This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft File: 5qowZQKj7IBJPXU0jChYsa9-z4A.mft (raw, json) Hash identifier: +SpXDyjLFuVpS+6KAv1gjjc7H3/Er/oDReix1uPMzBM= Subject key identifier: 0B:26:D5:A5:0D:F4:F7:FC:0B:D9:33:3E:1E:9D:5F:77:EA:FF:59:3F Authority key identifier: E6:AA:30:65:02:A3:EC:80:49:3D:75:34:8C:28:58:B1:AF:7E:CF:80 Certificate issuer: /CN=e6aa306502a3ec80493d75348c2858b1af7ecf80 Certificate serial: 019AF12E1EB430C10C869F0AE92D3896A2C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qowZQKj7IBJPXU0jChYsa9-z4A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft Manifest number: 05E6 Signing time: Sat 06 Dec 2025 01:02:02 +0000 Manifest this update: Sat 06 Dec 2025 01:02:02 +0000 Manifest next update: Sun 07 Dec 2025 01:02:02 +0000 Files and hashes: 1: 5qowZQKj7IBJPXU0jChYsa9-z4A.crl (hash: BN57Rth/7JY5voMIS55z6NBWuC1Or0wzNr7Id2nqSAk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.crl rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft rsync://rpki.ripe.net/repository/DEFAULT/5qowZQKj7IBJPXU0jChYsa9-z4A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:1e:b4:30:c1:0c:86:9f:0a:e9:2d:38:96:a2:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6aa306502a3ec80493d75348c2858b1af7ecf80 Validity Not Before: Dec 6 01:02:02 2025 GMT Not After : Dec 7 01:02:02 2025 GMT Subject: CN=0b26d5a50df4f7fc0bd9333e1e9d5f77eaff593f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3b:e6:1c:d0:a2:c0:32:06:33:c9:1b:0b:18: f5:5c:11:49:fa:02:e1:c1:5a:8b:8c:08:a6:74:ac: b1:66:50:08:98:a1:7d:f7:b5:51:e8:cc:7a:4a:96: a7:89:95:c8:6b:12:76:41:e7:5b:de:05:cf:e7:85: ce:4d:4b:6c:a2:7f:37:64:95:ba:74:63:06:45:78: 3f:bf:4b:6b:9d:3d:ff:c6:01:65:60:45:61:6c:84: d4:f1:ae:f7:d2:66:4c:90:fe:fc:ef:53:ea:65:aa: ef:80:99:d4:57:17:71:3a:7a:3c:7f:f6:02:6c:a5: 6c:57:f8:9e:28:b9:eb:56:5b:78:33:c2:c1:fa:08: 38:9d:57:88:2e:2a:e2:c5:91:a9:62:d5:37:17:18: 43:79:91:1f:70:75:61:d3:3b:ac:ce:1c:87:6a:21: ad:a2:af:d0:d6:a5:9e:12:e8:70:3a:1a:f9:fe:f0: db:d6:a0:04:fe:33:92:b6:91:53:bb:6c:f6:58:93: fc:8c:5a:60:0d:8f:65:f5:3a:54:67:35:c8:83:9b: fc:93:9b:10:f1:b0:25:f9:ac:b9:c9:75:37:cb:f3: 1e:06:6e:ab:2c:f0:fc:ed:00:7d:61:39:5b:ff:b7: 00:38:b6:12:3f:78:a2:68:1d:23:d2:ce:22:5d:22: dc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:26:D5:A5:0D:F4:F7:FC:0B:D9:33:3E:1E:9D:5F:77:EA:FF:59:3F X509v3 Authority Key Identifier: keyid:E6:AA:30:65:02:A3:EC:80:49:3D:75:34:8C:28:58:B1:AF:7E:CF:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qowZQKj7IBJPXU0jChYsa9-z4A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:66:be:9b:56:f0:7f:7b:26:b8:22:5d:0b:52:c3:3e:e7:f8: f1:19:d1:2b:fc:3f:09:53:50:d1:68:15:88:12:2a:54:36:98: ea:aa:ad:94:fe:a5:5b:8e:6a:ed:2c:c0:7f:de:07:72:d1:33: ce:d4:b4:d1:f4:ef:99:43:9c:ac:9c:eb:4b:ae:4b:59:bc:b1: 83:70:2c:a4:8d:0a:4f:d0:ad:be:86:f3:fd:6e:24:89:f9:1d: 1c:29:d9:c2:03:6d:06:48:5a:db:92:b1:4f:8a:e7:b9:57:95: 51:72:66:0f:e2:47:e6:b5:70:3d:c6:ce:ce:c0:dd:e7:18:d3: ed:cd:63:53:0a:30:b5:59:cf:c3:3d:90:ff:e9:ee:55:68:e5: 65:71:71:90:07:00:ff:16:7d:2b:5d:60:20:98:7f:74:75:55: 9d:35:5c:23:9e:b2:70:86:da:0a:11:5a:88:ee:13:0e:27:41: 4e:43:35:b2:c6:2d:3a:a9:98:34:5f:01:18:cd:47:46:0c:c5: 6b:22:00:3f:43:55:0c:70:7e:74:8a:fd:f1:6b:1d:9c:c0:89: d0:64:42:a3:12:2e:2d:41:91:06:a1:f0:51:c2:67:d0:43:30: a9:2a:71:70:0d:c6:d7:c0:6d:8a:aa:e8:08:f8:4d:ca:fa:72: 7a:7c:0c:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLh60MMEMhp8K6S04lqLEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2YWEzMDY1MDJhM2VjODA0OTNkNzUzNDhjMjg1OGIxYWY3 ZWNmODAwHhcNMjUxMjA2MDEwMjAyWhcNMjUxMjA3MDEwMjAyWjAzMTEwLwYDVQQD EygwYjI2ZDVhNTBkZjRmN2ZjMGJkOTMzM2UxZTlkNWY3N2VhZmY1OTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDvmHNCiwDIGM8kbCxj1XBFJ+gLh wVqLjAimdKyxZlAImKF997VR6Mx6SpaniZXIaxJ2Qedb3gXP54XOTUtson83ZJW6 dGMGRXg/v0trnT3/xgFlYEVhbITU8a730mZMkP7871PqZarvgJnUVxdxOno8f/YC bKVsV/ieKLnrVlt4M8LB+gg4nVeILirixZGpYtU3FxhDeZEfcHVh0zuszhyHaiGt oq/Q1qWeEuhwOhr5/vDb1qAE/jOStpFTu2z2WJP8jFpgDY9l9TpUZzXIg5v8k5sQ 8bAl+ay5yXU3y/MeBm6rLPD87QB9YTlb/7cAOLYSP3iiaB0j0s4iXSLccQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAsm1aUN9Pf8C9kzPh6dX3fq/1k/MB8GA1UdIwQY MBaAFOaqMGUCo+yAST11NIwoWLGvfs+AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXFvd1pRS2o3SUJKUFhVMGpDaFlzYTktejRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8xZGM3MzItODg4ZS00MmViLThkOGMt ZmYwMGYyYWM4Yzc4LzEvNXFvd1pRS2o3SUJKUFhVMGpDaFlzYTktejRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8xZGM3MzItODg4ZS00MmViLThkOGMtZmYwMGYyYWM4Yzc4 LzEvNXFvd1pRS2o3SUJKUFhVMGpDaFlzYTktejRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO2a+m1bw f3smuCJdC1LDPuf48RnRK/w/CVNQ0WgViBIqVDaY6qqtlP6lW45q7SzAf94HctEz ztS00fTvmUOcrJzrS65LWbyxg3AspI0KT9Ctvobz/W4kifkdHCnZwgNtBkha25Kx T4rnuVeVUXJmD+JH5rVwPcbOzsDd5xjT7c1jUwowtVnPwz2Q/+nuVWjlZXFxkAcA /xZ9K11gIJh/dHVVnTVcI56ycIbaChFaiO4TDidBTkM1ssYtOqmYNF8BGM1HRgzF ayIAP0NVDHB+dIr98WsdnMCJ0GRCoxIuLUGRBqHwUcJn0EMwqSpxcA3G18Btiqro CPhNyvpyenwMHQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:01:31 2025 by rpki-client