This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft File: 5BqMQuzom1-_whDce1VMcupPNUQ.mft (raw, json) Hash identifier: +oNMo+vgikv6j5FvcGQ1x+cFslMHCSlbn2GUYjRlOtw= Subject key identifier: 4D:A7:5E:4B:6D:2C:82:84:2B:47:B0:7F:79:8D:AB:1B:D7:FA:99:DF Authority key identifier: E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44 Certificate issuer: /CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544 Certificate serial: 019B3E6D32962B2EF9A3320BEF8D940B5656 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 01:01:42 +0000 Manifest this update: Sun 21 Dec 2025 01:01:42 +0000 Manifest next update: Mon 22 Dec 2025 01:01:42 +0000 Files and hashes: 1: 5BqMQuzom1-_whDce1VMcupPNUQ.crl (hash: 8E6iXC/s4xUd3I6KlcMf9V4NiNXOtqWqYvcZni1j3Aw=) 2: HK-o-7NfDvPjOf99JzJL3ciySc8.roa (hash: DfwAR936JyRgw/jNJGOSmvyuLlvSXJeaVAPRyL2njSw=) 3: HMayfNdgxzPgTIksbOz-A7oqLCk.roa (hash: 3k2Q130datVFrgfiHucYcHqZP3tKnpk1Z1BK3tttEV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:32:96:2b:2e:f9:a3:32:0b:ef:8d:94:0b:56:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544 Validity Not Before: Dec 21 01:01:42 2025 GMT Not After : Dec 22 01:01:42 2025 GMT Subject: CN=4da75e4b6d2c82842b47b07f798dab1bd7fa99df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:24:de:83:94:b4:3c:c0:eb:89:82:03:c0:26: 0b:06:4d:d3:b0:8a:8c:e1:60:f3:1c:92:10:47:bb: f5:cf:bc:15:af:94:d1:f6:64:96:64:a4:ad:6a:c8: 14:bd:1c:c0:fc:c9:3d:f6:58:14:7c:3d:0b:d4:ec: 02:69:2d:6a:2a:e1:69:a7:d5:c5:19:88:5f:fe:f7: f1:2c:8a:da:ae:6d:7f:55:a8:4c:62:83:23:0c:a2: 8b:02:67:07:fb:0d:94:a9:3d:9b:c9:29:03:b6:36: 93:5e:76:c7:99:64:5d:07:77:25:e9:4b:58:f1:0e: 53:5e:45:f3:6e:5d:10:8d:83:34:4e:43:53:7f:8a: 4d:a5:78:96:59:0d:c0:87:ed:9e:5c:7b:9d:51:51: 7d:34:67:8e:1a:6c:fd:38:41:7c:c3:c9:bf:76:36: 82:07:41:c1:f5:21:9b:60:a5:17:96:5b:0d:49:64: 11:4e:a9:27:b6:6a:53:f0:7f:f3:c6:b3:2f:ef:99: 9c:bb:fe:6b:e2:39:e8:6d:c1:4c:8e:43:a0:91:25: a8:08:c9:11:40:c4:8f:55:f7:6c:2a:7c:4f:a5:d3: d7:8c:24:95:53:97:cc:72:88:c8:fe:f0:c7:25:60: 3e:93:88:9e:8c:01:40:d9:b2:38:13:89:1e:3f:49: 03:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A7:5E:4B:6D:2C:82:84:2B:47:B0:7F:79:8D:AB:1B:D7:FA:99:DF X509v3 Authority Key Identifier: keyid:E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:df:39:96:aa:a8:59:c5:c4:dd:6c:bf:89:e9:95:65:c3:ee: 36:3e:4b:0f:8f:3e:be:64:9a:95:78:3b:04:3e:f6:c0:31:ae: 