This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft File: Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft (raw, json) Hash identifier: +P2F7z1d7z3m/AZBcUvkZ+UU5h0tiNHqs993K5MK/gM= Subject key identifier: 45:48:90:B5:12:3C:CE:2B:84:0B:AB:B1:F0:41:C3:C2:DE:A5:95:DA Authority key identifier: 43:91:37:BE:FE:8B:C5:59:03:69:0C:7C:46:AF:19:7C:C9:1A:70:3C Certificate issuer: /CN=439137befe8bc55903690c7c46af197cc91a703c Certificate serial: 019B3F11D3A6C9B53C2E57BF326D0840F48D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft Manifest number: 0374 Signing time: Sun 21 Dec 2025 04:01:31 +0000 Manifest this update: Sun 21 Dec 2025 04:01:31 +0000 Manifest next update: Mon 22 Dec 2025 04:01:31 +0000 Files and hashes: 1: Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl (hash: z1VpWnQ55C9LNG23lMsdzFeC0i7CAh0wb6ZnBAChuQ0=) 2: wVZ7Q_yh7vY87ipQHKXps_Y5QUU.roa (hash: F0pmi/wk6PrJmlY3U42fDKf/ChECXrlPOqHq8mmS3J0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:d3:a6:c9:b5:3c:2e:57:bf:32:6d:08:40:f4:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439137befe8bc55903690c7c46af197cc91a703c Validity Not Before: Dec 21 04:01:31 2025 GMT Not After : Dec 22 04:01:31 2025 GMT Subject: CN=454890b5123cce2b840babb1f041c3c2dea595da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8c:5b:04:6a:f0:6c:c4:10:e0:b4:ec:7c:af: 51:99:62:30:21:89:08:91:1d:7b:f4:de:a9:d7:4a: 55:cb:80:be:46:ee:aa:26:84:41:76:f2:76:9f:3b: d3:3d:a9:a9:60:dc:8d:9d:2f:f3:7d:48:7b:4d:55: be:71:2a:71:b3:4c:96:99:2a:24:ee:5a:28:83:51: 6b:88:20:d5:b6:55:a0:f0:39:db:22:b9:77:99:dc: 14:c1:f1:c9:d1:07:37:25:85:dd:56:4b:ef:62:cc: 88:86:da:2b:02:41:c6:03:21:53:29:76:92:15:59: 80:89:e1:c7:73:b6:56:33:ed:0d:61:a3:2f:70:0d: dc:73:69:84:94:c8:b4:ad:1e:22:b4:df:d8:30:2d: ea:23:27:0e:4b:77:52:80:22:ae:37:e2:e9:6e:28: e9:67:32:67:16:9c:ff:86:4d:3d:d8:bd:af:19:dd: ed:a6:9f:e4:84:fa:02:83:c5:bb:8f:b8:c6:c3:18: dc:78:5f:8b:b8:56:25:55:3f:7e:5e:69:b1:c8:ea: 79:e1:b1:18:b2:c3:e8:2c:d7:bd:75:b7:2b:4f:98: 2f:85:8c:7e:20:1c:10:93:bd:86:df:1a:ba:c2:ef: 06:df:dc:be:ce:a1:86:d3:49:ba:88:03:ba:33:b1: 1a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:48:90:B5:12:3C:CE:2B:84:0B:AB:B1:F0:41:C3:C2:DE:A5:95:DA X509v3 Authority Key Identifier: keyid:43:91:37:BE:FE:8B:C5:59:03:69:0C:7C:46:AF:19:7C:C9:1A:70:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:19:41:59:d1:be:19:41:a9:f2:ba:8d:1e:bd:bb:3b:8a:8a: 