This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.mft File: 5BeYo-5J1SPojhrRA-Y-Eh2E0bU.mft (raw, json) Hash identifier: yJV4K3OtHRoWQW3SKEAUjRwTcYgmKfoURdBHlZuzDWc= Subject key identifier: 5F:B3:60:1C:B4:8A:CC:B8:85:2F:1F:BF:5F:1D:82:FB:6F:23:55:34 Authority key identifier: E4:17:98:A3:EE:49:D5:23:E8:8E:1A:D1:03:E6:3E:12:1D:84:D1:B5 Certificate issuer: /CN=e41798a3ee49d523e88e1ad103e63e121d84d1b5 Certificate serial: 019B51BDA09A681F624EDABBF2932C772D59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.mft Manifest number: 0E8A Signing time: Wed 24 Dec 2025 19:02:20 +0000 Manifest this update: Wed 24 Dec 2025 19:02:20 +0000 Manifest next update: Thu 25 Dec 2025 19:02:20 +0000 Files and hashes: 1: 5BeYo-5J1SPojhrRA-Y-Eh2E0bU.crl (hash: vRVB1uArhZE6brMdqG2+GzkEEskPVTSigifPTpNpctw=) 2: ojpo3C_o4XkLEMUun-AN5dsCn0c.roa (hash: KD+YKxAdab+/MSSFUGcDgdX/M8ezVTZqmPoRZBNH630=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.crl rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.mft rsync://rpki.ripe.net/repository/DEFAULT/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 19:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bd:a0:9a:68:1f:62:4e:da:bb:f2:93:2c:77:2d:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e41798a3ee49d523e88e1ad103e63e121d84d1b5 Validity Not Before: Dec 24 19:02:20 2025 GMT Not After : Dec 25 19:02:20 2025 GMT Subject: CN=5fb3601cb48accb8852f1fbf5f1d82fb6f235534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6e:eb:99:b8:9f:99:4a:8d:5f:dd:31:6a:09: 30:a7:cf:38:3d:7b:f5:d5:df:98:67:f9:b2:87:9b: 76:85:bd:6a:37:e5:89:dd:4c:c9:ea:04:50:4d:0b: 71:95:c5:09:cf:02:55:9b:75:fe:b7:53:da:95:6b: 17:10:47:af:e3:f5:b4:50:d6:d0:c4:31:f1:58:d6: 25:da:b7:32:b1:9c:78:8e:d5:d2:67:db:bf:37:2c: e9:98:f4:1d:c0:7a:c1:ab:eb:1d:6c:3e:74:c5:41: 2b:ef:8a:df:18:0c:53:86:49:88:27:5f:78:a9:0a: 2a:6a:83:3a:03:e9:68:83:98:7e:d4:b4:96:a5:90: d1:cd:b1:ed:ad:b6:7c:8c:f5:13:52:ab:02:94:06: 7c:56:82:29:a9:cf:79:0f:33:5d:8b:cc:a7:d6:2c: 59:0d:c1:af:22:3e:97:02:b0:15:7a:23:1c:9b:a1: 9e:15:0a:89:27:50:3d:1b:d5:c2:47:67:70:78:59: 3d:c8:17:e4:bf:8c:e6:b0:77:64:8c:ae:65:66:fb: 41:ae:73:a7:14:b6:8f:79:c4:46:58:bb:26:99:95: 7f:b3:37:ca:2e:72:7b:68:77:07:15:e6:18:d8:d9: 53:0f:8c:91:2c:69:5f:c4:cd:da:c0:fc:fe:36:2e: 30:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:B3:60:1C:B4:8A:CC:B8:85:2F:1F:BF:5F:1D:82:FB:6F:23:55:34 X509v3 Authority Key Identifier: