This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft File: 5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft (raw, json) Hash identifier: 6/E1OFj0lUobkj4DEEcffUXamWxuhaVUaGUVtY3M4Yo= Subject key identifier: 92:06:39:69:5E:AD:AF:2E:11:41:85:4E:56:14:22:1B:84:C7:87:EA Authority key identifier: E4:F5:17:41:DF:13:6F:93:89:25:4E:FD:E4:BA:9A:DC:FB:0D:E6:BF Certificate issuer: /CN=e4f51741df136f9389254efde4ba9adcfb0de6bf Certificate serial: 019B40C8EB93C458DF517B213039CBD17C77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft Manifest number: 0815 Signing time: Sun 21 Dec 2025 12:01:07 +0000 Manifest this update: Sun 21 Dec 2025 12:01:07 +0000 Manifest next update: Mon 22 Dec 2025 12:01:07 +0000 Files and hashes: 1: 00lUHR0HsWF62e0OhdTMmz1D8cI.roa (hash: 7/l5GLFu9biLRhRjYyy3+K05xs5xfnn4gHwWEjQvlNY=) 2: 5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl (hash: zHL4JfDNLqR7JhdG8ImUUWY0s0j9nkmHX0udtZXDEvs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:eb:93:c4:58:df:51:7b:21:30:39:cb:d1:7c:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4f51741df136f9389254efde4ba9adcfb0de6bf Validity Not Before: Dec 21 12:01:07 2025 GMT Not After : Dec 22 12:01:07 2025 GMT Subject: CN=920639695eadaf2e1141854e5614221b84c787ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b1:bd:24:c0:55:bf:1c:c0:99:b2:32:7f:5f: 29:1d:4d:b7:65:12:bf:c5:d8:88:e3:c8:18:e5:51: ba:2a:7a:c7:c9:d6:5a:c1:e1:79:af:7b:e8:2c:5a: 80:2e:b5:0c:17:0f:5a:30:93:be:0a:ba:b9:1a:3d: 70:aa:1b:6c:a4:84:79:cc:5c:42:86:1e:06:e9:0f: c0:74:ae:64:04:dd:39:f9:5e:29:f8:7c:75:4d:48: 69:e2:92:f0:3d:35:dc:97:80:fb:7a:3d:82:c8:bc: 81:cb:f0:0a:00:35:3f:59:f0:59:42:c7:e1:28:77: 54:6a:60:fc:1e:0f:d6:a8:d3:4c:32:9c:18:ec:97: 24:e0:26:86:b9:e4:27:5c:fd:f9:be:06:5c:cf:cd: 2f:d5:51:ee:73:64:16:78:0a:c0:ad:31:28:29:c4: eb:22:96:77:72:a9:dd:80:e7:60:3c:19:07:b8:a9: 28:a6:f5:94:b5:30:7e:a6:55:9a:d3:1e:77:43:c6: 27:a1:88:64:1d:73:51:40:3e:ed:1d:27:33:8b:cc: c6:32:6f:0d:97:a0:28:62:2e:70:65:24:3f:18:3d: fc:22:de:e8:b4:d1:fb:1f:06:be:62:f2:8f:ea:68: 93:ab:e9:80:89:76:f1:60:40:9e:0a:a4:49:d9:22: 9c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:06:39:69:5E:AD:AF:2E:11:41:85:4E:56:14:22:1B:84:C7:87:EA X509v3 Authority Key Identifier: keyid:E4:F5:17:41:DF:13:6F:93:89:25:4E:FD:E4:BA:9A:DC:FB:0D:E6:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:ae:2d:6b:f7:67:9c:23:ab:00:5d:66:4b:60:f8:3c:8b:f3: 