This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft File: _q5Ur85RVFR5wNoD8gGnTimSfXg.mft (raw, json) Hash identifier: rHqnM0FlIcGwlMjoeHv7cRc7oqOXpK8y83oBraJnR/w= Subject key identifier: D7:66:18:20:E1:C4:64:27:46:B5:91:80:58:47:2E:D7:CA:19:BC:9A Authority key identifier: FE:AE:54:AF:CE:51:54:54:79:C0:DA:03:F2:01:A7:4E:29:92:7D:78 Certificate issuer: /CN=feae54afce51545479c0da03f201a74e29927d78 Certificate serial: 019AF3F7695A82246BF6947591905E782CA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft Manifest number: 0791 Signing time: Sat 06 Dec 2025 14:01:09 +0000 Manifest this update: Sat 06 Dec 2025 14:01:09 +0000 Manifest next update: Sun 07 Dec 2025 14:01:09 +0000 Files and hashes: 1: _q5Ur85RVFR5wNoD8gGnTimSfXg.crl (hash: wgaPfQXItxXLq2mrbsOcP1Od7bB9cTMCahqRtsUTuG4=) 2: lZoUgcddrDnXe4fT6Iyd3y19EFw.roa (hash: XV7kQikecJKDAAiTDNdfiups4qb65I8y80bxuDG+ZNo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:69:5a:82:24:6b:f6:94:75:91:90:5e:78:2c:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=feae54afce51545479c0da03f201a74e29927d78 Validity Not Before: Dec 6 14:01:09 2025 GMT Not After : Dec 7 14:01:09 2025 GMT Subject: CN=d7661820e1c4642746b5918058472ed7ca19bc9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1d:e1:af:62:a1:5c:5e:1e:46:2b:97:71:eb: 97:4a:fb:94:a0:aa:0b:8d:40:22:99:1a:77:1a:d4: 8c:00:05:1d:47:8b:4b:7a:b1:b7:c3:c5:8c:01:51: e8:e6:38:a2:8a:4c:de:73:fd:f0:60:61:e4:49:96: 01:e3:f5:8c:8a:e4:60:a8:5e:52:94:07:df:a2:12: d5:fe:1d:91:d1:92:41:f8:46:a0:a4:1f:21:c7:e9: 8d:f8:04:d9:b4:24:b6:fc:a5:83:3c:36:b2:cf:fb: 1e:9b:e0:94:a6:55:31:cd:4c:11:8b:b4:b4:41:99: 1c:0f:04:21:18:b2:e6:2e:a5:a6:69:2e:01:40:5e: d9:5f:dc:22:d9:ec:2c:04:23:e8:96:f9:8e:82:5c: af:17:f5:4d:b8:7c:76:cc:d5:18:10:c2:63:b7:66: 6b:da:bd:cf:8b:fd:e9:24:f9:6e:a9:b3:de:9d:f4: 29:7f:d3:bd:87:4f:f9:97:b1:59:3e:e0:e3:ec:2c: 3a:c7:38:92:71:83:90:07:82:20:15:96:8f:bb:26: d9:5b:5e:63:ac:c2:b8:69:de:ff:97:75:35:7b:0e: 19:80:ec:32:f4:e4:21:9f:09:32:f3:50:d2:01:1f: 4b:95:8f:da:be:07:ee:15:1b:f2:bb:c9:68:39:bd: 51:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:66:18:20:E1:C4:64:27:46:B5:91:80:58:47:2E:D7:CA:19:BC:9A X509v3 Authority Key Identifier: keyid:FE:AE:54:AF:CE:51:54:54:79:C0:DA:03:F2:01:A7:4E:29:92:7D:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:54:1f:e5:27:35:77:15:30:d8:5f:13:d7:c9:dd:03:4b:3f: b0:4f:26:22:37:1e:ea:e4:99:06:96:58:67:14:13:33:dd:1c: c9:b6:e0:7b:9b:e8:7e:26:4b:5b:2e:9f:5d:d9:db:70:5c:26: fd:93:d0:87:22:4c:c6:7a:e6:a5:3f:84:ce:a5:be:3b:e7:1a: 9f:d6:30:2c:1e:c8:55:2f:fe:48:36:83:84:4b:4c:b1:2e:20: 4b:a2:d9:d2:29:25:68:bd:84:7e:ef:45:04:09:b2:61:cb:43: 59:93:7e:0e:5c:eb:6b:d8:c9:eb:c4:26:e8:e9:08:e5:79:37: 53:e7:85:97:5b:1e:fe:4d:2c:86:c7:c9:a9:39:52:53:89:53: 1a:c3:98:7f:3c:0b:66:82:ab:dd:f6:48:48:32:e7:4e:bd:e0: c2:05:c1:e4:e3:2c:81:13:0b:f8:c0:74:cc:da:85:de:da:f3: b8:5f:b6:54:b9:db:f6:da:04:6c:5d:8d:f4:2d:eb:b1:00:60: 18:d5:1c:3b:d0:20:94:50:05:b4:2a:27:89:3b:c7:31:13:08: fd:49:2b:0e:99:ad:29:2a:e9:06:5b:95:2f:8c:0e:99:c4:1a: 27:25:9c:63:f0:1f:da:b7:bc:39:90:ad:cf:28:47:38:a5:3e: ee:e6:2a:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz92lagiRr9pR1kZBeeCymMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYWU1NGFmY2U1MTU0NTQ3OWMwZGEwM2YyMDFhNzRlMjk5 MjdkNzgwHhcNMjUxMjA2MTQwMTA5WhcNMjUxMjA3MTQwMTA5WjAzMTEwLwYDVQQD EyhkNzY2MTgyMGUxYzQ2NDI3NDZiNTkxODA1ODQ3MmVkN2NhMTliYzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh3hr2KhXF4eRiuXceuXSvuUoKoL jUAimRp3GtSMAAUdR4tLerG3w8WMAVHo5jiiikzec/3wYGHkSZYB4/WMiuRgqF5S lAffohLV/h2R0ZJB+EagpB8hx+mN+ATZtCS2/KWDPDayz/sem+CUplUxzUwRi7S0 QZkcDwQhGLLmLqWmaS4BQF7ZX9wi2ewsBCPolvmOglyvF/VNuHx2zNUYEMJjt2Zr 2r3Pi/3pJPluqbPenfQpf9O9h0/5l7FZPuDj7Cw6xziScYOQB4IgFZaPuybZW15j rMK4ad7/l3U1ew4ZgOwy9OQhnwky81DSAR9LlY/avgfuFRvyu8loOb1RIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNdmGCDhxGQnRrWRgFhHLtfKGbyaMB8GA1UdIwQY MBaAFP6uVK/OUVRUecDaA/IBp04pkn14MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3E1VXI4NVJWRlI1d05vRDhnR25UaW1TZlhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80ZjAyNjktOTgxOC00MTIzLWJjYmYt N2E2NTIzMDNhMjhhLzEvX3E1VXI4NVJWRlI1d05vRDhnR25UaW1TZlhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS80ZjAyNjktOTgxOC00MTIzLWJjYmYtN2E2NTIzMDNhMjhh LzEvX3E1VXI4NVJWRlI1d05vRDhnR25UaW1TZlhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALlQf5Sc1 dxUw2F8T18ndA0s/sE8mIjce6uSZBpZYZxQTM90cybbge5vofiZLWy6fXdnbcFwm /ZPQhyJMxnrmpT+EzqW+O+can9YwLB7IVS/+SDaDhEtMsS4gS6LZ0iklaL2Efu9F BAmyYctDWZN+Dlzra9jJ68Qm6OkI5Xk3U+eFl1se/k0shsfJqTlSU4lTGsOYfzwL ZoKr3fZISDLnTr3gwgXB5OMsgRML+MB0zNqF3trzuF+2VLnb9toEbF2N9C3rsQBg GNUcO9AglFAFtConiTvHMRMI/UkrDpmtKSrpBluVL4wOmcQaJyWcY/Af2re8OZCt zyhHOKU+7uYqtg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:37:17 2025 by rpki-client