keyid:E4:17:98:A3:EE:49:D5:23:E8:8E:1A:D1:03:E6:3E:12:1D:84:D1:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:d4:a7:ac:ed:28:f9:0c:7c:ee:59:3e:bd:e3:54:8a:91:49: 1f:d1:5b:cd:de:4d:ec:dc:01:79:0b:24:af:a6:78:98:db:2e: 00:1d:df:7e:0c:0e:34:61:49:b3:e0:8e:51:94:8d:2a:dc:63: 9f:34:af:81:02:2c:b8:59:76:d0:e0:76:5a:cb:8f:4d:14:b4: 97:0b:27:30:e6:9c:0b:9c:30:de:c1:5d:d2:b5:6c:63:1d:bc: 43:6d:c3:25:d1:d6:81:3a:99:83:9d:cd:e9:ee:73:d0:43:48: 49:61:a9:4c:13:58:0d:92:b9:f6:51:04:4c:57:69:34:37:87: ae:0f:81:b6:18:1e:d2:32:e3:b2:9d:cd:5c:37:48:66:d7:0e: 62:a6:3a:ae:ce:92:bb:a2:e4:9f:a5:41:68:98:6f:9c:bf:ed: 2b:b4:3a:14:67:f2:69:4b:46:45:ce:72:a3:d9:bc:41:49:2c: 00:32:c2:c1:4f:20:0c:18:aa:cf:46:5d:2c:9a:c1:32:7f:15: 3c:54:aa:ed:da:f5:d6:cd:2c:12:3f:94:26:ee:5b:be:90:20: a0:aa:1f:04:c4:6d:e6:0f:01:fd:2e:4c:f7:1b:d5:3d:1c:6d: ce:bd:42:ae:26:75:f7:6b:fc:cf:6a:ff:41:2f:00:db:b5:3c: e2:be:79:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvaCaaB9iTtq78pMsdy1ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0MTc5OGEzZWU0OWQ1MjNlODhlMWFkMTAzZTYzZTEyMWQ4 NGQxYjUwHhcNMjUxMjI0MTkwMjIwWhcNMjUxMjI1MTkwMjIwWjAzMTEwLwYDVQQD Eyg1ZmIzNjAxY2I0OGFjY2I4ODUyZjFmYmY1ZjFkODJmYjZmMjM1NTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz27rmbifmUqNX90xagkwp884PXv1 1d+YZ/myh5t2hb1qN+WJ3UzJ6gRQTQtxlcUJzwJVm3X+t1PalWsXEEev4/W0UNbQ xDHxWNYl2rcysZx4jtXSZ9u/NyzpmPQdwHrBq+sdbD50xUEr74rfGAxThkmIJ194 qQoqaoM6A+log5h+1LSWpZDRzbHtrbZ8jPUTUqsClAZ8VoIpqc95DzNdi8yn1ixZ DcGvIj6XArAVeiMcm6GeFQqJJ1A9G9XCR2dweFk9yBfkv4zmsHdkjK5lZvtBrnOn FLaPecRGWLsmmZV/szfKLnJ7aHcHFeYY2NlTD4yRLGlfxM3awPz+Ni4w2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF+zYBy0isy4hS8fv18dgvtvI1U0MB8GA1UdIwQY MBaAFOQXmKPuSdUj6I4a0QPmPhIdhNG1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUJlWW8tNUoxU1BvamhyUkEtWS1FaDJFMGJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8xY2E0NjktMjA4Ni00YzRjLWEwYjgt OGQwODU3YTFhNGQ3LzEvNUJlWW8tNUoxU1BvamhyUkEtWS1FaDJFMGJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC8xY2E0NjktMjA4Ni00YzRjLWEwYjgtOGQwODU3YTFhNGQ3 LzEvNUJlWW8tNUoxU1BvamhyUkEtWS1FaDJFMGJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAodSnrO0o +Qx87lk+veNUipFJH9Fbzd5N7NwBeQskr6Z4mNsuAB3ffgwONGFJs+COUZSNKtxj nzSvgQIsuFl20OB2WsuPTRS0lwsnMOacC5ww3sFd0rVsYx28Q23DJdHWgTqZg53N 6e5z0ENISWGpTBNYDZK59lEETFdpNDeHrg+Bthge0jLjsp3NXDdIZtcOYqY6rs6S u6Lkn6VBaJhvnL/tK7Q6FGfyaUtGRc5yo9m8QUksADLCwU8gDBiqz0ZdLJrBMn8V PFSq7dr11s0sEj+UJu5bvpAgoKofBMRt5g8B/S5M9xvVPRxtzr1CriZ192v8z2r/ QS8A27U84r55Ww== -----END CERTIFICATE-----Generated at Thu Dec 25 05:14:30 2025 by rpki-client