This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.mft File: Q5p_k_yoCMgtJvv-D94bloz26NM.mft (raw, json) Hash identifier: 83u1AZVkKJ1CUQsH9hseZK6HBRNO2/T8MtlG2y4BzH4= Subject key identifier: 66:29:62:24:CA:F5:0D:F9:74:C3:27:7A:BF:A4:EE:4C:A8:E9:80:33 Authority key identifier: 43:9A:7F:93:FC:A8:08:C8:2D:26:FB:FE:0F:DE:1B:96:8C:F6:E8:D3 Certificate issuer: /CN=439a7f93fca808c82d26fbfe0fde1b968cf6e8d3 Certificate serial: 019B53E1B5096DA5AB467F2D8775C4168F5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5p_k_yoCMgtJvv-D94bloz26NM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.mft Manifest number: 09B4 Signing time: Thu 25 Dec 2025 05:00:59 +0000 Manifest this update: Thu 25 Dec 2025 05:00:59 +0000 Manifest next update: Fri 26 Dec 2025 05:00:59 +0000 Files and hashes: 1: O9UxuLNdjVpPMRVJ8_xamVbi3ck.roa (hash: w7PnuXi3vgOvtTP6oScaXCDqYyS0FwVpkDFtt58ndZ4=) 2: Q5p_k_yoCMgtJvv-D94bloz26NM.crl (hash: lJ0eSOYZ96ml2BCfL9WwXxD8sBBImY5zNqHsYxXOgQw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.mft rsync://rpki.ripe.net/repository/DEFAULT/Q5p_k_yoCMgtJvv-D94bloz26NM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:e1:b5:09:6d:a5:ab:46:7f:2d:87:75:c4:16:8f:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439a7f93fca808c82d26fbfe0fde1b968cf6e8d3 Validity Not Before: Dec 25 05:00:59 2025 GMT Not After : Dec 26 05:00:59 2025 GMT Subject: CN=66296224caf50df974c3277abfa4ee4ca8e98033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5d:c0:e4:d5:bf:d1:13:07:82:02:4b:33:70: db:fe:1c:cb:55:7a:bb:61:b5:06:a4:3d:05:3b:e9: f6:c3:88:9a:64:af:1a:25:a8:5c:ef:8d:f1:cf:7c: 6a:45:bd:ae:c7:f6:22:76:90:95:d1:bc:21:35:b4: c3:1a:17:fc:47:4c:41:05:d6:60:d6:18:c3:45:9f: 63:04:a7:3f:2b:e0:99:f0:55:0b:4f:da:9d:62:15: 90:4a:f3:b1:60:ad:53:4a:da:d0:f6:4e:90:03:d1: 18:63:e4:b4:19:df:9b:5d:b1:49:26:f9:85:ff:08: 03:54:e1:ce:13:a9:8b:bf:1e:cf:36:79:a2:f1:5b: 67:68:3e:33:83:e2:82:ab:5a:c1:a7:f3:25:67:b1: b3:39:11:9c:b0:cd:9d:14:8e:bd:95:1a:00:80:4d: 27:68:d6:53:39:8a:de:eb:61:0d:a7:da:7f:57:4e: 50:86:c2:67:7a:12:8b:8d:1b:d2:45:b7:d1:a9:97: 2e:39:5c:50:05:20:2b:1f:63:7a:73:38:40:d8:e8: f4:e5:04:03:d0:8b:3e:60:e3:d1:9f:0a:91:23:82: 9f:13:9e:11:3d:24:1a:9c:f1:da:2e:03:91:85:95: a3:7d:da:c8:fb:e9:a1:41:eb:9b:4b:a1:84:c2:bf: f7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:29:62:24:CA:F5:0D:F9:74:C3:27:7A:BF:A4:EE:4C:A8:E9:80:33 X509v3 Authority Key Identifier: keyid:43:9A:7F:93:FC:A8:08:C8:2D:26:FB:FE:0F:DE:1B:96:8C:F6:E8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5p_k_yoCMgtJvv-D94bloz26NM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:9a:94:7c:17:31:89:cc:76:8b:ee:ff:da:0e:94:33:5e:c1: ef:9c:69:6f:1e:e2:dc:af:2e:d6:68:a1:0f:05:f9:0c:71:88: 3a:64:b7:4a:66:44:29:1b:97:32:84:81:44:81:32:c0:f2:13: 02:4c:c0:08:39:95:27:33:97:43:39:ef:4c:d4:2b:7f:11:3b: b0:ad:e1:db:d0:88:ac:bb:08:41:96:a4:e2:58:2e:78:4d:9f: 13:f2:16:6a:29:ee:05:e2:84:04:f0:83:03:af:d1:5b:77:40: 57:1b:df:5a:1d:aa:f1:aa:0d:18:45:99:40:1d:fe:c1:21:48: 2b:24:8e:87:bc:ad:d5:e8:8d:c9:f0:af:41:c3:01:bc:97:7b: 20:40:a1:be:7a:95:89:db:9a:1d:fd:05:1d:f6:aa:cd:05:1c: fd:67:8f:c7:d4:60:3b:75:b5:fb:a1:b7:c0:98:7a:85:88:cb: f4:1b:a6:a8:47:3b:aa:e8:67:9a:4b:8c:5b:53:88:fc:1e:44: c2:e7:cf:7f:32:33:0d:f7:f1:ec:7c:bd:3a:0e:8e:18:f4:d0: 60:6a:94:78:ba:d8:c3:17:e9:02:53:a7:09:8b:aa:c4:96:7d: 88:1a:f9:71:29:b7:81:f3:74:37:91:69:d9:92:b7:e9:0f:4d: 32:85:ff:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtT4bUJbaWrRn8th3XEFo9fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzOWE3ZjkzZmNhODA4YzgyZDI2ZmJmZTBmZGUxYjk2OGNm NmU4ZDMwHhcNMjUxMjI1MDUwMDU5WhcNMjUxMjI2MDUwMDU5WjAzMTEwLwYDVQQD Eyg2NjI5NjIyNGNhZjUwZGY5NzRjMzI3N2FiZmE0ZWU0Y2E4ZTk4MDMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs13A5NW/0RMHggJLM3Db/hzLVXq7 YbUGpD0FO+n2w4iaZK8aJahc743xz3xqRb2ux/YidpCV0bwhNbTDGhf8R0xBBdZg 1hjDRZ9jBKc/K+CZ8FULT9qdYhWQSvOxYK1TStrQ9k6QA9EYY+S0Gd+bXbFJJvmF /wgDVOHOE6mLvx7PNnmi8VtnaD4zg+KCq1rBp/MlZ7GzORGcsM2dFI69lRoAgE0n aNZTOYre62ENp9p/V05QhsJnehKLjRvSRbfRqZcuOVxQBSArH2N6czhA2Oj05QQD 0Is+YOPRnwqRI4KfE54RPSQanPHaLgORhZWjfdrI++mhQeubS6GEwr/3iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGYpYiTK9Q35dMMner+k7kyo6YAzMB8GA1UdIwQY MBaAFEOaf5P8qAjILSb7/g/eG5aM9ujTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTVwX2tfeW9DTWd0SnZ2LUQ5NGJsb3oyNk5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy84ZjlmMzItYzFkNS00ZmE2LWIwMTMt OTI5N2I4NTVmYTcyLzEvUTVwX2tfeW9DTWd0SnZ2LUQ5NGJsb3oyNk5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy84ZjlmMzItYzFkNS00ZmE2LWIwMTMtOTI5N2I4NTVmYTcy LzEvUTVwX2tfeW9DTWd0SnZ2LUQ5NGJsb3oyNk5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm5qUfBcx icx2i+7/2g6UM17B75xpbx7i3K8u1mihDwX5DHGIOmS3SmZEKRuXMoSBRIEywPIT AkzACDmVJzOXQznvTNQrfxE7sK3h29CIrLsIQZak4lgueE2fE/IWainuBeKEBPCD A6/RW3dAVxvfWh2q8aoNGEWZQB3+wSFIKySOh7yt1eiNyfCvQcMBvJd7IEChvnqV iduaHf0FHfaqzQUc/WePx9RgO3W1+6G3wJh6hYjL9BumqEc7quhnmkuMW1OI/B5E wufPfzIzDffx7Hy9Og6OGPTQYGqUeLrYwxfpAlOnCYuqxJZ9iBr5cSm3gfN0N5Fp 2ZK36Q9NMoX/5Q== -----END CERTIFICATE-----Generated at Thu Dec 25 07:06:32 2025 by rpki-client