This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft File: 5q1QzkYdtcs3pYPnKbcVSZjssRc.mft (raw, json) Hash identifier: sUt4V/wYu/8WXDB6jhgWm3o9cTFeAWHz0c3Pa5C3JNs= Subject key identifier: 24:72:07:EF:A7:3C:6F:AC:DA:C7:3C:0A:70:03:9E:29:94:47:AA:A4 Authority key identifier: E6:AD:50:CE:46:1D:B5:CB:37:A5:83:E7:29:B7:15:49:98:EC:B1:17 Certificate issuer: /CN=e6ad50ce461db5cb37a583e729b7154998ecb117 Certificate serial: 019B5976E25B2CDE616B419BE4E93268E9A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5q1QzkYdtcs3pYPnKbcVSZjssRc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft Manifest number: 054B Signing time: Fri 26 Dec 2025 07:02:01 +0000 Manifest this update: Fri 26 Dec 2025 07:02:01 +0000 Manifest next update: Sat 27 Dec 2025 07:02:01 +0000 Files and hashes: 1: 5q1QzkYdtcs3pYPnKbcVSZjssRc.crl (hash: E4pcCqUjtuEAVoIiIk2iT5SZL4TpuhsBeU2uYUSR02M=) 2: IGFfOsfuRBLRoDQXZrvrXPV6GDg.roa (hash: GBdaIeCW55nvw4wNP3jzu/1bBBTCqNE/C3I0UV/65Vc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft rsync://rpki.ripe.net/repository/DEFAULT/5q1QzkYdtcs3pYPnKbcVSZjssRc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:e2:5b:2c:de:61:6b:41:9b:e4:e9:32:68:e9:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6ad50ce461db5cb37a583e729b7154998ecb117 Validity Not Before: Dec 26 07:02:01 2025 GMT Not After : Dec 27 07:02:01 2025 GMT Subject: CN=247207efa73c6facdac73c0a70039e299447aaa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:de:83:f5:9a:9a:7d:a7:4a:4d:25:88:d2:62: 18:33:0c:9e:55:b8:6b:c9:ce:f8:e4:cf:9c:5e:67: 1c:9c:24:5e:8c:a3:ca:76:a6:09:9c:ef:86:5d:04: 46:11:5a:7f:00:9e:61:dc:c3:99:33:ef:c5:21:e1: 1c:46:44:7d:28:e9:0f:73:e1:14:fd:86:20:a6:cb: 96:8b:f3:08:64:38:ad:e6:f5:1c:2b:0c:41:d5:c2: 6a:95:87:a0:3f:c8:b0:b0:c3:98:c6:ce:32:9a:f6: 9f:5a:bd:d8:a6:3e:da:88:1c:2a:27:ae:13:22:c7: 4d:ff:2e:80:07:28:32:58:e9:49:d9:6e:48:5c:33: e6:b9:8c:d8:5b:4b:5a:1a:84:59:97:30:ba:2c:03: 73:f1:18:7f:24:c5:df:5b:c2:f7:2e:03:43:5b:ae: 4d:d4:34:cf:51:a7:cd:57:65:4b:9d:d8:57:53:30: 5c:52:0f:15:2f:d8:1c:71:21:b9:5d:e0:ac:88:d7: 70:da:a8:73:e0:07:7a:f3:02:f0:aa:98:36:bf:a5: 8f:94:34:b0:e1:a4:2b:18:07:fd:bd:14:3f:73:af: 1e:b9:33:02:f5:50:c7:42:91:46:d5:92:e3:d0:b9: 21:df:2e:54:75:80:df:ae:c1:47:18:e1:f9:c3:13: 75:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:72:07:EF:A7:3C:6F:AC:DA:C7:3C:0A:70:03:9E:29:94:47:AA:A4 X509v3 Authority Key Identifier: keyid:E6:AD:50:CE:46:1D:B5:CB:37:A5:83:E7:29:B7:15:49:98:EC:B1:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5q1QzkYdtcs3pYPnKbcVSZjssRc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:d0:df:70:db:47:d0:33:b3:83:ff:3e:0c:39:f3:f2:6d:a6: d4:e4:e9:2b:ff:c4:11:65:67:98:af:64:7f:48:26:ff:0c:16: e6:dd:4e:a5:d7:6a:97:07:90:4d:e4:b8:1a:14:e3:f3:5e:c2: 9d:13:c9:51:28:03:71:6b:09:2c:6a:30:6f:a9:c3:65:63:fa: 96:b2:85:7e:73:1e:4a:b3:0d:39:e4:2c:ad:30:ac:c3:f6:ca: e2:48:bd:3b:a5:04:a0:81:a9:db:c6:64:e2:fd:28:b0:8e:3a: 36:50:af:7d:a9:5c:86:ee:64:d3:7b:32:2b:ae:12:84:c4:2f: 79:ab:52:f7:6b:62:d8:44:90:32:ac:ea:3d:d0:c0:0a:5b:3e: 7f:76:4b:50:cc:bc:1f:6c:f3:23:81:97:86:88:5c:42:23:72: b7:02:49:85:75:03:98:3e:c0:fc:5f:20:7c:65:3a:9e:f3:28: e0:1f:5f:e5:14:8c:ec:68:e6:2f:43:97:ba:4a:ec:87:c1:e2: e8:cb:9e:53:c8:eb:df:81:c6:01:dc:89:1d:4e:d6:e6:4b:2b: 55:27:c2:fd:15:94:66:3a:15:5e:c2:3d:f9:73:98:e4:99:32: 0a:ce:ea:1b:bf:77:4f:e4:ad:34:48:66:77:05:24:a4:ec:bc: 3e:60:dd:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZduJbLN5ha0Gb5OkyaOmnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2YWQ1MGNlNDYxZGI1Y2IzN2E1ODNlNzI5YjcxNTQ5OThl Y2IxMTcwHhcNMjUxMjI2MDcwMjAxWhcNMjUxMjI3MDcwMjAxWjAzMTEwLwYDVQQD EygyNDcyMDdlZmE3M2M2ZmFjZGFjNzNjMGE3MDAzOWUyOTk0NDdhYWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoN6D9ZqafadKTSWI0mIYMwyeVbhr yc745M+cXmccnCRejKPKdqYJnO+GXQRGEVp/AJ5h3MOZM+/FIeEcRkR9KOkPc+EU /YYgpsuWi/MIZDit5vUcKwxB1cJqlYegP8iwsMOYxs4ymvafWr3Ypj7aiBwqJ64T IsdN/y6ABygyWOlJ2W5IXDPmuYzYW0taGoRZlzC6LANz8Rh/JMXfW8L3LgNDW65N 1DTPUafNV2VLndhXUzBcUg8VL9gccSG5XeCsiNdw2qhz4Ad68wLwqpg2v6WPlDSw 4aQrGAf9vRQ/c68euTMC9VDHQpFG1ZLj0Lkh3y5UdYDfrsFHGOH5wxN1swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCRyB++nPG+s2sc8CnADnimUR6qkMB8GA1UdIwQY MBaAFOatUM5GHbXLN6WD5ym3FUmY7LEXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXExUXprWWR0Y3MzcFlQbktiY1ZTWmpzc1JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9lYTE3MjUtZGNkNS00OTkwLTk0NDgt MGViM2JhNTEzNzRjLzEvNXExUXprWWR0Y3MzcFlQbktiY1ZTWmpzc1JjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9lYTE3MjUtZGNkNS00OTkwLTk0NDgtMGViM2JhNTEzNzRj LzEvNXExUXprWWR0Y3MzcFlQbktiY1ZTWmpzc1JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACtDfcNtH 0DOzg/8+DDnz8m2m1OTpK//EEWVnmK9kf0gm/wwW5t1OpddqlweQTeS4GhTj817C nRPJUSgDcWsJLGowb6nDZWP6lrKFfnMeSrMNOeQsrTCsw/bK4ki9O6UEoIGp28Zk 4v0osI46NlCvfalchu5k03syK64ShMQveatS92ti2ESQMqzqPdDACls+f3ZLUMy8 H2zzI4GXhohcQiNytwJJhXUDmD7A/F8gfGU6nvMo4B9f5RSM7GjmL0OXukrsh8Hi 6MueU8jr34HGAdyJHU7W5ksrVSfC/RWUZjoVXsI9+XOY5JkyCs7qG793T+StNEhm dwUkpOy8PmDd0g== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:05 2025 by rpki-client