98:05:b8:69:7c:cc:a9:e5:86:63:e0:80:3a:c0:00:ac:e3:93: 4f:79:89:03:fe:67:86:c4:86:89:74:b4:5a:86:c1:38:dc:ef: 0e:bb:b4:e0:8a:3b:8f:09:45:99:ed:2e:54:ea:26:7c:96:37: 25:02:a9:2b:ca:80:98:d4:17:0d:37:4c:e4:b5:e7:39:c9:dd: 15:b0:bb:79:b2:5a:68:c2:0e:7a:e9:3f:7d:41:d7:a2:a7:fd: b3:d9:74:c3:3f:7c:77:ac:6b:57:c0:51:35:89:5d:5e:46:b7: e4:e4:19:7b:ae:92:dc:88:76:54:84:13:b8:b1:31:c1:99:21: 48:a4:10:66:0d:eb:ce:b4:16:1a:fa:eb:60:d5:e1:12:af:fe: 2d:01:b2:3d:29:f5:b6:7b:fc:5b:17:c0:b1:90:bb:90:65:35: 81:2f:3f:34:11:19:5b:a0:4f:8f:36:93:3b:00:f5:a1:83:c0: ba:ad:80:70:1b:6b:9e:fc:a2:93:d8:21:5b:c5:95:cd:d6:23: f7:4d:a1:1d:5a:b8:93:fc:da:07:11:d2:eb:0d:c1:3d:dc:30: 30:09:82:d8:e2:d8:23:d0:85:23:b2:ff:38:89:65:93:51:90: 3c:c3:69:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EdOmybU8Lle/Mm0IQPSNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzOTEzN2JlZmU4YmM1NTkwMzY5MGM3YzQ2YWYxOTdjYzkx YTcwM2MwHhcNMjUxMjIxMDQwMTMxWhcNMjUxMjIyMDQwMTMxWjAzMTEwLwYDVQQD Eyg0NTQ4OTBiNTEyM2NjZTJiODQwYmFiYjFmMDQxYzNjMmRlYTU5NWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIxbBGrwbMQQ4LTsfK9RmWIwIYkI kR179N6p10pVy4C+Ru6qJoRBdvJ2nzvTPampYNyNnS/zfUh7TVW+cSpxs0yWmSok 7loog1FriCDVtlWg8DnbIrl3mdwUwfHJ0Qc3JYXdVkvvYsyIhtorAkHGAyFTKXaS FVmAieHHc7ZWM+0NYaMvcA3cc2mElMi0rR4itN/YMC3qIycOS3dSgCKuN+Lpbijp ZzJnFpz/hk092L2vGd3tpp/khPoCg8W7j7jGwxjceF+LuFYlVT9+XmmxyOp54bEY ssPoLNe9dbcrT5gvhYx+IBwQk72G3xq6wu8G39y+zqGG00m6iAO6M7EabQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEVIkLUSPM4rhAursfBBw8LepZXaMB8GA1UdIwQY MBaAFEORN77+i8VZA2kMfEavGXzJGnA8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTVFM3Z2Nkx4VmtEYVF4OFJxOFpmTWthY0R3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy81YWMyMmQtOWU4Zi00NDlkLTgzMDQt MGY1MmQ4MjhmZDRmLzEvUTVFM3Z2Nkx4VmtEYVF4OFJxOFpmTWthY0R3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy81YWMyMmQtOWU4Zi00NDlkLTgzMDQtMGY1MmQ4MjhmZDRm LzEvUTVFM3Z2Nkx4VmtEYVF4OFJxOFpmTWthY0R3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHxlBWdG+ GUGp8rqNHr27O4qKmAW4aXzMqeWGY+CAOsAArOOTT3mJA/5nhsSGiXS0WobBONzv Dru04Io7jwlFme0uVOomfJY3JQKpK8qAmNQXDTdM5LXnOcndFbC7ebJaaMIOeuk/ fUHXoqf9s9l0wz98d6xrV8BRNYldXka35OQZe66S3Ih2VIQTuLExwZkhSKQQZg3r zrQWGvrrYNXhEq/+LQGyPSn1tnv8WxfAsZC7kGU1gS8/NBEZW6BPjzaTOwD1oYPA uq2AcBtrnvyik9ghW8WVzdYj902hHVq4k/zaBxHS6w3BPdwwMAmC2OLYI9CFI7L/ OIllk1GQPMNpqw== -----END CERTIFICATE-----Generated at Sun Dec 21 10:02:43 2025 by rpki-client