This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft File: 5qr3mKBsFXlcb-xweYOYvrD01m4.mft (raw, json) Hash identifier: 759EV5dBk3dGdpcpI+6upKfQKaoiAqIRe+aUQUrGd6Q= Subject key identifier: F4:A3:F0:9B:34:D4:31:4C:7F:0B:74:19:4E:BE:4C:7F:23:AA:6D:7E Authority key identifier: E6:AA:F7:98:A0:6C:15:79:5C:6F:EC:70:79:83:98:BE:B0:F4:D6:6E Certificate issuer: /CN=e6aaf798a06c15795c6fec70798398beb0f4d66e Certificate serial: 019AF0BF75EC8A52CE06B910B86DA620EC8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft Manifest number: 0549 Signing time: Fri 05 Dec 2025 23:01:10 +0000 Manifest this update: Fri 05 Dec 2025 23:01:10 +0000 Manifest next update: Sat 06 Dec 2025 23:01:10 +0000 Files and hashes: 1: 5qr3mKBsFXlcb-xweYOYvrD01m4.crl (hash: DP1aCpxg9cauQfNNQfbg7siLpAdZEjnuyZhILPCkGlU=) 2: QF9fIw7vy0eAFpEn9gjeokPnPnM.roa (hash: q/KInKHcPLJ4cSVDaCLVjiOhhH/dOxf+Ggq3kQQJxYc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.crl rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:75:ec:8a:52:ce:06:b9:10:b8:6d:a6:20:ec:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6aaf798a06c15795c6fec70798398beb0f4d66e Validity Not Before: Dec 5 23:01:10 2025 GMT Not After : Dec 6 23:01:10 2025 GMT Subject: CN=f4a3f09b34d4314c7f0b74194ebe4c7f23aa6d7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:bc:6a:c1:f3:c8:fd:d0:94:6d:ff:95:2f:d1: d3:ef:a8:66:3f:36:a1:af:f3:32:80:ff:52:da:d9: 91:cd:11:a3:d2:3d:6b:60:23:cd:1a:99:6e:2c:0c: 5c:0e:70:ca:5a:58:12:66:10:0b:64:55:b9:4f:fb: a3:aa:c3:2c:bc:f4:07:93:f2:02:6a:e2:4b:9c:55: 4c:4e:0a:bf:a7:01:92:c8:c0:70:9c:7f:32:7e:d7: 7e:c9:bb:92:bd:d2:12:a0:ab:02:89:11:b1:ae:67: a5:c1:6d:d9:9e:d0:6f:3e:4d:f4:87:d9:69:27:50: d8:81:40:af:4c:5c:b6:68:09:1a:42:47:f1:1f:72: 79:41:e0:50:8b:0a:8c:39:13:f6:47:66:eb:31:7c: 60:9e:4a:ad:b1:d2:2f:d3:23:96:3a:ae:93:ca:66: 66:f4:3a:2f:83:a6:1d:e7:15:00:67:88:ea:d5:3a: 06:1b:4a:8c:b5:f3:cb:d6:8e:0b:08:5a:f5:e0:4c: 4f:c9:99:9e:29:84:c0:62:15:65:03:67:96:3f:65: 0b:ae:a0:9a:ef:ec:70:a3:53:96:fe:70:31:e2:e2: 5f:ca:2a:11:c5:bb:0b:bd:f6:a6:f8:a4:8f:f9:da: 2e:58:fb:18:14:92:4d:3b:11:64:86:59:2d:2c:53: d5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:A3:F0:9B:34:D4:31:4C:7F:0B:74:19:4E:BE:4C:7F:23:AA:6D:7E X509v3 Authority Key Identifier: keyid:E6:AA:F7:98:A0:6C:15:79:5C:6F:EC:70:79:83:98:BE:B0:F4:D6:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:27:16:e3:62:bc:aa:b6:1e:04:16:99:c0:55:c4:e0:d9:29: