This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft File: 5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft (raw, json) Hash identifier: G29Z3Yubu69vUqk74UAcnG8CGzYzb3mFKZydrYDWc4U= Subject key identifier: 2F:62:8E:73:4E:D2:82:E6:6D:D4:F8:CD:C2:FF:2E:58:38:B0:03:F7 Authority key identifier: E5:05:D9:34:97:F1:9D:25:63:06:6B:40:92:00:96:97:11:F2:8C:67 Certificate issuer: /CN=e505d93497f19d2563066b409200969711f28c67 Certificate serial: 019B52CF3523FA976F7449A20AC1DB0BF03B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft Manifest number: 0F32 Signing time: Thu 25 Dec 2025 00:01:09 +0000 Manifest this update: Thu 25 Dec 2025 00:01:09 +0000 Manifest next update: Fri 26 Dec 2025 00:01:09 +0000 Files and hashes: 1: 5QXZNJfxnSVjBmtAkgCWlxHyjGc.crl (hash: i//dIWxMTFnJFGkhYKzF2WTej2kgvoDUyyi0EW2wn6U=) 2: TeyiHHpQzPXntQ9zcodgsnssabQ.roa (hash: 99RzEV6KxbBUQmEGjwYOg/0KALhFJ98CPqecVaZd8t8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft rsync://rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:cf:35:23:fa:97:6f:74:49:a2:0a:c1:db:0b:f0:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e505d93497f19d2563066b409200969711f28c67 Validity Not Before: Dec 25 00:01:09 2025 GMT Not After : Dec 26 00:01:09 2025 GMT Subject: CN=2f628e734ed282e66dd4f8cdc2ff2e5838b003f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:18:15:6f:81:41:9d:63:8e:fb:f5:2a:16:68: 9f:5b:d7:aa:61:33:92:c0:d5:ae:ee:54:4b:7f:46: 8e:a2:99:3c:34:f9:b5:ef:98:59:53:a2:76:2a:ff: 68:ed:d9:5c:5e:b4:7b:14:fa:bb:ff:eb:f3:62:3c: d5:67:3c:3b:f5:db:e4:03:00:e8:d8:c9:f7:b4:78: 5b:c3:63:a5:ff:d0:d6:4e:51:c8:9b:5f:d6:0a:4e: 69:c1:45:bd:48:b5:14:d3:b2:9c:16:47:7d:1c:c6: a5:80:7c:98:74:89:12:1a:a6:42:2d:79:bd:b0:19: fa:6b:fb:bc:32:71:d2:79:e9:d8:ff:9d:24:af:fb: 37:14:7c:6d:d7:d5:25:d7:a9:03:f2:19:ce:88:b8: a7:dd:4a:42:91:ae:43:33:de:9a:ab:8d:93:ea:05: db:1a:f3:23:bb:59:24:94:6c:0c:a5:66:59:1b:a7: 4c:83:35:dc:da:50:7d:6b:5a:d7:35:15:d4:1c:f8: d7:ec:8f:4b:7e:91:32:ef:2a:1a:ab:8c:f0:9b:8a: 65:0c:27:88:13:57:97:5d:04:97:c2:1d:09:a9:f6: 27:14:42:c1:fd:cb:6f:d1:a4:19:b7:3e:c0:11:18: d7:09:9f:f2:7f:ff:c0:d5:74:27:08:41:fd:21:56: 1b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:62:8E:73:4E:D2:82:E6:6D:D4:F8:CD:C2:FF:2E:58:38:B0:03:F7 X509v3 Authority Key Identifier: keyid:E5:05:D9:34:97:F1:9D:25:63:06:6B:40:92:00:96:97:11:F2:8C:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:ad:0a:d9:48:e0:35:2a:5a:fc:97:e7:e3:9d:59:42:94:a0: 