This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft File: Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft (raw, json) Hash identifier: Z5V4x3+hxZgj1fZ++wi9X7LgVzh3fo1IjZeof2RqIIs= Subject key identifier: 1A:62:9B:1F:E3:EE:9C:12:CC:0A:52:7D:FA:79:B9:24:BC:07:54:8C Authority key identifier: 43:91:37:BE:FE:8B:C5:59:03:69:0C:7C:46:AF:19:7C:C9:1A:70:3C Certificate issuer: /CN=439137befe8bc55903690c7c46af197cc91a703c Certificate serial: 019B1A5FAF0D9711881D5D5DF98BBE12A8D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft Manifest number: 0361 Signing time: Sun 14 Dec 2025 01:00:36 +0000 Manifest this update: Sun 14 Dec 2025 01:00:36 +0000 Manifest next update: Mon 15 Dec 2025 01:00:36 +0000 Files and hashes: 1: Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl (hash: 1/+NSh69E1ke1AR1WswAnx7czaErGIEEr6Jk4yU9JyI=) 2: wVZ7Q_yh7vY87ipQHKXps_Y5QUU.roa (hash: F0pmi/wk6PrJmlY3U42fDKf/ChECXrlPOqHq8mmS3J0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:5f:af:0d:97:11:88:1d:5d:5d:f9:8b:be:12:a8:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439137befe8bc55903690c7c46af197cc91a703c Validity Not Before: Dec 14 01:00:36 2025 GMT Not After : Dec 15 01:00:36 2025 GMT Subject: CN=1a629b1fe3ee9c12cc0a527dfa79b924bc07548c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:14:c9:30:5e:97:ab:f0:48:bd:5c:db:b5:08: ce:e2:44:27:f3:65:a5:fd:9f:be:a2:ca:20:96:39: ff:5d:31:ce:8c:d7:df:24:ae:7e:cd:8e:4a:1f:c1: e1:16:e0:40:92:18:27:2d:b8:46:aa:7d:68:1e:f3: d8:7f:51:64:6d:84:9c:56:4f:0b:28:f7:7b:30:ee: 78:34:d1:77:5a:fc:1a:48:1f:53:5e:b8:ef:64:cc: 41:59:82:15:58:ec:c9:12:eb:93:ed:f6:97:80:96: 33:c8:ae:11:39:23:bf:cd:39:ae:49:44:ff:e1:cf: b8:fa:b5:89:bc:1c:df:9a:c5:9e:b8:3f:06:8a:1a: 08:13:c0:b0:bb:41:33:a0:0d:96:cf:6b:7d:58:88: 0c:2e:2a:be:68:a9:c8:03:5e:c9:81:60:cf:73:5e: 0d:11:fb:06:b7:dc:09:e8:0f:a4:96:9f:1b:43:64: db:b1:22:41:bc:a9:9f:3e:60:fc:83:02:18:1e:33: 5e:36:83:83:e0:bd:4c:cf:07:57:bf:6b:01:82:41: c0:72:bd:d6:a1:f6:4d:6d:97:92:0e:ab:e0:82:ac: 13:23:2c:3e:80:31:7d:1f:13:8d:4c:7d:fd:51:68: ff:94:bb:6f:4e:9d:46:3c:5b:d9:98:cf:6e:90:7d: ab:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:62:9B:1F:E3:EE:9C:12:CC:0A:52:7D:FA:79:B9:24:BC:07:54:8C X509v3 Authority Key Identifier: keyid:43:91:37:BE:FE:8B:C5:59:03:69:0C:7C:46:AF:19:7C:C9:1A:70:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:8c:f8:cb:a6:fc:93:c1:dc:15:d8:6d:10:e9:2b:e3:da:75: 