This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft File: 5-QyokmU5XnrJJmh9vNMZSEY40Q.mft (raw, json) Hash identifier: g+iLyCigwlKDlQW8JzGimG9L6hM934LLaSSoK30Uxv0= Subject key identifier: 95:E4:87:60:D5:6E:0F:F3:CE:C0:69:9E:39:2F:2F:B9:CD:BD:7F:7C Authority key identifier: E7:E4:32:A2:49:94:E5:79:EB:24:99:A1:F6:F3:4C:65:21:18:E3:44 Certificate issuer: /CN=e7e432a24994e579eb2499a1f6f34c652118e344 Certificate serial: 019AF12E1223BF7815F14F2920D93AA69AEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 01:01:59 +0000 Manifest this update: Sat 06 Dec 2025 01:01:59 +0000 Manifest next update: Sun 07 Dec 2025 01:01:59 +0000 Files and hashes: 1: 1ap-zhjP2xlpcyvljzd4At-hRqs.roa (hash: vy++CPahIzqV0ojk71CI64hyqugiBwjMnM2TKCrxcDM=) 2: 5-QyokmU5XnrJJmh9vNMZSEY40Q.crl (hash: fuVfmwaBl1T1/hTv3tdnjRdQxdZ19ss2zRzOWGr9FmU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.crl rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:12:23:bf:78:15:f1:4f:29:20:d9:3a:a6:9a:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7e432a24994e579eb2499a1f6f34c652118e344 Validity Not Before: Dec 6 01:01:59 2025 GMT Not After : Dec 7 01:01:59 2025 GMT Subject: CN=95e48760d56e0ff3cec0699e392f2fb9cdbd7f7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:88:f9:bf:fd:83:ac:79:39:34:20:68:47:51: ef:1b:b9:36:7b:4c:f7:29:5c:06:f6:88:d0:de:e2: b3:ec:5b:0c:51:9b:73:ba:fd:e2:65:73:d0:da:ae: b5:b4:2a:7c:0a:89:ea:72:1b:b5:68:af:0f:d8:6b: 5f:a0:ff:e9:4b:54:d8:be:28:90:1c:ef:b2:45:f6: 9b:ca:4a:c8:3e:d3:cd:00:87:67:07:67:4a:c4:59: 23:67:4a:13:7d:a8:28:06:f2:fe:7f:7c:15:d1:30: 76:ac:4a:28:ff:99:68:fd:a3:09:1f:20:23:76:39: df:e9:84:c2:fa:95:fb:07:40:00:83:00:ec:b2:95: 29:00:e8:49:36:e7:0b:43:60:e4:8c:d2:fa:cb:e4: 56:96:82:f7:f4:4e:71:d4:4b:55:8e:8e:bd:fb:df: 13:78:dc:b4:63:e1:98:84:63:c6:b1:03:f5:2b:77: a4:f2:34:27:17:83:a6:0e:79:97:dc:58:11:b7:23: 2d:4b:50:78:6f:be:49:53:74:31:2e:81:a9:48:25: 70:5c:4d:90:35:c8:4a:6a:42:89:28:b4:ce:ef:b4: bd:e4:d0:6c:c8:b5:30:3f:f6:f6:61:93:e6:ed:b9: 35:07:05:d0:66:c4:3b:51:cc:69:dd:f2:5e:b9:5f: b0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E4:87:60:D5:6E:0F:F3:CE:C0:69:9E:39:2F:2F:B9:CD:BD:7F:7C X509v3 Authority Key Identifier: keyid:E7:E4:32:A2:49:94:E5:79:EB:24:99:A1:F6:F3:4C:65:21:18:E3:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:5a:46:78:d7:dd:3e:e1:4b:f4:3a:a6:cc:d2:d2:45:d4:53: 