63:9b:c7:7e:11:15:82:bc:f3:46:f9:6c:ca:3d:8c:d2:00:c5: 4f:9e:e2:16:a2:4e:ea:a7:9c:4b:12:a5:8e:6f:5a:d2:9e:8f: 5a:63:9e:fa:95:c2:53:37:cf:9a:71:13:e9:7c:c3:f7:e0:f2: cc:af:23:ba:18:85:fa:a2:64:7b:5e:e9:fe:8f:bb:a6:1d:ac: 39:34:4e:15:d5:03:be:db:8f:56:85:e2:75:21:bf:22:52:ad: 91:fc:23:f0:14:66:10:12:6f:0f:38:be:e9:47:cb:0f:2e:c8: c5:e5:5e:18:02:67:8a:49:85:48:64:ab:55:0c:08:05:29:44: 5c:ed:08:92:19:81:b9:8a:cd:34:f8:26:89:2c:8c:28:73:c5: 98:56:d4:49:ca:95:21:9d:8f:df:e9:fc:b6:cd:26:cd:16:e5: 00:aa:0b:b6:0f:fa:b2:79:74:43:0e:ea:2a:8d:5e:a0:a9:69: f4:99:06:6d:78:d9:3b:f1:76:b2:f5:1e:56:bc:0d:41:5b:06: a7:88:ca:2b:9b:52:cb:9c:e3:54:a4:d9:9f:fe:6e:cd:00:96: cb:f4:b0:67:b6:c0:35:df:62:7b:96:95:66:bd:2a:c9:64:fc: 33:75:d0:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyOuTxFjfUXshMDnL0Xx3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ZjUxNzQxZGYxMzZmOTM4OTI1NGVmZGU0YmE5YWRjZmIw ZGU2YmYwHhcNMjUxMjIxMTIwMTA3WhcNMjUxMjIyMTIwMTA3WjAzMTEwLwYDVQQD Eyg5MjA2Mzk2OTVlYWRhZjJlMTE0MTg1NGU1NjE0MjIxYjg0Yzc4N2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LG9JMBVvxzAmbIyf18pHU23ZRK/ xdiI48gY5VG6KnrHydZaweF5r3voLFqALrUMFw9aMJO+Crq5Gj1wqhtspIR5zFxC hh4G6Q/AdK5kBN05+V4p+Hx1TUhp4pLwPTXcl4D7ej2CyLyBy/AKADU/WfBZQsfh KHdUamD8Hg/WqNNMMpwY7Jck4CaGueQnXP35vgZcz80v1VHuc2QWeArArTEoKcTr IpZ3cqndgOdgPBkHuKkopvWUtTB+plWa0x53Q8YnoYhkHXNRQD7tHSczi8zGMm8N l6AoYi5wZSQ/GD38It7otNH7Hwa+YvKP6miTq+mAiXbxYECeCqRJ2SKcqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJIGOWlera8uEUGFTlYUIhuEx4fqMB8GA1UdIwQY MBaAFOT1F0HfE2+TiSVO/eS6mtz7Dea/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVBVWFFkOFRiNU9KSlU3OTVMcWEzUHNONXI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hZjFiOTMtZDZlMy00NTNkLTkxY2Mt NDFkNzM1YmQ4YzAzLzEvNVBVWFFkOFRiNU9KSlU3OTVMcWEzUHNONXI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hZjFiOTMtZDZlMy00NTNkLTkxY2MtNDFkNzM1YmQ4YzAz LzEvNVBVWFFkOFRiNU9KSlU3OTVMcWEzUHNONXI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXK4ta/dn nCOrAF1mS2D4PIvzY5vHfhEVgrzzRvlsyj2M0gDFT57iFqJO6qecSxKljm9a0p6P WmOe+pXCUzfPmnET6XzD9+DyzK8juhiF+qJke17p/o+7ph2sOTROFdUDvtuPVoXi dSG/IlKtkfwj8BRmEBJvDzi+6UfLDy7IxeVeGAJnikmFSGSrVQwIBSlEXO0IkhmB uYrNNPgmiSyMKHPFmFbUScqVIZ2P3+n8ts0mzRblAKoLtg/6snl0Qw7qKo1eoKlp 9JkGbXjZO/F2svUeVrwNQVsGp4jKK5tSy5zjVKTZn/5uzQCWy/SwZ7bANd9ie5aV Zr0qyWT8M3XQLA== -----END CERTIFICATE-----Generated at Sun Dec 21 13:52:43 2025 by rpki-client