This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft File: Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft (raw, json) Hash identifier: K9bjWw71TujzG1p1TTH13djGj1BTCyFxJiOUSGI2Q9E= Subject key identifier: 4F:8A:BE:8A:84:FA:78:46:4E:20:72:DC:74:65:D7:A6:B1:DD:57:A3 Authority key identifier: 43:91:37:BE:FE:8B:C5:59:03:69:0C:7C:46:AF:19:7C:C9:1A:70:3C Certificate issuer: /CN=439137befe8bc55903690c7c46af197cc91a703c Certificate serial: 019B318CEFC2461ACB729768417362795ABE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft Manifest number: 036D Signing time: Thu 18 Dec 2025 13:01:18 +0000 Manifest this update: Thu 18 Dec 2025 13:01:18 +0000 Manifest next update: Fri 19 Dec 2025 13:01:18 +0000 Files and hashes: 1: Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl (hash: ib5q/XE1pkO4kAas2vilVlYbGYbl1T4UFt8uldtRLlE=) 2: wVZ7Q_yh7vY87ipQHKXps_Y5QUU.roa (hash: F0pmi/wk6PrJmlY3U42fDKf/ChECXrlPOqHq8mmS3J0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8c:ef:c2:46:1a:cb:72:97:68:41:73:62:79:5a:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439137befe8bc55903690c7c46af197cc91a703c Validity Not Before: Dec 18 13:01:18 2025 GMT Not After : Dec 19 13:01:18 2025 GMT Subject: CN=4f8abe8a84fa78464e2072dc7465d7a6b1dd57a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:81:72:4f:e9:38:36:3a:56:e9:16:41:5d:2f: b8:d4:7b:63:f3:26:db:d1:38:e7:43:c7:d2:fa:af: b1:dd:54:85:d5:9d:bf:31:93:c5:cd:9a:68:b1:a3: a9:af:7e:af:72:49:a5:3b:80:4f:7b:b2:c2:bc:14: d9:14:4b:0d:04:4b:8b:fa:37:3f:5f:64:8e:cb:03: 6d:13:71:74:ce:d1:38:d1:54:74:af:3f:52:f7:bb: 21:6f:45:f2:cc:d5:41:a8:d7:07:b9:64:a1:38:a1: 10:4b:d9:40:f8:1f:60:3e:b8:d2:3d:2d:c7:25:2f: 3c:50:99:d7:88:c8:72:0b:d1:ad:48:e0:ae:df:42: 7d:8f:30:79:42:00:43:56:29:b2:e5:bc:5d:eb:c1: 15:be:6c:11:44:70:2c:19:f9:ca:f2:5c:86:25:62: 12:47:4e:c5:fa:5c:f2:e5:4e:4c:b7:03:f2:00:2f: cc:9f:12:27:7c:33:92:b8:0b:d6:b5:f6:c4:45:99: 10:1b:27:79:e3:39:28:b3:df:ba:a6:a9:f1:4b:9e: 07:96:13:da:3c:91:37:4e:00:98:db:80:45:29:18: bc:a2:75:ba:6b:bf:ca:e5:74:4c:45:4a:7c:32:36: 17:12:51:ad:d9:da:c7:b2:74:89:ea:7f:57:12:2f: 80:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:8A:BE:8A:84:FA:78:46:4E:20:72:DC:74:65:D7:A6:B1:DD:57:A3 X509v3 Authority Key Identifier: keyid:43:91:37:BE:FE:8B:C5:59:03:69:0C:7C:46:AF:19:7C:C9:1A:70:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:00:eb:63:bc:51:82:a8:f0:6c:b5:e3:30:3d:36:19:dc:85: c1:79:59:6f:22:a1:27:6e:ca:37:b3:09:a3:d5:85:e4:3e:49: 24:38:71:d6:b9:2f:d2:7a:79:3f:f1:0d:23:fb:82:f8:01:eb: d0:7c:a9:a6:b1:db:f6:36:73:a2:d2:df:bf:10:0f:91:e3:f8: 21:37:9b:c6:b1:b5:9e:2d:ee:b7:45:c1:0d:9f:a3:6b:65:00: 85:59:86:69:8d:8f:56:02:b5:21:de:e2:be:25:e4:36:17:82: 57:06:64:25:39:b3:6e:7a:22:2c:d3:ce:80:a3:da:2b:fe:3e: e4:6e:6f:05:8c:3c:0d:f9:9c:ed:bd:ed:41:24:b4:15:c3:32: d4:49:a3:91:04:57:a3:18:2a:ee:2f:94:3e:b4:4d:be:d2:7a: 2a:04:19:68:7f:1d:16:ba:34:b4:43:59:6f:64:01:e9:7d:1b: 25:21:8e:fe:1c:3a:ed:18:71:15:a1:19:73:1c:b4:b6:87:81: 7a:9e:2e:f9:eb:36:77:c8:f5:a6:e7:8d:a4:d4:ee:79:8d:8d: 55:6a:8f:11:0f:12:1f:a3:0b:d3:a1:fb:68:d1:54:cb:bc:fd: 5c:fe:25:d2:af:cb:a0:ab:72:5a:1a:43:6a:1c:2b:e4:54:6f: 98:88:3f:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjO/CRhrLcpdoQXNieVq+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzOTEzN2JlZmU4YmM1NTkwMzY5MGM3YzQ2YWYxOTdjYzkx YTcwM2MwHhcNMjUxMjE4MTMwMTE4WhcNMjUxMjE5MTMwMTE4WjAzMTEwLwYDVQQD Eyg0ZjhhYmU4YTg0ZmE3ODQ2NGUyMDcyZGM3NDY1ZDdhNmIxZGQ1N2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIFyT+k4NjpW6RZBXS+41Htj8ybb 0TjnQ8fS+q+x3VSF1Z2/MZPFzZposaOpr36vckmlO4BPe7LCvBTZFEsNBEuL+jc/ X2SOywNtE3F0ztE40VR0rz9S97shb0XyzNVBqNcHuWShOKEQS9lA+B9gPrjSPS3H JS88UJnXiMhyC9GtSOCu30J9jzB5QgBDVimy5bxd68EVvmwRRHAsGfnK8lyGJWIS R07F+lzy5U5MtwPyAC/MnxInfDOSuAvWtfbERZkQGyd54zkos9+6pqnxS54HlhPa PJE3TgCY24BFKRi8onW6a7/K5XRMRUp8MjYXElGt2drHsnSJ6n9XEi+ArwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE+KvoqE+nhGTiBy3HRl16ax3VejMB8GA1UdIwQY MBaAFEORN77+i8VZA2kMfEavGXzJGnA8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTVFM3Z2Nkx4VmtEYVF4OFJxOFpmTWthY0R3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy81YWMyMmQtOWU4Zi00NDlkLTgzMDQt MGY1MmQ4MjhmZDRmLzEvUTVFM3Z2Nkx4VmtEYVF4OFJxOFpmTWthY0R3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy81YWMyMmQtOWU4Zi00NDlkLTgzMDQtMGY1MmQ4MjhmZDRm LzEvUTVFM3Z2Nkx4VmtEYVF4OFJxOFpmTWthY0R3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHwDrY7xR gqjwbLXjMD02GdyFwXlZbyKhJ27KN7MJo9WF5D5JJDhx1rkv0np5P/ENI/uC+AHr 0HypprHb9jZzotLfvxAPkeP4ITebxrG1ni3ut0XBDZ+ja2UAhVmGaY2PVgK1Id7i viXkNheCVwZkJTmzbnoiLNPOgKPaK/4+5G5vBYw8Dfmc7b3tQSS0FcMy1EmjkQRX oxgq7i+UPrRNvtJ6KgQZaH8dFro0tENZb2QB6X0bJSGO/hw67RhxFaEZcxy0toeB ep4u+es2d8j1pueNpNTueY2NVWqPEQ8SH6ML06H7aNFUy7z9XP4l0q/LoKtyWhpD ahwr5FRvmIg/SQ== -----END CERTIFICATE-----Generated at Thu Dec 18 22:36:15 2025 by rpki-client