This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft File: 5QxErpgedJLTuiHihHIIAYA5jWQ.mft (raw, json) Hash identifier: tqzHhcAYvHa8KSFXjtp85/GzxUarGvwEoIcrFEyi7kM= Subject key identifier: 86:3F:93:05:D7:3F:93:72:1A:68:96:8D:1C:FA:1D:09:CF:76:74:C7 Authority key identifier: E5:0C:44:AE:98:1E:74:92:D3:BA:21:E2:84:72:08:01:80:39:8D:64 Certificate issuer: /CN=e50c44ae981e7492d3ba21e28472080180398d64 Certificate serial: 019B73DA5199F5999149BF30353E6FA114CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QxErpgedJLTuiHihHIIAYA5jWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft Manifest number: 17A3 Signing time: Wed 31 Dec 2025 10:00:46 +0000 Manifest this update: Wed 31 Dec 2025 10:00:46 +0000 Manifest next update: Thu 01 Jan 2026 10:00:46 +0000 Files and hashes: 1: 5QxErpgedJLTuiHihHIIAYA5jWQ.crl (hash: K7nOg92vt4ydkVRUqb4dVhh1SWtoH25R9u2Axo/F6UA=) 2: XqJnQtK-Eb1fVOe5J4HfD-Z2VPA.roa (hash: JXjpjJMP71nmxtEw4MnCOZWcY+ewObU/MkJxejPuf3g=) 3: ZU5mIuhec-w4R0nc_UEougNeTzM.roa (hash: Ryu8faEPK4CmfRJ6AZyYHPiiRBpNAisMzS6dIeA5uz4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/5QxErpgedJLTuiHihHIIAYA5jWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 10:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:73:da:51:99:f5:99:91:49:bf:30:35:3e:6f:a1:14:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e50c44ae981e7492d3ba21e28472080180398d64 Validity Not Before: Dec 31 10:00:46 2025 GMT Not After : Jan 1 10:00:46 2026 GMT Subject: CN=863f9305d73f93721a68968d1cfa1d09cf7674c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c9:b0:93:34:d1:47:4f:64:47:76:e1:ea:92: 86:11:bd:02:75:5e:9f:46:3c:80:05:1b:f3:40:b8: df:85:6c:cf:08:4d:2c:5e:59:db:86:1c:6f:17:19: 81:cc:64:eb:5d:3e:54:61:d3:89:ab:3d:b3:e2:5a: 2d:c2:26:b7:39:e3:23:52:1e:1c:fe:8a:08:bf:79: 45:76:90:08:e2:aa:fd:75:59:e2:64:1d:28:68:d1: 51:95:e9:f6:42:9b:b1:e9:12:4f:e7:7d:7e:66:6a: b5:86:c3:d9:37:c5:3c:6d:bd:7e:b6:d4:36:eb:0b: cd:db:67:80:ea:2f:3d:dd:96:47:6a:77:10:8f:88: 82:ad:5d:59:9e:14:da:64:96:cf:dd:c5:2b:60:17: 3b:93:1c:ec:dc:b7:38:9f:e1:90:91:25:4a:d7:29: d6:aa:0d:0e:6c:08:30:13:7a:47:15:e2:1f:61:9a: 4b:69:18:40:4e:88:2b:4c:b8:b5:c8:75:fe:3f:02: d2:15:08:87:f1:08:5c:15:a4:22:4f:c5:8f:52:e4: ec:c5:31:b3:4e:59:8c:bb:0c:a2:d0:4f:dd:4e:e1: 2a:36:7d:7e:11:95:63:74:0c:cb:ad:70:4a:11:3d: 37:9f:aa:8b:87:94:ab:97:62:c2:41:d1:95:4e:25: 6e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:3F:93:05:D7:3F:93:72:1A:68:96:8D:1C:FA:1D:09:CF:76:74:C7 X509v3 Authority Key Identifier: keyid:E5:0C:44:AE:98:1E:74:92:D3:BA:21:E2:84:72:08:01:80:39:8D:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QxErpgedJLTuiHihHIIAYA5jWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:64:2e:9a:d0:65:e6:cf:b4:da:c0:1f:18:7a:a3:65:f6:7e: b1:81:22:15:99:27:1f:49:84:4b:e1:bf:68:a6:d8:53:23:60: a9:0c:2a:5d:4c:e9:31:45:73:be:79:38:14:da:4f:bd:27:6a: 3c:ab:84:42:cb:b7:f5:e0:3a:35:59:ce:8d:85:f9:3f:a1:c6: e5:d6:d9:b6:29:45:fc:ae:ec:ec:a6:a8:ae:1e:51:7c:3a:15: 1c:aa:ad:65:cc:4b:c1:6c:c8:03:cd:32:c1:e7:e8:7f:de:6b: 8f:a4:5e:28:a5:e1:01:9a:09:1a:94:1d:54:cf:2b:cc:56:74: 34:de:78:83:aa:36:10:b5:2b:d9:fa:88:ba:9a:c0:63:9b:34: 7d:70:73:39:4f:dd:37:7e:7f:39:02:fb:0c:71:38:a8:69:8d: bd:c8:95:24:f2:bb:de:8f:c6:07:2f:22:5e:23:26:da:87:e0: 88:98:cb:a6:c6:39:89:4c:4e:cf:87:c3:8c:f3:d1:fb:a3:d6: 5a:e2:8f:36:04:ca:f8:5a:8b:13:be:50:7a:dc:70:4c:2d:76: ad:ab:ff:17:bb:84:56:62:64:99:06:7c:c2:84:83:7f:bf:d6: 1a:ca:66:a2:fc:ec:e7:7b:71:c3:31:96:44:72:54:67:c2:a3: 15:74:9c:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtz2lGZ9ZmRSb8wNT5voRTNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1MGM0NGFlOTgxZTc0OTJkM2JhMjFlMjg0NzIwODAxODAz OThkNjQwHhcNMjUxMjMxMTAwMDQ2WhcNMjYwMTAxMTAwMDQ2WjAzMTEwLwYDVQQD Eyg4NjNmOTMwNWQ3M2Y5MzcyMWE2ODk2OGQxY2ZhMWQwOWNmNzY3NGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3smwkzTRR09kR3bh6pKGEb0CdV6f RjyABRvzQLjfhWzPCE0sXlnbhhxvFxmBzGTrXT5UYdOJqz2z4lotwia3OeMjUh4c /ooIv3lFdpAI4qr9dVniZB0oaNFRlen2Qpux6RJP531+Zmq1hsPZN8U8bb1+ttQ2 6wvN22eA6i893ZZHancQj4iCrV1ZnhTaZJbP3cUrYBc7kxzs3Lc4n+GQkSVK1ynW qg0ObAgwE3pHFeIfYZpLaRhATogrTLi1yHX+PwLSFQiH8QhcFaQiT8WPUuTsxTGz TlmMuwyi0E/dTuEqNn1+EZVjdAzLrXBKET03n6qLh5Srl2LCQdGVTiVuoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIY/kwXXP5NyGmiWjRz6HQnPdnTHMB8GA1UdIwQY MBaAFOUMRK6YHnSS07oh4oRyCAGAOY1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVF4RXJwZ2VkSkxUdWlIaWhISUlBWUE1aldRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8yMjYwMTgtMGUwNi00MzVlLWFiZmQt ZjVmZmVlMTcyMGMxLzEvNVF4RXJwZ2VkSkxUdWlIaWhISUlBWUE1aldRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8yMjYwMTgtMGUwNi00MzVlLWFiZmQtZjVmZmVlMTcyMGMx LzEvNVF4RXJwZ2VkSkxUdWlIaWhISUlBWUE1aldRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApmQumtBl 5s+02sAfGHqjZfZ+sYEiFZknH0mES+G/aKbYUyNgqQwqXUzpMUVzvnk4FNpPvSdq PKuEQsu39eA6NVnOjYX5P6HG5dbZtilF/K7s7Kaorh5RfDoVHKqtZcxLwWzIA80y wefof95rj6ReKKXhAZoJGpQdVM8rzFZ0NN54g6o2ELUr2fqIuprAY5s0fXBzOU/d N35/OQL7DHE4qGmNvciVJPK73o/GBy8iXiMm2ofgiJjLpsY5iUxOz4fDjPPR+6PW WuKPNgTK+FqLE75QetxwTC12rav/F7uEVmJkmQZ8woSDf7/WGspmovzs53txwzGW RHJUZ8KjFXSceA== -----END CERTIFICATE-----Generated at Wed Dec 31 19:37:06 2025 by rpki-client