This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft File: 5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft (raw, json) Hash identifier: zdVMyibKYUh4WBpdk1zS0/5kXkPeziG/DdgMfw1ID1c= Subject key identifier: 20:22:1B:69:82:9A:C1:49:86:D7:05:3D:E9:69:F0:BD:34:95:2B:B5 Authority key identifier: E6:A5:48:52:07:7A:00:78:38:30:3C:1F:61:C8:43:87:CC:CD:D6:84 Certificate issuer: /CN=e6a54852077a007838303c1f61c84387cccdd684 Certificate serial: 019AF5776292275652B925F86344CE418ED1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft Manifest number: 04EF Signing time: Sat 06 Dec 2025 21:00:32 +0000 Manifest this update: Sat 06 Dec 2025 21:00:32 +0000 Manifest next update: Sun 07 Dec 2025 21:00:32 +0000 Files and hashes: 1: 5qVIUgd6AHg4MDwfYchDh8zN1oQ.crl (hash: bkGHcvVEb8H6qb/s33CyU8wbqBoVPXOdM5EN6mIDlbw=) 2: iXKwz38ZMbiEEaTX-_IpdO5hn4E.roa (hash: 0cx/lQgZi2jHvk5uPfrrhYqKV7eQYwbciyjofO7JZpY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:62:92:27:56:52:b9:25:f8:63:44:ce:41:8e:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6a54852077a007838303c1f61c84387cccdd684 Validity Not Before: Dec 6 21:00:32 2025 GMT Not After : Dec 7 21:00:32 2025 GMT Subject: CN=20221b69829ac14986d7053de969f0bd34952bb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c2:89:b4:34:c1:f9:af:b6:e1:ab:04:90:9c: d2:e4:7d:1d:6f:81:0d:31:af:5d:fe:ff:0d:c1:b0: 9b:03:a2:48:69:93:10:1c:0f:bf:9e:1e:85:d6:1d: 1c:99:bd:27:84:4d:f8:eb:50:90:9d:31:61:ac:40: 45:88:b7:08:08:3b:53:51:cf:f1:a1:57:c5:ee:f1: 07:e4:b2:06:9f:09:8c:c8:53:22:1c:a1:b1:74:fd: 6f:fd:cf:06:3a:39:33:9d:54:1c:16:ea:05:f1:af: 45:f2:e5:5f:af:2c:e7:8d:8c:6c:26:87:81:62:ab: 4b:08:51:61:b6:65:cb:08:f1:47:e0:ee:b5:fa:e7: 0a:1b:42:32:12:ef:f5:f5:d1:0e:2f:e3:1c:52:88: af:0b:d8:6e:fd:75:16:3b:e2:95:b8:cf:39:17:d1: 75:70:8b:25:8f:5b:dd:28:24:38:ed:1c:2b:23:71: aa:7a:c1:59:d4:e4:1b:b5:47:16:f6:cc:01:74:f9: a9:68:ca:23:32:ce:b0:c6:89:36:15:2b:fd:4f:d9: 2c:19:fa:23:22:a8:27:13:ad:d8:4b:55:81:af:c0: ac:33:23:b3:b5:3b:fd:1c:00:fe:07:62:94:c3:a1: 73:a6:5e:75:78:06:2c:0c:c8:11:dc:ce:a3:1c:4c: 37:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:22:1B:69:82:9A:C1:49:86:D7:05:3D:E9:69:F0:BD:34:95:2B:B5 X509v3 Authority Key Identifier: keyid:E6:A5:48:52:07:7A:00:78:38:30:3C:1F:61:C8:43:87:CC:CD:D6:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:4f:5f:b8:9a:27:c5:be:12:0b:dd:33:28:fc:fd:92:40:f3: 