This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.mft File: qEIWlUkV487vdNu7z-lHIAnYiQE.mft (raw, json) Hash identifier: iqgUkDEoCANGs8R5dGV/bzcR4T033k/h7skR3VSwqSg= Subject key identifier: CD:4A:F6:B3:76:97:97:2F:BB:45:11:6F:94:45:7F:F5:BF:BA:D4:3D Authority key identifier: A8:42:16:95:49:15:E3:CE:EF:74:DB:BB:CF:E9:47:20:09:D8:89:01 Certificate issuer: /CN=a84216954915e3ceef74dbbbcfe9472009d88901 Certificate serial: 019B6B0DF99741311AB091EF838C6E452857 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEIWlUkV487vdNu7z-lHIAnYiQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.mft Manifest number: 05E5 Signing time: Mon 29 Dec 2025 17:00:36 +0000 Manifest this update: Mon 29 Dec 2025 17:00:36 +0000 Manifest next update: Tue 30 Dec 2025 17:00:36 +0000 Files and hashes: 1: qEIWlUkV487vdNu7z-lHIAnYiQE.crl (hash: cj9QUitGApa30dJeneboe1ZIcigKg2bNNSaKf0vjZlo=) 2: uzEIjlJYDDkYjDRzAf2S2_nuADQ.roa (hash: jOMq+THXs6tHKVnh3usZCh/VkjmthWBocgL66TKhVMs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.mft rsync://rpki.ripe.net/repository/DEFAULT/qEIWlUkV487vdNu7z-lHIAnYiQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:0d:f9:97:41:31:1a:b0:91:ef:83:8c:6e:45:28:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a84216954915e3ceef74dbbbcfe9472009d88901 Validity Not Before: Dec 29 17:00:36 2025 GMT Not After : Dec 30 17:00:36 2025 GMT Subject: CN=cd4af6b37697972fbb45116f94457ff5bfbad43d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:2c:02:b2:fe:5d:fd:dd:82:19:7a:4c:b2:76: ce:04:d0:f8:9b:52:df:56:30:5a:d5:ed:3f:0a:d9: df:ca:9e:10:25:bf:70:7b:3e:c7:e1:05:25:b6:eb: 7f:8c:34:1b:04:a8:05:d9:0c:76:64:71:f6:84:42: 04:e2:19:06:dd:67:32:7c:97:18:89:40:97:a0:59: e6:54:c4:ca:08:42:41:2b:b7:15:9a:7a:59:1e:86: d1:2b:32:f3:d4:5e:81:2b:ed:90:6e:82:e7:73:c7: 8b:a4:9a:9c:b2:7e:c0:aa:45:fd:e0:de:0e:6b:d0: bd:de:63:3b:01:1d:cf:4a:0a:c9:b9:a2:cd:79:41: a8:f6:b4:65:42:29:36:ca:99:03:60:8e:95:83:87: 58:50:15:e3:d8:8b:5a:df:0f:02:12:ec:d7:36:0c: 7c:59:a2:f3:59:c6:06:ec:0e:ac:c1:b0:cf:58:ad: dc:95:59:07:27:bb:65:d7:8c:ba:9e:f0:e0:2d:ea: f9:39:c3:0d:05:8a:13:94:df:04:6d:00:f3:7c:da: 44:14:66:01:72:c1:5a:5a:28:56:78:23:a2:45:59: a4:99:3f:60:f1:c9:40:d1:89:89:89:37:d4:11:96: b5:c1:7e:48:e1:31:ff:82:b2:18:e2:09:4f:75:a0: 5c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:4A:F6:B3:76:97:97:2F:BB:45:11:6F:94:45:7F:F5:BF:BA:D4:3D X509v3 Authority Key Identifier: