This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft File: _q5Ur85RVFR5wNoD8gGnTimSfXg.mft (raw, json) Hash identifier: XKlKfRspC6/I7aBlE2QMLbSkYD1Ss/PDCXbVLf+OIBI= Subject key identifier: 50:44:4B:D8:41:CB:EF:C1:9A:CB:C7:DE:6C:4E:74:B6:63:23:1A:E5 Authority key identifier: FE:AE:54:AF:CE:51:54:54:79:C0:DA:03:F2:01:A7:4E:29:92:7D:78 Certificate issuer: /CN=feae54afce51545479c0da03f201a74e29927d78 Certificate serial: 019B3F483A29E83216EA7459D1EB2F2C0FD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft Manifest number: 07B8 Signing time: Sun 21 Dec 2025 05:00:56 +0000 Manifest this update: Sun 21 Dec 2025 05:00:56 +0000 Manifest next update: Mon 22 Dec 2025 05:00:56 +0000 Files and hashes: 1: _q5Ur85RVFR5wNoD8gGnTimSfXg.crl (hash: q4iwdbCHHmqGO1ihcDS6OxSp9pokirPkEYX4iw62DGc=) 2: lZoUgcddrDnXe4fT6Iyd3y19EFw.roa (hash: XV7kQikecJKDAAiTDNdfiups4qb65I8y80bxuDG+ZNo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:3a:29:e8:32:16:ea:74:59:d1:eb:2f:2c:0f:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=feae54afce51545479c0da03f201a74e29927d78 Validity Not Before: Dec 21 05:00:56 2025 GMT Not After : Dec 22 05:00:56 2025 GMT Subject: CN=50444bd841cbefc19acbc7de6c4e74b663231ae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:75:74:bd:80:bb:86:53:33:97:ee:05:f6:49: 70:ae:0f:37:f2:eb:61:08:06:15:7d:51:36:99:8f: ff:b8:53:f5:9a:63:13:b5:8d:a4:68:b9:a5:e5:b3: 9d:11:d9:31:07:d6:83:6c:0d:5f:d4:96:8f:98:39: 9f:48:30:86:3d:e4:f0:f8:e7:e0:b7:77:a5:62:b7: 8a:f0:67:3b:26:a9:c5:14:dc:4b:7c:41:0a:92:93: 6d:15:0c:41:5f:17:76:65:36:d2:be:1e:f6:dd:4a: e7:b5:05:9a:c1:32:a0:09:eb:5e:97:2b:54:5e:8c: 61:bc:4d:af:2f:b0:fa:18:58:21:fa:c7:08:00:9b: 71:7f:a8:58:c8:7a:c6:a3:7a:d0:0d:6d:44:39:11: e5:30:5b:72:27:ad:82:68:1e:29:b8:ac:f0:58:8b: 04:a8:8b:22:5a:4f:11:fc:c8:e7:ff:e5:14:e0:86: c1:f7:2c:40:51:8e:89:25:6e:e0:c6:b0:ab:bf:c5: 54:55:67:09:d8:ca:36:1c:1c:f9:ad:20:b0:83:cd: 25:34:ed:8f:69:b5:dd:fb:93:81:53:c2:62:c7:46: 02:0c:73:a6:71:01:ad:a4:96:bc:ae:56:92:1f:b0: 11:5f:75:87:4f:7b:63:75:43:3e:21:ba:e9:30:bc: 32:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:44:4B:D8:41:CB:EF:C1:9A:CB:C7:DE:6C:4E:74:B6:63:23:1A:E5 X509v3 Authority Key Identifier: keyid:FE:AE:54:AF:CE:51:54:54:79:C0:DA:03:F2:01:A7:4E:29:92:7D:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:52:37:90:d8:b2:1b:3c:72:de:fb:4b:dc:5b:de:e3:08:40: