This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft File: CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft (raw, json) Hash identifier: OscBXuokWp4aXREX8eJcDnPVWI/Rx+SII66bk3BiPNo= Subject key identifier: 7B:E2:4F:35:40:BF:9C:EC:4F:11:6A:5B:16:46:DD:1B:35:B4:7D:61 Authority key identifier: 09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0 Certificate issuer: /CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0 Certificate serial: 019B416D5A941DA0E0E87B3317D6D0D662AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft Manifest number: 0878 Signing time: Sun 21 Dec 2025 15:00:44 +0000 Manifest this update: Sun 21 Dec 2025 15:00:44 +0000 Manifest next update: Mon 22 Dec 2025 15:00:44 +0000 Files and hashes: 1: CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl (hash: WPjvFo/tIlX6kCmZjDo65lh9JII4D8+7yIsvcHvgZLs=) 2: epomSlopw6iOX1fCpUz6uqeG0uA.roa (hash: F8Xll1o9j2cBCVD/H73mG3PpAM3zIcN16DxPcP7RZWA=) 3: hqflcP10fGd_ugaqcibuFjfMGsQ.roa (hash: Ko25/+lhloUhGb/yVx2/b28QF0QoFlF426ib4Pcz3zE=) 4: mDn_ek0LdNpvLytd6eLimQlfMOA.roa (hash: k3ggKWgy0oimppyNKUN+UMdt+c+CO5ZzgliWJ2+YYxU=) 5: unvmuKqROUfBv3e0sgdNxPiAc_g.roa (hash: rF6TRtskqMXcRCi7rD7nNhDfGn67uQw9dBuhX54qa6c=) 6: zYzxKNvhe6o0TwA72geMxA7neJY.roa (hash: 40MueLGTRXMqHBaO83q9/dqRBs6784OM0Nkp+d6Np9c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:5a:94:1d:a0:e0:e8:7b:33:17:d6:d0:d6:62:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0 Validity Not Before: Dec 21 15:00:44 2025 GMT Not After : Dec 22 15:00:44 2025 GMT Subject: CN=7be24f3540bf9cec4f116a5b1646dd1b35b47d61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7f:e1:b9:5f:3f:74:ac:6d:e6:64:61:de:93: 1f:c7:e8:3c:b6:c7:f0:ba:2f:d8:77:a5:a9:98:d9: d7:6b:86:04:57:36:70:af:8d:bb:1a:2a:0b:eb:67: 0d:13:54:2c:f4:08:fa:a4:2c:6f:20:bd:b2:a0:42: 71:75:9d:f8:83:22:d0:99:89:be:63:a1:7e:80:5d: dd:37:57:4a:62:2b:ff:85:8d:53:3f:03:2d:88:e7: 22:d2:f8:48:59:a9:b3:32:de:6b:49:e8:66:d2:8e: df:34:ea:5b:20:f0:9c:a0:a2:c6:bc:a8:a7:7e:e0: b3:3d:48:76:b9:76:42:39:ba:1b:2a:b1:05:7d:9a: cf:29:cd:01:bd:67:17:36:4a:fa:80:95:f1:15:35: b1:da:4c:0c:3b:d4:27:f5:40:60:ab:c0:fb:0b:a3: 03:b0:dc:3f:ff:46:01:58:92:7a:d1:63:8d:53:c0: be:6a:3a:d6:e8:20:9d:1d:04:6c:54:4d:d5:46:05: e7:b2:8c:2f:40:a4:ff:f0:2a:e1:3a:93:53:45:c0: d2:d8:19:9e:88:c8:4a:75:ae:f8:52:a5:ac:9f:06: 84:8b:dd:4b:79:a6:88:5d:78:d7:6d:fb:b5:16:e9: a6:16:66:6c:97:7f:6a:e9:7b:aa:1a:1b:57:94:77: b0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E2:4F:35:40:BF:9C:EC:4F:11:6A:5B:16:46:DD:1B:35:B4:7D:61 X509v3 