keyid:A8:42:16:95:49:15:E3:CE:EF:74:DB:BB:CF:E9:47:20:09:D8:89:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEIWlUkV487vdNu7z-lHIAnYiQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:20:e8:00:4d:93:d7:e5:17:a3:0c:ff:f2:1d:d2:6c:d0:e0: c2:d8:0d:b2:ea:20:a3:b3:d8:79:bc:aa:72:97:1a:04:3b:39: 0d:5b:40:6e:64:28:cc:24:ee:ce:13:54:7a:9d:99:c7:fd:f2: db:36:7e:7a:23:97:f3:47:01:f2:9a:95:b1:69:24:83:39:2b: 55:20:3c:79:12:f5:8b:59:c8:fa:f1:18:aa:9e:ef:80:71:28: 6e:de:76:f9:1a:a7:38:98:30:26:93:d4:c0:0e:1d:ff:72:46: 96:4f:5c:cb:f8:3f:1a:26:2d:fe:a6:64:49:55:8b:d0:fb:2f: d6:1e:42:bc:80:6d:68:79:a1:34:7c:4e:5e:f4:3f:c6:7f:a6: 21:8d:94:b9:34:90:c3:47:1e:af:e4:6a:d8:60:a3:ec:3a:a1: 8b:8d:1b:6f:7d:61:57:3b:0d:91:a1:95:c2:ad:e9:f4:d9:4c: fd:55:d3:d7:bf:32:f5:d2:c8:df:93:c2:43:13:d3:fc:3f:17: 04:88:02:ed:4a:02:52:36:7e:8f:82:b7:fb:a4:1e:4d:6d:c5: 19:4c:60:62:26:8e:b0:e8:a0:4e:6a:85:93:b0:dc:aa:69:c6: 37:2f:e5:7b:f4:43:18:c4:80:f4:e9:0e:a5:36:3e:34:d0:88: 63:c5:3b:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtrDfmXQTEasJHvg4xuRShXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NDIxNjk1NDkxNWUzY2VlZjc0ZGJiYmNmZTk0NzIwMDlk ODg5MDEwHhcNMjUxMjI5MTcwMDM2WhcNMjUxMjMwMTcwMDM2WjAzMTEwLwYDVQQD EyhjZDRhZjZiMzc2OTc5NzJmYmI0NTExNmY5NDQ1N2ZmNWJmYmFkNDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCwCsv5d/d2CGXpMsnbOBND4m1Lf VjBa1e0/Ctnfyp4QJb9wez7H4QUltut/jDQbBKgF2Qx2ZHH2hEIE4hkG3WcyfJcY iUCXoFnmVMTKCEJBK7cVmnpZHobRKzLz1F6BK+2QboLnc8eLpJqcsn7AqkX94N4O a9C93mM7AR3PSgrJuaLNeUGo9rRlQik2ypkDYI6Vg4dYUBXj2Ita3w8CEuzXNgx8 WaLzWcYG7A6swbDPWK3clVkHJ7tl14y6nvDgLer5OcMNBYoTlN8EbQDzfNpEFGYB csFaWihWeCOiRVmkmT9g8clA0YmJiTfUEZa1wX5I4TH/grIY4glPdaBcKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM1K9rN2l5cvu0URb5RFf/W/utQ9MB8GA1UdIwQY MBaAFKhCFpVJFePO73Tbu8/pRyAJ2IkBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUVJV2xVa1Y0ODd2ZE51N3otbEhJQW5ZaVFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9jM2M5MWQtNTMxOS00MWFhLWIxOTct YWI1ZDE2Mzk3N2YyLzEvcUVJV2xVa1Y0ODd2ZE51N3otbEhJQW5ZaVFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9jM2M5MWQtNTMxOS00MWFhLWIxOTctYWI1ZDE2Mzk3N2Yy LzEvcUVJV2xVa1Y0ODd2ZE51N3otbEhJQW5ZaVFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAciDoAE2T 1+UXowz/8h3SbNDgwtgNsuogo7PYebyqcpcaBDs5DVtAbmQozCTuzhNUep2Zx/3y 2zZ+eiOX80cB8pqVsWkkgzkrVSA8eRL1i1nI+vEYqp7vgHEobt52+RqnOJgwJpPU wA4d/3JGlk9cy/g/GiYt/qZkSVWL0Psv1h5CvIBtaHmhNHxOXvQ/xn+mIY2UuTSQ w0cer+Rq2GCj7Dqhi40bb31hVzsNkaGVwq3p9NlM/VXT178y9dLI35PCQxPT/D8X BIgC7UoCUjZ+j4K3+6QeTW3FGUxgYiaOsOigTmqFk7DcqmnGNy/le/RDGMSA9OkO pTY+NNCIY8U72A== -----END CERTIFICATE-----Generated at Tue Dec 30 00:23:14 2025 by rpki-client