This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft File: Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft (raw, json) Hash identifier: fIhZ3dPiOJCKqHdLMa2inN55dd7gAleofnCwYJP/Qo4= Subject key identifier: 13:1C:4D:8B:12:D9:24:3A:1F:49:6C:28:74:4B:76:9F:02:CA:3A:AE Authority key identifier: 43:91:37:BE:FE:8B:C5:59:03:69:0C:7C:46:AF:19:7C:C9:1A:70:3C Certificate issuer: /CN=439137befe8bc55903690c7c46af197cc91a703c Certificate serial: 019AF1D20899102A57EE37748D0D29DF18E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft Manifest number: 034C Signing time: Sat 06 Dec 2025 04:01:04 +0000 Manifest this update: Sat 06 Dec 2025 04:01:04 +0000 Manifest next update: Sun 07 Dec 2025 04:01:04 +0000 Files and hashes: 1: Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl (hash: 2WgzhTNTulmCUSpcpf59SdKzmOpzFS2Ac9/KSJiyogk=) 2: wVZ7Q_yh7vY87ipQHKXps_Y5QUU.roa (hash: F0pmi/wk6PrJmlY3U42fDKf/ChECXrlPOqHq8mmS3J0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:08:99:10:2a:57:ee:37:74:8d:0d:29:df:18:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439137befe8bc55903690c7c46af197cc91a703c Validity Not Before: Dec 6 04:01:04 2025 GMT Not After : Dec 7 04:01:04 2025 GMT Subject: CN=131c4d8b12d9243a1f496c28744b769f02ca3aae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a2:a6:84:71:12:d8:14:52:22:cc:01:0d:bc: 41:1b:66:6d:03:7f:b9:d5:a8:a4:54:a3:86:01:f7: a4:af:d6:32:32:92:70:ce:b3:f2:14:a8:65:6b:a8: b5:91:af:a5:1b:cc:e0:e5:b3:79:e5:f1:a4:b3:ee: 1b:cd:20:d6:bc:96:2d:c6:58:7b:0b:da:57:55:ce: 24:f8:43:e7:bb:21:15:45:b2:dc:75:46:7f:af:93: 54:5c:82:08:b1:f0:68:bd:47:c2:a2:4b:84:0e:44: e9:6c:0d:5c:61:cf:b7:2a:a8:6d:91:be:50:65:bc: 2f:16:7f:e6:37:34:95:ab:69:24:10:f6:15:0e:b9: e0:2a:9b:6b:13:86:5e:ca:0d:9d:91:9e:3b:d1:bb: ca:01:74:8b:9d:66:96:2b:67:54:7e:cc:ad:22:5b: ad:06:3b:b3:b9:18:ab:4c:63:87:22:29:13:ea:0a: 4f:10:b0:96:5d:4e:a4:68:16:27:ec:e9:ef:55:f9: af:8a:eb:25:d7:1b:fc:3b:db:4c:4a:e7:2d:0d:7b: 90:51:3f:ce:fe:c9:ea:51:40:02:5d:e8:46:b6:98: db:e8:86:77:4d:a3:4f:81:a3:31:72:62:d0:88:4c: ad:0e:22:b2:40:d9:db:79:0d:0e:17:9e:b9:75:1b: 54:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:1C:4D:8B:12:D9:24:3A:1F:49:6C:28:74:4B:76:9F:02:CA:3A:AE X509v3 Authority Key Identifier: keyid:43:91:37:BE:FE:8B:C5:59:03:69:0C:7C:46:AF:19:7C:C9:1A:70:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:82:63:03:2e:1a:df:b3:e3:c8:4e:b6:95:66:e3:55:9d:78: db:e5:84:89:3f:51:73:50:e6:55:f3:bf:48:91:21:32:09:80: 6d:8c:1f:7e:2d:fc:b5:57:d0:d7:f5:81:fc:49:2a:d3:04:5e: 2c:e4:2d:33:8d:9f:5b:ed:e2:15:88:1f:e2:46:ff:0c:c4:8f: 3d:79:2d:00:a0:5a:db:4e:56:3f:6e:12:d8:ce:11:b5:d8:22: bd:7f:0a:c6:22:f6:b0:d6:4e:af:75:89:34:34:c8:06:d0:7f: e0:3e:cb:b0:18:bf:76:d1:16:4b:0d:47:3f:aa:a8:78:9c:9b: ee:d0:32:1c:68:d7:21:1f:23:1a:f7:36:61:6d:08:f3:5c:6d: fc:4f:44:05:b3:de:4c:3c:63:ea:5b:21:5b:33:98:d6:a6:a8: 08:c0:2e:7b:28:bb:5d:94:39:ce:85:35:8e:0e:80:c4:a2:2d: 2e:7a:c2:27:3c:e2:b2:9a:85:8c:06:d8:8d:8f:73:91:2a:f9: fa:9c:72:06:13:c0:29:89:36:e7:33:e4:81:12:4e:98:af:d0: 5f:ea:c3:58:6b:70:71:25:17:95:b7:6f:0e:d7:24:8b:46:86: e5:7f:54:86:70:59:4f:6c:44:21:c1:69:64:42:9a:e6:0f:1e: f3:fb:d4:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0giZECpX7jd0jQ0p3xjiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzOTEzN2JlZmU4YmM1NTkwMzY5MGM3YzQ2YWYxOTdjYzkx YTcwM2MwHhcNMjUxMjA2MDQwMTA0WhcNMjUxMjA3MDQwMTA0WjAzMTEwLwYDVQQD EygxMzFjNGQ4YjEyZDkyNDNhMWY0OTZjMjg3NDRiNzY5ZjAyY2EzYWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqKmhHES2BRSIswBDbxBG2ZtA3+5 1aikVKOGAfekr9YyMpJwzrPyFKhla6i1ka+lG8zg5bN55fGks+4bzSDWvJYtxlh7 C9pXVc4k+EPnuyEVRbLcdUZ/r5NUXIIIsfBovUfCokuEDkTpbA1cYc+3Kqhtkb5Q ZbwvFn/mNzSVq2kkEPYVDrngKptrE4Zeyg2dkZ470bvKAXSLnWaWK2dUfsytIlut BjuzuRirTGOHIikT6gpPELCWXU6kaBYn7OnvVfmviusl1xv8O9tMSuctDXuQUT/O /snqUUACXehGtpjb6IZ3TaNPgaMxcmLQiEytDiKyQNnbeQ0OF565dRtUCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBMcTYsS2SQ6H0lsKHRLdp8CyjquMB8GA1UdIwQY MBaAFEORN77+i8VZA2kMfEavGXzJGnA8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTVFM3Z2Nkx4VmtEYVF4OFJxOFpmTWthY0R3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy81YWMyMmQtOWU4Zi00NDlkLTgzMDQt MGY1MmQ4MjhmZDRmLzEvUTVFM3Z2Nkx4VmtEYVF4OFJxOFpmTWthY0R3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy81YWMyMmQtOWU4Zi00NDlkLTgzMDQtMGY1MmQ4MjhmZDRm LzEvUTVFM3Z2Nkx4VmtEYVF4OFJxOFpmTWthY0R3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZYJjAy4a 37PjyE62lWbjVZ142+WEiT9Rc1DmVfO/SJEhMgmAbYwffi38tVfQ1/WB/Ekq0wRe LOQtM42fW+3iFYgf4kb/DMSPPXktAKBa205WP24S2M4RtdgivX8KxiL2sNZOr3WJ NDTIBtB/4D7LsBi/dtEWSw1HP6qoeJyb7tAyHGjXIR8jGvc2YW0I81xt/E9EBbPe TDxj6lshWzOY1qaoCMAueyi7XZQ5zoU1jg6AxKItLnrCJzzispqFjAbYjY9zkSr5 +pxyBhPAKYk25zPkgRJOmK/QX+rDWGtwcSUXlbdvDtcki0aG5X9UhnBZT2xEIcFp ZEKa5g8e8/vUXQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:25:46 2025 by rpki-client