This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft File: 5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft (raw, json) Hash identifier: WJvMfihKv1GYeoQt7B45wjyKIklEWQE8waiNY6TyPHA= Subject key identifier: 1D:A5:4C:79:79:DF:89:9A:84:6F:9E:82:3A:61:E1:52:EB:70:31:53 Authority key identifier: E6:A5:48:52:07:7A:00:78:38:30:3C:1F:61:C8:43:87:CC:CD:D6:84 Certificate issuer: /CN=e6a54852077a007838303c1f61c84387cccdd684 Certificate serial: 019B4A714064E6A944D739E882B5356B7170 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft Manifest number: 051B Signing time: Tue 23 Dec 2025 09:01:34 +0000 Manifest this update: Tue 23 Dec 2025 09:01:34 +0000 Manifest next update: Wed 24 Dec 2025 09:01:34 +0000 Files and hashes: 1: 5qVIUgd6AHg4MDwfYchDh8zN1oQ.crl (hash: Z8dD3+cveGxiyfv0KRGy9tLGce7qIaxNcgfbRVLHMP4=) 2: iXKwz38ZMbiEEaTX-_IpdO5hn4E.roa (hash: 0cx/lQgZi2jHvk5uPfrrhYqKV7eQYwbciyjofO7JZpY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:71:40:64:e6:a9:44:d7:39:e8:82:b5:35:6b:71:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6a54852077a007838303c1f61c84387cccdd684 Validity Not Before: Dec 23 09:01:34 2025 GMT Not After : Dec 24 09:01:34 2025 GMT Subject: CN=1da54c7979df899a846f9e823a61e152eb703153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:71:cb:c1:99:2a:b8:60:c2:9b:41:ad:d0:45: 08:ce:3a:38:01:e0:9a:98:9d:eb:4c:73:ea:09:4e: 19:4b:8d:77:c3:9d:06:84:05:0c:fb:e5:e3:84:ba: 7d:c9:ef:e6:ba:3f:d8:11:d2:5e:6a:2e:08:6b:21: a5:75:25:fc:bf:44:f1:7a:86:2e:c7:d2:5e:9a:f8: 4c:09:a3:d9:c4:fe:65:42:f9:ed:35:f0:35:ad:07: ff:4f:cf:1a:4a:e9:5b:13:ed:26:8c:92:b0:c1:7e: fd:d7:11:2f:eb:45:7d:d2:83:27:35:bf:03:26:5c: be:af:c0:e2:8c:aa:c6:a4:be:c4:ad:57:20:92:c1: 44:a8:ce:58:c9:5e:b1:9e:5a:26:80:a6:e1:07:32: 0e:c5:85:8a:2a:e4:f8:c3:56:1a:f4:a3:1a:77:aa: a1:68:ab:53:42:1d:e0:c4:0a:1b:b5:2a:8c:2a:23: ee:fb:2e:3a:f0:34:1a:8b:3a:9f:ef:d8:1b:a5:96: d1:d3:36:f2:ae:47:cd:98:8b:fb:7b:f7:f3:e9:df: d5:23:fa:03:21:7d:3a:d8:8e:5d:c6:73:db:5b:89: 81:d8:7e:95:9d:50:f2:bd:f1:a5:35:75:fe:a4:cf: db:58:a3:6b:28:e9:73:9e:2d:87:94:4e:a3:76:0a: c8:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A5:4C:79:79:DF:89:9A:84:6F:9E:82:3A:61:E1:52:EB:70:31:53 X509v3 Authority Key Identifier: keyid:E6:A5:48:52:07:7A:00:78:38:30:3C:1F:61:C8:43:87:CC:CD:D6:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:34:93:0e:6a:91:50:94:a7:a1:0f:c7:0d:c8:b2:7d:39:1a: