This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft File: 5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft (raw, json) Hash identifier: h4ujX2TVXnhcgEe5rp/xxc++B/XqqQwTFJoRznFO8Bo= Subject key identifier: A1:64:C9:D6:67:1E:54:44:F9:C1:31:C1:76:36:FD:EF:8E:29:40:0D Authority key identifier: E5:05:D9:34:97:F1:9D:25:63:06:6B:40:92:00:96:97:11:F2:8C:67 Certificate issuer: /CN=e505d93497f19d2563066b409200969711f28c67 Certificate serial: 019B4926EB734B5D3091AF7A13A413CCD546 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft Manifest number: 0F2D Signing time: Tue 23 Dec 2025 03:00:45 +0000 Manifest this update: Tue 23 Dec 2025 03:00:45 +0000 Manifest next update: Wed 24 Dec 2025 03:00:45 +0000 Files and hashes: 1: 5QXZNJfxnSVjBmtAkgCWlxHyjGc.crl (hash: P0hmJIXMdzEm+ixiLwzLqTRQd7xjkiEITmOxJrUNkcQ=) 2: TeyiHHpQzPXntQ9zcodgsnssabQ.roa (hash: 99RzEV6KxbBUQmEGjwYOg/0KALhFJ98CPqecVaZd8t8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft rsync://rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:26:eb:73:4b:5d:30:91:af:7a:13:a4:13:cc:d5:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e505d93497f19d2563066b409200969711f28c67 Validity Not Before: Dec 23 03:00:45 2025 GMT Not After : Dec 24 03:00:45 2025 GMT Subject: CN=a164c9d6671e5444f9c131c17636fdef8e29400d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:69:9d:26:fd:b8:54:ce:77:c1:80:07:61:e6: 6c:e0:7a:c3:36:63:92:d5:75:a3:09:b9:b8:c4:d4: 4e:30:71:95:73:72:84:c4:62:31:cd:1e:75:db:f1: 31:7d:e9:7e:08:89:9f:b9:34:d7:ac:65:85:eb:ba: 5a:23:d5:07:2c:f8:04:2d:8a:92:f8:f5:80:95:a9: 47:75:01:31:23:a2:ab:32:26:32:0a:e1:26:a5:1d: f1:97:4b:26:87:48:df:f8:39:7e:c1:89:ef:a1:29: c7:20:21:a1:a8:eb:fb:98:12:9a:28:23:38:65:38: fa:fc:0c:e6:41:e3:a7:69:95:4f:36:c2:17:b7:ec: b5:3c:1c:14:82:99:81:b1:ed:9b:21:33:43:7a:f2: 2d:30:b2:7e:fb:4a:20:43:18:8d:44:7a:4f:2f:97: cb:d8:8e:67:b1:ee:e4:66:d5:da:0b:3c:0e:51:1e: 3b:e6:31:09:34:a1:bf:c6:c9:b4:dc:8e:56:fd:d7: a8:a2:d0:cf:53:2c:16:56:55:6b:39:64:77:13:97: c4:f4:3c:74:3a:cf:c1:99:b2:66:22:6b:10:32:d7: f7:51:86:71:bb:92:38:e2:7d:79:9e:a2:4b:ce:ff: 2f:79:08:f3:4a:f5:e0:d6:7b:ac:8a:fb:83:85:fa: e2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:64:C9:D6:67:1E:54:44:F9:C1:31:C1:76:36:FD:EF:8E:29:40:0D X509v3 Authority Key Identifier: keyid:E5:05:D9:34:97:F1:9D:25:63:06:6B:40:92:00:96:97:11:F2:8C:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:ae:78:4d:19:90:02:6d:85:d6:b9:9d:fd:df:1b:a9:42:f7: