This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft File: 5UmH5s-8zliuDJbnZmqyGrPi4JA.mft (raw, json) Hash identifier: 33EHnPw4QfziNaA9asBAqBwXUH4tD3N/yRgmf/MFFsU= Subject key identifier: 2B:0D:86:96:1E:3E:58:9C:E9:C1:79:B0:BC:77:78:17:4F:48:AB:06 Authority key identifier: E5:49:87:E6:CF:BC:CE:58:AE:0C:96:E7:66:6A:B2:1A:B3:E2:E0:90 Certificate issuer: /CN=e54987e6cfbcce58ae0c96e7666ab21ab3e2e090 Certificate serial: 019B529863D0F672571B105A65B3F81A6673 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft Manifest number: 0437 Signing time: Wed 24 Dec 2025 23:01:17 +0000 Manifest this update: Wed 24 Dec 2025 23:01:17 +0000 Manifest next update: Thu 25 Dec 2025 23:01:17 +0000 Files and hashes: 1: 5UmH5s-8zliuDJbnZmqyGrPi4JA.crl (hash: TMI+QbL8PucPGlxjaU5muxtNQ5jd5o3GYq5l5IPHQeM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.crl rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:98:63:d0:f6:72:57:1b:10:5a:65:b3:f8:1a:66:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e54987e6cfbcce58ae0c96e7666ab21ab3e2e090 Validity Not Before: Dec 24 23:01:17 2025 GMT Not After : Dec 25 23:01:17 2025 GMT Subject: CN=2b0d86961e3e589ce9c179b0bc7778174f48ab06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3d:b7:e9:8d:46:0f:14:7c:8f:8d:db:e8:b0: d7:15:d2:76:3d:d6:4c:8a:4f:f8:43:67:d6:30:07: 9a:b4:b1:e7:ff:f8:1d:40:23:de:16:0f:ec:59:69: 6b:27:05:83:a1:a0:2c:86:40:79:03:94:70:3b:32: 30:7b:36:59:61:70:be:d0:5a:bc:a3:cb:9d:05:60: c0:dc:79:f1:21:0f:63:fe:ee:90:ea:c3:77:20:d0: 39:bd:15:0c:e0:f6:f5:c4:88:0a:27:48:08:b5:64: 54:9c:44:55:e1:58:e0:68:d1:7d:a5:56:c4:8e:08: 15:5f:f0:88:48:91:05:9b:ed:48:df:ae:76:d2:c4: 37:e9:c8:13:4b:08:39:67:6d:6e:1f:a6:3c:1c:bb: 8e:f0:29:d2:e6:8e:57:5d:ce:97:27:80:78:26:8a: 79:11:24:ed:92:d9:b6:95:f1:19:96:91:34:25:22: cd:d8:c7:94:4a:07:11:b5:b0:6e:c3:3e:75:e4:45: 6c:5c:fe:f9:83:ef:06:35:b4:56:b6:6c:43:b6:ba: bc:83:b8:18:63:b4:56:51:3a:ee:0e:60:2d:eb:f8: 3a:91:70:15:36:6f:77:99:af:3e:62:cb:82:67:0c: a1:ef:4d:bc:09:f9:0b:d6:7f:98:05:66:5c:8f:39: 4b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:0D:86:96:1E:3E:58:9C:E9:C1:79:B0:BC:77:78:17:4F:48:AB:06 X509v3 Authority Key Identifier: keyid:E5:49:87:E6:CF:BC:CE:58:AE:0C:96:E7:66:6A:B2:1A:B3:E2:E0:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:a9:8c:4a:64:74:a1:66:d2:6a:79:88:2b:c6:90:ed:ac:38: 3b:20:9e:61:fe:5c:35:aa:cf:fe:aa:dc:1e:53:8a:ee:13:bc: 