This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.mft File: mq5G4hNZMNomjAZNzlrbtjoM7DY.mft (raw, json) Hash identifier: IuKglJyND9ckH7pf9CEDk5IY/jxq+YPC0ih6lhf0EIc= Subject key identifier: E3:E5:CD:A3:EF:ED:70:DA:BD:D9:69:A5:2D:89:F3:CD:B7:0A:D8:E9 Authority key identifier: 9A:AE:46:E2:13:59:30:DA:26:8C:06:4D:CE:5A:DB:B6:3A:0C:EC:36 Certificate issuer: /CN=9aae46e2135930da268c064dce5adbb63a0cec36 Certificate serial: 019AF12D55FAF94A9E1DABBCF987B622602F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mq5G4hNZMNomjAZNzlrbtjoM7DY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.mft Manifest number: 112C Signing time: Sat 06 Dec 2025 01:01:11 +0000 Manifest this update: Sat 06 Dec 2025 01:01:11 +0000 Manifest next update: Sun 07 Dec 2025 01:01:11 +0000 Files and hashes: 1: STbkSsaZ4h0iV7Ywpice3xeLm7Q.roa (hash: OYYfvGM7goZ9gxelNf2ly9w5B8haX1abcCwOvQfYiPk=) 2: mq5G4hNZMNomjAZNzlrbtjoM7DY.crl (hash: hQc0ME/fLxbEwpwQwbcs36Bi2+y3xZJVVHeD9TAf8aw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.crl rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.mft rsync://rpki.ripe.net/repository/DEFAULT/mq5G4hNZMNomjAZNzlrbtjoM7DY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:55:fa:f9:4a:9e:1d:ab:bc:f9:87:b6:22:60:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9aae46e2135930da268c064dce5adbb63a0cec36 Validity Not Before: Dec 6 01:01:11 2025 GMT Not After : Dec 7 01:01:11 2025 GMT Subject: CN=e3e5cda3efed70dabdd969a52d89f3cdb70ad8e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0d:00:0e:74:c6:84:6b:6f:83:b6:0b:ad:0c: 49:0e:29:53:59:c3:1f:7c:f5:a2:d1:0b:fd:67:d4: a8:d8:35:d5:11:17:82:5b:6b:02:04:7e:45:21:e9: 00:a2:21:00:2a:87:43:3b:a6:7b:e9:d2:27:db:0f: 24:87:d9:5e:7f:c2:d6:1f:5e:0e:2a:8b:a3:1b:2b: ad:5f:56:ea:62:4f:c7:cd:33:dc:6d:88:0e:81:17: 2b:6c:15:65:f4:ac:16:51:cb:cf:d4:42:59:27:b6: cf:e5:66:e0:56:a1:66:54:a2:cd:c6:4e:e9:87:91: 49:fe:ec:97:0a:61:ef:03:c1:90:4a:31:da:2c:5c: 7c:51:a4:c7:fe:04:ed:69:0d:90:b9:61:8e:68:94: 31:41:97:08:9c:22:8d:05:f6:82:3a:b9:8f:0d:d8: 69:fa:e9:f6:ff:04:68:60:37:ff:16:2d:8a:69:bc: dd:fb:f7:c4:08:30:ff:b1:2d:df:a7:eb:8f:22:d9: 35:87:e2:1e:f7:eb:b4:4c:c4:61:6a:3a:55:8a:ae: 82:3f:1c:1b:e5:4d:55:a9:25:90:e3:d6:8b:7d:23: 27:ab:5a:e4:a4:73:98:2f:d8:89:0b:7f:c4:3b:3c: 30:0f:a9:bf:58:57:f1:1a:56:76:c8:77:42:53:51: 6a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E5:CD:A3:EF:ED:70:DA:BD:D9:69:A5:2D:89:F3:CD:B7:0A:D8:E9 X509v3 Authority Key Identifier: