This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.mft File: 5qirioB4uztX5W_3wL1Npj7oLIs.mft (raw, json) Hash identifier: +9YlmSVEd+FYo0MqmGO9wi3y6ERCYiuj7IntesRW5wo= Subject key identifier: B1:0B:37:F4:48:B7:4D:70:91:A8:FA:7F:AF:25:AC:C7:4A:5E:7E:75 Authority key identifier: E6:A8:AB:8A:80:78:BB:3B:57:E5:6F:F7:C0:BD:4D:A6:3E:E8:2C:8B Certificate issuer: /CN=e6a8ab8a8078bb3b57e56ff7c0bd4da63ee82c8b Certificate serial: 019B649E925BD70CDB03B642B040E41C58ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qirioB4uztX5W_3wL1Npj7oLIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.mft Manifest number: 12A9 Signing time: Sun 28 Dec 2025 11:01:12 +0000 Manifest this update: Sun 28 Dec 2025 11:01:12 +0000 Manifest next update: Mon 29 Dec 2025 11:01:12 +0000 Files and hashes: 1: 5qirioB4uztX5W_3wL1Npj7oLIs.crl (hash: 4hky+/K3Zk2TECqAxXBGKbNAX5F75eFnfWR1LJIhp3k=) 2: j26ZaXDJ5u5_sXZ9DSYkPEGDdBg.roa (hash: N0zCU+Z5cgt4Feyzz51pQWAD1vkYoFo87UGHCmMmAQ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.crl rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.mft rsync://rpki.ripe.net/repository/DEFAULT/5qirioB4uztX5W_3wL1Npj7oLIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:64:9e:92:5b:d7:0c:db:03:b6:42:b0:40:e4:1c:58:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6a8ab8a8078bb3b57e56ff7c0bd4da63ee82c8b Validity Not Before: Dec 28 11:01:12 2025 GMT Not After : Dec 29 11:01:12 2025 GMT Subject: CN=b10b37f448b74d7091a8fa7faf25acc74a5e7e75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:37:09:ca:5a:d5:8d:4b:23:bf:b4:c1:95:6c: 48:2b:4e:be:4d:31:33:9c:e8:b2:38:4f:2d:5e:d5: 20:35:e9:1e:9a:e9:b6:90:d2:e7:76:0f:68:08:63: 60:15:21:f2:ed:4a:9e:55:3e:5b:08:a4:f8:72:ed: 88:c9:f2:f4:f1:8c:a4:f9:b2:7a:b2:09:da:03:12: c1:22:71:80:ed:87:05:59:84:2a:f6:04:b4:44:61: 1b:24:e2:1c:4a:c7:a6:0a:55:7e:2c:51:9c:a8:5b: ff:db:b8:5e:a4:8d:e6:63:9e:3c:73:0f:5c:07:6a: 91:f3:02:db:97:e9:98:0b:0e:dc:21:a3:54:52:c8: a0:c6:ea:81:53:ea:0d:4a:9f:77:ae:d8:f3:b8:03: 52:15:75:07:32:88:5b:c1:65:f0:f6:bc:e3:a9:de: 68:1d:d4:05:ae:a8:0f:af:be:40:a3:f0:c8:c1:ff: bc:28:f9:92:27:37:4f:97:af:b5:69:72:b2:54:f2: f9:a5:45:ef:9c:01:45:eb:4f:08:c7:eb:15:d7:c0: c2:0d:ee:01:5d:bf:88:57:2a:83:af:28:f5:b5:21: f9:97:cb:26:8f:ba:12:d4:66:61:3a:e8:bd:e0:9c: 07:b9:f8:75:41:82:4e:81:83:b0:a4:d1:3a:ff:b6: 15:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:0B:37:F4:48:B7:4D:70:91:A8:FA:7F:AF:25:AC:C7:4A:5E:7E:75 X509v3 Authority Key Identifier: