This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft File: 5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft (raw, json) Hash identifier: ib52JgmlczfJrCqCT6ki/LfeweVhIhheq3oQfylF3dc= Subject key identifier: 4A:82:84:15:65:62:03:59:A9:11:62:F3:64:39:7F:81:BA:B0:7C:C3 Authority key identifier: E7:1D:70:9D:8B:18:4C:5A:50:C9:43:1D:CC:AF:64:9B:C8:68:47:04 Certificate issuer: /CN=e71d709d8b184c5a50c9431dccaf649bc8684704 Certificate serial: 019B3D23ACB020BC45531332A21E39BA3089 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 19:01:46 +0000 Manifest this update: Sat 20 Dec 2025 19:01:46 +0000 Manifest next update: Sun 21 Dec 2025 19:01:46 +0000 Files and hashes: 1: 5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl (hash: SaSrlc/ibRDl/jIir+tZSuL8zUOtPgkAqLIDjlilVag=) 2: qvfFT1waDERLpkfbuL979IFfQzo.roa (hash: paMjx2cHD10xNMb2RegQEWwQPemRR0QtwqJzV/kovDg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:ac:b0:20:bc:45:53:13:32:a2:1e:39:ba:30:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e71d709d8b184c5a50c9431dccaf649bc8684704 Validity Not Before: Dec 20 19:01:46 2025 GMT Not After : Dec 21 19:01:46 2025 GMT Subject: CN=4a82841565620359a91162f364397f81bab07cc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6b:bb:1d:12:8d:38:2a:9d:2a:de:19:80:22: 7f:5c:d7:1a:ba:37:e7:c4:74:64:d4:02:5b:34:b9: 8f:e0:40:ee:53:02:24:60:3b:d6:6b:e4:1a:6a:5a: 92:66:1a:eb:e2:58:41:c0:65:f4:52:9b:23:e9:36: 2b:4e:3b:8d:a5:85:9b:f4:8e:7d:eb:9d:c9:19:31: 58:2a:04:13:be:55:e6:1b:04:7e:2c:e8:0e:d3:47: d5:f9:4d:ee:be:df:95:34:82:e1:b8:35:e2:f7:cd: 45:e1:37:c1:e0:89:b5:00:7b:49:3f:4a:7d:fd:4f: f2:08:88:d0:74:0e:f2:19:de:2c:0c:6e:d1:10:a5: fb:d7:e6:99:a7:42:00:01:4c:9e:aa:b9:9e:2d:e5: 74:2d:37:09:d0:7a:98:ad:fc:15:0e:d1:61:eb:75: b2:1b:10:18:f4:a9:b4:29:20:e5:f2:8d:44:0f:62: 42:86:13:bf:3d:3c:6a:23:f8:4e:ef:b9:11:b8:39: d6:ad:98:c4:49:c5:db:c9:6d:3d:e0:c0:4f:a7:e9: cb:74:26:a9:8d:df:8d:d5:0c:18:19:13:7c:d7:18: aa:ef:a4:21:51:09:f9:02:22:13:e1:bc:e5:9f:03: 83:39:34:cb:73:5a:70:2f:13:08:6b:c4:75:f6:b5: 06:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:82:84:15:65:62:03:59:A9:11:62:F3:64:39:7F:81:BA:B0:7C:C3 X509v3 Authority Key Identifier: keyid:E7:1D:70:9D:8B:18:4C:5A:50:C9:43:1D:CC:AF:64:9B:C8:68:47:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:81:21:56:2f:b4:f1:a6:76:61:dd:8d:82:42:e2:f6:8d:5c: 