This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.mft File: Q5i1d7IjtadjUSGadP2kRnBIkPc.mft (raw, json) Hash identifier: FnAW4aJKoRU/S7D9o7kYXin0bDqvWdjWCqeMya0wMyA= Subject key identifier: A1:DA:13:DE:5F:7C:C1:9D:72:D8:BF:17:01:DD:20:4D:13:88:57:76 Authority key identifier: 43:98:B5:77:B2:23:B5:A7:63:51:21:9A:74:FD:A4:46:70:48:90:F7 Certificate issuer: /CN=4398b577b223b5a76351219a74fda446704890f7 Certificate serial: 019B544FF57A7E5A9DA1C3B84009A6D671AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5i1d7IjtadjUSGadP2kRnBIkPc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.mft Manifest number: 147C Signing time: Thu 25 Dec 2025 07:01:24 +0000 Manifest this update: Thu 25 Dec 2025 07:01:24 +0000 Manifest next update: Fri 26 Dec 2025 07:01:24 +0000 Files and hashes: 1: KL5bIat3Yk7dpaHmhHBN9ywSikg.roa (hash: 2Dm1yDCv5S4uhPon+c/p0fcUA41+SmoP2uLFsPOLfB0=) 2: Q5i1d7IjtadjUSGadP2kRnBIkPc.crl (hash: b+smJicfSmdrUMa+jwyaKqpRbFaLeVaugsDfwDidYXg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.mft rsync://rpki.ripe.net/repository/DEFAULT/Q5i1d7IjtadjUSGadP2kRnBIkPc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 07:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:4f:f5:7a:7e:5a:9d:a1:c3:b8:40:09:a6:d6:71:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4398b577b223b5a76351219a74fda446704890f7 Validity Not Before: Dec 25 07:01:24 2025 GMT Not After : Dec 26 07:01:24 2025 GMT Subject: CN=a1da13de5f7cc19d72d8bf1701dd204d13885776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:01:84:ca:79:3b:ee:8d:37:fe:98:8e:ed:e0: 2b:f5:ff:5e:a4:bb:c4:7b:05:20:64:d0:34:23:7c: 46:a9:17:34:80:4f:cb:45:5a:1f:77:fd:ff:a5:ad: 82:30:6c:d7:d1:2e:a1:68:f9:ce:63:ce:e5:f9:88: 29:76:7f:b5:91:b5:6d:26:77:7b:48:10:cd:5c:f8: d8:b0:93:45:51:18:56:3b:e5:ce:2c:6c:80:04:a6: 50:31:44:98:97:8e:b4:06:8c:55:4a:09:17:d9:f8: c2:89:88:6f:51:cf:56:b3:d2:12:93:59:81:f2:a7: 0f:71:5a:5c:f9:48:db:e2:6c:34:b1:47:02:d5:91: 70:3a:b8:08:15:f7:b0:e5:80:1a:9a:13:49:55:fe: 2c:e0:48:cc:0c:02:86:8b:36:c1:40:f5:f3:a1:86: 2a:6a:6e:bb:c6:5d:dc:ce:0b:a4:b1:41:2b:3c:a1: 19:25:6d:cc:1f:37:ef:2d:36:91:ba:fe:cc:06:7b: 01:c1:d5:c6:a3:3b:07:b9:6f:d0:f0:c6:ac:79:34: e1:d7:e1:4a:2c:fc:05:94:88:91:bd:18:a5:e4:17: 79:01:1e:6e:c9:8d:87:79:6a:e7:00:3d:aa:7f:d0: 4a:7e:63:03:91:9c:36:8c:07:6d:68:19:00:dd:3c: 89:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:DA:13:DE:5F:7C:C1:9D:72:D8:BF:17:01:DD:20:4D:13:88:57:76 X509v3 Authority Key Identifier: keyid:43:98:B5:77:B2:23:B5:A7:63:51:21:9A:74:FD:A4:46:70:48:90:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5i1d7IjtadjUSGadP2kRnBIkPc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:a0:5b:cc:6f:43:f6:45:1f:ec:3a:18:6c:e0:fc:50:c1:21: b9:18:04:51:2b:7b:9c:64:4b:2d:68:00:8f:01:66:3a:f1:d0: 43:fb:0b:30:b7:3b:04:07:e8:c0:79:ee:fa:4d:5a:50:6c:06: 72:f7:23:d6:bd:28:7f:ec:82:80:b3:a4:8d:98:09:89:2b:ad: 46:5a:5b:84:f5:24:4d:2c:a1:7d:e0:ae:40:23:d1:ff:57:17: b0:39:e6:c6:62:8f:f4:77:2e:58:f3:f4:23:22:a4:89:83:da: 2c:5b:23:11:ea:69:0f:9a:0a:8d:c0:2f:6a:43:b5:c1:7c:66: 26:5b:a5:ee:d4:3c:e7:55:c8:dd:7a:1f:80:c2:19:ff:a0:b8: 02:69:d8:c7:ff:76:9c:da:47:5b:44:bc:b4:c0:f5:22:95:b8: 8f:60:ce:27:7b:f3:87:ec:40:d3:c2:de:42:ab:0a:72:4a:26: 00:bf:ad:f8:02:6a:9f:d8:3d:c8:aa:b0:b0:f9:de:99:97:50: a7:69:5c:e5:4f:82:dd:ab:cc:ea:ae:85:9a:e6:23:aa:df:7b: 16:c1:2c:d0:5d:b6:ca:ed:2a:bf:87:ef:52:77:b6:42:79:ea: 8f:e1:e5:78:ec:f8:c0:bf:b8:03:aa:9a:05:92:d0:9c:b0:fc: d4:5a:79:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUT/V6flqdocO4QAmm1nGvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzOThiNTc3YjIyM2I1YTc2MzUxMjE5YTc0ZmRhNDQ2NzA0 ODkwZjcwHhcNMjUxMjI1MDcwMTI0WhcNMjUxMjI2MDcwMTI0WjAzMTEwLwYDVQQD EyhhMWRhMTNkZTVmN2NjMTlkNzJkOGJmMTcwMWRkMjA0ZDEzODg1Nzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAGEynk77o03/piO7eAr9f9epLvE ewUgZNA0I3xGqRc0gE/LRVofd/3/pa2CMGzX0S6haPnOY87l+Ygpdn+1kbVtJnd7 SBDNXPjYsJNFURhWO+XOLGyABKZQMUSYl460BoxVSgkX2fjCiYhvUc9Ws9ISk1mB 8qcPcVpc+Ujb4mw0sUcC1ZFwOrgIFfew5YAamhNJVf4s4EjMDAKGizbBQPXzoYYq am67xl3czguksUErPKEZJW3MHzfvLTaRuv7MBnsBwdXGozsHuW/Q8MaseTTh1+FK LPwFlIiRvRil5Bd5AR5uyY2HeWrnAD2qf9BKfmMDkZw2jAdtaBkA3TyJlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKHaE95ffMGdcti/FwHdIE0TiFd2MB8GA1UdIwQY MBaAFEOYtXeyI7WnY1EhmnT9pEZwSJD3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTVpMWQ3SWp0YWRqVVNHYWRQMmtSbkJJa1BjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS81ODI2OTUtNjFhMS00OGU3LWI2YWMt N2JjNDUzNDBkZDI4LzEvUTVpMWQ3SWp0YWRqVVNHYWRQMmtSbkJJa1BjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS81ODI2OTUtNjFhMS00OGU3LWI2YWMtN2JjNDUzNDBkZDI4 LzEvUTVpMWQ3SWp0YWRqVVNHYWRQMmtSbkJJa1BjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfKBbzG9D 9kUf7DoYbOD8UMEhuRgEUSt7nGRLLWgAjwFmOvHQQ/sLMLc7BAfowHnu+k1aUGwG cvcj1r0of+yCgLOkjZgJiSutRlpbhPUkTSyhfeCuQCPR/1cXsDnmxmKP9HcuWPP0 IyKkiYPaLFsjEeppD5oKjcAvakO1wXxmJlul7tQ851XI3XofgMIZ/6C4AmnYx/92 nNpHW0S8tMD1IpW4j2DOJ3vzh+xA08LeQqsKckomAL+t+AJqn9g9yKqwsPnemZdQ p2lc5U+C3avM6q6FmuYjqt97FsEs0F22yu0qv4fvUne2Qnnqj+HleOz4wL+4A6qa BZLQnLD81Fp5Mw== -----END CERTIFICATE-----Generated at Thu Dec 25 14:32:53 2025 by rpki-client