69:e8:c4:85:06:26:f5:49:17:f2:8c:3e:60:3e:7f:06:42:c5: c4:c6:97:4d:f9:bd:dc:50:0a:50:51:0a:d2:80:69:ec:08:5d: 7d:bd:a1:5a:dc:9f:f0:d3:7c:b8:2a:c9:49:9f:58:71:b5:bb: 75:8e:aa:c6:53:09:e2:08:77:22:2e:6b:27:55:9f:81:af:c6: d4:c8:45:c9:c0:e5:98:62:bc:70:89:39:ae:4d:bf:f3:8b:d3: 73:1e:2e:fa:05:da:e9:e9:27:69:76:c6:6f:84:86:f1:74:12: 05:36:bd:1e:8a:72:a9:7a:d0:76:a3:96:fc:6d:d3:51:7c:cc: e7:dd:5b:d7:cd:4e:3d:14:fc:87:ab:70:94:66:7f:4a:00:d3: 01:7d:74:28:ba:56:7b:1b:bd:a6:9f:fa:0e:63:c7:10:db:b8: 04:f7:62:62:d0:48:0e:3e:c0:b8:b6:41:93:c9:2f:d3:c1:34: cd:0e:b9:ea:75:e3:cd:4a:8e:ac:30:53:ce:99:a0:47:ea:62: 62:0b:86:14:91:6c:c9:d3:8c:53:a0:22:f8:cf:95:94:f8:9b: 5b:b1:44:96:c6:ab:77:8a:83:01:f7:7f:e0:a5:e0:04:21:1c: 7e:91:13:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d2KSJ1ZSuSX4Y0TOQY7RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2YTU0ODUyMDc3YTAwNzgzODMwM2MxZjYxYzg0Mzg3Y2Nj ZGQ2ODQwHhcNMjUxMjA2MjEwMDMyWhcNMjUxMjA3MjEwMDMyWjAzMTEwLwYDVQQD EygyMDIyMWI2OTgyOWFjMTQ5ODZkNzA1M2RlOTY5ZjBiZDM0OTUyYmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsKJtDTB+a+24asEkJzS5H0db4EN Ma9d/v8NwbCbA6JIaZMQHA+/nh6F1h0cmb0nhE3461CQnTFhrEBFiLcICDtTUc/x oVfF7vEH5LIGnwmMyFMiHKGxdP1v/c8GOjkznVQcFuoF8a9F8uVfryznjYxsJoeB YqtLCFFhtmXLCPFH4O61+ucKG0IyEu/19dEOL+McUoivC9hu/XUWO+KVuM85F9F1 cIslj1vdKCQ47RwrI3GqesFZ1OQbtUcW9swBdPmpaMojMs6wxok2FSv9T9ksGfoj IqgnE63YS1WBr8CsMyOztTv9HAD+B2KUw6Fzpl51eAYsDMgR3M6jHEw3iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCAiG2mCmsFJhtcFPelp8L00lSu1MB8GA1UdIwQY MBaAFOalSFIHegB4ODA8H2HIQ4fMzdaEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXFWSVVnZDZBSGc0TUR3ZlljaERoOHpOMW9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mYzgwM2YtOTY3NS00MzU1LTgwZjYt Nzc3MzAxNTljOGQ0LzEvNXFWSVVnZDZBSGc0TUR3ZlljaERoOHpOMW9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mYzgwM2YtOTY3NS00MzU1LTgwZjYtNzc3MzAxNTljOGQ0 LzEvNXFWSVVnZDZBSGc0TUR3ZlljaERoOHpOMW9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg09fuJon xb4SC90zKPz9kkDzaejEhQYm9UkX8ow+YD5/BkLFxMaXTfm93FAKUFEK0oBp7Ahd fb2hWtyf8NN8uCrJSZ9YcbW7dY6qxlMJ4gh3Ii5rJ1Wfga/G1MhFycDlmGK8cIk5 rk2/84vTcx4u+gXa6eknaXbGb4SG8XQSBTa9HopyqXrQdqOW/G3TUXzM591b181O PRT8h6twlGZ/SgDTAX10KLpWexu9pp/6DmPHENu4BPdiYtBIDj7AuLZBk8kv08E0 zQ656nXjzUqOrDBTzpmgR+piYguGFJFsydOMU6Ai+M+VlPibW7FElsard4qDAfd/ 4KXgBCEcfpETqQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:54:09 2025 by rpki-client