This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft File: Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft (raw, json) Hash identifier: WwozpyOJFl6rf/4LBtEG622C81c8erAdPZ1mc5EaLwg= Subject key identifier: A2:43:3A:E1:A9:9A:74:AC:21:D4:5F:5C:D0:A0:61:13:BA:F2:68:36 Authority key identifier: 43:98:F6:24:D5:7F:46:13:C0:BF:65:11:61:C7:56:C3:16:65:9A:B9 Certificate issuer: /CN=4398f624d57f4613c0bf651161c756c316659ab9 Certificate serial: 019B59758A0E7898A7FFC8004E66BB6F86E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5j2JNV_RhPAv2URYcdWwxZlmrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft Manifest number: 1796 Signing time: Fri 26 Dec 2025 07:00:33 +0000 Manifest this update: Fri 26 Dec 2025 07:00:33 +0000 Manifest next update: Sat 27 Dec 2025 07:00:33 +0000 Files and hashes: 1: Q5j2JNV_RhPAv2URYcdWwxZlmrk.crl (hash: vBFLl6bizuy4cK88o75g1ShvQYhfUFTcVK85ztCqycY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.crl rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft rsync://rpki.ripe.net/repository/DEFAULT/Q5j2JNV_RhPAv2URYcdWwxZlmrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:8a:0e:78:98:a7:ff:c8:00:4e:66:bb:6f:86:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4398f624d57f4613c0bf651161c756c316659ab9 Validity Not Before: Dec 26 07:00:33 2025 GMT Not After : Dec 27 07:00:33 2025 GMT Subject: CN=a2433ae1a99a74ac21d45f5cd0a06113baf26836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2d:be:94:cf:b1:f4:5c:cf:bb:aa:6f:59:13: 39:3a:b2:95:0d:df:2e:6d:ed:48:45:89:b7:93:87: cf:06:aa:95:51:d2:f5:aa:24:3d:6e:c4:97:11:aa: 54:14:9c:02:92:99:be:67:48:f6:bb:eb:17:2f:63: 68:46:8d:4a:45:2c:08:ce:19:61:37:4e:4c:d8:51: 16:1b:43:d5:e6:df:d9:8b:e3:79:be:95:c7:e3:58: 47:1e:3f:9f:83:ad:22:d5:b6:ea:5c:20:58:b3:e8: c2:c4:59:06:e3:65:6f:56:6e:e1:c6:ae:7e:35:c2: 08:f6:53:78:d9:34:ac:fc:0c:a7:6e:48:6e:04:00: 23:7b:ca:45:cd:6a:22:4e:2d:b7:6f:93:d7:32:62: ac:1c:16:82:e0:df:03:27:9c:f9:4a:36:01:b7:5e: c3:7a:9e:a8:06:e9:96:a3:00:31:ce:23:52:14:68: e6:a1:db:86:e6:c2:03:76:a0:39:94:d0:90:d7:75: 2c:a0:b2:d2:9d:49:e8:f5:e4:f1:42:d9:5d:06:7a: 03:93:a1:a5:32:f7:80:6e:98:c4:f9:7a:f3:a7:79: dd:66:f3:ba:c1:77:a8:9a:6d:60:3d:2a:03:73:8c: 93:d4:3e:43:06:97:8f:bd:87:44:13:d5:1c:31:1c: 0f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:43:3A:E1:A9:9A:74:AC:21:D4:5F:5C:D0:A0:61:13:BA:F2:68:36 X509v3 Authority Key Identifier: keyid:43:98:F6:24:D5:7F:46:13:C0:BF:65:11:61:C7:56:C3:16:65:9A:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5j2JNV_RhPAv2URYcdWwxZlmrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:97:88:6a:0c:c5:2d:1a:5d:ca:d2:a7:3c:4b:5d:4a:b8:01: 