This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft File: 5_4i9VHpWw8VAzxQNVLkm8phfGo.mft (raw, json) Hash identifier: a3hxS8+kHw6DXTQ8uSSgb/p59YXG92YwPAqI2pw6WJc= Subject key identifier: 58:10:CD:EC:04:E8:0D:BA:41:48:60:3F:CD:B2:7B:13:85:C0:09:02 Authority key identifier: E7:FE:22:F5:51:E9:5B:0F:15:03:3C:50:35:52:E4:9B:CA:61:7C:6A Certificate issuer: /CN=e7fe22f551e95b0f15033c503552e49bca617c6a Certificate serial: 019B4091DE7E35DECB956107D6C03549ED55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft Manifest number: 03F3 Signing time: Sun 21 Dec 2025 11:00:59 +0000 Manifest this update: Sun 21 Dec 2025 11:00:59 +0000 Manifest next update: Mon 22 Dec 2025 11:00:59 +0000 Files and hashes: 1: 5_4i9VHpWw8VAzxQNVLkm8phfGo.crl (hash: M7UmuiDxPf8agfSCm+KaNx6rbXZOGnr9o4K9tesZm3Q=) 2: THghgq3_4L1NVnK6KOFYexQq5SI.roa (hash: /zrwFkLWh9pajQgZXuExr20G8aRLgJD9APPdVLa4mp8=) 3: teYc1cFeqUuzMd-dJeyJRJ9jp-k.roa (hash: SD6wWRBAQPvJFZ63a4Ws+sFA/hBOJ/3xD8PJ20JClwo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.crl rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:de:7e:35:de:cb:95:61:07:d6:c0:35:49:ed:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7fe22f551e95b0f15033c503552e49bca617c6a Validity Not Before: Dec 21 11:00:59 2025 GMT Not After : Dec 22 11:00:59 2025 GMT Subject: CN=5810cdec04e80dba4148603fcdb27b1385c00902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4d:3d:27:b7:99:7d:ed:3e:e1:4c:fd:4a:50: 3f:bf:78:08:0e:01:39:4d:40:77:11:2c:04:a7:60: c5:77:5a:5b:d1:9e:a9:be:48:ac:70:70:52:91:a0: 64:9e:b6:95:1d:67:1b:f8:6f:e4:71:fb:48:a7:90: 31:d7:57:f4:87:a6:71:c8:a3:44:d6:bd:50:a9:ee: 51:b6:28:6e:a2:fc:0b:6f:7c:96:38:a3:f8:bc:7b: f4:dc:da:b3:90:c6:05:db:22:6b:99:e8:7b:e1:19: 07:c8:84:07:2a:32:69:05:ae:e0:c1:83:f3:68:df: 44:68:d1:0b:23:66:a9:a3:ed:f7:07:a5:76:1e:34: 5f:5d:1a:b1:70:e7:b7:a6:d8:04:71:e4:34:50:fe: 71:35:04:de:e7:e5:be:1d:e7:9a:35:5d:8e:bd:bf: b1:6b:8c:d4:31:56:ec:8d:48:e0:07:7f:da:e5:00: e2:e2:a1:a2:e2:31:f5:c6:f7:51:af:7b:f0:57:6c: c9:82:52:be:cd:23:34:2c:2c:b2:7e:be:0a:26:ec: a9:00:87:77:6a:c2:b7:6d:74:74:e8:96:fe:7a:14: 72:ae:b9:87:4a:ec:0e:ea:99:06:60:0b:c6:9f:61: b0:68:da:97:e1:54:aa:28:fc:3d:76:3f:83:07:39: a0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:10:CD:EC:04:E8:0D:BA:41:48:60:3F:CD:B2:7B:13:85:C0:09:02 X509v3 Authority Key Identifier: keyid:E7:FE:22:F5:51:E9:5B:0F:15:03:3C:50:35:52:E4:9B:CA:61:7C:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:da:d1:0d:62:a7:d9:2f:ec:7e:50:a8:f2:61:f5:46:be:e9: 