c1:70:6f:2d:c9:60:1d:48:81:8a:a6:c9:51:fc:be:89:d3:4e: 53:db:15:80:98:a5:4a:22:2d:3b:a5:2b:ca:24:d5:bf:af:98: cb:5f:01:d9:91:e0:85:f6:c7:95:b9:29:0c:59:13:cc:ef:ce: 23:60:0d:6e:16:10:3c:50:36:4b:6f:55:f6:ab:02:43:8c:3d: eb:a3:06:cf:2c:fb:15:10:f5:c7:13:f0:4d:28:a1:2d:af:ad: f8:f3:d4:31:c1:e3:aa:08:3c:b2:83:9b:cd:b8:d6:57:70:44: 50:e1:66:68:e7:95:30:fd:bb:4e:1f:2a:d5:ac:83:e6:2f:3d: 48:77:05:c9:3e:bc:1e:28:be:d3:22:a4:c1:b8:1b:24:50:0e: d1:12:13:38:c4:5c:50:f1:05:62:63:ed:1d:55:f3:91:31:a4: 2f:65:55:62:a3:37:45:13:fe:e4:db:d7:cb:e1:89:21:99:1c: 4a:50:4e:95:ee:2f:2e:51:1c:80:8f:b1:23:92:a7:92:41:c9: f2:1f:d8:70:b6:c4:c8:69:00:94:28:3c:39:02:39:70:45:8c: 28:c5:f4:66:5c:4f:b9:7f:fd:77:3c:92:86:75:61:26:5a:28: 58:eb:c2:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJJutzS10wka96E6QTzNVGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1MDVkOTM0OTdmMTlkMjU2MzA2NmI0MDkyMDA5Njk3MTFm MjhjNjcwHhcNMjUxMjIzMDMwMDQ1WhcNMjUxMjI0MDMwMDQ1WjAzMTEwLwYDVQQD EyhhMTY0YzlkNjY3MWU1NDQ0ZjljMTMxYzE3NjM2ZmRlZjhlMjk0MDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmmdJv24VM53wYAHYeZs4HrDNmOS 1XWjCbm4xNROMHGVc3KExGIxzR512/Exfel+CImfuTTXrGWF67paI9UHLPgELYqS +PWAlalHdQExI6KrMiYyCuEmpR3xl0smh0jf+Dl+wYnvoSnHICGhqOv7mBKaKCM4 ZTj6/AzmQeOnaZVPNsIXt+y1PBwUgpmBse2bITNDevItMLJ++0ogQxiNRHpPL5fL 2I5nse7kZtXaCzwOUR475jEJNKG/xsm03I5W/deootDPUywWVlVrOWR3E5fE9Dx0 Os/BmbJmImsQMtf3UYZxu5I44n15nqJLzv8veQjzSvXg1nusivuDhfriGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKFkydZnHlRE+cExwXY2/e+OKUANMB8GA1UdIwQY MBaAFOUF2TSX8Z0lYwZrQJIAlpcR8oxnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVFYWk5KZnhuU1ZqQm10QWtnQ1dseEh5akdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81NDBlNTMtYzRhNi00ZjUyLTgxMWUt NmFmYzRlYzYzY2YwLzEvNVFYWk5KZnhuU1ZqQm10QWtnQ1dseEh5akdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC81NDBlNTMtYzRhNi00ZjUyLTgxMWUtNmFmYzRlYzYzY2Yw LzEvNVFYWk5KZnhuU1ZqQm10QWtnQ1dseEh5akdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnq54TRmQ Am2F1rmd/d8bqUL3wXBvLclgHUiBiqbJUfy+idNOU9sVgJilSiItO6UryiTVv6+Y y18B2ZHghfbHlbkpDFkTzO/OI2ANbhYQPFA2S29V9qsCQ4w966MGzyz7FRD1xxPw TSihLa+t+PPUMcHjqgg8soObzbjWV3BEUOFmaOeVMP27Th8q1ayD5i89SHcFyT68 Hii+0yKkwbgbJFAO0RITOMRcUPEFYmPtHVXzkTGkL2VVYqM3RRP+5NvXy+GJIZkc SlBOle4vLlEcgI+xI5KnkkHJ8h/YcLbEyGkAlCg8OQI5cEWMKMX0ZlxPuX/9dzyS hnVhJlooWOvCXA== -----END CERTIFICATE-----Generated at Tue Dec 23 06:37:39 2025 by rpki-client