68:be:f8:06:b6:14:1f:76:62:77:cb:c6:35:61:54:45:b8:87: 7f:27:cf:61:ec:71:d9:1a:b1:c8:41:2e:e8:3e:62:d4:be:53: 7a:71:97:7b:69:92:25:20:06:1d:6e:8d:a1:60:e0:17:9c:63: b4:7a:37:ef:17:af:83:49:b6:00:e6:60:aa:58:ee:31:34:f5: 48:33:80:bc:f0:d9:c9:a1:eb:7d:39:04:90:ad:3a:21:8d:53: 8f:ce:54:30:27:60:ce:c1:94:66:c3:a6:df:c8:71:d1:ae:92: 4e:90:ef:df:d7:fd:fa:6f:1c:ef:81:52:44:0c:f6:86:8d:81: dc:7f:5e:88:05:da:14:9e:43:68:0a:85:3f:1c:ab:67:f8:98: 00:c3:97:3a:a2:a3:06:d3:c0:2f:d2:af:84:b5:48:11:d3:43: 93:ab:b8:22:c3:65:ba:e6:05:d9:a0:0e:b0:aa:5e:93:cf:8a: fc:7c:5a:92:cb:c0:64:75:63:61:66:c2:d3:9c:22:bd:68:1b: 70:53:d0:53:98:2e:c6:17:42:81:63:7c:a7:d2:ba:b2:8a:60: 9f:09:22:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bTKWKy75ozIL742UC1ZWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0MWE4YzQyZWNlODliNWZiZmMyMTBkYzdiNTU0YzcyZWE0 ZjM1NDQwHhcNMjUxMjIxMDEwMTQyWhcNMjUxMjIyMDEwMTQyWjAzMTEwLwYDVQQD Eyg0ZGE3NWU0YjZkMmM4Mjg0MmI0N2IwN2Y3OThkYWIxYmQ3ZmE5OWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSTeg5S0PMDriYIDwCYLBk3TsIqM 4WDzHJIQR7v1z7wVr5TR9mSWZKStasgUvRzA/Mk99lgUfD0L1OwCaS1qKuFpp9XF GYhf/vfxLIrarm1/VahMYoMjDKKLAmcH+w2UqT2bySkDtjaTXnbHmWRdB3cl6UtY 8Q5TXkXzbl0QjYM0TkNTf4pNpXiWWQ3Ah+2eXHudUVF9NGeOGmz9OEF8w8m/djaC B0HB9SGbYKUXllsNSWQRTqkntmpT8H/zxrMv75mcu/5r4jnobcFMjkOgkSWoCMkR QMSPVfdsKnxPpdPXjCSVU5fMcojI/vDHJWA+k4iejAFA2bI4E4keP0kD9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE2nXkttLIKEK0ewf3mNqxvX+pnfMB8GA1UdIwQY MBaAFOQajELs6Jtfv8IQ3HtVTHLqTzVEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUJxTVF1em9tMS1fd2hEY2UxVk1jdXBQTlVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kMTljMmQtMzhjMy00NTI2LWE3Y2Yt MWQ2NjZjNDIyYzZhLzEvNUJxTVF1em9tMS1fd2hEY2UxVk1jdXBQTlVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9kMTljMmQtMzhjMy00NTI2LWE3Y2YtMWQ2NjZjNDIyYzZh LzEvNUJxTVF1em9tMS1fd2hEY2UxVk1jdXBQTlVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg985lqqo WcXE3Wy/iemVZcPuNj5LD48+vmSalXg7BD72wDGuaL74BrYUH3Zid8vGNWFURbiH fyfPYexx2RqxyEEu6D5i1L5TenGXe2mSJSAGHW6NoWDgF5xjtHo37xevg0m2AOZg qljuMTT1SDOAvPDZyaHrfTkEkK06IY1Tj85UMCdgzsGUZsOm38hx0a6STpDv39f9 +m8c74FSRAz2ho2B3H9eiAXaFJ5DaAqFPxyrZ/iYAMOXOqKjBtPAL9KvhLVIEdND k6u4IsNluuYF2aAOsKpek8+K/HxaksvAZHVjYWbC05wivWgbcFPQU5guxhdCgWN8 p9K6sopgnwkipw== -----END CERTIFICATE-----Generated at Sun Dec 21 03:57:17 2025 by rpki-client