keyid:9A:AE:46:E2:13:59:30:DA:26:8C:06:4D:CE:5A:DB:B6:3A:0C:EC:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mq5G4hNZMNomjAZNzlrbtjoM7DY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e4:08:37:5a:fa:e7:f4:d9:c8:6a:94:d1:7f:73:f5:fa:03:43: ab:ff:62:6a:56:99:eb:63:01:f7:5e:2e:29:c9:fe:da:df:02: 46:bf:0a:f7:4c:72:b1:3a:57:c7:f1:b0:05:f6:61:d7:69:30: 98:ee:59:7f:6a:8d:9c:17:98:a2:25:82:40:ae:1a:f6:92:7d: 1c:f2:ab:04:94:39:b1:5d:ae:fe:0c:f9:29:61:bc:3e:7b:78: b7:7f:a1:c1:d9:87:66:5f:be:1a:8e:2b:e7:b7:03:3e:40:52: 5c:bb:4f:ca:65:e5:49:6c:a6:48:a2:b5:11:f6:16:77:a0:84: a2:56:3a:62:07:3e:87:a4:86:4b:56:ac:2a:53:bf:22:28:89: 91:6f:b9:92:25:c0:1a:63:15:23:04:f0:72:3a:da:41:e8:c1: df:56:98:ff:4e:9a:25:b4:9c:72:42:8a:69:58:e5:10:11:3e: 6d:80:60:5f:0e:e3:91:21:64:52:66:53:fc:a6:0f:76:84:86: d6:b8:fc:5b:9c:b6:f6:be:f2:6d:af:f6:f5:04:d7:f5:a6:fb: 7b:61:25:4f:65:22:40:b4:5c:e4:54:10:86:fc:f9:27:e0:28: 7c:45:30:78:7f:e1:16:74:40:a4:54:b5:28:ae:e1:54:47:0d: 48:9f:f8:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLVX6+UqeHau8+Ye2ImAvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhYWU0NmUyMTM1OTMwZGEyNjhjMDY0ZGNlNWFkYmI2M2Ew Y2VjMzYwHhcNMjUxMjA2MDEwMTExWhcNMjUxMjA3MDEwMTExWjAzMTEwLwYDVQQD EyhlM2U1Y2RhM2VmZWQ3MGRhYmRkOTY5YTUyZDg5ZjNjZGI3MGFkOGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQ0ADnTGhGtvg7YLrQxJDilTWcMf fPWi0Qv9Z9So2DXVEReCW2sCBH5FIekAoiEAKodDO6Z76dIn2w8kh9lef8LWH14O KoujGyutX1bqYk/HzTPcbYgOgRcrbBVl9KwWUcvP1EJZJ7bP5WbgVqFmVKLNxk7p h5FJ/uyXCmHvA8GQSjHaLFx8UaTH/gTtaQ2QuWGOaJQxQZcInCKNBfaCOrmPDdhp +un2/wRoYDf/Fi2Kabzd+/fECDD/sS3fp+uPItk1h+Ie9+u0TMRhajpViq6CPxwb 5U1VqSWQ49aLfSMnq1rkpHOYL9iJC3/EOzwwD6m/WFfxGlZ2yHdCU1Fq/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOPlzaPv7XDavdlppS2J8823CtjpMB8GA1UdIwQY MBaAFJquRuITWTDaJowGTc5a27Y6DOw2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXE1RzRoTlpNTm9takFaTnpscmJ0am9NN0RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9kOGZjNzgtYTUxYi00M2RjLWI1MGEt OGFlNDMwODFhYTM2LzEvbXE1RzRoTlpNTm9takFaTnpscmJ0am9NN0RZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9kOGZjNzgtYTUxYi00M2RjLWI1MGEtOGFlNDMwODFhYTM2 LzEvbXE1RzRoTlpNTm9takFaTnpscmJ0am9NN0RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5Ag3Wvrn 9NnIapTRf3P1+gNDq/9ialaZ62MB914uKcn+2t8CRr8K90xysTpXx/GwBfZh12kw mO5Zf2qNnBeYoiWCQK4a9pJ9HPKrBJQ5sV2u/gz5KWG8Pnt4t3+hwdmHZl++Go4r 57cDPkBSXLtPymXlSWymSKK1EfYWd6CEolY6Ygc+h6SGS1asKlO/IiiJkW+5kiXA GmMVIwTwcjraQejB31aY/06aJbScckKKaVjlEBE+bYBgXw7jkSFkUmZT/KYPdoSG 1rj8W5y29r7yba/29QTX9ab7e2ElT2UiQLRc5FQQhvz5J+AofEUweH/hFnRApFS1 KK7hVEcNSJ/45g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:40 2025 by rpki-client