This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft File: 5QwixmuF-smN6D12HvQkNDerA5M.mft (raw, json) Hash identifier: T/7KzoMC/SaB2JNm+DuNUn7dPKHkWlNvq84b2UpI+GU= Subject key identifier: CA:89:CC:24:20:3B:82:E6:AE:43:62:33:E7:80:AE:43:95:48:C0:45 Authority key identifier: E5:0C:22:C6:6B:85:FA:C9:8D:E8:3D:76:1E:F4:24:34:37:AB:03:93 Certificate issuer: /CN=e50c22c66b85fac98de83d761ef4243437ab0393 Certificate serial: 019B4324C476543BB92FA77510AC644859F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft Manifest number: 1428 Signing time: Sun 21 Dec 2025 23:00:41 +0000 Manifest this update: Sun 21 Dec 2025 23:00:41 +0000 Manifest next update: Mon 22 Dec 2025 23:00:41 +0000 Files and hashes: 1: 5QwixmuF-smN6D12HvQkNDerA5M.crl (hash: L3TNOtoIppLYA/Cz65PzWRqx+50ST+V75aHgICUuk1A=) 2: 5vvZLFuVzrlfVEjgWVSSvDzWzYc.roa (hash: d36pZwdlPn9b+lfJWHYLiYs9ysvYmjF2/rOLd55l7Go=) 3: f1b7by6SkYswASAnSv-cgB5XP2Y.roa (hash: x+DctqLC1gEcaYW0QmBitaKdQAwlen0XRAIQGmNrAQ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:24:c4:76:54:3b:b9:2f:a7:75:10:ac:64:48:59:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e50c22c66b85fac98de83d761ef4243437ab0393 Validity Not Before: Dec 21 23:00:41 2025 GMT Not After : Dec 22 23:00:41 2025 GMT Subject: CN=ca89cc24203b82e6ae436233e780ae439548c045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4e:15:f6:2a:0a:e1:42:cb:ce:01:da:82:53: dc:af:88:ea:03:45:d4:5d:bd:f2:39:db:f3:71:c1: f1:85:18:53:28:40:9a:1e:35:d2:45:45:5d:3a:3b: fb:cb:46:aa:fd:cb:4b:59:73:b3:d9:81:1a:7b:3d: 65:02:1d:b6:1d:79:79:c0:de:da:32:72:a6:2a:da: a7:49:4f:af:97:db:88:98:cf:80:83:2b:4e:91:fa: 45:73:25:71:82:47:a2:78:14:a3:c0:e5:e4:c4:9b: ec:11:a5:64:cf:34:99:a4:69:1c:c8:0c:63:bd:2d: c9:20:0d:37:8b:88:e2:38:9f:85:e9:54:c3:0e:48: 07:a1:c9:85:f5:c1:f9:db:d7:3a:b9:fb:5f:24:96: 12:02:02:0a:f8:66:48:da:f5:4b:c4:4e:c6:cb:3f: fc:df:78:84:79:84:06:19:5a:91:8f:d9:62:fd:e0: d7:87:e1:91:a1:8c:f0:52:10:96:1d:99:4b:5f:e4: 02:d3:66:1b:f3:22:39:bd:05:68:05:71:25:26:9d: da:dd:47:26:01:03:10:83:60:14:c9:76:3f:95:a6: 58:09:ff:43:ce:01:52:7a:e6:38:be:cf:27:08:4d: 17:17:ac:83:a5:f2:79:17:e0:02:1d:d8:22:1c:71: 9c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:89:CC:24:20:3B:82:E6:AE:43:62:33:E7:80:AE:43:95:48:C0:45 X509v3 Authority Key Identifier: keyid:E5:0C:22:C6:6B:85:FA:C9:8D:E8:3D:76:1E:F4:24:34:37:AB:03:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:fb:6a:87:69:82:7c:2c:ed:a7:e1:64:75:fb:4c:82:41:40: a2:3b:80:6f:ee:61:bf:7d:55:6c:4a:97:29:f9:1c:f5:43:51: 75:05:b4:9e:75:42:de:d1:a8:6c:2a:a9:a3:ab:3e:05:d7:96: ac:a9:b2:8c:ab:46:27:a2:bf:97:b8:11:30:18:99:c3:e9:c8: da:30:92:87:89:ae:29:83:fc:b2:75:63:d5:ef:ca:4e:e7:3b: cc:55:f7:fd:df:90:f8:a2:be:e8:c6:84:e5:87:bc:f1:6f:88: c7:e8:19:a6:67:90:f1:27:2c:f1:59:67:62:14:e7:14:2c:9f: 58:29:39:32:f5:fe:da:63:52:a4:64:10:61:62:00:e3:0f:b0: 7b:a0:fe:2a:64:3d:9a:1f:30:0f:1f:e2:ff:76:ab:2f:9d:17: 13:a3:f0:01:57:51:8b:22:54:1f:66:6c:f9:39:77:cd:a1:f2: aa:c3:a7:ed:49:05:a2:80:66:05:41:1a:60:de:bb:bb:f4:16: 31:f0:cd:3d:09:04:e2:a6:8f:4f:ae:ee:1b:39:77:92:07:57: 35:c8:20:da:0f:6e:7f:a4:c8:f6:c5:27:7a:65:ff:ab:e4:f7: 9c:e2:b9:2e:c0:df:79:a6:98:64:34:07:2b:cb:94:f9:8e:24: 51:c7:49:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJMR2VDu5L6d1EKxkSFnwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1MGMyMmM2NmI4NWZhYzk4ZGU4M2Q3NjFlZjQyNDM0Mzdh YjAzOTMwHhcNMjUxMjIxMjMwMDQxWhcNMjUxMjIyMjMwMDQxWjAzMTEwLwYDVQQD EyhjYTg5Y2MyNDIwM2I4MmU2YWU0MzYyMzNlNzgwYWU0Mzk1NDhjMDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqU4V9ioK4ULLzgHaglPcr4jqA0XU Xb3yOdvzccHxhRhTKECaHjXSRUVdOjv7y0aq/ctLWXOz2YEaez1lAh22HXl5wN7a MnKmKtqnSU+vl9uImM+AgytOkfpFcyVxgkeieBSjwOXkxJvsEaVkzzSZpGkcyAxj vS3JIA03i4jiOJ+F6VTDDkgHocmF9cH529c6uftfJJYSAgIK+GZI2vVLxE7Gyz/8 33iEeYQGGVqRj9li/eDXh+GRoYzwUhCWHZlLX+QC02Yb8yI5vQVoBXElJp3a3Ucm AQMQg2AUyXY/laZYCf9DzgFSeuY4vs8nCE0XF6yDpfJ5F+ACHdgiHHGcNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMqJzCQgO4LmrkNiM+eArkOVSMBFMB8GA1UdIwQY MBaAFOUMIsZrhfrJjeg9dh70JDQ3qwOTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVF3aXhtdUYtc21ONkQxMkh2UWtORGVyQTVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8yYjdmZTktMmE4Ny00YzU3LWIxMDgt OTIxNDI3ODEwOGE4LzEvNVF3aXhtdUYtc21ONkQxMkh2UWtORGVyQTVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8yYjdmZTktMmE4Ny00YzU3LWIxMDgtOTIxNDI3ODEwOGE4 LzEvNVF3aXhtdUYtc21ONkQxMkh2UWtORGVyQTVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbftqh2mC fCztp+FkdftMgkFAojuAb+5hv31VbEqXKfkc9UNRdQW0nnVC3tGobCqpo6s+BdeW rKmyjKtGJ6K/l7gRMBiZw+nI2jCSh4muKYP8snVj1e/KTuc7zFX3/d+Q+KK+6MaE 5Ye88W+Ix+gZpmeQ8Scs8VlnYhTnFCyfWCk5MvX+2mNSpGQQYWIA4w+we6D+KmQ9 mh8wDx/i/3arL50XE6PwAVdRiyJUH2Zs+Tl3zaHyqsOn7UkFooBmBUEaYN67u/QW MfDNPQkE4qaPT67uGzl3kgdXNcgg2g9uf6TI9sUnemX/q+T3nOK5LsDfeaaYZDQH K8uU+Y4kUcdJYQ== -----END CERTIFICATE-----Generated at Mon Dec 22 02:05:45 2025 by rpki-client