This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.mft File: mq5G4hNZMNomjAZNzlrbtjoM7DY.mft (raw, json) Hash identifier: dKFNW4/+D+pLhkU0V082U5eM2bW+c49/4r/XSMxmH1c= Subject key identifier: 4B:1E:9E:5E:22:1A:B2:EF:ED:9E:5B:6B:E3:31:7C:9B:BC:92:C7:2A Authority key identifier: 9A:AE:46:E2:13:59:30:DA:26:8C:06:4D:CE:5A:DB:B6:3A:0C:EC:36 Certificate issuer: /CN=9aae46e2135930da268c064dce5adbb63a0cec36 Certificate serial: 019B53AAEF836D69691294EA857A0FA43FEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mq5G4hNZMNomjAZNzlrbtjoM7DY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.mft Manifest number: 115F Signing time: Thu 25 Dec 2025 04:01:09 +0000 Manifest this update: Thu 25 Dec 2025 04:01:09 +0000 Manifest next update: Fri 26 Dec 2025 04:01:09 +0000 Files and hashes: 1: STbkSsaZ4h0iV7Ywpice3xeLm7Q.roa (hash: OYYfvGM7goZ9gxelNf2ly9w5B8haX1abcCwOvQfYiPk=) 2: mq5G4hNZMNomjAZNzlrbtjoM7DY.crl (hash: IY/DnGkflSyJBA7I31eCGes9YGuQXvkjFdeiMwuLPQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.crl rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.mft rsync://rpki.ripe.net/repository/DEFAULT/mq5G4hNZMNomjAZNzlrbtjoM7DY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:aa:ef:83:6d:69:69:12:94:ea:85:7a:0f:a4:3f:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9aae46e2135930da268c064dce5adbb63a0cec36 Validity Not Before: Dec 25 04:01:09 2025 GMT Not After : Dec 26 04:01:09 2025 GMT Subject: CN=4b1e9e5e221ab2efed9e5b6be3317c9bbc92c72a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:17:90:7f:d8:d5:96:3d:0e:56:79:2e:37:d7: b3:35:03:5e:c3:60:48:9c:0d:b5:22:09:bf:5d:7f: 8f:63:a9:57:30:7c:fb:17:d6:c5:1e:c3:ca:73:1f: d7:d9:7e:ec:9f:98:93:d5:21:9f:43:07:48:2d:a4: ef:17:bd:d7:e8:a4:5e:2d:75:67:37:d5:8a:13:9f: 83:b5:80:a4:6b:4d:19:e4:e7:9c:f7:1a:be:59:ac: cb:b3:1c:81:6a:6c:90:bb:8e:53:ba:c8:51:34:22: 08:a6:f3:58:7f:0e:28:33:57:8a:a9:b1:ed:99:cd: 27:fe:5e:80:a8:4a:06:42:43:26:9c:bb:27:18:5f: ab:75:9d:be:37:93:91:d2:b9:55:b3:3e:6c:47:4b: e3:7a:9b:f9:86:86:bf:c8:a9:08:2b:6c:f6:96:ff: cb:24:c5:48:bd:fb:3e:5e:76:30:01:7a:6c:b6:7f: 94:46:a5:0a:a1:83:26:d5:64:6a:b7:12:ca:cd:d5: 66:66:ba:f7:29:25:c3:91:29:cc:d0:38:e2:23:ef: 0a:c5:f0:d1:39:11:97:d6:93:41:1b:dc:62:b4:bc: ab:f2:ce:f0:d1:6f:29:79:3f:de:a1:14:be:64:cf: 25:62:b3:99:32:2d:7c:6f:c3:89:89:6b:e4:f4:25: 28:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:1E:9E:5E:22:1A:B2:EF:ED:9E:5B:6B:E3:31:7C:9B:BC:92:C7:2A X509v3 Authority Key Identifier: keyid:9A:AE:46:E2:13:59:30:DA:26:8C:06:4D:CE:5A:DB:B6:3A:0C:EC:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mq5G4hNZMNomjAZNzlrbtjoM7DY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:2f:2e:c7:14:08:72:5a:8b:20:1b:f4:21:27:d0:93:30:59: a5:e1:92:da:92:85:3d:72:ba:92:78:4f:bd:1c:d4:49:db:19: 92:20:6e:b1:50:c9:4e:d6:fa:72:7f:69:f2:12:d8:98:ca:6d: f5:81:76:19:d3:0c:f0:9a:6f:ee:6b:03:cb:d8:51:83:f8:d7: b7:3f:a6:b9:97:e0:60:3d:ba:43:e4:bd:c9:0c:4f:92:82:56: 36:52:16:7e:22:7d:cd:0c:4a:1b:8d:e5:26:17:31:6a:e0:b5: d1:9c:10:18:8d:05:48:79:3f:03:49:0f:ab:1d:00:f0:67:85: bb:08:7f:c3:fe:6c:a8:db:ef:f7:c7:a0:83:0d:44:e6:90:35: 17:37:bc:a5:43:1f:f8:e0:77:af:ee:c0:d4:fa:f8:d1:83:6b: ac:7d:bc:1d:bf:e3:6e:b7:3f:f7:f1:5d:26:21:bd:d2:4e:9a: 6e:e2:3b:2d:06:a3:b8:4d:b1:a2:3a:5a:d9:63:80:e7:58:5e: 53:f4:6c:f2:37:43:cf:ec:20:95:3d:fb:c2:8c:ce:73:13:84: 0d:38:a7:49:3c:19:ba:04:b2:fb:61:d4:f5:7b:56:94:5c:ef: b9:69:3a:ce:9b:e5:d9:be:0b:13:68:5b:54:64:3d:44:ee:66: 9b:c3:60:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTqu+DbWlpEpTqhXoPpD/uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhYWU0NmUyMTM1OTMwZGEyNjhjMDY0ZGNlNWFkYmI2M2Ew Y2VjMzYwHhcNMjUxMjI1MDQwMTA5WhcNMjUxMjI2MDQwMTA5WjAzMTEwLwYDVQQD Eyg0YjFlOWU1ZTIyMWFiMmVmZWQ5ZTViNmJlMzMxN2M5YmJjOTJjNzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApReQf9jVlj0OVnkuN9ezNQNew2BI nA21Igm/XX+PY6lXMHz7F9bFHsPKcx/X2X7sn5iT1SGfQwdILaTvF73X6KReLXVn N9WKE5+DtYCka00Z5Oec9xq+WazLsxyBamyQu45TushRNCIIpvNYfw4oM1eKqbHt mc0n/l6AqEoGQkMmnLsnGF+rdZ2+N5OR0rlVsz5sR0vjepv5hoa/yKkIK2z2lv/L JMVIvfs+XnYwAXpstn+URqUKoYMm1WRqtxLKzdVmZrr3KSXDkSnM0DjiI+8KxfDR ORGX1pNBG9xitLyr8s7w0W8peT/eoRS+ZM8lYrOZMi18b8OJiWvk9CUoHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEsenl4iGrLv7Z5ba+MxfJu8kscqMB8GA1UdIwQY MBaAFJquRuITWTDaJowGTc5a27Y6DOw2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXE1RzRoTlpNTm9takFaTnpscmJ0am9NN0RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9kOGZjNzgtYTUxYi00M2RjLWI1MGEt OGFlNDMwODFhYTM2LzEvbXE1RzRoTlpNTm9takFaTnpscmJ0am9NN0RZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9kOGZjNzgtYTUxYi00M2RjLWI1MGEtOGFlNDMwODFhYTM2 LzEvbXE1RzRoTlpNTm9takFaTnpscmJ0am9NN0RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJi8uxxQI clqLIBv0ISfQkzBZpeGS2pKFPXK6knhPvRzUSdsZkiBusVDJTtb6cn9p8hLYmMpt 9YF2GdMM8Jpv7msDy9hRg/jXtz+muZfgYD26Q+S9yQxPkoJWNlIWfiJ9zQxKG43l JhcxauC10ZwQGI0FSHk/A0kPqx0A8GeFuwh/w/5sqNvv98eggw1E5pA1Fze8pUMf +OB3r+7A1Pr40YNrrH28Hb/jbrc/9/FdJiG90k6abuI7LQajuE2xojpa2WOA51he U/Rs8jdDz+wglT37wozOcxOEDTinSTwZugSy+2HU9XtWlFzvuWk6zpvl2b4LE2hb VGQ9RO5mm8NgQA== -----END CERTIFICATE-----Generated at Thu Dec 25 09:24:47 2025 by rpki-client