This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.mft File: Q5_i1RcHd00tDCv50SrQercmQqI.mft (raw, json) Hash identifier: veVMxnk+NtOLeEVjJ5jdjavW7ZXvZL3N1jIufKzq72Y= Subject key identifier: 78:62:30:AC:7E:64:56:2A:06:C1:23:0B:94:E2:63:89:83:26:D8:89 Authority key identifier: 43:9F:E2:D5:17:07:77:4D:2D:0C:2B:F9:D1:2A:D0:7A:B7:26:42:A2 Certificate issuer: /CN=439fe2d51707774d2d0c2bf9d12ad07ab72642a2 Certificate serial: 019AF276BC7FD2540FC5D18C0D7684DC8359 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5_i1RcHd00tDCv50SrQercmQqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.mft Manifest number: 0FC6 Signing time: Sat 06 Dec 2025 07:00:58 +0000 Manifest this update: Sat 06 Dec 2025 07:00:58 +0000 Manifest next update: Sun 07 Dec 2025 07:00:58 +0000 Files and hashes: 1: Q5_i1RcHd00tDCv50SrQercmQqI.crl (hash: HvNrZzMeEz/XdQIRtMfF938LMZ35HA5lW9Uha2ugI2Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.mft rsync://rpki.ripe.net/repository/DEFAULT/Q5_i1RcHd00tDCv50SrQercmQqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:bc:7f:d2:54:0f:c5:d1:8c:0d:76:84:dc:83:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439fe2d51707774d2d0c2bf9d12ad07ab72642a2 Validity Not Before: Dec 6 07:00:58 2025 GMT Not After : Dec 7 07:00:58 2025 GMT Subject: CN=786230ac7e64562a06c1230b94e263898326d889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c4:d3:17:41:20:34:14:a6:0f:2e:93:58:73: 62:12:33:41:62:3b:85:2a:84:9d:3d:7b:96:b3:66: 5b:42:25:68:53:ec:40:e2:cc:a3:ff:6f:1d:19:df: 77:11:dd:f5:a5:48:81:0a:8b:d6:c7:75:95:e8:6a: 7d:96:b7:33:c0:d9:c8:c1:3c:cb:d4:ee:ce:53:fb: aa:c0:98:e5:27:69:86:8e:52:88:d3:6d:40:c2:02: f4:c2:f7:20:ab:c1:34:2a:7a:65:f1:bf:6a:c5:f6: 5b:61:d5:6a:96:0d:b0:76:d8:8d:7b:83:30:5e:86: 8f:b2:5e:30:10:b7:b8:73:b2:7a:2b:b1:d7:4a:1f: 12:41:9c:00:a6:96:9a:24:02:0f:dd:d2:47:97:eb: 27:a6:cc:ee:0e:04:6e:7e:7d:88:da:46:06:99:79: 7f:c2:52:14:61:1b:36:d7:62:9e:0b:dd:36:49:56: a4:3a:6f:75:aa:39:cf:d8:1b:e1:8d:d1:61:5a:95: e8:10:15:35:64:fe:50:f3:62:06:4d:cc:58:67:76: f5:ef:63:2d:9e:d7:bc:ea:c1:7b:e2:81:75:c4:9a: 4d:f1:4c:71:a7:d6:e5:74:ea:9d:ac:86:1d:af:26: b5:b1:99:25:e3:12:23:2d:1b:94:32:2c:55:ab:dd: 25:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:62:30:AC:7E:64:56:2A:06:C1:23:0B:94:E2:63:89:83:26:D8:89 X509v3 Authority Key Identifier: keyid:43:9F:E2:D5:17:07:77:4D:2D:0C:2B:F9:D1:2A:D0:7A:B7:26:42:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5_i1RcHd00tDCv50SrQercmQqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:dc:99:56:87:4e:9c:52:28:f6:ae:69:dd:fa:e0:b6:0d:f4: 