This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft File: 5-QyokmU5XnrJJmh9vNMZSEY40Q.mft (raw, json) Hash identifier: fk7BdYS5ORuPen6NcGCyRIroNKWIRzzFTvyefwNfalk= Subject key identifier: 4B:F8:E5:2B:07:A4:72:57:EF:9F:AB:94:86:36:1A:3C:F0:66:51:72 Authority key identifier: E7:E4:32:A2:49:94:E5:79:EB:24:99:A1:F6:F3:4C:65:21:18:E3:44 Certificate issuer: /CN=e7e432a24994e579eb2499a1f6f34c652118e344 Certificate serial: 019B5788ACE66C2D814E474977B52B73B5DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft Manifest number: 1729 Signing time: Thu 25 Dec 2025 22:02:13 +0000 Manifest this update: Thu 25 Dec 2025 22:02:13 +0000 Manifest next update: Fri 26 Dec 2025 22:02:13 +0000 Files and hashes: 1: 1ap-zhjP2xlpcyvljzd4At-hRqs.roa (hash: vy++CPahIzqV0ojk71CI64hyqugiBwjMnM2TKCrxcDM=) 2: 5-QyokmU5XnrJJmh9vNMZSEY40Q.crl (hash: hBhOsW8ZmL0IiswSUr03rex866OhvzeKlmezkA0Sxho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.crl rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:57:88:ac:e6:6c:2d:81:4e:47:49:77:b5:2b:73:b5:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7e432a24994e579eb2499a1f6f34c652118e344 Validity Not Before: Dec 25 22:02:13 2025 GMT Not After : Dec 26 22:02:13 2025 GMT Subject: CN=4bf8e52b07a47257ef9fab9486361a3cf0665172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:47:e9:e1:e2:e5:da:c2:48:e0:c3:ad:7e:2b: e4:ad:3d:a7:e7:4b:3c:0e:be:a2:13:e2:e1:7d:89: 12:4a:99:0f:a8:40:73:0e:b2:c4:cc:7a:30:70:47: d2:61:18:03:2f:fb:51:af:b0:67:27:54:29:c5:94: 8a:10:51:fa:df:a3:da:6c:93:86:9e:c1:06:c3:5b: 7a:9b:b6:ea:2d:f6:1c:74:ae:5a:8b:58:00:c5:5a: ed:ec:02:38:e2:da:0f:7a:40:8c:4a:fa:f8:45:d9: 72:25:c5:33:e6:ce:95:4f:fb:b1:55:b2:ce:c8:a1: e4:91:42:95:77:cc:b5:04:80:c6:4e:2d:f0:a4:bb: 1a:ee:1c:e2:b3:f4:ad:bc:ef:91:b1:93:17:37:20: 69:51:b7:5d:90:86:ec:8d:e6:9e:13:40:59:23:72: 79:e0:14:95:23:8d:68:11:c9:15:7b:91:3c:f7:1a: 87:1b:2c:71:c1:4a:2e:67:43:22:e2:be:30:18:a2: 09:7f:be:51:ea:7a:f3:7f:54:d7:c2:5e:59:7a:af: 80:09:b0:85:de:f0:0f:fa:ae:3b:e1:76:31:79:b7: aa:73:13:78:02:55:29:df:dc:ec:a3:c1:48:99:05: cd:8e:12:f9:14:44:a9:ee:2a:5f:c6:a7:57:ef:f4: 09:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:F8:E5:2B:07:A4:72:57:EF:9F:AB:94:86:36:1A:3C:F0:66:51:72 X509v3 Authority Key Identifier: keyid:E7:E4:32:A2:49:94:E5:79:EB:24:99:A1:F6:F3:4C:65:21:18:E3:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:fe:41:dc:4e:36:ea:93:b1:bf:69:f7:e4:13:c8:4f:da:d6: bf:17:02:bc:a4:eb:83:7f:83:e9:c6:52:a8:95:41:c8:35:ce: 66:ee:01:e6:09:25:0b:8f:ac:d6:f4:30:75:f8:ef:82:a9:55: 16:cc:56:47:7b:cb:09:06:d7:26:f6:29:43:58:b7:8a:f5:ea: 47:a3:4e:ef:08:ac:87:52:8e:de:c7:4b:5d:29:33:db:82:ff: 0c:69:5f:c3:1b:0c:d9:49:98:a9:4e:29:97:52:f6:4c:89:d8: 61:8a:55:e6:4a:77:4b:f7:05:dc:a4:79:7f:21:5e:3e:b8:33: e6:f3:b6:1e:26:2f:90:62:54:2e:72:45:02:33:37:d7:64:15: a2:b7:e0:3f:be:12:39:7e:3e:3b:a8:84:93:09:2c:b3:b4:fb: 52:9b:fe:97:0d:a8:b3:a9:5d:ce:1f:f4:25:21:e2:e0:11:8f: de:42:9f:60:98:0e:b5:85:a9:a4:ee:34:13:6c:ff:ca:2f:bf: e4:69:66:b7:21:da:df:d6:f6:d4:9e:34:cf:d5:60:fa:f7:55: 94:8e:19:74:c2:04:66:67:ca:3b:3c:59:d1:3c:55:27:a6:fa: 02:71:53:ec:4e:5b:e9:0d:e8:4b:3f:28:0e:8d:18:d6:4f:09: aa:27:36:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtXiKzmbC2BTkdJd7Urc7XfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3ZTQzMmEyNDk5NGU1NzllYjI0OTlhMWY2ZjM0YzY1MjEx OGUzNDQwHhcNMjUxMjI1MjIwMjEzWhcNMjUxMjI2MjIwMjEzWjAzMTEwLwYDVQQD Eyg0YmY4ZTUyYjA3YTQ3MjU3ZWY5ZmFiOTQ4NjM2MWEzY2YwNjY1MTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0fp4eLl2sJI4MOtfivkrT2n50s8 Dr6iE+LhfYkSSpkPqEBzDrLEzHowcEfSYRgDL/tRr7BnJ1QpxZSKEFH636PabJOG nsEGw1t6m7bqLfYcdK5ai1gAxVrt7AI44toPekCMSvr4RdlyJcUz5s6VT/uxVbLO yKHkkUKVd8y1BIDGTi3wpLsa7hzis/StvO+RsZMXNyBpUbddkIbsjeaeE0BZI3J5 4BSVI41oEckVe5E89xqHGyxxwUouZ0Mi4r4wGKIJf75R6nrzf1TXwl5Zeq+ACbCF 3vAP+q474XYxebeqcxN4AlUp39zso8FImQXNjhL5FESp7ipfxqdX7/QJ1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEv45SsHpHJX75+rlIY2GjzwZlFyMB8GA1UdIwQY MBaAFOfkMqJJlOV56ySZofbzTGUhGONEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNS1ReW9rbVU1WG5ySkptaDl2Tk1aU0VZNDBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wNjNlYmUtNjdmMC00MGU5LWJiZmYt YTQwOWNhMzdhM2VhLzEvNS1ReW9rbVU1WG5ySkptaDl2Tk1aU0VZNDBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8wNjNlYmUtNjdmMC00MGU5LWJiZmYtYTQwOWNhMzdhM2Vh LzEvNS1ReW9rbVU1WG5ySkptaDl2Tk1aU0VZNDBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMv5B3E42 6pOxv2n35BPIT9rWvxcCvKTrg3+D6cZSqJVByDXOZu4B5gklC4+s1vQwdfjvgqlV FsxWR3vLCQbXJvYpQ1i3ivXqR6NO7wish1KO3sdLXSkz24L/DGlfwxsM2UmYqU4p l1L2TInYYYpV5kp3S/cF3KR5fyFePrgz5vO2HiYvkGJULnJFAjM312QVorfgP74S OX4+O6iEkwkss7T7Upv+lw2os6ldzh/0JSHi4BGP3kKfYJgOtYWppO40E2z/yi+/ 5GlmtyHa39b21J40z9Vg+vdVlI4ZdMIEZmfKOzxZ0TxVJ6b6AnFT7E5b6Q3oSz8o Do0Y1k8Jqic2OQ== -----END CERTIFICATE-----Generated at Thu Dec 25 23:53:54 2025 by rpki-client