This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft File: 5NU8R_Id1mUrZ_70lclP39FSjOs.mft (raw, json) Hash identifier: CjJM+SSDx7fB95/s7O7n+JhmTbh9bimryrn+0FFoqFc= Subject key identifier: B0:43:7D:71:4A:5F:4C:C0:14:0D:EF:B0:24:AD:D1:13:52:ED:6F:95 Authority key identifier: E4:D5:3C:47:F2:1D:D6:65:2B:67:FE:F4:95:C9:4F:DF:D1:52:8C:EB Certificate issuer: /CN=e4d53c47f21dd6652b67fef495c94fdfd1528ceb Certificate serial: 019B3CEBDE9ED53F1377E5D0AE64F86B43A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NU8R_Id1mUrZ_70lclP39FSjOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft Manifest number: 0132 Signing time: Sat 20 Dec 2025 18:00:49 +0000 Manifest this update: Sat 20 Dec 2025 18:00:49 +0000 Manifest next update: Sun 21 Dec 2025 18:00:49 +0000 Files and hashes: 1: 5NU8R_Id1mUrZ_70lclP39FSjOs.crl (hash: fnkPdE9ga3NC8WaY3vbKL1FcIUeWlWorH9mjApmCtVs=) 2: PrRGaFLPXBxBYOXraz8nx2Zv-Uo.roa (hash: d4brDjq0VND/Iy+6ZmnnMFSJxquKernTk88xGtm16DQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.crl rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft rsync://rpki.ripe.net/repository/DEFAULT/5NU8R_Id1mUrZ_70lclP39FSjOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:de:9e:d5:3f:13:77:e5:d0:ae:64:f8:6b:43:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4d53c47f21dd6652b67fef495c94fdfd1528ceb Validity Not Before: Dec 20 18:00:49 2025 GMT Not After : Dec 21 18:00:49 2025 GMT Subject: CN=b0437d714a5f4cc0140defb024add11352ed6f95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:03:8b:d9:9c:97:6f:82:47:d2:4f:29:f0:4b: e5:e8:d0:67:ea:27:e6:41:93:9a:56:8f:1f:0f:1f: d7:4b:44:b4:20:53:29:a8:b6:a8:b3:f6:81:5d:e8: bd:96:aa:7b:f2:2d:cc:00:89:99:79:86:0c:e2:06: 1d:35:22:be:87:ef:e4:80:9f:f5:79:9e:0f:6b:84: e4:06:f5:da:21:81:5b:a0:3f:d8:ab:a2:58:5e:be: 09:02:c8:72:f2:b9:df:cd:94:46:71:59:5c:f2:06: 6e:6e:e8:8a:03:28:46:c6:3a:06:50:55:52:b4:64: c7:87:68:54:b5:59:0b:33:5a:a5:e3:2d:ff:ce:6f: 86:7d:01:21:60:1c:56:9a:3d:ec:13:9e:d8:0f:95: 23:3b:88:fe:ca:33:15:c8:26:e7:95:6c:b0:d8:46: 2c:0c:b2:e8:fc:a6:09:af:ad:ff:02:b0:f5:d4:63: cc:48:f9:c5:2b:28:d5:e1:3c:61:3a:65:d2:4f:8f: 03:7d:ee:0f:ec:41:d1:0b:3b:c0:35:f9:bc:2f:86: 00:80:57:af:27:2e:e6:4b:f8:22:cc:2d:b8:6b:d9: 88:cb:7a:d6:db:6f:dd:d1:10:e1:8e:ad:e7:a2:b5: d7:c1:ad:e8:13:e1:f6:98:0f:8b:b3:4e:97:fa:b5: 33:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:43:7D:71:4A:5F:4C:C0:14:0D:EF:B0:24:AD:D1:13:52:ED:6F:95 X509v3 Authority Key Identifier: keyid:E4:D5:3C:47:F2:1D:D6:65:2B:67:FE:F4:95:C9:4F:DF:D1:52:8C:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NU8R_Id1mUrZ_70lclP39FSjOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:74:7e:38:14:a0:37:53:f8:34:36:d3:f5:04:fb:93:4d:80: a5:8e:9e:cd:aa:ac:17:2c:90:7e:3d:4e:c4:d6:70:f1:07:de: 61:0e:37:05:fd:2e:d5:52:41:d4:dd:d8:72:4a:36:3d:5e:bf: 11:57:8b:c5:2c:a0:62:da:f9:d3:93:29:80:ee:81:03:c7:23: a8:44:02:0d:d6:ae:66:57:c9:77:b7:e1:6b:11:af:74:65:e6: 6e:39:97:af:f8:0d:b4:42:2f:59:37:fe:27:53:58:b7:81:a7: e5:63:73:da:88:68:31:64:77:f2:11:8b:f6:a8:8f:16:24:74: 23:e7:46:74:d2:90:a5:af:95:41:ac:20:db:5c:9b:a2:20:70: 65:60:a5:a0:5c:db:0a:72:7d:d2:f7:b9:89:64:52:7c:91:e4: df:a9:9b:fc:a7:d2:0d:f1:3e:ac:d1:b8:c2:d0:89:43:37:aa: bc:df:e2:6e:98:0a:56:10:35:1a:7f:5f:c6:54:f8:b4:29:35: 1d:0a:f9:68:66:71:d4:73:f8:9e:f2:73:d4:74:be:c1:49:08: ea:18:b6:f0:ba:fe:66:a9:ef:ec:03:03:d3:16:a2:77:f7:20: 6d:19:61:3e:73:d5:2d:26:c7:fe:ff:62:fd:aa:ac:08:d3:2e: f8:fa:d4:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8696e1T8Td+XQrmT4a0OoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ZDUzYzQ3ZjIxZGQ2NjUyYjY3ZmVmNDk1Yzk0ZmRmZDE1 MjhjZWIwHhcNMjUxMjIwMTgwMDQ5WhcNMjUxMjIxMTgwMDQ5WjAzMTEwLwYDVQQD EyhiMDQzN2Q3MTRhNWY0Y2MwMTQwZGVmYjAyNGFkZDExMzUyZWQ2Zjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgOL2ZyXb4JH0k8p8Evl6NBn6ifm QZOaVo8fDx/XS0S0IFMpqLaos/aBXei9lqp78i3MAImZeYYM4gYdNSK+h+/kgJ/1 eZ4Pa4TkBvXaIYFboD/Yq6JYXr4JAshy8rnfzZRGcVlc8gZubuiKAyhGxjoGUFVS tGTHh2hUtVkLM1ql4y3/zm+GfQEhYBxWmj3sE57YD5UjO4j+yjMVyCbnlWyw2EYs DLLo/KYJr63/ArD11GPMSPnFKyjV4TxhOmXST48Dfe4P7EHRCzvANfm8L4YAgFev Jy7mS/gizC24a9mIy3rW22/d0RDhjq3norXXwa3oE+H2mA+Ls06X+rUzCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLBDfXFKX0zAFA3vsCSt0RNS7W+VMB8GA1UdIwQY MBaAFOTVPEfyHdZlK2f+9JXJT9/RUozrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU5VOFJfSWQxbVVyWl83MGxjbFAzOUZTak9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9kNjZhZjMtMjhiNS00MmViLWFkMDEt OTVkNTNiNTMxNTQ1LzEvNU5VOFJfSWQxbVVyWl83MGxjbFAzOUZTak9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9kNjZhZjMtMjhiNS00MmViLWFkMDEtOTVkNTNiNTMxNTQ1 LzEvNU5VOFJfSWQxbVVyWl83MGxjbFAzOUZTak9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArnR+OBSg N1P4NDbT9QT7k02ApY6ezaqsFyyQfj1OxNZw8QfeYQ43Bf0u1VJB1N3Ycko2PV6/ EVeLxSygYtr505MpgO6BA8cjqEQCDdauZlfJd7fhaxGvdGXmbjmXr/gNtEIvWTf+ J1NYt4Gn5WNz2ohoMWR38hGL9qiPFiR0I+dGdNKQpa+VQawg21yboiBwZWCloFzb CnJ90ve5iWRSfJHk36mb/KfSDfE+rNG4wtCJQzeqvN/ibpgKVhA1Gn9fxlT4tCk1 HQr5aGZx1HP4nvJz1HS+wUkI6hi28Lr+Zqnv7AMD0xaid/cgbRlhPnPVLSbH/v9i /aqsCNMu+PrUEg== -----END CERTIFICATE-----Generated at Sun Dec 21 00:12:19 2025 by rpki-client