This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft File: 5_4i9VHpWw8VAzxQNVLkm8phfGo.mft (raw, json) Hash identifier: s+FrC61hrqRLcESvLgpxeasNTluzP38ZON4CiU+1jgU= Subject key identifier: 1D:91:44:B5:F4:EF:C8:53:CF:B7:34:72:DB:95:43:65:4D:77:F4:11 Authority key identifier: E7:FE:22:F5:51:E9:5B:0F:15:03:3C:50:35:52:E4:9B:CA:61:7C:6A Certificate issuer: /CN=e7fe22f551e95b0f15033c503552e49bca617c6a Certificate serial: 019B5D89708EC2177A4488C5395D34169F7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft Manifest number: 0402 Signing time: Sat 27 Dec 2025 02:00:46 +0000 Manifest this update: Sat 27 Dec 2025 02:00:46 +0000 Manifest next update: Sun 28 Dec 2025 02:00:46 +0000 Files and hashes: 1: 5_4i9VHpWw8VAzxQNVLkm8phfGo.crl (hash: khM3wJFd4KCckNfeDkwB2STvXb3ym2ynLUgwrc4ZFTk=) 2: THghgq3_4L1NVnK6KOFYexQq5SI.roa (hash: /zrwFkLWh9pajQgZXuExr20G8aRLgJD9APPdVLa4mp8=) 3: teYc1cFeqUuzMd-dJeyJRJ9jp-k.roa (hash: SD6wWRBAQPvJFZ63a4Ws+sFA/hBOJ/3xD8PJ20JClwo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.crl rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:89:70:8e:c2:17:7a:44:88:c5:39:5d:34:16:9f:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7fe22f551e95b0f15033c503552e49bca617c6a Validity Not Before: Dec 27 02:00:46 2025 GMT Not After : Dec 28 02:00:46 2025 GMT Subject: CN=1d9144b5f4efc853cfb73472db9543654d77f411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:93:03:35:65:e6:37:55:21:5b:6f:2b:cc:27: 00:83:63:df:31:2c:9e:e2:1d:a9:03:0a:8e:5b:c3: 1c:a5:45:50:42:49:e9:59:02:89:26:5d:9b:ba:6a: d6:92:24:07:17:5c:56:b6:c9:ee:a1:14:5e:26:43: 33:9a:df:b7:7a:df:05:03:22:5f:10:89:c4:5b:6c: f2:62:84:b8:8d:7d:76:89:c0:d3:71:ab:cb:78:25: ba:a8:78:0a:72:7e:b8:55:0e:e1:4f:5b:52:7a:d2: da:53:92:a7:cb:57:c7:9d:a9:18:60:40:a5:8d:f7: 9d:43:5a:c5:50:0d:cd:28:bf:6e:3c:17:7c:c3:58: ac:6c:ce:65:f5:2b:71:8a:8c:96:4c:e7:bd:6a:52: c4:6f:95:d6:1e:0f:4a:90:30:cd:09:92:90:1d:e5: d4:b0:63:4f:b5:1d:fc:63:e8:6f:87:ad:16:9e:98: 3a:d3:a1:c3:4f:f4:47:07:c9:54:e0:e2:f1:47:1d: 50:8f:ff:d8:79:e8:2d:99:c4:ce:46:11:ba:6e:5f: 7c:94:6e:3e:a6:8f:4c:0e:ed:cf:c9:b6:e6:f5:8c: 94:bc:eb:3e:58:5c:d6:db:99:03:52:ca:5e:22:66: f7:82:00:c1:04:c7:59:a7:9d:ad:50:24:eb:51:d6: 73:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:91:44:B5:F4:EF:C8:53:CF:B7:34:72:DB:95:43:65:4D:77:F4:11 X509v3 Authority Key Identifier: keyid:E7:FE:22:F5:51:E9:5B:0F:15:03:3C:50:35:52:E4:9B:CA:61:7C:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:6a:a9:ad:63:a4:b5:c0:eb:5b:bc:19:49:17:93:cf:74:83: ba:ad:16:cc:2f:5e:20:9b:2a:f2:3c:3f:dc:96:1b:b0:45:c1: a0:87:49:43:73:de:18:49:89:bb:c5:e8:51:54:ac:58:b9:0c: 03:d4:fd:a8:19:63:f5:4b:0c:40:fa:25:ac:17:12:23:6f:cd: 77:fc:ea:fa:f7:00:d9:11:36:bc:59:4f:72:aa:b5:25:69:d0: 09:cd:45:89:7b:71:9f:54:54:b0:f4:85:78:4c:ec:17:c2:6b: a3:b0:5d:d8:10:2f:ed:6e:8e:ca:6e:d6:3d:6d:55:59:14:a4: f5:92:02:e5:01:fc:20:ab:5c:08:fd:09:15:cb:0d:ae:c4:91: 73:85:94:26:08:64:f5:d1:a3:15:63:76:32:0b:de:43:03:24: 34:3f:b0:c1:3b:89:a5:0d:91:93:23:08:a9:f7:19:b5:05:cf: 50:60:ee:b6:81:64:19:fe:83:d4:dd:d8:b5:b7:be:79:49:3f: 72:40:20:ed:70:1f:7f:e8:a4:22:e0:7f:88:6f:52:84:ee:7c: da:47:92:16:f9:35:5b:f7:32:6d:70:72:54:fe:a8:93:1b:9b: d5:4e:bf:19:73:14:81:b2:e9:b8:ac:98:44:97:91:4a:27:b0: 7f:df:af:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdiXCOwhd6RIjFOV00Fp97MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3ZmUyMmY1NTFlOTViMGYxNTAzM2M1MDM1NTJlNDliY2E2 MTdjNmEwHhcNMjUxMjI3MDIwMDQ2WhcNMjUxMjI4MDIwMDQ2WjAzMTEwLwYDVQQD EygxZDkxNDRiNWY0ZWZjODUzY2ZiNzM0NzJkYjk1NDM2NTRkNzdmNDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZMDNWXmN1UhW28rzCcAg2PfMSye 4h2pAwqOW8McpUVQQknpWQKJJl2bumrWkiQHF1xWtsnuoRReJkMzmt+3et8FAyJf EInEW2zyYoS4jX12icDTcavLeCW6qHgKcn64VQ7hT1tSetLaU5Kny1fHnakYYECl jfedQ1rFUA3NKL9uPBd8w1isbM5l9StxioyWTOe9alLEb5XWHg9KkDDNCZKQHeXU sGNPtR38Y+hvh60Wnpg606HDT/RHB8lU4OLxRx1Qj//YeegtmcTORhG6bl98lG4+ po9MDu3Pybbm9YyUvOs+WFzW25kDUspeImb3ggDBBMdZp52tUCTrUdZziQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2RRLX078hTz7c0ctuVQ2VNd/QRMB8GA1UdIwQY MBaAFOf+IvVR6VsPFQM8UDVS5JvKYXxqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNV80aTlWSHBXdzhWQXp4UU5WTGttOHBoZkdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9kNjEyZTMtOTRlYi00ODY2LWI0M2Mt ZTQwYjMwMTQwMWE5LzEvNV80aTlWSHBXdzhWQXp4UU5WTGttOHBoZkdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9kNjEyZTMtOTRlYi00ODY2LWI0M2MtZTQwYjMwMTQwMWE5 LzEvNV80aTlWSHBXdzhWQXp4UU5WTGttOHBoZkdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAGqprWOk tcDrW7wZSReTz3SDuq0WzC9eIJsq8jw/3JYbsEXBoIdJQ3PeGEmJu8XoUVSsWLkM A9T9qBlj9UsMQPolrBcSI2/Nd/zq+vcA2RE2vFlPcqq1JWnQCc1FiXtxn1RUsPSF eEzsF8Jro7Bd2BAv7W6Oym7WPW1VWRSk9ZIC5QH8IKtcCP0JFcsNrsSRc4WUJghk 9dGjFWN2MgveQwMkND+wwTuJpQ2RkyMIqfcZtQXPUGDutoFkGf6D1N3Ytbe+eUk/ ckAg7XAff+ikIuB/iG9ShO582keSFvk1W/cybXByVP6okxub1U6/GXMUgbLpuKyY RJeRSiewf9+vwg== -----END CERTIFICATE-----Generated at Sat Dec 27 08:09:07 2025 by rpki-client