This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft File: 5qTLdM9STBgSHVO1MsA8BvSta-Y.mft (raw, json) Hash identifier: sGAffs0de3FjgIlbEA9a+pa5wf4/mehul0y0+Gtbxxo= Subject key identifier: 46:E2:18:55:26:27:7A:4E:60:3A:0C:46:28:7E:60:D7:D7:DB:AE:08 Authority key identifier: E6:A4:CB:74:CF:52:4C:18:12:1D:53:B5:32:C0:3C:06:F4:AD:6B:E6 Certificate issuer: /CN=e6a4cb74cf524c18121d53b532c03c06f4ad6be6 Certificate serial: 019B541872167215A0A8918AD9F28C320E3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft Manifest number: 118E Signing time: Thu 25 Dec 2025 06:00:46 +0000 Manifest this update: Thu 25 Dec 2025 06:00:46 +0000 Manifest next update: Fri 26 Dec 2025 06:00:46 +0000 Files and hashes: 1: 5qTLdM9STBgSHVO1MsA8BvSta-Y.crl (hash: SBZfimjcHMN4XPrRlpqXGZPCwyBMGQmzOuyeoyg9FZU=) 2: FXr_S2B4fxLM9qAbLsO0vh-M550.roa (hash: XI0iDABL8ODtA8iq4rY+TAYyWpnlmsL+6qt8rzYOd/w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:18:72:16:72:15:a0:a8:91:8a:d9:f2:8c:32:0e:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6a4cb74cf524c18121d53b532c03c06f4ad6be6 Validity Not Before: Dec 25 06:00:46 2025 GMT Not After : Dec 26 06:00:46 2025 GMT Subject: CN=46e2185526277a4e603a0c46287e60d7d7dbae08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1f:ee:88:c6:22:a8:82:37:e6:92:3c:ce:8e: 2c:10:d1:db:02:e1:39:c5:2f:b3:93:cf:6a:e3:08: e7:a5:b6:20:e4:98:49:75:ef:de:66:69:dd:d8:05: b5:ca:0f:a9:13:64:82:a6:a5:83:66:a9:8f:45:79: e6:62:0c:52:41:ea:64:71:fc:d8:8c:8b:b4:78:12: dc:97:1c:cb:81:14:2a:f2:36:85:6d:df:84:d7:a7: e9:f8:e4:2b:0e:1f:e7:eb:35:5b:23:fb:26:6e:90: e5:a5:5f:fd:61:24:c4:b3:fd:38:8d:d3:33:90:a4: 84:d7:a7:4c:2b:71:32:5b:6c:3d:1d:fb:43:08:07: 68:3c:98:30:3d:e9:83:12:39:7f:ee:12:53:6d:8a: 94:33:5c:39:a7:f4:44:e3:c2:cf:fb:d2:ab:7c:41: bc:d2:1b:91:0c:3f:99:7c:6e:db:5f:87:4e:ac:85: ef:b8:c4:54:68:ca:03:93:86:be:30:00:e8:0c:45: d5:1b:03:b5:5b:53:86:e0:d3:10:3a:24:45:2f:2a: 01:9b:b2:39:04:9f:f8:39:bf:d2:74:05:1b:b2:cc: d1:04:47:71:f2:1c:56:6f:ca:5f:54:38:b1:b1:e4: ed:b6:52:dd:37:8a:63:06:52:c4:54:36:48:26:2b: 2e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E2:18:55:26:27:7A:4E:60:3A:0C:46:28:7E:60:D7:D7:DB:AE:08 X509v3 Authority Key Identifier: keyid:E6:A4:CB:74:CF:52:4C:18:12:1D:53:B5:32:C0:3C:06:F4:AD:6B:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:18:94:6e:5f:8e:e6:c8:33:84:69:0c:b0:3c:70:22:12:08: b1:67:70:e0:a9:6b:5e:09:73:da:32:7b:74:1a:ff:87:3b:a8: a2:08:92:dc:76:02:96:0f:2c:a5:00:6d:db:df:86:0c:8e:83: 10:28:01:ce:dc:d4:61:1e:5c:2c:7d:7a:c9:97:eb:0e:31:e3: 1b:2a:33:b4:df:a9:d2:5c:72:15:d9:f8:23:50:00:03:5b:30: 77:64:8d:2d:0e:26:ba:bd:8e:23:39:12:a3:99:c1:e6:68:59: 6d:bf:9a:f7:3e:d9:8a:e0:a8:49:f2:aa:73:ef:ec:da:ed:6f: ae:45:79:84:16:4d:f4:a8:0e:02:20:9a:fa:a3:ef:4d:8d:6f: 16:ba:7d:df:8b:53:85:4a:ad:da:2c:b8:a2:d2:bc:b0:bd:b8: 07:3e:af:64:69:68:c4:76:46:61:58:96:21:e3:02:e2:15:0a: cc:4e:c5:3c:d5:6d:0c:a9:33:e9:da:dd:a7:92:d0:87:c6:8e: e7:ff:b6:ba:08:49:f3:44:aa:e0:c8:00:b5:9a:d4:b4:5e:b7: 66:0b:b4:bc:e6:4d:fb:bd:bf:91:89:d2:90:11:65:18:e1:5c: 16:e4:46:0f:7c:a7:60:19:82:51:fe:e8:6c:29:b7:c1:d9:e8: 2c:4b:e0:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUGHIWchWgqJGK2fKMMg4/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2YTRjYjc0Y2Y1MjRjMTgxMjFkNTNiNTMyYzAzYzA2ZjRh ZDZiZTYwHhcNMjUxMjI1MDYwMDQ2WhcNMjUxMjI2MDYwMDQ2WjAzMTEwLwYDVQQD Eyg0NmUyMTg1NTI2Mjc3YTRlNjAzYTBjNDYyODdlNjBkN2Q3ZGJhZTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwR/uiMYiqII35pI8zo4sENHbAuE5 xS+zk89q4wjnpbYg5JhJde/eZmnd2AW1yg+pE2SCpqWDZqmPRXnmYgxSQepkcfzY jIu0eBLclxzLgRQq8jaFbd+E16fp+OQrDh/n6zVbI/smbpDlpV/9YSTEs/04jdMz kKSE16dMK3EyW2w9HftDCAdoPJgwPemDEjl/7hJTbYqUM1w5p/RE48LP+9KrfEG8 0huRDD+ZfG7bX4dOrIXvuMRUaMoDk4a+MADoDEXVGwO1W1OG4NMQOiRFLyoBm7I5 BJ/4Ob/SdAUbsszRBEdx8hxWb8pfVDixseTttlLdN4pjBlLEVDZIJisuZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEbiGFUmJ3pOYDoMRih+YNfX264IMB8GA1UdIwQY MBaAFOaky3TPUkwYEh1TtTLAPAb0rWvmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXFUTGRNOVNUQmdTSFZPMU1zQThCdlN0YS1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mOWY3NzMtMTIxZS00NTBkLWI2MDYt OThiZjQyODlkZjNiLzEvNXFUTGRNOVNUQmdTSFZPMU1zQThCdlN0YS1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9mOWY3NzMtMTIxZS00NTBkLWI2MDYtOThiZjQyODlkZjNi LzEvNXFUTGRNOVNUQmdTSFZPMU1zQThCdlN0YS1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlhiUbl+O 5sgzhGkMsDxwIhIIsWdw4KlrXglz2jJ7dBr/hzuoogiS3HYClg8spQBt29+GDI6D ECgBztzUYR5cLH16yZfrDjHjGyoztN+p0lxyFdn4I1AAA1swd2SNLQ4mur2OIzkS o5nB5mhZbb+a9z7ZiuCoSfKqc+/s2u1vrkV5hBZN9KgOAiCa+qPvTY1vFrp934tT hUqt2iy4otK8sL24Bz6vZGloxHZGYViWIeMC4hUKzE7FPNVtDKkz6drdp5LQh8aO 5/+2ughJ80Sq4MgAtZrUtF63Zgu0vOZN+72/kYnSkBFlGOFcFuRGD3ynYBmCUf7o bCm3wdnoLEvgtg== -----END CERTIFICATE-----Generated at Thu Dec 25 09:16:11 2025 by rpki-client