a7:69:84:e0:f7:9e:21:2b:67:ae:0c:0a:5f:83:7f:fc:70:58: 0d:f6:51:05:1c:7e:8c:27:09:00:3e:80:d0:4d:8b:f3:d2:31: c9:dc:b8:5e:d9:ef:e6:86:0b:63:40:18:2a:6e:be:51:8a:9a: e6:9e:65:89:e8:a7:19:c3:54:20:3d:02:2d:31:a3:27:1c:9a: 41:d0:69:16:39:63:35:c5:59:92:dd:f2:56:f3:c9:cf:f7:aa: c3:22:93:53:be:a8:03:ac:3b:4d:92:15:90:aa:4a:62:6d:a6: 65:2c:a6:d9:cb:7b:1c:a2:bc:f5:3d:bc:26:8f:b6:7b:91:4c: 39:23:ea:32:80:6d:02:e9:8a:bd:5f:07:02:87:f9:1b:59:95: a2:e7:fb:69:b2:43:c0:04:6f:5c:2c:1d:90:31:3d:61:18:22: e2:13:cc:22:a1:c0:58:dc:90:65:66:e3:d8:78:74:65:5c:63: 14:4c:60:33:b2:6c:0a:ea:30:64:61:e2:0f:e1:1b:69:7c:16: b9:c9:25:8e:f4:53:94:e5:38:c8:c7:e6:7f:68:8b:24:09:18: d1:fa:36:db:5d:b0:49:d1:37:b5:62:a1:6f:76:ab:9d:ce:89: 07:0f:ff:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKcUBk5qlE1znogrU1a3FwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2YTU0ODUyMDc3YTAwNzgzODMwM2MxZjYxYzg0Mzg3Y2Nj ZGQ2ODQwHhcNMjUxMjIzMDkwMTM0WhcNMjUxMjI0MDkwMTM0WjAzMTEwLwYDVQQD EygxZGE1NGM3OTc5ZGY4OTlhODQ2ZjllODIzYTYxZTE1MmViNzAzMTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HHLwZkquGDCm0Gt0EUIzjo4AeCa mJ3rTHPqCU4ZS413w50GhAUM++XjhLp9ye/muj/YEdJeai4IayGldSX8v0TxeoYu x9JemvhMCaPZxP5lQvntNfA1rQf/T88aSulbE+0mjJKwwX791xEv60V90oMnNb8D Jly+r8DijKrGpL7ErVcgksFEqM5YyV6xnlomgKbhBzIOxYWKKuT4w1Ya9KMad6qh aKtTQh3gxAobtSqMKiPu+y468DQaizqf79gbpZbR0zbyrkfNmIv7e/fz6d/VI/oD IX062I5dxnPbW4mB2H6VnVDyvfGlNXX+pM/bWKNrKOlzni2HlE6jdgrIOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2lTHl534mahG+egjph4VLrcDFTMB8GA1UdIwQY MBaAFOalSFIHegB4ODA8H2HIQ4fMzdaEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXFWSVVnZDZBSGc0TUR3ZlljaERoOHpOMW9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mYzgwM2YtOTY3NS00MzU1LTgwZjYt Nzc3MzAxNTljOGQ0LzEvNXFWSVVnZDZBSGc0TUR3ZlljaERoOHpOMW9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mYzgwM2YtOTY3NS00MzU1LTgwZjYtNzc3MzAxNTljOGQ0 LzEvNXFWSVVnZDZBSGc0TUR3ZlljaERoOHpOMW9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgjSTDmqR UJSnoQ/HDciyfTkap2mE4PeeIStnrgwKX4N//HBYDfZRBRx+jCcJAD6A0E2L89Ix ydy4Xtnv5oYLY0AYKm6+UYqa5p5lieinGcNUID0CLTGjJxyaQdBpFjljNcVZkt3y VvPJz/eqwyKTU76oA6w7TZIVkKpKYm2mZSym2ct7HKK89T28Jo+2e5FMOSPqMoBt AumKvV8HAof5G1mVouf7abJDwARvXCwdkDE9YRgi4hPMIqHAWNyQZWbj2Hh0ZVxj FExgM7JsCuowZGHiD+EbaXwWuckljvRTlOU4yMfmf2iLJAkY0fo2212wSdE3tWKh b3arnc6JBw//qw== -----END CERTIFICATE-----Generated at Tue Dec 23 11:22:11 2025 by rpki-client