:f0:19:27:5f:cc:e6:00:38:c4:b2:0a:e7:23:ca:f4: 9f:58:08:ab:86:4c:14:86:07:a7:08:72:57:6c:ff:5a:15:42: 65:82:b2:e2:b9:a9:00:93:80:67:fa:81:b8:39:29:21:5b:ea: 45:1b:ef:92:9d:89:e6:51:47:9d:47:f7:d9:67:2d:03:72:6c: 8a:6a:01:d3:85:c2:35:7f:a3:ff:29:d6:5c:0c:24:35:c7:bd: 67:a2:cd:80:b8:c2:87:63:f8:b9:30:a8:4e:15:bb:0f:46:ad: e8:d2:44:f5:7a:84:61:ad:e2:b2:bf:58:19:9f:ce:94:47:b7: 31:73:8a:fb:8b:39:31:26:f4:26:5b:a4:e5:fc:0a:ef:2b:a1: fb:a3:b7:b1:98:08:f5:d0:1b:4f:b4:8d:2e:1a:70:8d:46:13: f6:8c:4d:a1:26:bd:32:bc:93:f6:eb:45:63:3b:ac:f6:54:61: 32:c2:92:f3:d0:68:a9:2e:56:1d:6c:b0:9d:80:78:c6:1f:9f: a6:d1:ca:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xQr7ltB/pGzkrb3ggSuOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0MWE4YzQyZWNlODliNWZiZmMyMTBkYzdiNTU0YzcyZWE0 ZjM1NDQwHhcNMjUxMjE5MDQwMTI3WhcNMjUxMjIwMDQwMTI3WjAzMTEwLwYDVQQD Eyg5YWQ5NGU3ZTNjZWU0Mjc4Y2EyYTg0YmUxMDJiMmY4N2UxOWY1ODZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7yLn6gJ5CM1k/ctJZJFfL0OrnYp DESqv3CwEFp099KrapnW8bYXszhvwAMIhB+2Py7XWNd6+7onVDL3I+iK8FeHcU4N rpiOodc1eEF5pCnlPFoy9IkKKNP9Ehq8JDFgAZkTS0PMnpXTiKAG9JhGwXIIigNn x3D6gMhOzcyFYvhLmuOXS2NVFW4Vdl+BsJgUs3y+azMgNoELIgBmwYMrKZnzK4bK QtjQG2h3eYUh1r7KuPJu8eJgvqUzcohJMTtQ4f60s2tFsZy3hSF8bvvPtwPgVkWw NrtHGYAhvH3cD1Cyzfh1kHVwlBbegBRDNqay+7Mz5bxTlKC61jNYf+N+SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJrZTn487kJ4yiqEvhArL4fhn1hvMB8GA1UdIwQY MBaAFOQajELs6Jtfv8IQ3HtVTHLqTzVEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUJxTVF1em9tMS1fd2hEY2UxVk1jdXBQTlVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kMTljMmQtMzhjMy00NTI2LWE3Y2Yt MWQ2NjZjNDIyYzZhLzEvNUJxTVF1em9tMS1fd2hEY2UxVk1jdXBQTlVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9kMTljMmQtMzhjMy00NTI2LWE3Y2YtMWQ2NjZjNDIyYzZh LzEvNUJxTVF1em9tMS1fd2hEY2UxVk1jdXBQTlVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmTro+SJ3 ufZLrDpZf7zJsWAk2kqw8gDlPJy+1/PmRIhr6A59d0+uiKGJ/P1pf+HUW2aPOEu2 Sk8m8BknX8zmADjEsgrnI8r0n1gIq4ZMFIYHpwhyV2z/WhVCZYKy4rmpAJOAZ/qB uDkpIVvqRRvvkp2J5lFHnUf32WctA3JsimoB04XCNX+j/ynWXAwkNce9Z6LNgLjC h2P4uTCoThW7D0at6NJE9XqEYa3isr9YGZ/OlEe3MXOK+4s5MSb0Jluk5fwK7yuh +6O3sZgI9dAbT7SNLhpwjUYT9oxNoSa9MryT9utFYzus9lRhMsKS89BoqS5WHWyw nYB4xh+fptHKlQ== -----END CERTIFICATE-----Generated at Fri Dec 19 06:41:32 2025 by rpki-client