This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/V-cs5_jElCNaCEgjlluQRwS8gkA.mft File: V-cs5_jElCNaCEgjlluQRwS8gkA.mft (raw, json) Hash identifier: /mHJKOCAGGvMc0/Kc65I57N8QvooHcwTA5RUvi1K6Qo= Subject key identifier: 86:DF:43:BE:60:FB:07:41:A4:A3:FD:3C:64:B0:0F:3D:C4:EA:A5:32 Authority key identifier: 57:E7:2C:E7:F8:C4:94:23:5A:08:48:23:96:5B:90:47:04:BC:82:40 Certificate issuer: /CN=57e72ce7f8c494235a084823965b904704bc8240 Certificate serial: 019B38D80B6818AE26064DE7CE1A72AB2777 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V-cs5_jElCNaCEgjlluQRwS8gkA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/V-cs5_jElCNaCEgjlluQRwS8gkA.mft Manifest number: 03E9 Signing time: Fri 19 Dec 2025 23:00:41 +0000 Manifest this update: Fri 19 Dec 2025 23:00:41 +0000 Manifest next update: Sat 20 Dec 2025 23:00:41 +0000 Files and hashes: 1: V-cs5_jElCNaCEgjlluQRwS8gkA.crl (hash: QASlPwwEp7NrfiO70y2RLGQG9JWxKwUS0IjZXiTgWuc=) 2: nosSlJwBAj_YBNjkT9avrBuc-tE.roa (hash: TuuhoWGeRJQwFAhBMUAaCZIEFTM7M38j/+BjxywcK08=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/V-cs5_jElCNaCEgjlluQRwS8gkA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/V-cs5_jElCNaCEgjlluQRwS8gkA.mft rsync://rpki.ripe.net/repository/DEFAULT/V-cs5_jElCNaCEgjlluQRwS8gkA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:0b:68:18:ae:26:06:4d:e7:ce:1a:72:ab:27:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57e72ce7f8c494235a084823965b904704bc8240 Validity Not Before: Dec 19 23:00:41 2025 GMT Not After : Dec 20 23:00:41 2025 GMT Subject: CN=86df43be60fb0741a4a3fd3c64b00f3dc4eaa532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d7:dd:54:f6:d2:ce:f5:77:c2:ee:82:8a:3e: 12:bd:db:8a:80:fa:9f:10:ce:81:61:21:ad:bd:e4: e0:dc:6a:3e:9c:5a:d0:e7:72:32:f8:8d:49:1b:7f: a3:d9:e6:b7:6b:e8:ba:dc:2c:30:bc:6b:32:24:b0: 3a:9b:e3:3c:2b:a7:79:c3:ae:a7:e5:72:16:eb:7a: 0c:fb:5d:16:b4:d9:18:54:10:d0:00:72:7a:fd:fa: 18:d7:66:54:a0:81:61:5c:bd:ac:c7:b3:50:09:b4: 95:ea:72:50:ce:7a:3a:6c:b3:3a:0a:fb:06:fc:54: 1c:5e:a2:c7:5c:c2:bc:08:2e:a6:a8:b9:84:08:09: a3:81:62:9d:50:3c:ad:3b:c0:5f:41:a4:f5:8a:62: c5:2f:cb:4e:dd:f1:b6:e0:b1:0a:2c:72:02:16:a2: e2:a0:bb:30:ef:ec:02:10:d1:32:d6:6c:29:82:1c: 15:ea:1b:bd:76:2a:cc:5d:96:82:cf:62:b2:d3:d5: ce:c3:7f:37:11:e3:8f:c2:50:82:83:f9:49:b2:54: 13:03:24:f9:bc:ea:76:66:3e:78:3e:d9:d1:00:44: 66:9a:53:4c:2a:08:c5:ef:17:2c:82:ea:d0:ec:30: 2f:f2:08:f3:84:7f:ed:58:2d:b0:27:f6:f1:55:74: be:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:DF:43:BE:60:FB:07:41:A4:A3:FD:3C:64:B0:0F:3D:C4:EA:A5:32 X509v3 Authority Key Identifier: keyid:57:E7:2C:E7:F8:C4:94:23:5A:08:48:23:96:5B:90:47:04:BC:82:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-cs5_jElCNaCEgjlluQRwS8gkA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/V-cs5_jElCNaCEgjlluQRwS8gkA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/V-cs5_jElCNaCEgjlluQRwS8gkA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:b6:e0:f7:a8:ab:71:db:cf:1f:31:c9:0d:97:92:ad:0f:7d: 5b:5e:18:04:f4:bd:19:36:56:c9:5c:a5:f5:21:19:da:24:9c: 17:8f:eb:18:26:b2:69:fd:53:36:94:cb:d9:53:16:6a:62:3a: 28:fa:bb:7f:c0:6f:69:d6:06:59:2f:02:17:a2:6e:2c:c1:22: 18:d5:be:d6:41:1a:9e:89:a4:d5:53:95:57:70:7d:a0:7f:58: fc:8b:4f:b1:ad:95:42:cb:c7:49:52:97:30:fc:a2:6f:d5:18: fc:3d:1b:2c:41:c2:22:10:de:da:14:23:77:76:b4:85:56:66: bf:69:07:20:09:2b:12:2e:14:e8:d9:9b:f5:84:88:13:26:6e: cb:ae:d1:ba:c0:85:15:f0:fc:7b:27:2e:56:74:b8:ca:70:74: 47:cc:21:a1:8b:66:9f:9a:56:02:9e:2b:db:cd:cd:02:9b:d9: ae:49:66:ea:be:c8:01:a2:e8:b1:7b:11:1d:28:f5:f1:bc:8e: 92:a6:06:62:57:0e:55:1d:bb:36:9b:e8:5f:76:48:16:f7:09: f9:58:5a:54:2a:06:47:c2:34:d2:9a:a2:b7:d3:33:4f:53:c5: 80:01:73:d8:a4:e9:e4:4a:50:b9:11:a8:f8:10:11:ac:e1:0d: b0:c4:5f:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42AtoGK4mBk3nzhpyqyd3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3ZTcyY2U3ZjhjNDk0MjM1YTA4NDgyMzk2NWI5MDQ3MDRi YzgyNDAwHhcNMjUxMjE5MjMwMDQxWhcNMjUxMjIwMjMwMDQxWjAzMTEwLwYDVQQD Eyg4NmRmNDNiZTYwZmIwNzQxYTRhM2ZkM2M2NGIwMGYzZGM0ZWFhNTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5dfdVPbSzvV3wu6Cij4SvduKgPqf EM6BYSGtveTg3Go+nFrQ53Iy+I1JG3+j2ea3a+i63CwwvGsyJLA6m+M8K6d5w66n 5XIW63oM+10WtNkYVBDQAHJ6/foY12ZUoIFhXL2sx7NQCbSV6nJQzno6bLM6CvsG /FQcXqLHXMK8CC6mqLmECAmjgWKdUDytO8BfQaT1imLFL8tO3fG24LEKLHICFqLi oLsw7+wCENEy1mwpghwV6hu9dirMXZaCz2Ky09XOw383EeOPwlCCg/lJslQTAyT5 vOp2Zj54PtnRAERmmlNMKgjF7xcsgurQ7DAv8gjzhH/tWC2wJ/bxVXS+vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIbfQ75g+wdBpKP9PGSwDz3E6qUyMB8GA1UdIwQY MBaAFFfnLOf4xJQjWghII5ZbkEcEvIJAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVi1jczVfakVsQ05hQ0VnamxsdVFSd1M4Z2tBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9kYTJhYjEtNGI1My00OTlmLThkZGQt MmEwZjg3NDNjMmMyLzEvVi1jczVfakVsQ05hQ0VnamxsdVFSd1M4Z2tBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9kYTJhYjEtNGI1My00OTlmLThkZGQtMmEwZjg3NDNjMmMy LzEvVi1jczVfakVsQ05hQ0VnamxsdVFSd1M4Z2tBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAErbg96ir cdvPHzHJDZeSrQ99W14YBPS9GTZWyVyl9SEZ2iScF4/rGCayaf1TNpTL2VMWamI6 KPq7f8BvadYGWS8CF6JuLMEiGNW+1kEanomk1VOVV3B9oH9Y/ItPsa2VQsvHSVKX MPyib9UY/D0bLEHCIhDe2hQjd3a0hVZmv2kHIAkrEi4U6Nmb9YSIEyZuy67RusCF FfD8eycuVnS4ynB0R8whoYtmn5pWAp4r283NApvZrklm6r7IAaLosXsRHSj18byO kqYGYlcOVR27NpvoX3ZIFvcJ+VhaVCoGR8I00pqit9MzT1PFgAFz2KTp5EpQuRGo +BARrOENsMRfHA== -----END CERTIFICATE-----Generated at Sat Dec 20 00:53:55 2025 by rpki-client