b0:12:88:7e:63:68:4e:31:e1:a5:03:86:9b:79:aa:be:0b:aa: 54:5a:a2:5e:ec:76:4a:14:33:70:91:4e:b2:b6:2c:b2:9c:a5: bd:4c:1a:e2:b6:93:ac:cb:5e:19:de:ad:83:06:2c:21:dd:63: 5e:57:a2:fa:cf:a6:a1:0f:94:25:2b:bd:b7:8d:b3:4e:f0:d3: 5a:c6:2f:e9:d0:98:c1:de:98:10:00:5d:1e:17:52:3d:9b:11: 19:f7:de:e1:7b:8e:26:c3:af:93:83:87:44:94:07:8c:63:b7: fe:bc:95:0f:a7:15:c9:6e:16:ff:93:4a:5f:c1:2a:2f:8d:5c: 9a:4f:df:ae:74:1e:1c:c7:72:46:c3:d9:8b:80:d7:fa:7b:cb: 9d:98:37:17:c3:42:df:7f:ce:60:f4:a9:57:f4:0a:27:a9:55: ee:54:f0:53:83:31:2f:76:f1:65:91:f5:09:db:65:3e:00:22: 7c:30:ec:35:ee:ec:14:cf:7f:50:a0:4b:69:a2:80:7f:12:ca: 03:05:82:b6:b3:b0:d8:c2:55:91:4b:ce:a9:ee:b9:29:8b:e3: 93:af:9a:eb:51:75:f8:d3:82:b9:99:41:aa:63:cf:ae:af:5f: c3:87:b8:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SDop6DIW6nRZ0esvLA/SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYWU1NGFmY2U1MTU0NTQ3OWMwZGEwM2YyMDFhNzRlMjk5 MjdkNzgwHhcNMjUxMjIxMDUwMDU2WhcNMjUxMjIyMDUwMDU2WjAzMTEwLwYDVQQD Eyg1MDQ0NGJkODQxY2JlZmMxOWFjYmM3ZGU2YzRlNzRiNjYzMjMxYWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXV0vYC7hlMzl+4F9klwrg838uth CAYVfVE2mY//uFP1mmMTtY2kaLml5bOdEdkxB9aDbA1f1JaPmDmfSDCGPeTw+Ofg t3elYreK8Gc7JqnFFNxLfEEKkpNtFQxBXxd2ZTbSvh723UrntQWawTKgCetelytU XoxhvE2vL7D6GFgh+scIAJtxf6hYyHrGo3rQDW1EORHlMFtyJ62CaB4puKzwWIsE qIsiWk8R/Mjn/+UU4IbB9yxAUY6JJW7gxrCrv8VUVWcJ2Mo2HBz5rSCwg80lNO2P abXd+5OBU8Jix0YCDHOmcQGtpJa8rlaSH7ARX3WHT3tjdUM+IbrpMLwy4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFBES9hBy+/BmsvH3mxOdLZjIxrlMB8GA1UdIwQY MBaAFP6uVK/OUVRUecDaA/IBp04pkn14MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3E1VXI4NVJWRlI1d05vRDhnR25UaW1TZlhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80ZjAyNjktOTgxOC00MTIzLWJjYmYt N2E2NTIzMDNhMjhhLzEvX3E1VXI4NVJWRlI1d05vRDhnR25UaW1TZlhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS80ZjAyNjktOTgxOC00MTIzLWJjYmYtN2E2NTIzMDNhMjhh LzEvX3E1VXI4NVJWRlI1d05vRDhnR25UaW1TZlhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJFI3kNiy Gzxy3vtL3Fve4whAsBKIfmNoTjHhpQOGm3mqvguqVFqiXux2ShQzcJFOsrYsspyl vUwa4raTrMteGd6tgwYsId1jXlei+s+moQ+UJSu9t42zTvDTWsYv6dCYwd6YEABd HhdSPZsRGffe4XuOJsOvk4OHRJQHjGO3/ryVD6cVyW4W/5NKX8EqL41cmk/frnQe HMdyRsPZi4DX+nvLnZg3F8NC33/OYPSpV/QKJ6lV7lTwU4MxL3bxZZH1CdtlPgAi fDDsNe7sFM9/UKBLaaKAfxLKAwWCtrOw2MJVkUvOqe65KYvjk6+a61F1+NOCuZlB qmPPrq9fw4e4NQ== -----END CERTIFICATE-----Generated at Sun Dec 21 07:58:59 2025 by rpki-client