3e:d0:76:e2:41:f5:2f:a5:ee:b4:6c:2b:b6:72:0b:e4:06:29: 60:e8:ce:37:69:9e:08:79:46:d3:0e:7e:47:3e:c6:95:10:f4: 94:e9:ca:15:53:92:83:c8:f9:12:39:f6:1a:6c:53:56:5c:ed: 16:1f:16:51:48:dc:a7:e0:c5:b3:12:4d:ed:7f:2d:bc:88:24: 43:4b:95:1e:90:e0:1e:c4:f0:dc:cb:0c:84:96:c9:dc:ca:2c: c3:86:07:ea:83:3f:1d:f5:22:c3:1c:4a:02:00:bf:ca:01:24: 36:7f:63:a7:82:8b:27:67:58:3f:f7:19:87:cb:f8:3c:74:0b: d9:df:7c:ca:75:dc:a9:07:c6:b4:b6:aa:7f:d1:c8:a5:69:0c: f2:fe:cb:bb:9b:b3:89:8d:f6:ec:0f:2c:9c:bd:b8:f3:3a:f8: 11:c5:81:07:18:1d:b1:d8:9f:47:fa:54:90:19:5d:3e:a1:53: ba:0f:e9:23:84:56:38:9d:84:c9:02:fb:57:3a:04:0b:b1:51: da:03:36:cc:21:bd:d4:6b:d0:05:2c:30:04:0b:43:7e:56:9f: a5:75:62:65:59:cc:d6:b8:f3:d9:bd:12:15:1a:a6:19:cd:38: 1c:e7:28:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaX68NlxGIHV1d+Yu+EqjXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzOTEzN2JlZmU4YmM1NTkwMzY5MGM3YzQ2YWYxOTdjYzkx YTcwM2MwHhcNMjUxMjE0MDEwMDM2WhcNMjUxMjE1MDEwMDM2WjAzMTEwLwYDVQQD EygxYTYyOWIxZmUzZWU5YzEyY2MwYTUyN2RmYTc5YjkyNGJjMDc1NDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RTJMF6Xq/BIvVzbtQjO4kQn82Wl /Z++osogljn/XTHOjNffJK5+zY5KH8HhFuBAkhgnLbhGqn1oHvPYf1FkbYScVk8L KPd7MO54NNF3WvwaSB9TXrjvZMxBWYIVWOzJEuuT7faXgJYzyK4ROSO/zTmuSUT/ 4c+4+rWJvBzfmsWeuD8GihoIE8Cwu0EzoA2Wz2t9WIgMLiq+aKnIA17JgWDPc14N EfsGt9wJ6A+klp8bQ2TbsSJBvKmfPmD8gwIYHjNeNoOD4L1MzwdXv2sBgkHAcr3W ofZNbZeSDqvggqwTIyw+gDF9HxONTH39UWj/lLtvTp1GPFvZmM9ukH2rLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBpimx/j7pwSzApSffp5uSS8B1SMMB8GA1UdIwQY MBaAFEORN77+i8VZA2kMfEavGXzJGnA8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTVFM3Z2Nkx4VmtEYVF4OFJxOFpmTWthY0R3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy81YWMyMmQtOWU4Zi00NDlkLTgzMDQt MGY1MmQ4MjhmZDRmLzEvUTVFM3Z2Nkx4VmtEYVF4OFJxOFpmTWthY0R3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy81YWMyMmQtOWU4Zi00NDlkLTgzMDQtMGY1MmQ4MjhmZDRm LzEvUTVFM3Z2Nkx4VmtEYVF4OFJxOFpmTWthY0R3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsIz4y6b8 k8HcFdhtEOkr49p1PtB24kH1L6XutGwrtnIL5AYpYOjON2meCHlG0w5+Rz7GlRD0 lOnKFVOSg8j5Ejn2GmxTVlztFh8WUUjcp+DFsxJN7X8tvIgkQ0uVHpDgHsTw3MsM hJbJ3Mosw4YH6oM/HfUiwxxKAgC/ygEkNn9jp4KLJ2dYP/cZh8v4PHQL2d98ynXc qQfGtLaqf9HIpWkM8v7Lu5uziY327A8snL248zr4EcWBBxgdsdifR/pUkBldPqFT ug/pI4RWOJ2EyQL7VzoEC7FR2gM2zCG91GvQBSwwBAtDflafpXViZVnM1rjz2b0S FRqmGc04HOcowg== -----END CERTIFICATE-----Generated at Sun Dec 14 05:30:28 2025 by rpki-client