This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft File: 5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft (raw, json) Hash identifier: qEcc+wOP44m1r7ahb17lcd+iDe+DsCWipj+BYdPITP4= Subject key identifier: 01:EC:E1:63:BC:1C:B1:3C:BC:33:6D:0E:9F:A9:13:9A:AF:F0:BD:72 Authority key identifier: E5:05:D9:34:97:F1:9D:25:63:06:6B:40:92:00:96:97:11:F2:8C:67 Certificate issuer: /CN=e505d93497f19d2563066b409200969711f28c67 Certificate serial: 019AF23FBA5FCB493F2E8A24D0656F22A889 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft Manifest number: 0F00 Signing time: Sat 06 Dec 2025 06:00:54 +0000 Manifest this update: Sat 06 Dec 2025 06:00:54 +0000 Manifest next update: Sun 07 Dec 2025 06:00:54 +0000 Files and hashes: 1: 5QXZNJfxnSVjBmtAkgCWlxHyjGc.crl (hash: Ehk+i5ra36mspRMx+RKz8hLsUk2V4X6mhZIJoZMnZCM=) 2: TeyiHHpQzPXntQ9zcodgsnssabQ.roa (hash: 99RzEV6KxbBUQmEGjwYOg/0KALhFJ98CPqecVaZd8t8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft rsync://rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:ba:5f:cb:49:3f:2e:8a:24:d0:65:6f:22:a8:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e505d93497f19d2563066b409200969711f28c67 Validity Not Before: Dec 6 06:00:54 2025 GMT Not After : Dec 7 06:00:54 2025 GMT Subject: CN=01ece163bc1cb13cbc336d0e9fa9139aaff0bd72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:28:63:f0:6b:7f:c1:65:54:46:29:11:02:b8: c4:3d:27:a4:a5:6d:93:80:26:c7:66:4b:87:9b:27: b4:da:51:38:f0:e2:d5:ad:4d:32:09:e2:51:08:79: 0f:41:2f:71:11:61:42:8e:e9:3f:ea:cb:7c:94:fd: 41:3c:18:3e:5d:bf:6c:a0:4d:39:98:3b:a9:4f:68: cf:22:91:50:fc:ce:34:65:ae:03:11:74:1b:0e:57: 56:ab:02:58:9b:9f:1f:24:e5:9b:60:58:04:b8:75: ca:6c:dc:a4:01:41:5e:a2:e2:6f:23:68:44:52:52: 39:93:46:18:d5:f3:5b:77:30:70:4b:de:67:bb:64: 06:6d:0a:4c:30:6a:cf:c6:96:47:63:4f:f2:09:18: 6c:58:a6:8e:30:3f:8e:1f:1e:78:54:47:c3:a0:d2: e0:36:21:6e:5e:0e:c0:a8:b5:7a:e2:62:72:ff:c7: ae:7c:41:2e:80:b8:56:8d:a5:53:d3:a1:cf:f7:86: 4c:77:14:5e:d4:de:20:3a:20:bc:e1:9d:14:50:16: 08:9e:d0:be:99:65:97:40:7b:3e:94:bc:d5:3f:64: 61:8f:de:2f:f6:eb:e6:67:95:7c:b7:fc:2b:bc:11: 97:57:0e:4a:01:1b:9b:61:2c:0d:2d:09:80:36:2d: 3d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:EC:E1:63:BC:1C:B1:3C:BC:33:6D:0E:9F:A9:13:9A:AF:F0:BD:72 X509v3 Authority Key Identifier: keyid:E5:05:D9:34:97:F1:9D:25:63:06:6B:40:92:00:96:97:11:F2:8C:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:eb:a5:2c:82:de:89:96:ca:a1:b3:8e:18:87:a6:3f:6c:07: e8:38:0f:9d:e3:1a:69:16:36:df:69:f1:a6:07:3b:34:53:f1: 3d:8f:82:a4:31:a3:45:7d:8a:42:4d:6d:49:17:1e:e3:d3:c7: 19:ec:15:36:ce:a4:df:5c:6b:ba:9b:68:3e:1c:ac:96:cd:de: c8:c0:74:88:8a:ae:2c:7d:bd:7d:d3:c9:ff:6f:55:53:ec:a5: 2b:b1:ad:58:01:1f:f3:d8:32:af:54:fd:21:f5:e2:ee:4c:9f: 58:e3:cc:44:68:e1:3c:71:d7:e2:26:f9:f9:9d:af:4a:da:cc: 9a:28:65:81:9e:55:c8:d6:58:64:df:97:9a:7c:4f:0f:ae:a5: 56:30:4e:ed:fd:07:5e:31:92:c0:b1:3c:ca:ac:19:dd:41:3d: cb:e7:3e:55:4e:85:63:cc:d6:62:88:0f:1c:24:71:18:5d:9e: 60:20:36:3e:6c:79:a0:0b:dc:02:1a:d4:f1:86:5c:d6:93:fb: ea:23:e7:da:66:60:ff:4d:1b:4a:4a:41:6a:0d:1b:b6:a0:ab: 00:1c:25:36:02:f9:22:a8:08:5c:66:7d:29:48:75:c5:06:e4: 02:bb:25:11:3f:11:e1:2b:cb:f2:e2:fa:48:8d:0d:a8:ef:ef: 87:f5:15:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP7pfy0k/Look0GVvIqiJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1MDVkOTM0OTdmMTlkMjU2MzA2NmI0MDkyMDA5Njk3MTFm MjhjNjcwHhcNMjUxMjA2MDYwMDU0WhcNMjUxMjA3MDYwMDU0WjAzMTEwLwYDVQQD EygwMWVjZTE2M2JjMWNiMTNjYmMzMzZkMGU5ZmE5MTM5YWFmZjBiZDcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsShj8Gt/wWVURikRArjEPSekpW2T gCbHZkuHmye02lE48OLVrU0yCeJRCHkPQS9xEWFCjuk/6st8lP1BPBg+Xb9soE05 mDupT2jPIpFQ/M40Za4DEXQbDldWqwJYm58fJOWbYFgEuHXKbNykAUFeouJvI2hE UlI5k0YY1fNbdzBwS95nu2QGbQpMMGrPxpZHY0/yCRhsWKaOMD+OHx54VEfDoNLg NiFuXg7AqLV64mJy/8eufEEugLhWjaVT06HP94ZMdxRe1N4gOiC84Z0UUBYIntC+ mWWXQHs+lLzVP2Rhj94v9uvmZ5V8t/wrvBGXVw5KARubYSwNLQmANi09VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAHs4WO8HLE8vDNtDp+pE5qv8L1yMB8GA1UdIwQY MBaAFOUF2TSX8Z0lYwZrQJIAlpcR8oxnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVFYWk5KZnhuU1ZqQm10QWtnQ1dseEh5akdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81NDBlNTMtYzRhNi00ZjUyLTgxMWUt NmFmYzRlYzYzY2YwLzEvNVFYWk5KZnhuU1ZqQm10QWtnQ1dseEh5akdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC81NDBlNTMtYzRhNi00ZjUyLTgxMWUtNmFmYzRlYzYzY2Yw LzEvNVFYWk5KZnhuU1ZqQm10QWtnQ1dseEh5akdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFOulLILe iZbKobOOGIemP2wH6DgPneMaaRY232nxpgc7NFPxPY+CpDGjRX2KQk1tSRce49PH GewVNs6k31xruptoPhysls3eyMB0iIquLH29fdPJ/29VU+ylK7GtWAEf89gyr1T9 IfXi7kyfWOPMRGjhPHHX4ib5+Z2vStrMmihlgZ5VyNZYZN+XmnxPD66lVjBO7f0H XjGSwLE8yqwZ3UE9y+c+VU6FY8zWYogPHCRxGF2eYCA2Pmx5oAvcAhrU8YZc1pP7 6iPn2mZg/00bSkpBag0btqCrABwlNgL5IqgIXGZ9KUh1xQbkArslET8R4SvL8uL6 SI0NqO/vh/UV1g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:23:13 2025 by rpki-client