This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft File: Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft (raw, json) Hash identifier: G6s8F3wDM4Y6s6VGj0SVaxJXozU/lUFakf6EvEmk1H8= Subject key identifier: CA:38:B3:1B:44:15:D1:0A:C2:9C:24:E6:30:68:6A:EC:5E:1E:CD:D3 Authority key identifier: 43:9D:D1:CE:AE:0F:65:D6:2A:2E:B7:C6:7C:48:DD:43:0E:7D:A6:96 Certificate issuer: /CN=439dd1ceae0f65d62a2eb7c67c48dd430e7da696 Certificate serial: 019AF23FAE8EA9D455E7DEB398864F62598E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft Manifest number: 059A Signing time: Sat 06 Dec 2025 06:00:50 +0000 Manifest this update: Sat 06 Dec 2025 06:00:50 +0000 Manifest next update: Sun 07 Dec 2025 06:00:50 +0000 Files and hashes: 1: Q53Rzq4PZdYqLrfGfEjdQw59ppY.crl (hash: HHnjBKj42HnY0GIUW+G3qUG4BMmrRg5uzIw2GJGe0fk=) 2: oskd316tBTAUTSHf0wsKURHXyDc.roa (hash: IsLUQsw+ev9Voy8iNeiPun8V5Wlg4SPwA/B548IB55M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:ae:8e:a9:d4:55:e7:de:b3:98:86:4f:62:59:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439dd1ceae0f65d62a2eb7c67c48dd430e7da696 Validity Not Before: Dec 6 06:00:50 2025 GMT Not After : Dec 7 06:00:50 2025 GMT Subject: CN=ca38b31b4415d10ac29c24e630686aec5e1ecdd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:27:f1:51:ee:5b:b9:56:65:8b:a3:9b:ab:eb: b3:71:28:7b:a9:00:c4:53:0f:d8:8b:76:89:26:89: 3d:36:66:87:6a:43:f1:e6:e3:96:f3:ae:87:43:f2: 6d:2b:28:f3:01:b9:86:4f:04:8c:f9:03:ed:27:af: 74:89:53:70:ee:1e:48:07:23:fd:94:8c:2a:ea:37: 83:38:a1:e8:be:49:aa:34:08:38:81:0d:4b:77:07: 32:5e:91:6a:ca:9b:b2:ac:11:16:7f:b6:51:a7:eb: 8c:c7:08:a7:0e:f6:fd:7f:55:ae:f0:ad:2a:7f:4f: ff:ce:41:af:a7:ff:91:c2:2b:40:c7:ba:eb:fd:d9: 62:e2:ef:80:eb:96:60:e2:85:f6:56:94:2f:ec:04: bb:59:bc:56:38:e2:77:f1:aa:90:40:a5:28:a2:78: 54:ff:9e:58:34:2d:6f:32:d2:bb:4f:89:58:db:9b: d1:e3:78:f0:3a:42:de:49:29:5c:fe:50:75:97:e0: 46:53:80:64:26:b4:48:8a:5b:d3:f3:1a:35:0f:d5: d7:a8:ad:e3:08:e6:8b:4e:a6:f9:d5:f3:46:a9:85: 2d:01:50:c1:2e:a0:d5:85:33:c0:fd:63:96:7c:ea: a0:8c:c7:4e:c8:f9:79:0e:5c:b4:43:e5:ac:18:ab: 4e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:38:B3:1B:44:15:D1:0A:C2:9C:24:E6:30:68:6A:EC:5E:1E:CD:D3 X509v3 Authority Key Identifier: keyid:43:9D:D1:CE:AE:0F:65:D6:2A:2E:B7:C6:7C:48:DD:43:0E:7D:A6:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:b3:92:f5:c2:ff:49:9c:d3:9d:1d:d2:17:ce:23:af:21:97: 