This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft File: 5qi5LUxZf2wET3clKFSPnJEpoNM.mft (raw, json) Hash identifier: 6greZ63OmePbp04KIE7ov3FXob69AWln24I2ISqaEgE= Subject key identifier: 27:74:E6:29:07:7B:16:EF:FE:38:4D:77:39:A0:7E:76:72:A3:61:99 Authority key identifier: E6:A8:B9:2D:4C:59:7F:6C:04:4F:77:25:28:54:8F:9C:91:29:A0:D3 Certificate issuer: /CN=e6a8b92d4c597f6c044f772528548f9c9129a0d3 Certificate serial: 019B6D3335AB269EF9A25514457BF47EC3B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qi5LUxZf2wET3clKFSPnJEpoNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft Manifest number: 147F Signing time: Tue 30 Dec 2025 03:00:31 +0000 Manifest this update: Tue 30 Dec 2025 03:00:31 +0000 Manifest next update: Wed 31 Dec 2025 03:00:31 +0000 Files and hashes: 1: 5qi5LUxZf2wET3clKFSPnJEpoNM.crl (hash: NRKCKrdh8Re4WG50GulQEviVgYhjfn76G0FBCrSqH5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft rsync://rpki.ripe.net/repository/DEFAULT/5qi5LUxZf2wET3clKFSPnJEpoNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:33:35:ab:26:9e:f9:a2:55:14:45:7b:f4:7e:c3:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6a8b92d4c597f6c044f772528548f9c9129a0d3 Validity Not Before: Dec 30 03:00:31 2025 GMT Not After : Dec 31 03:00:31 2025 GMT Subject: CN=2774e629077b16effe384d7739a07e7672a36199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:5b:cb:1d:eb:5e:89:03:0e:b1:52:b9:38:66: f7:3f:52:59:d4:a5:d0:20:f7:da:11:06:ff:d2:19: 45:15:77:f8:aa:2d:1e:d7:ce:31:ea:df:1b:f5:ec: a4:ae:a8:b2:a9:86:21:fb:5d:10:97:1d:76:9c:1f: eb:21:d9:e9:5b:e3:39:4e:08:c5:82:b6:d3:f9:65: 20:1e:a2:b8:3d:4d:b8:c9:eb:ae:e1:79:89:17:35: 3d:49:ea:65:b5:bc:fc:df:33:d8:5f:97:d0:1c:17: 2d:9f:d9:de:a2:55:01:6e:d0:a8:86:b0:d8:5f:77: 6f:61:b0:7c:fd:21:6c:4b:e4:4a:d0:2a:1d:de:4e: 42:f6:bb:2f:4f:9e:8e:d7:6f:3f:bf:83:68:1a:a6: 6a:78:bd:b4:c7:76:be:3c:3c:06:81:6e:f6:46:2d: 93:f5:51:28:9e:98:6d:08:86:a6:a0:22:3b:51:c2: 4d:24:f4:61:6e:73:f8:44:b1:41:35:84:0a:11:36: 61:dd:95:38:5b:89:20:c6:63:1d:0e:54:b0:05:54: e8:92:48:d5:ff:56:cd:fa:e7:aa:d3:81:72:20:56: 80:d0:f5:58:c7:61:70:1a:0e:1e:c5:30:84:e9:51: fd:54:f8:9b:01:7f:44:3d:18:ec:0b:12:8d:f2:cc: 03:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:74:E6:29:07:7B:16:EF:FE:38:4D:77:39:A0:7E:76:72:A3:61:99 X509v3 Authority Key Identifier: keyid:E6:A8:B9:2D:4C:59:7F:6C:04:4F:77:25:28:54:8F:9C:91:29:A0:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qi5LUxZf2wET3clKFSPnJEpoNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:02:03:5c:78:b3:6d:7f:ed:aa:ae:f2:a6:6e:6a:9e:b3:a0: 