This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft File: Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft (raw, json) Hash identifier: yoXRwpxOObdqCkPsqJuYCEKu2nrDEwReC4l1/5WF9gc= Subject key identifier: C5:9B:7E:97:F9:E6:19:5A:43:86:C8:BF:00:05:D2:A5:8C:15:AD:66 Authority key identifier: 43:9D:D1:CE:AE:0F:65:D6:2A:2E:B7:C6:7C:48:DD:43:0E:7D:A6:96 Certificate issuer: /CN=439dd1ceae0f65d62a2eb7c67c48dd430e7da696 Certificate serial: 019B33E8B68E5CAD87911E14BF79BA7F1449 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft Manifest number: 05BC Signing time: Fri 19 Dec 2025 00:00:47 +0000 Manifest this update: Fri 19 Dec 2025 00:00:47 +0000 Manifest next update: Sat 20 Dec 2025 00:00:47 +0000 Files and hashes: 1: Q53Rzq4PZdYqLrfGfEjdQw59ppY.crl (hash: pHjS0sXKncNgS1Pe2t8Q1Omy1iPFQ4HKch6LfOw4uNQ=) 2: oskd316tBTAUTSHf0wsKURHXyDc.roa (hash: IsLUQsw+ev9Voy8iNeiPun8V5Wlg4SPwA/B548IB55M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:b6:8e:5c:ad:87:91:1e:14:bf:79:ba:7f:14:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439dd1ceae0f65d62a2eb7c67c48dd430e7da696 Validity Not Before: Dec 19 00:00:47 2025 GMT Not After : Dec 20 00:00:47 2025 GMT Subject: CN=c59b7e97f9e6195a4386c8bf0005d2a58c15ad66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2c:32:a1:f2:b0:9f:67:49:ab:4f:f4:eb:64: c2:ee:a1:a1:69:a2:71:e1:fd:b2:0a:f8:82:25:03: 2a:bb:63:4b:5d:41:c4:84:92:38:c2:3d:c8:ae:cf: de:a2:50:0e:79:b7:6d:2c:88:de:8c:11:51:3d:98: ea:34:c8:cf:73:17:ad:d5:ed:f1:a3:6b:d3:5c:27: 81:0c:1b:fb:6b:b8:30:f3:cb:35:4d:67:57:8d:32: da:75:9c:ef:b7:87:6c:26:96:ba:f4:be:14:e7:ac: d0:3f:e0:81:5b:46:08:fa:a3:20:39:ad:fd:20:52: 13:0b:05:a8:74:ae:90:96:cc:a6:b2:29:6b:d7:62: 92:dc:31:4e:e8:e5:25:37:ce:5b:45:c6:ad:61:14: 9f:7d:10:24:30:3f:1e:51:99:29:7d:74:91:09:62: fd:ca:d1:3f:1f:fc:0d:df:49:57:01:ec:22:8a:b5: bf:ee:87:cc:71:69:85:d0:f9:90:83:cc:77:d0:b8: f4:cf:d1:e6:32:e3:8e:d3:b9:ae:b7:06:de:cb:8d: ef:d6:7c:2a:6b:9f:36:55:fe:3c:42:d1:68:d1:d3: b3:f1:a4:00:03:42:7d:56:8e:2a:71:13:b9:ba:ab: 63:36:0b:76:f2:0e:0e:5f:08:1f:32:34:fa:b1:cd: c9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:9B:7E:97:F9:E6:19:5A:43:86:C8:BF:00:05:D2:A5:8C:15:AD:66 X509v3 Authority Key Identifier: keyid:43:9D:D1:CE:AE:0F:65:D6:2A:2E:B7:C6:7C:48:DD:43:0E:7D:A6:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:e8:61:34:5e:6b:8e:2a:4c:56:8d:a7:dd:a2:a4:4b:22:46: 