57:a8:20:3c:c8:d4:31:8e:fa:16:4d:89:a4:6a:5f:56:d4:f8: f7:56:33:87:a9:61:6f:f0:dc:3d:6c:84:af:2b:a2:64:56:2e: 20:66:a6:c5:d0:92:d6:ed:bf:b5:b8:71:2a:ef:f9:35:0c:cd: 60:30:6e:2f:ef:91:70:a4:69:5c:54:40:5f:64:ce:fa:53:2f: f9:9d:7c:79:17:5d:ff:a5:e6:85:3e:ce:40:1a:f1:e1:12:a0: 25:db:d5:d3:87:0e:b0:9e:61:76:8f:f5:3f:75:29:bb:50:d5: f0:be:ab:90:cc:51:fe:86:61:5b:6c:4a:66:c5:c9:8c:a7:71: 42:94:b9:d0:a5:5d:f6:f2:58:70:b2:aa:b3:bb:d2:8c:f6:d5: 40:3d:aa:82:8c:cb:e1:1e:28:c7:16:c5:db:19:e8:88:49:0d: e0:e2:29:3a:4b:78:c7:04:42:35:37:bb:63:0a:16:d5:73:d9: 4f:2b:9e:34:d7:55:c4:6e:f2:af:37:6f:f0:24:17:dd:6d:3a: 75:2e:17:87:32:86:7d:51:6c:76:5f:d9:b9:9c:3d:2b:0e:b5: 1a:86:e8:a1:9d:1d:7b:39:a6:79:70:54:79:57:5f:c8:c6:93: c8:ee:a2:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9I6ywILxFUxMyoh45ujCJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3MWQ3MDlkOGIxODRjNWE1MGM5NDMxZGNjYWY2NDliYzg2 ODQ3MDQwHhcNMjUxMjIwMTkwMTQ2WhcNMjUxMjIxMTkwMTQ2WjAzMTEwLwYDVQQD Eyg0YTgyODQxNTY1NjIwMzU5YTkxMTYyZjM2NDM5N2Y4MWJhYjA3Y2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmu7HRKNOCqdKt4ZgCJ/XNcaujfn xHRk1AJbNLmP4EDuUwIkYDvWa+QaalqSZhrr4lhBwGX0Upsj6TYrTjuNpYWb9I59 653JGTFYKgQTvlXmGwR+LOgO00fV+U3uvt+VNILhuDXi981F4TfB4Im1AHtJP0p9 /U/yCIjQdA7yGd4sDG7REKX71+aZp0IAAUyeqrmeLeV0LTcJ0HqYrfwVDtFh63Wy GxAY9Km0KSDl8o1ED2JChhO/PTxqI/hO77kRuDnWrZjEScXbyW094MBPp+nLdCap jd+N1QwYGRN81xiq76QhUQn5AiIT4bzlnwODOTTLc1pwLxMIa8R19rUGhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEqChBVlYgNZqRFi82Q5f4G6sHzDMB8GA1UdIwQY MBaAFOcdcJ2LGExaUMlDHcyvZJvIaEcEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXgxd25Zc1lURnBReVVNZHpLOWttOGhvUndRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS80Nzk5ZjYtNzY1Zi00YWQyLThjNDMt MWM1YjEwMTJkMmMzLzEvNXgxd25Zc1lURnBReVVNZHpLOWttOGhvUndRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS80Nzk5ZjYtNzY1Zi00YWQyLThjNDMtMWM1YjEwMTJkMmMz LzEvNXgxd25Zc1lURnBReVVNZHpLOWttOGhvUndRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAboEhVi+0 8aZ2Yd2NgkLi9o1cV6ggPMjUMY76Fk2JpGpfVtT491Yzh6lhb/DcPWyEryuiZFYu IGamxdCS1u2/tbhxKu/5NQzNYDBuL++RcKRpXFRAX2TO+lMv+Z18eRdd/6XmhT7O QBrx4RKgJdvV04cOsJ5hdo/1P3Upu1DV8L6rkMxR/oZhW2xKZsXJjKdxQpS50KVd 9vJYcLKqs7vSjPbVQD2qgozL4R4oxxbF2xnoiEkN4OIpOkt4xwRCNTe7YwoW1XPZ TyueNNdVxG7yrzdv8CQX3W06dS4XhzKGfVFsdl/ZuZw9Kw61GobooZ0dezmmeXBU eVdfyMaTyO6iWQ== -----END CERTIFICATE-----Generated at Sat Dec 20 22:40:24 2025 by rpki-client