This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft File: CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft (raw, json) Hash identifier: jaFpX6XCswjMqXaQ2cW1G9U8Jyh3vFcx6e0C0gMPRfk= Subject key identifier: 47:EF:B9:16:81:39:8B:8C:88:51:BC:0D:E8:57:EF:72:0E:07:08:92 Authority key identifier: 09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0 Certificate issuer: /CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0 Certificate serial: 019B6BE99E5B4A0294566A8DFC9AEABE7D2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft Manifest number: 088E Signing time: Mon 29 Dec 2025 21:00:31 +0000 Manifest this update: Mon 29 Dec 2025 21:00:31 +0000 Manifest next update: Tue 30 Dec 2025 21:00:31 +0000 Files and hashes: 1: CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl (hash: Rdy7lk4E+1NLrh/+7Ccr4ElaBhraRTCstgEM9v0pKCY=) 2: epomSlopw6iOX1fCpUz6uqeG0uA.roa (hash: F8Xll1o9j2cBCVD/H73mG3PpAM3zIcN16DxPcP7RZWA=) 3: hqflcP10fGd_ugaqcibuFjfMGsQ.roa (hash: Ko25/+lhloUhGb/yVx2/b28QF0QoFlF426ib4Pcz3zE=) 4: mDn_ek0LdNpvLytd6eLimQlfMOA.roa (hash: k3ggKWgy0oimppyNKUN+UMdt+c+CO5ZzgliWJ2+YYxU=) 5: unvmuKqROUfBv3e0sgdNxPiAc_g.roa (hash: rF6TRtskqMXcRCi7rD7nNhDfGn67uQw9dBuhX54qa6c=) 6: zYzxKNvhe6o0TwA72geMxA7neJY.roa (hash: 40MueLGTRXMqHBaO83q9/dqRBs6784OM0Nkp+d6Np9c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 21:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:e9:9e:5b:4a:02:94:56:6a:8d:fc:9a:ea:be:7d:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0 Validity Not Before: Dec 29 21:00:31 2025 GMT Not After : Dec 30 21:00:31 2025 GMT Subject: CN=47efb91681398b8c8851bc0de857ef720e070892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:88:e1:63:1e:ce:2b:df:bf:01:0a:dd:cb:89: 10:25:26:b9:42:9a:a7:0d:b9:b7:63:51:1a:e6:ce: 2b:de:37:0f:22:d0:fb:f6:c8:65:04:bd:e3:cb:79: d3:d1:0c:0e:a7:1a:b5:c5:67:5b:d1:9e:6f:b1:28: 3c:8c:d0:1c:e7:49:87:06:8f:1f:e0:27:84:ae:8f: b9:c0:f6:8a:af:cb:75:ee:e5:3c:44:52:bd:43:ef: 5d:e0:ea:ec:80:9c:4f:5d:b7:b5:4f:42:fc:10:c7: ef:bb:22:60:7c:82:9a:04:bf:76:af:a7:16:d0:12: c6:50:2e:69:57:53:bf:a8:d2:05:b3:70:b9:58:d9: b8:fb:cc:5f:a9:39:eb:db:85:fe:e7:a9:51:b1:8c: 6a:60:c6:b8:4a:89:34:56:98:55:c4:0a:1d:e4:45: 4f:3b:09:1c:fe:68:4c:35:13:cc:94:0d:3b:af:14: ff:97:10:f5:48:3d:3a:db:f2:34:bf:b4:8e:fe:c6: 19:97:98:33:aa:53:3d:31:d9:74:ea:dc:30:bd:36: 51:aa:8a:db:6c:a2:02:a1:a2:88:8a:ec:10:ee:7a: ca:41:06:a0:5a:39:95:7c:d5:a5:5e:d1:ab:30:e1: e5:c8:ad:4c:e6:30:02:51:41:0d:34:6d:fe:ff:ff: b5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:EF:B9:16:81:39:8B:8C:88:51:BC:0D:E8:57:EF:72:0E:07:08:92 