29:89:3c:84:7f:65:7d:ef:c0:73:50:d0:6e:a6:95:1f:7d:bd: 86:15:1b:04:7b:04:cd:ae:96:31:df:41:a1:17:86:1a:4b:0f: c1:17:54:15:9c:4c:a9:b0:21:08:e6:a6:00:26:11:9c:fc:85: 25:88:4c:f1:c5:55:65:15:09:db:b3:c1:bf:aa:17:5c:8a:7e: cd:eb:a0:8d:37:a7:41:f1:dc:11:31:9a:ce:68:ca:e6:f1:29: 62:dc:46:75:08:b7:42:52:34:5c:6a:ef:83:cf:9a:a1:f0:53: f4:11:c0:60:5c:0f:0b:48:5e:6a:58:c9:bc:2f:e4:93:61:bb: e8:39:7a:29:c3:95:a5:d8:2f:07:81:12:61:78:27:1a:10:2c: 0b:74:c8:32:70:ae:ea:3e:17:28:0a:9d:d1:fc:bf:6f:09:5c: e2:b7:4c:0a:c0:46:67:3f:03:59:d9:91:ec:8e:4e:43:50:bd: 86:4d:a8:bc:d5:19:32:20:04:9f:a7:ad:f5:c8:2e:47:91:4d: 69:0a:57:2e:a1:ac:aa:98:1b:e5:9a:fc:f5:0c:3e:10:6b:4a: dd:b1:46:9e:ff:73:f0:69:8d:cc:0f:71:0f:73:f8:2a:cd:85: dc:d6:e5:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSzzUj+pdvdEmiCsHbC/A7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1MDVkOTM0OTdmMTlkMjU2MzA2NmI0MDkyMDA5Njk3MTFm MjhjNjcwHhcNMjUxMjI1MDAwMTA5WhcNMjUxMjI2MDAwMTA5WjAzMTEwLwYDVQQD EygyZjYyOGU3MzRlZDI4MmU2NmRkNGY4Y2RjMmZmMmU1ODM4YjAwM2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphgVb4FBnWOO+/UqFmifW9eqYTOS wNWu7lRLf0aOopk8NPm175hZU6J2Kv9o7dlcXrR7FPq7/+vzYjzVZzw79dvkAwDo 2Mn3tHhbw2Ol/9DWTlHIm1/WCk5pwUW9SLUU07KcFkd9HMalgHyYdIkSGqZCLXm9 sBn6a/u8MnHSeenY/50kr/s3FHxt19Ul16kD8hnOiLin3UpCka5DM96aq42T6gXb GvMju1kklGwMpWZZG6dMgzXc2lB9a1rXNRXUHPjX7I9LfpEy7yoaq4zwm4plDCeI E1eXXQSXwh0JqfYnFELB/ctv0aQZtz7AERjXCZ/yf//A1XQnCEH9IVYbQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC9ijnNO0oLmbdT4zcL/Llg4sAP3MB8GA1UdIwQY MBaAFOUF2TSX8Z0lYwZrQJIAlpcR8oxnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVFYWk5KZnhuU1ZqQm10QWtnQ1dseEh5akdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81NDBlNTMtYzRhNi00ZjUyLTgxMWUt NmFmYzRlYzYzY2YwLzEvNVFYWk5KZnhuU1ZqQm10QWtnQ1dseEh5akdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC81NDBlNTMtYzRhNi00ZjUyLTgxMWUtNmFmYzRlYzYzY2Yw LzEvNVFYWk5KZnhuU1ZqQm10QWtnQ1dseEh5akdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbq0K2Ujg NSpa/Jfn451ZQpSgKYk8hH9lfe/Ac1DQbqaVH329hhUbBHsEza6WMd9BoReGGksP wRdUFZxMqbAhCOamACYRnPyFJYhM8cVVZRUJ27PBv6oXXIp+zeugjTenQfHcETGa zmjK5vEpYtxGdQi3QlI0XGrvg8+aofBT9BHAYFwPC0healjJvC/kk2G76Dl6KcOV pdgvB4ESYXgnGhAsC3TIMnCu6j4XKAqd0fy/bwlc4rdMCsBGZz8DWdmR7I5OQ1C9 hk2ovNUZMiAEn6et9cguR5FNaQpXLqGsqpgb5Zr89Qw+EGtK3bFGnv9z8GmNzA9x D3P4Ks2F3NblhQ== -----END CERTIFICATE-----Generated at Thu Dec 25 04:33:36 2025 by rpki-client