58:fb:29:92:17:83:5e:b1:c7:21:3d:fc:f8:9d:cc:c1:49:5d: 07:37:1c:89:0f:35:75:4f:16:a5:ae:17:93:c0:a3:f7:08:13: 6e:3f:a5:05:65:8e:59:7d:6c:c2:88:71:37:98:c3:2f:f8:c6: 22:02:68:b6:45:1f:0a:d3:76:1b:33:d3:9c:42:16:95:4f:11: 6d:e1:96:4b:45:aa:9d:89:fb:d8:9c:a0:f7:ad:b0:7c:71:06: fe:8d:92:57:75:5a:94:3b:d0:10:61:51:90:87:16:02:8a:82: 4b:1e:7d:45:d2:ee:ff:8f:39:87:fc:47:75:2a:a3:e2:14:2f: 54:be:8c:3e:2e:e6:9d:ab:75:27:c9:c5:e5:c4:90:6a:fa:4b: c1:a2:a7:35:42:94:d9:cd:3b:0b:c2:77:0f:81:bc:27:23:27: 6b:2b:32:ce:5a:2f:22:21:99:dc:5c:cb:ea:f0:83:04:3f:65: 08:8c:87:87:11:b4:8f:31:06:12:83:4b:ef:89:f4:09:d0:ca: 88:e8:37:b0:14:55:55:64:87:fb:9d:da:18:89:8f:fe:08:af: 48:0b:53:57:70:9f:27:11:dd:a5:52:06:2c:e7:af:6c:70:73: 04:48:c7:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydrx/0lQPxdGMDXaE3INZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzOWZlMmQ1MTcwNzc3NGQyZDBjMmJmOWQxMmFkMDdhYjcy NjQyYTIwHhcNMjUxMjA2MDcwMDU4WhcNMjUxMjA3MDcwMDU4WjAzMTEwLwYDVQQD Eyg3ODYyMzBhYzdlNjQ1NjJhMDZjMTIzMGI5NGUyNjM4OTgzMjZkODg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysTTF0EgNBSmDy6TWHNiEjNBYjuF KoSdPXuWs2ZbQiVoU+xA4syj/28dGd93Ed31pUiBCovWx3WV6Gp9lrczwNnIwTzL 1O7OU/uqwJjlJ2mGjlKI021AwgL0wvcgq8E0Knpl8b9qxfZbYdVqlg2wdtiNe4Mw XoaPsl4wELe4c7J6K7HXSh8SQZwAppaaJAIP3dJHl+snpszuDgRufn2I2kYGmXl/ wlIUYRs212KeC902SVakOm91qjnP2BvhjdFhWpXoEBU1ZP5Q82IGTcxYZ3b172Mt nte86sF74oF1xJpN8Uxxp9bldOqdrIYdrya1sZkl4xIjLRuUMixVq90lZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHhiMKx+ZFYqBsEjC5TiY4mDJtiJMB8GA1UdIwQY MBaAFEOf4tUXB3dNLQwr+dEq0Hq3JkKiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTVfaTFSY0hkMDB0REN2NTBTclFlcmNtUXFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8yNDA4ZTEtZTQyZi00OTE1LWE3MTUt YTFkNmQ5MWNkZTY4LzEvUTVfaTFSY0hkMDB0REN2NTBTclFlcmNtUXFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8yNDA4ZTEtZTQyZi00OTE1LWE3MTUtYTFkNmQ5MWNkZTY4 LzEvUTVfaTFSY0hkMDB0REN2NTBTclFlcmNtUXFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJNyZVodO nFIo9q5p3frgtg30WPspkheDXrHHIT38+J3MwUldBzcciQ81dU8Wpa4Xk8Cj9wgT bj+lBWWOWX1swohxN5jDL/jGIgJotkUfCtN2GzPTnEIWlU8RbeGWS0WqnYn72Jyg 962wfHEG/o2SV3ValDvQEGFRkIcWAoqCSx59RdLu/485h/xHdSqj4hQvVL6MPi7m nat1J8nF5cSQavpLwaKnNUKU2c07C8J3D4G8JyMnaysyzlovIiGZ3FzL6vCDBD9l CIyHhxG0jzEGEoNL74n0CdDKiOg3sBRVVWSH+53aGImP/givSAtTV3CfJxHdpVIG LOevbHBzBEjHJw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:57:08 2025 by rpki-client