X509v3 Authority Key Identifier: keyid:09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:61:16:24:d4:61:06:fb:d1:14:52:4f:e3:56:41:be:44:f0: 15:7b:33:df:01:80:31:cc:bd:01:de:9b:c1:5f:be:a3:b0:c6: d8:e6:a1:3d:5b:7f:0c:3f:16:b7:34:e9:92:a5:e3:44:4d:df: bd:93:80:51:b0:c8:97:b2:d9:39:d8:b3:f8:8a:3c:10:26:d4: 06:0a:eb:fd:2c:14:2a:fc:12:12:10:ff:f8:b7:44:e9:f9:24: ad:24:1e:67:47:92:25:1a:c2:6d:42:ea:da:0d:65:13:5f:5b: c7:6d:5d:ca:8e:6a:70:64:0d:58:99:9e:8e:a0:a9:b3:10:ef: b0:94:bc:13:f3:62:c2:52:3d:4d:61:ed:10:f6:0d:16:53:66: b2:2b:34:ec:97:ca:2e:40:24:24:cc:ca:96:cc:21:04:00:e7: 57:da:32:78:f4:7a:b0:87:9e:a5:11:d6:ab:ad:9b:96:45:40: 43:a5:1c:15:c2:fa:e9:96:5b:87:c2:20:32:73:eb:ab:9d:11: 13:d3:65:65:9d:0e:38:56:3f:d2:52:2e:8d:94:55:36:1a:a8: 80:23:b8:bf:35:e0:04:38:a2:60:db:1a:0d:9c:b8:f4:1b:6d: d8:65:bc:65:88:14:de:d9:d8:22:fe:ce:28:50:ff:22:1d:c9: 18:06:15:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtr6Z5bSgKUVmqN/Jrqvn0uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MGU1OTJhMmUwZDQyN2EwOWFhMmRlMWI5YmFmMDhjY2Qx NGYwYTAwHhcNMjUxMjI5MjEwMDMxWhcNMjUxMjMwMjEwMDMxWjAzMTEwLwYDVQQD Eyg0N2VmYjkxNjgxMzk4YjhjODg1MWJjMGRlODU3ZWY3MjBlMDcwODkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYjhYx7OK9+/AQrdy4kQJSa5Qpqn Dbm3Y1Ea5s4r3jcPItD79shlBL3jy3nT0QwOpxq1xWdb0Z5vsSg8jNAc50mHBo8f 4CeEro+5wPaKr8t17uU8RFK9Q+9d4OrsgJxPXbe1T0L8EMfvuyJgfIKaBL92r6cW 0BLGUC5pV1O/qNIFs3C5WNm4+8xfqTnr24X+56lRsYxqYMa4Sok0VphVxAod5EVP Owkc/mhMNRPMlA07rxT/lxD1SD062/I0v7SO/sYZl5gzqlM9Mdl06twwvTZRqorb bKICoaKIiuwQ7nrKQQagWjmVfNWlXtGrMOHlyK1M5jACUUENNG3+//+10QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEfvuRaBOYuMiFG8DehX73IOBwiSMB8GA1UdIwQY MBaAFAkOWSouDUJ6Caot4bm68IzNFPCgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1E1WktpNE5Rbm9KcWkzaHVicndqTTBVOEtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xNWY2OTAtNWFkZC00NzBkLWEyODYt MzNiZGM3M2VkMGVhLzEvQ1E1WktpNE5Rbm9KcWkzaHVicndqTTBVOEtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8xNWY2OTAtNWFkZC00NzBkLWEyODYtMzNiZGM3M2VkMGVh LzEvQ1E1WktpNE5Rbm9KcWkzaHVicndqTTBVOEtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeGEWJNRh BvvRFFJP41ZBvkTwFXsz3wGAMcy9Ad6bwV++o7DG2OahPVt/DD8WtzTpkqXjRE3f vZOAUbDIl7LZOdiz+Io8ECbUBgrr/SwUKvwSEhD/+LdE6fkkrSQeZ0eSJRrCbULq 2g1lE19bx21dyo5qcGQNWJmejqCpsxDvsJS8E/NiwlI9TWHtEPYNFlNmsis07JfK LkAkJMzKlswhBADnV9oyePR6sIeepRHWq62blkVAQ6UcFcL66ZZbh8IgMnPrq50R E9NlZZ0OOFY/0lIujZRVNhqogCO4vzXgBDiiYNsaDZy49Btt2GW8ZYgU3tnYIv7O KFD/Ih3JGAYVxQ== -----END CERTIFICATE-----Generated at Tue Dec 30 01:33:34 2025 by rpki-client