6c:f5:a2:3e:a7:64:59:ed:2c:60:91:e4:d5:e3:83:98:64:93: 78:4b:06:3f:49:ba:4b:0f:f7:84:ec:ee:56:83:ff:4d:b7:fc: 87:9e:b4:0e:73:3e:37:71:c1:ca:3f:3f:ca:94:6e:d7:7e:03: 6b:0e:4f:b7:7c:b2:00:97:c7:31:1a:4a:8b:43:16:cd:26:c2: de:e8:c7:9d:d1:c0:0f:29:7f:2d:7a:ba:36:c3:f2:0f:21:36: 8d:24:45:17:24:ea:b0:44:cf:c0:53:9c:a1:58:c7:82:6b:32: e7:66:31:00:b1:34:e7:bc:f9:af:90:e9:39:b3:cd:27:68:f2: ff:dd:9e:6b:1a:3b:49:35:46:67:e2:cc:28:d8:65:e1:2c:04: cf:7c:cb:2b:60:e9:51:93:a7:34:5e:5c:dd:d6:60:12:11:dc: 9e:1c:36:c8:22:5b:9d:7b:92:b6:47:59:46:f6:7c:b2:14:dc: a9:39:07:07:0c:12:2b:fd:b0:7a:a6:0d:fb:d5:c2:7e:60:8f: 4f:30:7a:fe:91:f0:17:4d:02:21:fb:8a:92:42:77:e7:41:49: ea:c1:87:2a:53:90:a8:a5:6d:19:5d:a8:fa:76:d0:bb:6a:95: cb:93:c1:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkd5+Nd7LlWEH1sA1Se1VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3ZmUyMmY1NTFlOTViMGYxNTAzM2M1MDM1NTJlNDliY2E2 MTdjNmEwHhcNMjUxMjIxMTEwMDU5WhcNMjUxMjIyMTEwMDU5WjAzMTEwLwYDVQQD Eyg1ODEwY2RlYzA0ZTgwZGJhNDE0ODYwM2ZjZGIyN2IxMzg1YzAwOTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnE09J7eZfe0+4Uz9SlA/v3gIDgE5 TUB3ESwEp2DFd1pb0Z6pvkiscHBSkaBknraVHWcb+G/kcftIp5Ax11f0h6ZxyKNE 1r1Qqe5RtihuovwLb3yWOKP4vHv03NqzkMYF2yJrmeh74RkHyIQHKjJpBa7gwYPz aN9EaNELI2apo+33B6V2HjRfXRqxcOe3ptgEceQ0UP5xNQTe5+W+HeeaNV2Ovb+x a4zUMVbsjUjgB3/a5QDi4qGi4jH1xvdRr3vwV2zJglK+zSM0LCyyfr4KJuypAId3 asK3bXR06Jb+ehRyrrmHSuwO6pkGYAvGn2GwaNqX4VSqKPw9dj+DBzmgKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFgQzewE6A26QUhgP82yexOFwAkCMB8GA1UdIwQY MBaAFOf+IvVR6VsPFQM8UDVS5JvKYXxqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNV80aTlWSHBXdzhWQXp4UU5WTGttOHBoZkdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9kNjEyZTMtOTRlYi00ODY2LWI0M2Mt ZTQwYjMwMTQwMWE5LzEvNV80aTlWSHBXdzhWQXp4UU5WTGttOHBoZkdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9kNjEyZTMtOTRlYi00ODY2LWI0M2MtZTQwYjMwMTQwMWE5 LzEvNV80aTlWSHBXdzhWQXp4UU5WTGttOHBoZkdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGdrRDWKn 2S/sflCo8mH1Rr7pbPWiPqdkWe0sYJHk1eODmGSTeEsGP0m6Sw/3hOzuVoP/Tbf8 h560DnM+N3HByj8/ypRu134Daw5Pt3yyAJfHMRpKi0MWzSbC3ujHndHADyl/LXq6 NsPyDyE2jSRFFyTqsETPwFOcoVjHgmsy52YxALE057z5r5DpObPNJ2jy/92eaxo7 STVGZ+LMKNhl4SwEz3zLK2DpUZOnNF5c3dZgEhHcnhw2yCJbnXuStkdZRvZ8shTc qTkHBwwSK/2weqYN+9XCfmCPTzB6/pHwF00CIfuKkkJ350FJ6sGHKlOQqKVtGV2o +nbQu2qVy5PBZg== -----END CERTIFICATE-----Generated at Sun Dec 21 15:24:40 2025 by rpki-client