Authority Key Identifier: keyid:09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:81:ec:7c:f2:3a:69:a1:24:74:4a:92:f7:05:09:b3:88:d9: ba:75:a4:ea:44:0d:5b:52:b7:2c:be:fe:3b:98:7c:68:12:40: 55:46:bf:31:3d:86:b1:74:c4:00:3c:e5:bc:cb:24:e3:26:38: 7b:37:65:65:df:76:aa:2e:48:20:f0:04:4d:62:c6:9e:09:42: 22:ec:08:ce:08:c0:ff:40:6f:4d:28:8b:c4:1d:1d:d5:0c:b8: 34:71:34:12:b8:a5:9a:f6:ae:ba:a0:ba:ed:47:06:d2:d9:b3: d2:e2:ea:b5:03:0b:7a:23:35:5c:92:b1:2c:a1:7e:82:3f:b8: 13:da:af:33:a8:d7:f0:92:fc:a3:c6:d2:fc:36:39:e3:bd:18: 65:f8:16:15:a4:9b:89:85:a2:93:5e:40:82:b5:1b:d9:f2:c5: 4b:5a:97:c3:a3:27:9e:2c:73:b2:eb:1e:3f:e7:f6:7d:11:b2: d1:12:d1:16:0f:a5:6f:83:16:9d:67:49:42:4f:5a:cb:97:b1: ee:a3:fe:60:1e:5f:f9:e0:1c:7d:63:1a:40:4b:8b:6b:f6:b5: 56:a6:2e:1c:6c:04:2b:a1:e7:6d:9f:fd:70:46:d6:96:5a:44: 75:c2:3a:f1:77:bf:d0:78:f5:2c:80:5a:5b:87:4b:f6:02:e4: f5:96:a2:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbVqUHaDg6HszF9bQ1mKtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MGU1OTJhMmUwZDQyN2EwOWFhMmRlMWI5YmFmMDhjY2Qx NGYwYTAwHhcNMjUxMjIxMTUwMDQ0WhcNMjUxMjIyMTUwMDQ0WjAzMTEwLwYDVQQD Eyg3YmUyNGYzNTQwYmY5Y2VjNGYxMTZhNWIxNjQ2ZGQxYjM1YjQ3ZDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3/huV8/dKxt5mRh3pMfx+g8tsfw ui/Yd6WpmNnXa4YEVzZwr427GioL62cNE1Qs9Aj6pCxvIL2yoEJxdZ34gyLQmYm+ Y6F+gF3dN1dKYiv/hY1TPwMtiOci0vhIWamzMt5rSehm0o7fNOpbIPCcoKLGvKin fuCzPUh2uXZCObobKrEFfZrPKc0BvWcXNkr6gJXxFTWx2kwMO9Qn9UBgq8D7C6MD sNw//0YBWJJ60WONU8C+ajrW6CCdHQRsVE3VRgXnsowvQKT/8CrhOpNTRcDS2Bme iMhKda74UqWsnwaEi91LeaaIXXjXbfu1FummFmZsl39q6XuqGhtXlHewDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHviTzVAv5zsTxFqWxZG3Rs1tH1hMB8GA1UdIwQY MBaAFAkOWSouDUJ6Caot4bm68IzNFPCgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1E1WktpNE5Rbm9KcWkzaHVicndqTTBVOEtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xNWY2OTAtNWFkZC00NzBkLWEyODYt MzNiZGM3M2VkMGVhLzEvQ1E1WktpNE5Rbm9KcWkzaHVicndqTTBVOEtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8xNWY2OTAtNWFkZC00NzBkLWEyODYtMzNiZGM3M2VkMGVh LzEvQ1E1WktpNE5Rbm9KcWkzaHVicndqTTBVOEtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY4HsfPI6 aaEkdEqS9wUJs4jZunWk6kQNW1K3LL7+O5h8aBJAVUa/MT2GsXTEADzlvMsk4yY4 ezdlZd92qi5IIPAETWLGnglCIuwIzgjA/0BvTSiLxB0d1Qy4NHE0ErilmvauuqC6 7UcG0tmz0uLqtQMLeiM1XJKxLKF+gj+4E9qvM6jX8JL8o8bS/DY5470YZfgWFaSb iYWik15AgrUb2fLFS1qXw6MnnixzsuseP+f2fRGy0RLRFg+lb4MWnWdJQk9ay5ex 7qP+YB5f+eAcfWMaQEuLa/a1VqYuHGwEK6HnbZ/9cEbWllpEdcI68Xe/0Hj1LIBa W4dL9gLk9Zaiow== -----END CERTIFICATE-----Generated at Sun Dec 21 18:01:57 2025 by rpki-client