0f:d4:1a:fa:dc:ac:62:b3:1f:51:7e:c1:fd:fb:77:37:44:c0: d6:aa:8c:15:56:30:ff:f7:b7:65:70:8c:7e:69:01:d6:e4:48: e6:4f:a2:c9:cf:74:56:b9:5f:31:1b:ac:ba:8b:ee:32:97:98: 3f:f1:1d:3d:2d:49:7f:19:16:75:38:f1:9d:d9:b0:ea:9c:1a: 64:76:68:10:77:e2:15:d2:b8:61:ef:aa:f4:28:4a:2b:46:fb: eb:8c:ac:a8:a5:d0:99:a4:7f:de:d2:8f:38:b7:6c:25:c6:90: dd:fa:82:c4:1a:c9:0b:59:87:a6:30:62:9b:48:8c:99:cd:c3: a0:32:d6:87:9c:57:b4:0d:6a:63:13:b2:ac:ef:ba:de:b8:e5: fc:da:a4:21:fb:2c:fc:61:bf:bb:68:24:3d:78:23:af:62:56: ef:25:5d:32:89:4d:65:d7:b6:9a:76:da:a3:7a:dd:65:03:2c: b7:30:2b:0f:12:e9:61:18:4f:3d:6a:89:34:be:c3:ae:e3:92: 68:9c:2a:04:de:8d:fa:f6:76:2e:d6:e4:a4:2f:dd:67:e9:2b: c0:be:6b:87:f9:fb:d4:5b:ca:57:2a:7c:68:8e:28:65:ea:44: 6a:58:10:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdYoOeJin/8gATma7b4bnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzOThmNjI0ZDU3ZjQ2MTNjMGJmNjUxMTYxYzc1NmMzMTY2 NTlhYjkwHhcNMjUxMjI2MDcwMDMzWhcNMjUxMjI3MDcwMDMzWjAzMTEwLwYDVQQD EyhhMjQzM2FlMWE5OWE3NGFjMjFkNDVmNWNkMGEwNjExM2JhZjI2ODM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApS2+lM+x9FzPu6pvWRM5OrKVDd8u be1IRYm3k4fPBqqVUdL1qiQ9bsSXEapUFJwCkpm+Z0j2u+sXL2NoRo1KRSwIzhlh N05M2FEWG0PV5t/Zi+N5vpXH41hHHj+fg60i1bbqXCBYs+jCxFkG42VvVm7hxq5+ NcII9lN42TSs/AynbkhuBAAje8pFzWoiTi23b5PXMmKsHBaC4N8DJ5z5SjYBt17D ep6oBumWowAxziNSFGjmoduG5sIDdqA5lNCQ13UsoLLSnUno9eTxQtldBnoDk6Gl MveAbpjE+Xrzp3ndZvO6wXeomm1gPSoDc4yT1D5DBpePvYdEE9UcMRwPkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKJDOuGpmnSsIdRfXNCgYRO68mg2MB8GA1UdIwQY MBaAFEOY9iTVf0YTwL9lEWHHVsMWZZq5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTVqMkpOVl9SaFBBdjJVUlljZFd3eFpsbXJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9kN2M0YTAtMjcyZS00NDA5LThkM2It NmE3OWZlZTkxOWViLzEvUTVqMkpOVl9SaFBBdjJVUlljZFd3eFpsbXJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9kN2M0YTAtMjcyZS00NDA5LThkM2ItNmE3OWZlZTkxOWVi LzEvUTVqMkpOVl9SaFBBdjJVUlljZFd3eFpsbXJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI5eIagzF LRpdytKnPEtdSrgBD9Qa+tysYrMfUX7B/ft3N0TA1qqMFVYw//e3ZXCMfmkB1uRI 5k+iyc90VrlfMRusuovuMpeYP/EdPS1JfxkWdTjxndmw6pwaZHZoEHfiFdK4Ye+q 9ChKK0b764ysqKXQmaR/3tKPOLdsJcaQ3fqCxBrJC1mHpjBim0iMmc3DoDLWh5xX tA1qYxOyrO+63rjl/NqkIfss/GG/u2gkPXgjr2JW7yVdMolNZde2mnbao3rdZQMs tzArDxLpYRhPPWqJNL7DruOSaJwqBN6N+vZ2LtbkpC/dZ+krwL5rh/n71FvKVyp8 aI4oZepEalgQ2Q== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:13 2025 by rpki-client