98:ac:f3:e7:cf:e6:2a:85:93:88:f5:52:f1:4e:d1:b3:fb:c9: 28:77:c3:bc:c8:a1:60:80:b2:4d:2d:28:ef:26:ec:45:89:be: 9e:bc:cf:64:4e:36:13:82:b5:d8:79:a3:fc:f0:1f:a5:f2:33: 46:d9:e9:6e:fe:5c:a9:1f:a3:34:1f:6b:34:0f:f6:be:5a:8f: 73:24:11:f1:ec:50:3b:f4:6e:a3:b3:fa:eb:28:29:90:66:37: cf:ce:12:ef:a4:6f:52:e0:b9:60:d2:62:6d:2e:8f:b9:bc:ea: d4:8d:1a:60:6c:2f:d6:d9:5d:f2:d1:bb:06:d4:16:c2:bd:00: 94:6e:cd:07:bb:f7:ea:b7:21:ff:6b:77:bd:ca:c1:c3:f0:28: fe:37:68:fc:e3:d6:fb:e9:51:ff:a9:0a:9e:f1:91:ff:3e:21: dc:ae:1a:bd:9a:e6:31:63:e6:74:e1:aa:3a:6e:61:bd:ad:83: b0:1f:63:e3:fd:fb:9e:6b:2d:f7:45:18:c6:32:a2:a5:7b:4d: 52:4b:5a:62:c1:53:0b:e9:ec:cb:c5:07:f2:cf:41:12:d9:36: df:62:14:81:c5:cc:6b:27:d2:7a:27:1f:4e:2d:e9:77:e1:5a: 02:15:2b:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttMzWrJp75olUURXv0fsO3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2YThiOTJkNGM1OTdmNmMwNDRmNzcyNTI4NTQ4ZjljOTEy OWEwZDMwHhcNMjUxMjMwMDMwMDMxWhcNMjUxMjMxMDMwMDMxWjAzMTEwLwYDVQQD EygyNzc0ZTYyOTA3N2IxNmVmZmUzODRkNzczOWEwN2U3NjcyYTM2MTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8VvLHeteiQMOsVK5OGb3P1JZ1KXQ IPfaEQb/0hlFFXf4qi0e184x6t8b9eykrqiyqYYh+10Qlx12nB/rIdnpW+M5TgjF grbT+WUgHqK4PU24yeuu4XmJFzU9Sepltbz83zPYX5fQHBctn9neolUBbtCohrDY X3dvYbB8/SFsS+RK0Cod3k5C9rsvT56O128/v4NoGqZqeL20x3a+PDwGgW72Ri2T 9VEonphtCIamoCI7UcJNJPRhbnP4RLFBNYQKETZh3ZU4W4kgxmMdDlSwBVTokkjV /1bN+ueq04FyIFaA0PVYx2FwGg4exTCE6VH9VPibAX9EPRjsCxKN8swDpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCd05ikHexbv/jhNdzmgfnZyo2GZMB8GA1UdIwQY MBaAFOaouS1MWX9sBE93JShUj5yRKaDTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXFpNUxVeFpmMndFVDNjbEtGU1BuSkVwb05NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9mOWFmYzItOTE2OS00YThjLTg4MTYt ZGViN2ZmMWI1ZTZkLzEvNXFpNUxVeFpmMndFVDNjbEtGU1BuSkVwb05NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9mOWFmYzItOTE2OS00YThjLTg4MTYtZGViN2ZmMWI1ZTZk LzEvNXFpNUxVeFpmMndFVDNjbEtGU1BuSkVwb05NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADQIDXHiz bX/tqq7ypm5qnrOgmKzz58/mKoWTiPVS8U7Rs/vJKHfDvMihYICyTS0o7ybsRYm+ nrzPZE42E4K12Hmj/PAfpfIzRtnpbv5cqR+jNB9rNA/2vlqPcyQR8exQO/Ruo7P6 6ygpkGY3z84S76RvUuC5YNJibS6Pubzq1I0aYGwv1tld8tG7BtQWwr0AlG7NB7v3 6rch/2t3vcrBw/Ao/jdo/OPW++lR/6kKnvGR/z4h3K4avZrmMWPmdOGqOm5hva2D sB9j4/37nmst90UYxjKipXtNUktaYsFTC+nsy8UH8s9BEtk232IUgcXMayfSeicf Ti3pd+FaAhUrNg== -----END CERTIFICATE-----Generated at Tue Dec 30 06:20:51 2025 by rpki-client