6d:7b:dd:6c:0a:00:23:65:4b:92:f5:1e:53:81:2b:e4:0b:24: de:12:f4:c7:e6:ae:11:86:bb:a3:e7:e5:be:8b:c8:42:4b:0b: 18:54:88:b8:e8:5e:b6:bd:62:3a:72:41:9b:06:db:d5:15:0f: 80:f2:a2:5b:9f:b4:2c:2f:bd:03:a9:75:15:7c:9d:11:b4:3c: b8:78:16:24:98:89:15:65:56:71:74:46:9d:91:ca:04:86:fa: 30:5c:79:77:54:40:9e:72:91:8f:7d:d6:14:87:78:51:d8:9f: 9f:6f:74:9b:2b:73:0f:78:9b:52:96:d9:4f:9d:81:f7:a4:89: 6d:06:10:54:16:a5:b7:ad:7c:9a:7b:52:d6:cf:6a:f1:a7:28: 22:73:99:00:c5:c1:3d:74:b1:42:b5:d5:5d:48:4d:a8:f5:3e: 67:aa:31:45:45:e6:d3:6a:d3:9f:4c:00:85:2a:75:da:d8:53: ef:d5:27:17:5c:f6:6e:bf:27:36:af:12:c8:5d:3b:6f:cc:27: bc:ea:4a:7c:8c:c5:2a:ae:72:d3:69:f9:42:d9:a5:e7:eb:67: 61:17:f1:6d:4e:b7:9c:7b:af:7e:f3:ed:a5:05:bd:44:68:82: 6b:4d:20:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLhIjv3gV8U8pINk6pprqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3ZTQzMmEyNDk5NGU1NzllYjI0OTlhMWY2ZjM0YzY1MjEx OGUzNDQwHhcNMjUxMjA2MDEwMTU5WhcNMjUxMjA3MDEwMTU5WjAzMTEwLwYDVQQD Eyg5NWU0ODc2MGQ1NmUwZmYzY2VjMDY5OWUzOTJmMmZiOWNkYmQ3ZjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4j5v/2DrHk5NCBoR1HvG7k2e0z3 KVwG9ojQ3uKz7FsMUZtzuv3iZXPQ2q61tCp8Conqchu1aK8P2GtfoP/pS1TYviiQ HO+yRfabykrIPtPNAIdnB2dKxFkjZ0oTfagoBvL+f3wV0TB2rEoo/5lo/aMJHyAj djnf6YTC+pX7B0AAgwDsspUpAOhJNucLQ2DkjNL6y+RWloL39E5x1EtVjo69+98T eNy0Y+GYhGPGsQP1K3ek8jQnF4OmDnmX3FgRtyMtS1B4b75JU3QxLoGpSCVwXE2Q NchKakKJKLTO77S95NBsyLUwP/b2YZPm7bk1BwXQZsQ7Ucxp3fJeuV+wrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJXkh2DVbg/zzsBpnjkvL7nNvX98MB8GA1UdIwQY MBaAFOfkMqJJlOV56ySZofbzTGUhGONEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNS1ReW9rbVU1WG5ySkptaDl2Tk1aU0VZNDBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wNjNlYmUtNjdmMC00MGU5LWJiZmYt YTQwOWNhMzdhM2VhLzEvNS1ReW9rbVU1WG5ySkptaDl2Tk1aU0VZNDBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8wNjNlYmUtNjdmMC00MGU5LWJiZmYtYTQwOWNhMzdhM2Vh LzEvNS1ReW9rbVU1WG5ySkptaDl2Tk1aU0VZNDBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAElpGeNfd PuFL9DqmzNLSRdRTbXvdbAoAI2VLkvUeU4Er5Ask3hL0x+auEYa7o+flvovIQksL GFSIuOhetr1iOnJBmwbb1RUPgPKiW5+0LC+9A6l1FXydEbQ8uHgWJJiJFWVWcXRG nZHKBIb6MFx5d1RAnnKRj33WFId4Udifn290mytzD3ibUpbZT52B96SJbQYQVBal t618mntS1s9q8acoInOZAMXBPXSxQrXVXUhNqPU+Z6oxRUXm02rTn0wAhSp12thT 79UnF1z2br8nNq8SyF07b8wnvOpKfIzFKq5y02n5Qtml5+tnYRfxbU63nHuvfvPt pQW9RGiCa00gDQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:05:22 2025 by rpki-client