This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft File: 5qr3mKBsFXlcb-xweYOYvrD01m4.mft (raw, json) Hash identifier: hEyCTVEvs2xiN2PNuBvOhridLIL2S/Kd2ep4hLtOS0M= Subject key identifier: A5:87:88:59:C5:1F:F7:D8:F4:0C:13:5E:E8:87:23:64:94:01:AA:40 Authority key identifier: E6:AA:F7:98:A0:6C:15:79:5C:6F:EC:70:79:83:98:BE:B0:F4:D6:6E Certificate issuer: /CN=e6aaf798a06c15795c6fec70798398beb0f4d66e Certificate serial: 019AF68AA6E50FD3DE0E8F985F091845456F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft Manifest number: 054C Signing time: Sun 07 Dec 2025 02:01:12 +0000 Manifest this update: Sun 07 Dec 2025 02:01:12 +0000 Manifest next update: Mon 08 Dec 2025 02:01:12 +0000 Files and hashes: 1: 5qr3mKBsFXlcb-xweYOYvrD01m4.crl (hash: uEoZBm3BiuujIt9tR74ys8TohhD03zgq+PaELQ4o/YA=) 2: QF9fIw7vy0eAFpEn9gjeokPnPnM.roa (hash: q/KInKHcPLJ4cSVDaCLVjiOhhH/dOxf+Ggq3kQQJxYc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.crl rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:a6:e5:0f:d3:de:0e:8f:98:5f:09:18:45:45:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6aaf798a06c15795c6fec70798398beb0f4d66e Validity Not Before: Dec 7 02:01:12 2025 GMT Not After : Dec 8 02:01:12 2025 GMT Subject: CN=a5878859c51ff7d8f40c135ee88723649401aa40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:16:14:26:07:02:17:d0:58:5e:dc:34:77:aa: ad:5d:8f:e2:d9:fd:4a:45:6b:3a:9a:2f:c5:a3:10: 1c:cd:0e:34:c0:5c:e2:42:90:85:14:72:c2:e2:88: 47:0e:fa:55:83:c5:f7:e4:7a:f4:7b:b5:b7:c0:f7: 66:2b:df:f4:29:ae:27:37:2a:21:9d:29:77:02:e0: 4f:42:b2:06:aa:a1:c5:f5:4a:4f:58:10:cd:73:25: e1:a8:3a:87:91:b7:34:c3:0b:c7:a0:46:87:02:46: 1a:47:b3:14:e8:9f:81:5f:03:5a:8c:fa:7b:02:49: 56:fc:19:88:25:da:48:6c:16:74:25:b0:4d:52:37: 1a:b2:99:71:9f:b5:96:44:fa:70:55:76:7c:ca:6a: 18:ba:05:0c:84:16:1a:0d:de:9b:ca:96:57:48:24: 6e:74:a9:45:ef:c4:f8:06:a2:a9:e9:2c:a4:df:00: 05:00:f1:f1:26:a4:b3:bb:60:a0:e5:2d:bd:fe:f3: b8:9c:54:12:81:84:b4:78:66:4a:58:b2:9e:c2:58: ec:40:b9:2e:70:d8:7c:fb:4d:c3:20:ae:81:ae:8a: 40:5e:9b:18:dc:bb:e1:41:f0:aa:82:5d:46:6a:c4: f1:c3:77:5d:f9:fb:50:82:94:57:fc:6c:69:b4:0c: 1f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:87:88:59:C5:1F:F7:D8:F4:0C:13:5E:E8:87:23:64:94:01:AA:40 X509v3 Authority Key Identifier: keyid:E6:AA:F7:98:A0:6C:15:79:5C:6F:EC:70:79:83:98:BE:B0:F4:D6:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:76:9a:60:13:51:11:3e:9b:1f:0a:94:8f:90:05:66:c1:f0: 