82:1f:2b:a0:6d:56:5f:a9:3a:e8:ef:c6:e2:64:44:d0:a4:18: 63:50:24:9b:b8:da:05:ff:12:1b:f4:06:f4:6a:6d:83:87:ed: fc:c5:42:18:1b:bb:de:e3:86:98:0b:b3:74:ff:72:46:58:11: d8:b0:23:b1:e9:55:30:1e:ba:15:48:cc:78:f7:e1:92:39:2a: 38:ae:c6:7e:f5:b3:57:ee:79:bf:74:34:63:4b:f7:2c:3d:6a: b5:c9:db:0a:2f:06:4d:60:ed:20:c3:1f:03:8e:bc:a8:db:34: 25:38:fb:1f:ef:d2:26:c3:68:c8:c9:7d:75:4e:65:85:3f:1a: e0:01:61:a3:ca:c8:2b:dc:b0:28:28:5e:41:83:31:b6:b1:50: 2e:8a:a5:35:75:4b:9f:52:90:32:2f:68:3f:57:e4:87:f2:6b: 31:f8:c1:39:5b:f3:57:c0:85:e5:31:c9:4d:9d:43:06:c1:22: 4e:31:25:5d:5e:48:eb:af:f1:58:d3:9c:87:42:c3:79:2d:bf: 04:dd:3d:47:73:0c:03:f7:bc:e5:0b:27:a6:a2:a5:48:fb:66: f2:72:9a:35:1e:46:66:de:c3:ad:c3:a6:27:1d:31:a1:af:ff: 22:58:9c:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6LaOXK2HkR4Uv3m6fxRJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzOWRkMWNlYWUwZjY1ZDYyYTJlYjdjNjdjNDhkZDQzMGU3 ZGE2OTYwHhcNMjUxMjE5MDAwMDQ3WhcNMjUxMjIwMDAwMDQ3WjAzMTEwLwYDVQQD EyhjNTliN2U5N2Y5ZTYxOTVhNDM4NmM4YmYwMDA1ZDJhNThjMTVhZDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiwyofKwn2dJq0/062TC7qGhaaJx 4f2yCviCJQMqu2NLXUHEhJI4wj3Irs/eolAOebdtLIjejBFRPZjqNMjPcxet1e3x o2vTXCeBDBv7a7gw88s1TWdXjTLadZzvt4dsJpa69L4U56zQP+CBW0YI+qMgOa39 IFITCwWodK6Qlsymsilr12KS3DFO6OUlN85bRcatYRSffRAkMD8eUZkpfXSRCWL9 ytE/H/wN30lXAewiirW/7ofMcWmF0PmQg8x30Lj0z9HmMuOO07mutwbey43v1nwq a582Vf48QtFo0dOz8aQAA0J9Vo4qcRO5uqtjNgt28g4OXwgfMjT6sc3JnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMWbfpf55hlaQ4bIvwAF0qWMFa1mMB8GA1UdIwQY MBaAFEOd0c6uD2XWKi63xnxI3UMOfaaWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTUzUnpxNFBaZFlxTHJmR2ZFamRRdzU5cHBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9iMzdhNTYtN2JiMS00ZjgzLWExN2Ut NjQxN2JkOGZlMjljLzEvUTUzUnpxNFBaZFlxTHJmR2ZFamRRdzU5cHBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9iMzdhNTYtN2JiMS00ZjgzLWExN2UtNjQxN2JkOGZlMjlj LzEvUTUzUnpxNFBaZFlxTHJmR2ZFamRRdzU5cHBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfehhNF5r jipMVo2n3aKkSyJGgh8roG1WX6k66O/G4mRE0KQYY1Akm7jaBf8SG/QG9Gptg4ft /MVCGBu73uOGmAuzdP9yRlgR2LAjselVMB66FUjMePfhkjkqOK7GfvWzV+55v3Q0 Y0v3LD1qtcnbCi8GTWDtIMMfA468qNs0JTj7H+/SJsNoyMl9dU5lhT8a4AFho8rI K9ywKCheQYMxtrFQLoqlNXVLn1KQMi9oP1fkh/JrMfjBOVvzV8CF5THJTZ1DBsEi TjElXV5I66/xWNOch0LDeS2/BN09R3MMA/e85QsnpqKlSPtm8nKaNR5GZt7DrcOm Jx0xoa//IlicMA== -----END CERTIFICATE-----Generated at Fri Dec 19 02:22:29 2025 by rpki-client