This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft File: Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft (raw, json) Hash identifier: RJewJ1kChle41cv3RdRNauTgIHckjRnM9nKOzt4T1FQ= Subject key identifier: B5:1C:DC:E6:18:C8:57:57:8F:83:03:5C:A8:6B:23:1E:EA:EF:E4:CC Authority key identifier: 43:98:F6:24:D5:7F:46:13:C0:BF:65:11:61:C7:56:C3:16:65:9A:B9 Certificate issuer: /CN=4398f624d57f4613c0bf651161c756c316659ab9 Certificate serial: 019AF12E71C8B873AD1998569143948CEE60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5j2JNV_RhPAv2URYcdWwxZlmrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 01:02:23 +0000 Manifest this update: Sat 06 Dec 2025 01:02:23 +0000 Manifest next update: Sun 07 Dec 2025 01:02:23 +0000 Files and hashes: 1: Q5j2JNV_RhPAv2URYcdWwxZlmrk.crl (hash: /mrF93ELKZOOcf+cV8jrCPVkjBTyJupJ2oWEdvQGs5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.crl rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft rsync://rpki.ripe.net/repository/DEFAULT/Q5j2JNV_RhPAv2URYcdWwxZlmrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:71:c8:b8:73:ad:19:98:56:91:43:94:8c:ee:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4398f624d57f4613c0bf651161c756c316659ab9 Validity Not Before: Dec 6 01:02:23 2025 GMT Not After : Dec 7 01:02:23 2025 GMT Subject: CN=b51cdce618c857578f83035ca86b231eeaefe4cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a2:e5:8d:6c:77:d8:20:b4:53:fa:30:b3:4c: 73:53:5a:74:f3:fc:87:35:a1:15:e6:20:02:63:c1: a6:2a:a9:04:9e:3e:f6:93:65:7b:94:fd:ef:89:74: a7:55:d0:59:3b:a3:8c:f7:27:9c:b3:d8:98:f3:b6: b7:14:c1:d8:93:18:df:a6:17:31:f7:62:90:b2:74: d3:bc:80:d0:a6:84:90:27:48:f0:01:0e:c7:a8:67: 91:9b:f4:3e:6e:33:b8:74:8b:57:ce:29:b6:ec:af: ef:9f:ce:9f:ca:1c:cb:2d:a4:a8:4b:ee:09:e6:75: 89:cc:ee:9f:67:5f:e3:8b:2f:57:99:27:c0:4e:d1: 41:8e:91:16:3d:ff:65:d0:8a:0b:db:26:c8:a4:3f: b7:cb:a1:a5:e3:4f:7a:e3:0c:98:ef:ef:16:e0:8e: fb:07:da:7f:77:d0:a7:1c:21:77:7a:d5:6b:78:07: fd:1f:b6:73:b6:90:0a:88:07:99:7f:04:c1:e6:64: 52:58:30:a0:d3:7d:71:7f:f3:7b:7c:fe:4e:3c:8e: 09:17:7b:a8:dc:04:f2:5f:8f:d0:a8:8c:e7:fa:0e: 10:c9:ab:bd:27:e0:4e:5d:de:65:2d:31:9e:08:95: d1:0a:46:50:20:ea:df:d9:c9:e4:2b:a8:bd:fb:3d: 99:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:1C:DC:E6:18:C8:57:57:8F:83:03:5C:A8:6B:23:1E:EA:EF:E4:CC X509v3 Authority Key Identifier: keyid:43:98:F6:24:D5:7F:46:13:C0:BF:65:11:61:C7:56:C3:16:65:9A:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5j2JNV_RhPAv2URYcdWwxZlmrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:e0:82:03:2b:c2:6c:ca:d2:72:0e:b9:fa:69:16:b2:b5:6c: a8:46:68:b4:e2:d9:42:c0:81:08:cb:46:67:63:a6:4c:be:49: 4b:4c:05:3e:02:22:b7:28:7a:94:fd:ed:23:1b:57:04:00:08: a0:a6:23:86:a5:90:aa:a1:22:b4:9b:c6:ad:81:fa:1e:2e:6c: 4a:9e:cb:de:b9:eb:00:d1:0c:38:c2:e7:06:81:40:ef:50:43: 0c:6d:f3:6d:b9:f9:35:b4:af:00:2d:33:45:b1:18:fd:81:99: 9d:2e:90:13:3e:cc:42:86:09:2a:77:19:e1:48:e5:0e:d9:53: 43:b2:5f:04:98:65:b9:23:88:71:0b:97:3c:72:eb:6b:e0:ba: b8:9c:99:f3:7e:6a:1d:1d:b2:3c:1a:2c:05:02:30:a5:1e:14: 1e:62:0b:c4:ea:e5:85:18:ca:08:a5:73:13:33:1d:8b:d7:af: 69:a0:fc:c5:a6:e0:24:5c:60:f6:db:64:12:01:09:a1:4e:77: 5b:97:21:38:00:e5:9b:35:b1:ff:22:de:af:b2:15:b2:94:81: 05:2b:aa:04:65:2e:27:fa:10:ea:73:c8:eb:74:33:34:32:08: 62:3b:e3:aa:7d:8c:17:db:16:8b:cc:c4:d0:09:92:c8:89:0f: 97:78:db:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLnHIuHOtGZhWkUOUjO5gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzOThmNjI0ZDU3ZjQ2MTNjMGJmNjUxMTYxYzc1NmMzMTY2 NTlhYjkwHhcNMjUxMjA2MDEwMjIzWhcNMjUxMjA3MDEwMjIzWjAzMTEwLwYDVQQD EyhiNTFjZGNlNjE4Yzg1NzU3OGY4MzAzNWNhODZiMjMxZWVhZWZlNGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqLljWx32CC0U/ows0xzU1p08/yH NaEV5iACY8GmKqkEnj72k2V7lP3viXSnVdBZO6OM9yecs9iY87a3FMHYkxjfphcx 92KQsnTTvIDQpoSQJ0jwAQ7HqGeRm/Q+bjO4dItXzim27K/vn86fyhzLLaSoS+4J 5nWJzO6fZ1/jiy9XmSfATtFBjpEWPf9l0IoL2ybIpD+3y6Gl40964wyY7+8W4I77 B9p/d9CnHCF3etVreAf9H7ZztpAKiAeZfwTB5mRSWDCg031xf/N7fP5OPI4JF3uo 3ATyX4/QqIzn+g4Qyau9J+BOXd5lLTGeCJXRCkZQIOrf2cnkK6i9+z2Z/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLUc3OYYyFdXj4MDXKhrIx7q7+TMMB8GA1UdIwQY MBaAFEOY9iTVf0YTwL9lEWHHVsMWZZq5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTVqMkpOVl9SaFBBdjJVUlljZFd3eFpsbXJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9kN2M0YTAtMjcyZS00NDA5LThkM2It NmE3OWZlZTkxOWViLzEvUTVqMkpOVl9SaFBBdjJVUlljZFd3eFpsbXJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9kN2M0YTAtMjcyZS00NDA5LThkM2ItNmE3OWZlZTkxOWVi LzEvUTVqMkpOVl9SaFBBdjJVUlljZFd3eFpsbXJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0OCCAyvC bMrScg65+mkWsrVsqEZotOLZQsCBCMtGZ2OmTL5JS0wFPgIityh6lP3tIxtXBAAI oKYjhqWQqqEitJvGrYH6Hi5sSp7L3rnrANEMOMLnBoFA71BDDG3zbbn5NbSvAC0z RbEY/YGZnS6QEz7MQoYJKncZ4UjlDtlTQ7JfBJhluSOIcQuXPHLra+C6uJyZ835q HR2yPBosBQIwpR4UHmILxOrlhRjKCKVzEzMdi9evaaD8xabgJFxg9ttkEgEJoU53 W5chOADlmzWx/yLer7IVspSBBSuqBGUuJ/oQ6nPI63QzNDIIYjvjqn2MF9sWi8zE 0AmSyIkPl3jbQg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:39 2025 by rpki-client