This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.mft File: 5qirioB4uztX5W_3wL1Npj7oLIs.mft (raw, json) Hash identifier: qe4EoEFMAZSAqwfrSlY49su+lD6oN4aPc2TUgAsOuLI= Subject key identifier: 2E:7B:02:E1:0D:1C:29:45:68:21:80:7C:7C:F8:B6:63:EB:39:5F:A1 Authority key identifier: E6:A8:AB:8A:80:78:BB:3B:57:E5:6F:F7:C0:BD:4D:A6:3E:E8:2C:8B Certificate issuer: /CN=e6a8ab8a8078bb3b57e56ff7c0bd4da63ee82c8b Certificate serial: 019AF0BF519EB331B70D48F2E7D851D795AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qirioB4uztX5W_3wL1Npj7oLIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.mft Manifest number: 126D Signing time: Fri 05 Dec 2025 23:01:01 +0000 Manifest this update: Fri 05 Dec 2025 23:01:01 +0000 Manifest next update: Sat 06 Dec 2025 23:01:01 +0000 Files and hashes: 1: 5qirioB4uztX5W_3wL1Npj7oLIs.crl (hash: xHsJBuKeXjUbkqEIUUEv/p4n7wp/BZOGpsgR0jzWRmw=) 2: j26ZaXDJ5u5_sXZ9DSYkPEGDdBg.roa (hash: N0zCU+Z5cgt4Feyzz51pQWAD1vkYoFo87UGHCmMmAQ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.crl rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.mft rsync://rpki.ripe.net/repository/DEFAULT/5qirioB4uztX5W_3wL1Npj7oLIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:51:9e:b3:31:b7:0d:48:f2:e7:d8:51:d7:95:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6a8ab8a8078bb3b57e56ff7c0bd4da63ee82c8b Validity Not Before: Dec 5 23:01:01 2025 GMT Not After : Dec 6 23:01:01 2025 GMT Subject: CN=2e7b02e10d1c29456821807c7cf8b663eb395fa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:2b:b0:3d:5e:04:c8:96:5f:50:ad:ce:7e:3e: 55:68:1e:ea:3a:42:c1:b9:be:bb:a8:2f:09:03:21: bf:c2:1f:72:4c:84:97:b2:dc:22:db:ed:a0:f5:d6: b4:5b:07:16:b3:44:04:05:56:77:8c:48:bc:fb:04: 09:d7:8a:39:d3:30:b9:89:be:97:f8:b9:c5:bf:38: b3:00:92:8c:2e:c7:59:36:6a:0e:01:42:a8:73:d3: 1c:74:c1:c2:13:b7:5e:cf:fa:b6:76:73:01:3f:49: 30:b0:8a:61:9d:d9:c7:6d:d6:43:f5:32:12:b1:c8: 65:17:30:c9:58:89:99:b4:e9:21:fc:fe:e1:c3:5c: c9:c0:14:f4:89:1c:a0:cc:c6:15:ea:72:4c:f6:28: fa:aa:15:36:e5:11:0d:1d:4f:54:2a:37:f5:d8:1a: aa:aa:e9:ac:88:39:9e:c7:d7:42:9f:ae:28:00:c7: cc:8b:fd:97:38:1d:30:7c:cb:63:b9:ba:9a:97:38: a8:c1:db:ba:f1:b0:79:b8:15:76:21:fd:8c:76:10: b8:31:ce:ba:36:3a:69:f8:b7:22:09:73:ad:09:a7: c0:a8:06:63:67:e0:fb:f3:10:3a:16:f0:a8:df:e9: 21:c2:10:6e:c5:5d:47:d9:26:c0:cf:d0:15:0c:89: 4c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:7B:02:E1:0D:1C:29:45:68:21:80:7C:7C:F8:B6:63:EB:39:5F:A1 X509v3 Authority Key Identifier: keyid:E6:A8:AB:8A:80:78:BB:3B:57:E5:6F:F7:C0:BD:4D:A6:3E:E8:2C:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qirioB4uztX5W_3wL1Npj7oLIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:5d:c0:c3:fc:9b:9c:cc:a2:82:b3:86:cf:80:c4:e3:91:42: 73:c2:00:60:ee:10:a7:1f:12:2d:e1:04:36:a9:08:b6:93:03: b7:a8:7a:73:ef:f4:43:77:6a:29:de:ff:6e:4c:f7:60:b5:20: aa:fd:31:ba:7c:34:83:a8:10:99:e4:35:eb:0b:71:f6:4e:31: 5e:1b:24:f2:51:9a:42:a4:12:28:43:52:f2:4c:7d:a8:6e:6e: 33:df:d1:63:97:2a:4a:6f:29:56:d6:a8:d3:f2:db:87:1e:6e: d0:63:3f:2c:d2:ca:61:25:e7:3d:b3:ad:6b:8a:44:01:f2:44: d3:b5:87:c8:5e:db:6a:ff:ac:31:a4:bd:fe:6f:d6:90:d5:5a: 6b:ad:bf:62:80:63:44:97:a0:0b:f8:14:ab:11:82:df:e2:7b: 15:9b:29:06:76:c3:42:de:01:a8:02:61:f6:8f:c6:5b:6d:82: 34:a6:aa:a9:ae:8b:e4:cb:dd:9a:5c:d9:54:9b:8f:ff:6d:d4: 5b:74:28:99:22:94:da:8b:1e:ea:23:0a:a4:f6:82:58:c5:1d: 41:4e:6b:8b:23:95:a5:65:5e:be:be:fb:07:80:7e:e6:5d:87: f5:16:a0:c4:9f:61:91:58:fc:e2:19:73:eb:e7:65:b9:f6:46: 9e:c9:50:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv1GeszG3DUjy59hR15WqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2YThhYjhhODA3OGJiM2I1N2U1NmZmN2MwYmQ0ZGE2M2Vl ODJjOGIwHhcNMjUxMjA1MjMwMTAxWhcNMjUxMjA2MjMwMTAxWjAzMTEwLwYDVQQD EygyZTdiMDJlMTBkMWMyOTQ1NjgyMTgwN2M3Y2Y4YjY2M2ViMzk1ZmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4iuwPV4EyJZfUK3Ofj5VaB7qOkLB ub67qC8JAyG/wh9yTISXstwi2+2g9da0WwcWs0QEBVZ3jEi8+wQJ14o50zC5ib6X +LnFvzizAJKMLsdZNmoOAUKoc9McdMHCE7dez/q2dnMBP0kwsIphndnHbdZD9TIS schlFzDJWImZtOkh/P7hw1zJwBT0iRygzMYV6nJM9ij6qhU25RENHU9UKjf12Bqq qumsiDmex9dCn64oAMfMi/2XOB0wfMtjubqalziowdu68bB5uBV2If2MdhC4Mc66 Njpp+LciCXOtCafAqAZjZ+D78xA6FvCo3+khwhBuxV1H2SbAz9AVDIlM1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC57AuENHClFaCGAfHz4tmPrOV+hMB8GA1UdIwQY MBaAFOaoq4qAeLs7V+Vv98C9TaY+6CyLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXFpcmlvQjR1enRYNVdfM3dMMU5wajdvTElzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8yMjhlMTYtZjgwOC00NDcxLWE5ODQt MzY0ZWUyODU5ZjJjLzEvNXFpcmlvQjR1enRYNVdfM3dMMU5wajdvTElzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8yMjhlMTYtZjgwOC00NDcxLWE5ODQtMzY0ZWUyODU5ZjJj LzEvNXFpcmlvQjR1enRYNVdfM3dMMU5wajdvTElzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAl3Aw/yb nMyigrOGz4DE45FCc8IAYO4Qpx8SLeEENqkItpMDt6h6c+/0Q3dqKd7/bkz3YLUg qv0xunw0g6gQmeQ16wtx9k4xXhsk8lGaQqQSKENS8kx9qG5uM9/RY5cqSm8pVtao 0/Lbhx5u0GM/LNLKYSXnPbOta4pEAfJE07WHyF7bav+sMaS9/m/WkNVaa62/YoBj RJegC/gUqxGC3+J7FZspBnbDQt4BqAJh9o/GW22CNKaqqa6L5MvdmlzZVJuP/23U W3QomSKU2ose6iMKpPaCWMUdQU5riyOVpWVevr77B4B+5l2H9RagxJ9hkVj84hlz 6+dlufZGnslQxw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:25:20 2025 by rpki-client