c1:21:0b:fa:11:04:9b:27:d4:85:2b:80:d8:35:54:5a:80:75: 61:c7:24:42:9c:23:b4:d6:71:15:3c:1f:eb:8b:16:c7:28:f6: 3f:fd:58:7a:92:1e:9b:b1:20:59:ce:8f:55:50:83:fb:2c:f8: c8:61:d9:3d:fe:79:a4:57:d0:8a:59:8d:1a:dc:52:98:0e:2e: 52:2a:d6:c1:07:1d:79:83:42:a4:2d:29:d4:bb:fc:8c:ee:89: 31:c1:c8:d8:4a:4b:f2:7e:75:24:dc:0d:7f:1a:6a:38:4e:46: 57:ee:7d:56:ce:ad:32:8a:91:1a:62:1d:dc:6f:77:97:1e:59: 13:9c:c8:6f:fb:3b:60:bd:86:7d:fa:67:33:50:11:3f:02:34: 70:d4:08:9c:85:fc:bf:da:3d:16:97:75:64:f0:a4:bc:5a:e7: 85:45:81:d0:49:22:f9:22:1d:0a:53:72:fa:ce:23:33:b0:db: a3:74:76:6e:fa:ea:1c:72:d8:8b:ad:8d:a3:2f:04:33:1e:87: e9:85:76:21:c1:a0:ed:57:ed:1b:ff:9f:24:c4:90:94:a4:96: 31:e7:47:2b:84:c3:fe:ee:8b:c5:45:bc:33:5a:bd:d3:41:18: 66:19:16:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv3XsilLOBrkQuG2mIOyOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2YWFmNzk4YTA2YzE1Nzk1YzZmZWM3MDc5ODM5OGJlYjBm NGQ2NmUwHhcNMjUxMjA1MjMwMTEwWhcNMjUxMjA2MjMwMTEwWjAzMTEwLwYDVQQD EyhmNGEzZjA5YjM0ZDQzMTRjN2YwYjc0MTk0ZWJlNGM3ZjIzYWE2ZDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrxqwfPI/dCUbf+VL9HT76hmPzah r/MygP9S2tmRzRGj0j1rYCPNGpluLAxcDnDKWlgSZhALZFW5T/ujqsMsvPQHk/IC auJLnFVMTgq/pwGSyMBwnH8yftd+ybuSvdISoKsCiRGxrmelwW3ZntBvPk30h9lp J1DYgUCvTFy2aAkaQkfxH3J5QeBQiwqMORP2R2brMXxgnkqtsdIv0yOWOq6TymZm 9Dovg6Yd5xUAZ4jq1ToGG0qMtfPL1o4LCFr14ExPyZmeKYTAYhVlA2eWP2ULrqCa 7+xwo1OW/nAx4uJfyioRxbsLvfam+KSP+douWPsYFJJNOxFkhlktLFPVEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPSj8Js01DFMfwt0GU6+TH8jqm1+MB8GA1UdIwQY MBaAFOaq95igbBV5XG/scHmDmL6w9NZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXFyM21LQnNGWGxjYi14d2VZT1l2ckQwMW00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny81MTY5NDYtZDViNi00ZjBlLTk2NWMt NTM3OGRlNDMwMzc3LzEvNXFyM21LQnNGWGxjYi14d2VZT1l2ckQwMW00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny81MTY5NDYtZDViNi00ZjBlLTk2NWMtNTM3OGRlNDMwMzc3 LzEvNXFyM21LQnNGWGxjYi14d2VZT1l2ckQwMW00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmCcW42K8 qrYeBBaZwFXE4NkpwSEL+hEEmyfUhSuA2DVUWoB1YcckQpwjtNZxFTwf64sWxyj2 P/1YepIem7EgWc6PVVCD+yz4yGHZPf55pFfQilmNGtxSmA4uUirWwQcdeYNCpC0p 1Lv8jO6JMcHI2EpL8n51JNwNfxpqOE5GV+59Vs6tMoqRGmId3G93lx5ZE5zIb/s7 YL2GffpnM1ARPwI0cNQInIX8v9o9Fpd1ZPCkvFrnhUWB0Eki+SIdClNy+s4jM7Db o3R2bvrqHHLYi62Noy8EMx6H6YV2IcGg7VftG/+fJMSQlKSWMedHK4TD/u6LxUW8 M1q900EYZhkWvw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:31 2025 by rpki-client