38:bd:33:f0:ee:b7:69:fe:a2:83:af:0a:c8:c8:ea:7c:cd:27: 19:6a:47:0c:c2:b9:96:31:82:10:c0:2c:4b:f8:fe:75:82:24: a4:17:b0:3b:31:0a:43:32:e8:f6:26:7e:aa:04:0f:a8:6a:25: b0:03:2a:a1:16:91:93:df:9c:33:d1:ea:ab:af:d6:7c:59:f8: 3f:a0:de:b3:86:7d:eb:ce:94:00:29:fa:4c:d3:f3:1a:fe:9d: 3e:5a:79:61:7f:37:e1:fb:ba:72:45:06:e4:67:34:a4:19:6c: 47:1c:10:81:07:92:59:ee:2f:88:47:92:f1:1a:31:12:13:d4: 47:92:f5:a8:67:50:26:a6:d4:bb:72:4c:f9:17:42:18:6e:38: ce:5e:9c:32:e8:e8:56:93:95:b6:64:1c:2a:92:d8:93:a7:d0: d8:79:6e:f1:ff:1d:91:72:58:5a:03:88:22:82:a4:55:89:a2: cd:5e:d4:49:96:ca:51:b3:2d:a7:67:07:7d:af:e9:29:f9:e6: 36:c4:61:0c:f5:d3:b6:2c:52:e1:e9:2d:16:0c:e1:ee:2a:4d: 5a:d2:f3:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSmGPQ9nJXGxBaZbP4GmZzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NDk4N2U2Y2ZiY2NlNThhZTBjOTZlNzY2NmFiMjFhYjNl MmUwOTAwHhcNMjUxMjI0MjMwMTE3WhcNMjUxMjI1MjMwMTE3WjAzMTEwLwYDVQQD EygyYjBkODY5NjFlM2U1ODljZTljMTc5YjBiYzc3NzgxNzRmNDhhYjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT236Y1GDxR8j43b6LDXFdJ2PdZM ik/4Q2fWMAeatLHn//gdQCPeFg/sWWlrJwWDoaAshkB5A5RwOzIwezZZYXC+0Fq8 o8udBWDA3HnxIQ9j/u6Q6sN3INA5vRUM4Pb1xIgKJ0gItWRUnERV4VjgaNF9pVbE jggVX/CISJEFm+1I36520sQ36cgTSwg5Z21uH6Y8HLuO8CnS5o5XXc6XJ4B4Jop5 ESTtktm2lfEZlpE0JSLN2MeUSgcRtbBuwz515EVsXP75g+8GNbRWtmxDtrq8g7gY Y7RWUTruDmAt6/g6kXAVNm93ma8+YsuCZwyh7028CfkL1n+YBWZcjzlL0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCsNhpYePlic6cF5sLx3eBdPSKsGMB8GA1UdIwQY MBaAFOVJh+bPvM5YrgyW52Zqshqz4uCQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVVtSDVzLTh6bGl1REpiblptcXlHclBpNEpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS84YWU3MzAtYWU1ZS00YmU5LTk3OGIt MDBiNTIwODc1Mzc2LzEvNVVtSDVzLTh6bGl1REpiblptcXlHclBpNEpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS84YWU3MzAtYWU1ZS00YmU5LTk3OGItMDBiNTIwODc1Mzc2 LzEvNVVtSDVzLTh6bGl1REpiblptcXlHclBpNEpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ6mMSmR0 oWbSanmIK8aQ7aw4OyCeYf5cNarP/qrcHlOK7hO8OL0z8O63af6ig68KyMjqfM0n GWpHDMK5ljGCEMAsS/j+dYIkpBewOzEKQzLo9iZ+qgQPqGolsAMqoRaRk9+cM9Hq q6/WfFn4P6Des4Z9686UACn6TNPzGv6dPlp5YX834fu6ckUG5Gc0pBlsRxwQgQeS We4viEeS8RoxEhPUR5L1qGdQJqbUu3JM+RdCGG44zl6cMujoVpOVtmQcKpLYk6fQ 2Hlu8f8dkXJYWgOIIoKkVYmizV7USZbKUbMtp2cHfa/pKfnmNsRhDPXTtixS4ekt Fgzh7ipNWtLz2A== -----END CERTIFICATE-----Generated at Thu Dec 25 05:31:52 2025 by rpki-client