48:34:a2:d4:6d:7a:e4:ac:fb:98:a8:87:ec:51:ea:ec:f6:51: 2f:14:66:bb:3d:0e:c2:e8:b9:f0:90:44:60:6c:31:49:ef:ff: 9d:22:d3:5e:f1:fb:78:42:ce:2b:9a:b7:03:fa:29:be:33:bc: a4:ce:4f:df:9f:33:9f:4c:f9:95:b1:84:36:bb:20:07:f0:27: b3:32:11:40:b9:e5:46:ab:5e:19:6e:62:55:9b:6a:80:b3:d0: 00:1f:f5:7c:c0:0d:55:6a:7f:2e:df:ce:25:19:4d:52:c8:3b: 61:8b:a3:6a:47:3b:02:f0:a2:9a:91:ca:f7:3e:9b:16:7d:61: 2b:18:9a:8f:27:a5:09:4b:0d:54:95:d7:54:34:4d:2c:d4:47: ca:60:ab:6c:63:08:81:00:37:e0:05:87:c0:6b:f3:f5:d5:2b: 27:7d:0a:1d:1a:01:61:b6:64:0e:65:ea:e0:53:32:8a:0d:b2: 9e:b6:b8:9b:12:4c:c6:72:2b:79:ea:b3:64:dc:ae:cc:02:67: b3:23:90:15:c2:5a:89:12:bd:ab:c2:be:35:3d:69:0b:de:37: 59:8c:73:68:bc:07:07:e2:9c:ba:2c:ff:6f:36:17:13:53:b2: 12:6f:13:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2iqblD9PeDo+YXwkYRUVvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2YWFmNzk4YTA2YzE1Nzk1YzZmZWM3MDc5ODM5OGJlYjBm NGQ2NmUwHhcNMjUxMjA3MDIwMTEyWhcNMjUxMjA4MDIwMTEyWjAzMTEwLwYDVQQD EyhhNTg3ODg1OWM1MWZmN2Q4ZjQwYzEzNWVlODg3MjM2NDk0MDFhYTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BYUJgcCF9BYXtw0d6qtXY/i2f1K RWs6mi/FoxAczQ40wFziQpCFFHLC4ohHDvpVg8X35Hr0e7W3wPdmK9/0Ka4nNyoh nSl3AuBPQrIGqqHF9UpPWBDNcyXhqDqHkbc0wwvHoEaHAkYaR7MU6J+BXwNajPp7 AklW/BmIJdpIbBZ0JbBNUjcasplxn7WWRPpwVXZ8ymoYugUMhBYaDd6bypZXSCRu dKlF78T4BqKp6Syk3wAFAPHxJqSzu2Cg5S29/vO4nFQSgYS0eGZKWLKewljsQLku cNh8+03DIK6BropAXpsY3LvhQfCqgl1GasTxw3dd+ftQgpRX/GxptAwfJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWHiFnFH/fY9AwTXuiHI2SUAapAMB8GA1UdIwQY MBaAFOaq95igbBV5XG/scHmDmL6w9NZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXFyM21LQnNGWGxjYi14d2VZT1l2ckQwMW00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny81MTY5NDYtZDViNi00ZjBlLTk2NWMt NTM3OGRlNDMwMzc3LzEvNXFyM21LQnNGWGxjYi14d2VZT1l2ckQwMW00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny81MTY5NDYtZDViNi00ZjBlLTk2NWMtNTM3OGRlNDMwMzc3 LzEvNXFyM21LQnNGWGxjYi14d2VZT1l2ckQwMW00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKnaaYBNR ET6bHwqUj5AFZsHwSDSi1G165Kz7mKiH7FHq7PZRLxRmuz0Owui58JBEYGwxSe// nSLTXvH7eELOK5q3A/opvjO8pM5P358zn0z5lbGENrsgB/AnszIRQLnlRqteGW5i VZtqgLPQAB/1fMANVWp/Lt/OJRlNUsg7YYujakc7AvCimpHK9z6bFn1hKxiajyel CUsNVJXXVDRNLNRHymCrbGMIgQA34AWHwGvz9dUrJ30KHRoBYbZkDmXq4FMyig2y nra4mxJMxnIreeqzZNyuzAJnsyOQFcJaiRK9q8K+NT1pC943WYxzaLwHB+Kcuiz/ bzYXE1OyEm8T7w== -----END CERTIFICATE-----Generated at Sun Dec 7 03:45:41 2025 by rpki-client