This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft File: 5q1QzkYdtcs3pYPnKbcVSZjssRc.mft (raw, json) Hash identifier: G03kJ6MoEggWv6RAwrteL0AHj+6EfuMPiKSkmv45ADE= Subject key identifier: 9C:53:70:C3:8F:B6:05:2E:EA:2C:FE:34:1D:B7:06:25:00:9C:42:14 Authority key identifier: E6:AD:50:CE:46:1D:B5:CB:37:A5:83:E7:29:B7:15:49:98:EC:B1:17 Certificate issuer: /CN=e6ad50ce461db5cb37a583e729b7154998ecb117 Certificate serial: 019AF50A169168BE99C2803D4DB6CC161B91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5q1QzkYdtcs3pYPnKbcVSZjssRc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft Manifest number: 0517 Signing time: Sat 06 Dec 2025 19:01:10 +0000 Manifest this update: Sat 06 Dec 2025 19:01:10 +0000 Manifest next update: Sun 07 Dec 2025 19:01:10 +0000 Files and hashes: 1: 5q1QzkYdtcs3pYPnKbcVSZjssRc.crl (hash: LufUXDbXzqS+u1fojI0k9fQ6MfOGWXgPcGfrU6TW8D8=) 2: IGFfOsfuRBLRoDQXZrvrXPV6GDg.roa (hash: GBdaIeCW55nvw4wNP3jzu/1bBBTCqNE/C3I0UV/65Vc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft rsync://rpki.ripe.net/repository/DEFAULT/5q1QzkYdtcs3pYPnKbcVSZjssRc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:16:91:68:be:99:c2:80:3d:4d:b6:cc:16:1b:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6ad50ce461db5cb37a583e729b7154998ecb117 Validity Not Before: Dec 6 19:01:10 2025 GMT Not After : Dec 7 19:01:10 2025 GMT Subject: CN=9c5370c38fb6052eea2cfe341db70625009c4214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:15:d4:99:ce:a8:cd:96:2d:14:61:83:6d:d4: 81:fe:09:62:dd:8e:bb:89:de:8b:3c:71:48:b2:ac: 9b:f1:46:84:a5:92:0e:ce:28:ed:1e:3f:12:c0:cb: ad:1a:b8:23:3d:26:60:b0:a3:b0:8d:0a:17:9a:e1: 8e:5f:15:1b:b2:c7:2c:24:b6:2d:da:7d:7a:95:0a: 01:47:da:e9:2e:21:ff:db:17:e5:e7:93:e9:f0:49: 2a:70:4c:55:a9:69:46:e6:18:1c:7b:af:84:b6:1c: af:25:d3:b0:68:df:be:4e:74:04:92:36:a5:49:24: 2f:0f:f7:fc:7c:71:4b:b2:26:17:32:f9:76:c1:c2: 40:85:33:32:cf:40:c1:ab:dd:36:71:62:98:6f:69: e3:80:90:82:a5:8a:20:25:8b:68:e2:cf:0a:5e:d9: 0e:c0:63:1c:72:9d:39:ef:fb:ff:ea:14:da:39:f6: 7d:6a:dc:cb:81:f5:a1:42:a6:94:8c:43:9b:44:20: a7:3a:41:8c:62:ea:d3:b1:f4:0e:0f:50:1a:4c:82: c5:2a:16:90:2e:69:f2:c0:95:9c:1e:2d:fc:77:44: 5e:d5:fa:a6:99:af:13:f0:58:71:53:e1:ea:86:63: 16:10:df:37:e6:57:30:87:d5:d9:65:ad:ac:0a:cb: 5b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:53:70:C3:8F:B6:05:2E:EA:2C:FE:34:1D:B7:06:25:00:9C:42:14 X509v3 Authority Key Identifier: keyid:E6:AD:50:CE:46:1D:B5:CB:37:A5:83:E7:29:B7:15:49:98:EC:B1:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5q1QzkYdtcs3pYPnKbcVSZjssRc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:9c:bb:d9:04:88:88:c8:06:18:58:33:9c:d3:62:04:86:d3: 