This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.mft File: 5QGBXG-Y86K2GEr-vxjqNBvoguo.mft (raw, json) Hash identifier: VuAzzd/uiHadOifmII8bRVc3at+USdoqai27t9PDlI8= Subject key identifier: 5D:C5:7B:87:B2:AE:4A:03:0C:6B:C3:CC:FC:85:49:4D:28:21:73:2A Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA Certificate issuer: /CN=e501815c6f98f3a2b6184afebf18ea341be882ea Certificate serial: 019AF61C38D04194B33E71DA103252C2F828 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.mft Manifest number: 17A3 Signing time: Sun 07 Dec 2025 00:00:35 +0000 Manifest this update: Sun 07 Dec 2025 00:00:35 +0000 Manifest next update: Mon 08 Dec 2025 00:00:35 +0000 Files and hashes: 1: 43y7EOGBptoEQuKUeXgk6SpCiKM.roa (hash: JqRad2v+qIhbHewbO6BDiGvY7klaYPQyg0QWPHcgDXg=) 2: 5QGBXG-Y86K2GEr-vxjqNBvoguo.crl (hash: RnCXBghXbNyC3V6QRDvv4m1DoBAmA9xLURNKNmgevok=) 3: H0nzbISenXARQ7LjMm13gCpgBwU.roa (hash: lx2NoDAlntNGOTqfrVMLC+nLmzh32KKsGBcKq8aFDes=) 4: f8kI2b59PBZRb_sckjtBe463HL0.roa (hash: f8FR8GkiNDWi6iflclZKzM3152IDL3F7lGZsDidin1k=) 5: hijMYiQr6vyULb-mnkn1xi1JvNs.roa (hash: dK5CEEe3WQ4TKnmD3J/bUooowbDXJp8gMo/+1WCMR7Q=) 6: xqyjrBAsPt6VFzztGhRFGsUeKVs.roa (hash: nSJGx8Mnaocq9nqKOOejGII6taJSf7vvPw4XmH1Q6Ys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.mft rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:38:d0:41:94:b3:3e:71:da:10:32:52:c2:f8:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea Validity Not Before: Dec 7 00:00:35 2025 GMT Not After : Dec 8 00:00:35 2025 GMT Subject: CN=5dc57b87b2ae4a030c6bc3ccfc85494d2821732a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:60:e8:aa:4f:35:ed:d4:65:c5:d1:e1:92:bb: 55:4a:1d:81:1f:6b:5e:f3:49:7a:40:1f:7c:2c:6b: f2:24:65:47:0a:ed:cc:cc:23:0e:08:5b:a4:c0:af: 12:8a:3f:44:7b:21:73:0e:0f:eb:2c:25:c5:0e:5d: 95:d1:23:50:94:69:1e:ed:c7:08:3f:ae:39:61:2c: a4:57:5b:30:40:07:f2:89:df:59:38:49:85:96:6a: 64:0c:c2:27:00:86:b0:bc:7a:7b:5d:33:0d:0f:b6: 2a:56:ac:5e:e6:8c:8c:47:4d:94:e8:dc:be:df:bf: d7:8e:07:ef:c9:46:ea:91:fb:d5:8c:2d:9d:c7:01: 3a:14:b6:50:cf:06:96:e4:5a:a7:ef:06:13:21:41: a6:e9:65:17:da:9a:ee:93:a2:39:0b:88:bf:70:dd: 7e:44:dc:23:b9:54:ca:6f:e2:e8:fa:1e:95:3d:a7: 84:29:17:30:6d:1f:c5:27:74:9f:6a:4e:91:ae:87: 6b:a9:0e:2c:a4:97:4a:f1:f5:27:cd:c4:a3:f0:86: 5c:fc:18:9c:76:6f:7d:db:47:a6:37:54:25:27:2e: 00:8c:cd:17:15:eb:cc:d5:8f:97:6c:ce:14:04:86: 90:67:df:d9:1c:9d:33:bc:ae:92:7c:5c:5e:36:7e: 81:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C5:7B:87:B2:AE:4A:03:0C:6B:C3:CC:FC:85:49:4D:28:21:73:2A X509v3 Authority