19:75:75:77:eb:a6:45:19:4d:b4:1b:42:cb:0e:50:6c:3d:38: d7:e3:03:d0:0a:99:b6:91:a8:93:a9:d7:bd:33:fc:b3:56:f0: 72:68:56:b2:fa:be:49:be:56:70:4d:5c:66:b8:86:2a:71:f1: 62:29:40:6b:40:3a:f0:08:2a:45:9d:ca:8f:1b:a0:ef:f9:20: d3:65:e1:91:88:a0:c1:aa:e5:ac:ff:be:56:6e:e4:ac:d6:98: ed:0f:4e:95:79:98:54:17:66:d8:26:0c:b5:a4:ce:e0:e9:af: 30:92:d3:cf:70:76:d0:3e:03:0b:11:86:62:1d:90:dc:fb:d8: 7f:d0:d9:a8:6c:6b:db:39:48:9c:75:4a:55:60:a6:94:3e:0f: d5:6f:e1:04:8b:43:eb:56:f5:db:50:bf:b8:42:b6:12:be:f7: 8d:fc:7b:63:08:18:ef:2e:36:74:72:24:16:47:bf:4b:46:85: 26:a6:0c:bc:f9:e0:da:75:b8:2a:53:47:d5:4f:7e:b5:b4:47: ed:9d:2a:35:ed:bb:86:ec:98:57:73:31:ae:ac:4f:f5:91:19: 1b:70:bc:5c:f6:75:96:5d:7f:8b:36:0e:45:4c:a2:9a:c3:1b: 69:86:1f:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP66OqdRV596zmIZPYlmOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzOWRkMWNlYWUwZjY1ZDYyYTJlYjdjNjdjNDhkZDQzMGU3 ZGE2OTYwHhcNMjUxMjA2MDYwMDUwWhcNMjUxMjA3MDYwMDUwWjAzMTEwLwYDVQQD EyhjYTM4YjMxYjQ0MTVkMTBhYzI5YzI0ZTYzMDY4NmFlYzVlMWVjZGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCfxUe5buVZli6Obq+uzcSh7qQDE Uw/Yi3aJJok9NmaHakPx5uOW866HQ/JtKyjzAbmGTwSM+QPtJ690iVNw7h5IByP9 lIwq6jeDOKHovkmqNAg4gQ1LdwcyXpFqypuyrBEWf7ZRp+uMxwinDvb9f1Wu8K0q f0//zkGvp/+RwitAx7rr/dli4u+A65Zg4oX2VpQv7AS7WbxWOOJ38aqQQKUoonhU /55YNC1vMtK7T4lY25vR43jwOkLeSSlc/lB1l+BGU4BkJrRIilvT8xo1D9XXqK3j COaLTqb51fNGqYUtAVDBLqDVhTPA/WOWfOqgjMdOyPl5Dly0Q+WsGKtOdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMo4sxtEFdEKwpwk5jBoauxeHs3TMB8GA1UdIwQY MBaAFEOd0c6uD2XWKi63xnxI3UMOfaaWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTUzUnpxNFBaZFlxTHJmR2ZFamRRdzU5cHBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9iMzdhNTYtN2JiMS00ZjgzLWExN2Ut NjQxN2JkOGZlMjljLzEvUTUzUnpxNFBaZFlxTHJmR2ZFamRRdzU5cHBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9iMzdhNTYtN2JiMS00ZjgzLWExN2UtNjQxN2JkOGZlMjlj LzEvUTUzUnpxNFBaZFlxTHJmR2ZFamRRdzU5cHBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkLOS9cL/ SZzTnR3SF84jryGXGXV1d+umRRlNtBtCyw5QbD041+MD0AqZtpGok6nXvTP8s1bw cmhWsvq+Sb5WcE1cZriGKnHxYilAa0A68AgqRZ3Kjxug7/kg02XhkYigwarlrP++ Vm7krNaY7Q9OlXmYVBdm2CYMtaTO4OmvMJLTz3B20D4DCxGGYh2Q3PvYf9DZqGxr 2zlInHVKVWCmlD4P1W/hBItD61b121C/uEK2Er73jfx7YwgY7y42dHIkFke/S0aF JqYMvPng2nW4KlNH1U9+tbRH7Z0qNe27huyYV3MxrqxP9ZEZG3C8XPZ1ll1/izYO RUyimsMbaYYfyA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:30:10 2025 by rpki-client