keyid:E6:A8:AB:8A:80:78:BB:3B:57:E5:6F:F7:C0:BD:4D:A6:3E:E8:2C:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qirioB4uztX5W_3wL1Npj7oLIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:af:fe:6d:4c:74:de:61:74:64:8f:e7:94:c1:dd:a9:19:9c: dd:9b:26:5d:4e:64:60:f9:a7:45:63:d5:bf:ac:7e:1a:6e:28: 89:27:9b:7d:51:0a:ef:8d:50:5e:56:18:ae:8f:b8:de:35:38: 5c:43:db:1b:50:d4:94:6e:8e:33:45:45:1e:d4:01:b6:ea:a2: 2d:a8:43:25:2a:83:76:f7:b7:e5:a5:77:5c:8e:00:5d:82:96: 7e:8e:ae:fa:d7:8a:47:6e:02:0c:7c:14:00:8e:53:f9:33:a0: 2b:3a:65:9f:4e:f7:e6:fe:78:4f:31:b1:f8:60:44:3e:37:71: 14:a8:c9:9c:18:16:d4:d2:0c:33:7c:c2:51:98:4d:71:28:c4: 0f:98:f8:d0:e1:d8:d1:37:e1:d3:e6:1e:21:c7:d7:d3:ea:e3: 50:f4:5f:67:62:5a:e3:0e:9b:33:a3:fc:ac:6c:7e:ed:8a:40: bd:b9:23:24:94:bb:2c:2c:7e:65:79:2d:8a:0e:d5:9a:8e:f8: f1:95:03:30:bc:ec:ac:43:93:ea:fa:6f:e2:02:c3:5b:c3:ed: 02:6a:4f:9d:56:18:bd:6e:f3:82:41:b4:d4:c5:72:9b:2b:a9: 20:90:2b:c2:73:1e:3c:1e:56:f9:fd:b1:16:b6:d4:3d:86:15: 3a:98:65:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtknpJb1wzbA7ZCsEDkHFjtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2YThhYjhhODA3OGJiM2I1N2U1NmZmN2MwYmQ0ZGE2M2Vl ODJjOGIwHhcNMjUxMjI4MTEwMTEyWhcNMjUxMjI5MTEwMTEyWjAzMTEwLwYDVQQD EyhiMTBiMzdmNDQ4Yjc0ZDcwOTFhOGZhN2ZhZjI1YWNjNzRhNWU3ZTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujcJylrVjUsjv7TBlWxIK06+TTEz nOiyOE8tXtUgNekemum2kNLndg9oCGNgFSHy7UqeVT5bCKT4cu2IyfL08Yyk+bJ6 sgnaAxLBInGA7YcFWYQq9gS0RGEbJOIcSsemClV+LFGcqFv/27hepI3mY548cw9c B2qR8wLbl+mYCw7cIaNUUsigxuqBU+oNSp93rtjzuANSFXUHMohbwWXw9rzjqd5o HdQFrqgPr75Ao/DIwf+8KPmSJzdPl6+1aXKyVPL5pUXvnAFF608Ix+sV18DCDe4B Xb+IVyqDryj1tSH5l8smj7oS1GZhOui94JwHufh1QYJOgYOwpNE6/7YV7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLELN/RIt01wkaj6f68lrMdKXn51MB8GA1UdIwQY MBaAFOaoq4qAeLs7V+Vv98C9TaY+6CyLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXFpcmlvQjR1enRYNVdfM3dMMU5wajdvTElzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8yMjhlMTYtZjgwOC00NDcxLWE5ODQt MzY0ZWUyODU5ZjJjLzEvNXFpcmlvQjR1enRYNVdfM3dMMU5wajdvTElzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8yMjhlMTYtZjgwOC00NDcxLWE5ODQtMzY0ZWUyODU5ZjJj LzEvNXFpcmlvQjR1enRYNVdfM3dMMU5wajdvTElzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJq/+bUx0 3mF0ZI/nlMHdqRmc3ZsmXU5kYPmnRWPVv6x+Gm4oiSebfVEK741QXlYYro+43jU4 XEPbG1DUlG6OM0VFHtQBtuqiLahDJSqDdve35aV3XI4AXYKWfo6u+teKR24CDHwU AI5T+TOgKzpln0735v54TzGx+GBEPjdxFKjJnBgW1NIMM3zCUZhNcSjED5j40OHY 0Tfh0+YeIcfX0+rjUPRfZ2Ja4w6bM6P8rGx+7YpAvbkjJJS7LCx+ZXktig7Vmo74 8ZUDMLzsrEOT6vpv4gLDW8PtAmpPnVYYvW7zgkG01MVymyupIJArwnMePB5W+f2x FrbUPYYVOphlWw== -----END CERTIFICATE-----Generated at Sun Dec 28 14:24:33 2025 by rpki-client