78:eb:25:48:ee:be:5b:10:c9:a2:c0:b0:cf:ac:d5:60:a2:85: e3:57:81:2e:0e:9d:2e:7f:8b:61:b8:74:13:8d:c9:a8:1b:97: f6:a4:fc:df:b5:53:1c:4b:ad:ed:60:72:18:3f:72:66:04:1f: 78:1b:04:c1:98:98:51:3d:b8:48:68:12:c1:26:db:30:1b:6a: eb:38:bc:9f:c8:39:91:81:01:6a:ba:d5:cf:23:c8:84:1c:b0: 67:1a:cb:fa:94:dd:31:4d:d5:35:bc:17:98:88:4c:de:ef:cf: 2d:b3:1a:6d:c1:16:32:a1:14:aa:20:76:91:53:c3:af:8b:6b: 7f:f4:b2:b3:72:68:13:53:cd:37:7d:05:d6:6c:58:12:cb:7e: e9:9b:9c:0b:ae:17:f9:50:ac:29:42:de:25:08:f1:5a:b9:63: c8:39:10:eb:1f:63:a3:c4:9d:2a:a7:6c:bd:53:c9:d7:2f:4b: dd:ad:30:2c:f1:e6:38:46:5e:a1:c3:9f:a9:8d:88:9c:00:c0: 3d:19:f9:38:a6:5e:85:3d:15:b4:59:0a:e5:53:9d:f1:6e:c5: fa:ce:b9:58:4c:b3:e1:7c:2a:a2:73:2b:45:a4:15:ea:70:14: e6:47:71:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1ChaRaL6ZwoA9TbbMFhuRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2YWQ1MGNlNDYxZGI1Y2IzN2E1ODNlNzI5YjcxNTQ5OThl Y2IxMTcwHhcNMjUxMjA2MTkwMTEwWhcNMjUxMjA3MTkwMTEwWjAzMTEwLwYDVQQD Eyg5YzUzNzBjMzhmYjYwNTJlZWEyY2ZlMzQxZGI3MDYyNTAwOWM0MjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxXUmc6ozZYtFGGDbdSB/gli3Y67 id6LPHFIsqyb8UaEpZIOzijtHj8SwMutGrgjPSZgsKOwjQoXmuGOXxUbsscsJLYt 2n16lQoBR9rpLiH/2xfl55Pp8EkqcExVqWlG5hgce6+EthyvJdOwaN++TnQEkjal SSQvD/f8fHFLsiYXMvl2wcJAhTMyz0DBq902cWKYb2njgJCCpYogJYto4s8KXtkO wGMccp057/v/6hTaOfZ9atzLgfWhQqaUjEObRCCnOkGMYurTsfQOD1AaTILFKhaQ LmnywJWcHi38d0Re1fqmma8T8FhxU+HqhmMWEN835lcwh9XZZa2sCstb5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJxTcMOPtgUu6iz+NB23BiUAnEIUMB8GA1UdIwQY MBaAFOatUM5GHbXLN6WD5ym3FUmY7LEXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXExUXprWWR0Y3MzcFlQbktiY1ZTWmpzc1JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9lYTE3MjUtZGNkNS00OTkwLTk0NDgt MGViM2JhNTEzNzRjLzEvNXExUXprWWR0Y3MzcFlQbktiY1ZTWmpzc1JjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9lYTE3MjUtZGNkNS00OTkwLTk0NDgtMGViM2JhNTEzNzRj LzEvNXExUXprWWR0Y3MzcFlQbktiY1ZTWmpzc1JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsJy72QSI iMgGGFgznNNiBIbTeOslSO6+WxDJosCwz6zVYKKF41eBLg6dLn+LYbh0E43JqBuX 9qT837VTHEut7WByGD9yZgQfeBsEwZiYUT24SGgSwSbbMBtq6zi8n8g5kYEBarrV zyPIhBywZxrL+pTdMU3VNbwXmIhM3u/PLbMabcEWMqEUqiB2kVPDr4trf/Sys3Jo E1PNN30F1mxYEst+6ZucC64X+VCsKULeJQjxWrljyDkQ6x9jo8SdKqdsvVPJ1y9L 3a0wLPHmOEZeocOfqY2InADAPRn5OKZehT0VtFkK5VOd8W7F+s65WEyz4XwqonMr RaQV6nAU5kdxow== -----END CERTIFICATE-----Generated at Sun Dec 7 02:02:03 2025 by rpki-client