Key Identifier: keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:34:0a:8f:54:32:86:77:d0:27:cb:e3:ed:de:d2:31:f0:a6: a9:49:d0:96:92:f1:40:bb:4a:b1:ac:6d:c9:8d:b2:c5:ef:1e: ee:f7:ae:19:45:a8:a3:55:94:3c:87:44:6e:f6:1a:74:52:f3: 10:23:18:b8:af:36:4c:d1:90:f1:7e:88:04:f6:d6:a5:0f:e8: 1e:d3:a4:6a:3f:9f:ad:06:ec:a8:c5:8c:44:48:c2:af:86:f5: cf:80:56:19:fd:88:ea:b7:bc:2d:ab:d2:89:10:b0:d8:d7:7c: a5:83:48:8a:31:63:77:63:99:38:ab:4f:93:28:0a:51:e1:f2: 5f:18:d8:ef:56:8a:c3:5c:79:76:04:92:b0:c6:dd:b2:7d:bd: 07:b9:10:b0:6b:1f:f5:86:4e:16:21:63:56:d7:99:4c:13:82: b7:7d:3d:9a:1b:ed:52:0c:29:99:c8:95:d3:10:c5:3b:6b:57: e9:c9:d6:ba:40:3f:ee:b9:a2:bc:12:05:f4:f5:a0:37:ae:a4: e1:58:ce:fa:a6:3c:1a:03:49:6d:3d:5e:2d:a5:8a:bf:9e:64: af:8b:0c:3b:ef:ea:a8:7d:23:82:95:fe:de:ea:b6:e5:c9:a7: 51:f9:d2:69:23:04:17:a7:d5:19:ad:bf:8c:07:34:55:72:f7: 60:13:89:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HDjQQZSzPnHaEDJSwvgoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1MDE4MTVjNmY5OGYzYTJiNjE4NGFmZWJmMThlYTM0MWJl ODgyZWEwHhcNMjUxMjA3MDAwMDM1WhcNMjUxMjA4MDAwMDM1WjAzMTEwLwYDVQQD Eyg1ZGM1N2I4N2IyYWU0YTAzMGM2YmMzY2NmYzg1NDk0ZDI4MjE3MzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGDoqk817dRlxdHhkrtVSh2BH2te 80l6QB98LGvyJGVHCu3MzCMOCFukwK8Sij9EeyFzDg/rLCXFDl2V0SNQlGke7ccI P645YSykV1swQAfyid9ZOEmFlmpkDMInAIawvHp7XTMND7YqVqxe5oyMR02U6Ny+ 37/XjgfvyUbqkfvVjC2dxwE6FLZQzwaW5Fqn7wYTIUGm6WUX2pruk6I5C4i/cN1+ RNwjuVTKb+Lo+h6VPaeEKRcwbR/FJ3Sfak6RrodrqQ4spJdK8fUnzcSj8IZc/Bic dm9920emN1QlJy4AjM0XFevM1Y+XbM4UBIaQZ9/ZHJ0zvK6SfFxeNn6BpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF3Fe4eyrkoDDGvDzPyFSU0oIXMqMB8GA1UdIwQY MBaAFOUBgVxvmPOithhK/r8Y6jQb6ILqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVFHQlhHLVk4NksyR0VyLXZ4anFOQnZvZ3VvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy81YjAyMjItZWQ2NC00ZjU1LWI0NWIt MDA1OWY3MzdlZjA1LzEvNVFHQlhHLVk4NksyR0VyLXZ4anFOQnZvZ3VvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy81YjAyMjItZWQ2NC00ZjU1LWI0NWItMDA1OWY3MzdlZjA1 LzEvNVFHQlhHLVk4NksyR0VyLXZ4anFOQnZvZ3VvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACDQKj1Qy hnfQJ8vj7d7SMfCmqUnQlpLxQLtKsaxtyY2yxe8e7veuGUWoo1WUPIdEbvYadFLz ECMYuK82TNGQ8X6IBPbWpQ/oHtOkaj+frQbsqMWMREjCr4b1z4BWGf2I6re8LavS iRCw2Nd8pYNIijFjd2OZOKtPkygKUeHyXxjY71aKw1x5dgSSsMbdsn29B7kQsGsf 9YZOFiFjVteZTBOCt309mhvtUgwpmciV0xDFO2tX6cnWukA/7rmivBIF9PWgN66k 4VjO+qY8GgNJbT1eLaWKv55kr4sMO+/qqH0jgpX+3uq25cmnUfnSaSMEF6fVGa2/ jAc0VXL3YBOJRQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:48:56 2025 by rpki-client