This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft File: 5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft (raw, json) Hash identifier: KXaFVEoLOSpXQUqArCy6Bbrd+hRFWHvOTKPYfJNk/AA= Subject key identifier: 1D:D5:03:13:07:53:7A:A8:73:B4:E3:26:6F:E6:76:64:3C:C3:F4:D7 Authority key identifier: E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97 Certificate issuer: /CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97 Certificate serial: 019B511782E6A8D6C4ABC75EE179A4C0D9A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft Manifest number: 1273 Signing time: Wed 24 Dec 2025 16:00:53 +0000 Manifest this update: Wed 24 Dec 2025 16:00:53 +0000 Manifest next update: Thu 25 Dec 2025 16:00:53 +0000 Files and hashes: 1: 5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl (hash: jJ3JIpv5M5JT/jWYWiv3bzIuYFcA6mQw3uKjcTnHqwg=) 2: 5RNQOoYI7rp8d4nASoBcHUOUpY8.roa (hash: FG1C0t8LdLpHD2f41qfi65AEKFEoAI1fPmg3pwTrSAI=) 3: 9sR2L5tWHl9nYIOa3aPDj2epTyM.roa (hash: DVpf87jmOmV1usbZpIj3EdX+MCp0oX2EtW5xng4U88Q=) 4: eQWgmPYrRyxmbW7jic8MtUc1Zpo.roa (hash: QgtMWXIUrz6jvt1nPBxlt0MfdGFiSY2UtDQz0hujdYk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:17:82:e6:a8:d6:c4:ab:c7:5e:e1:79:a4:c0:d9:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97 Validity Not Before: Dec 24 16:00:53 2025 GMT Not After : Dec 25 16:00:53 2025 GMT Subject: CN=1dd5031307537aa873b4e3266fe676643cc3f4d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:dc:b0:3e:11:b4:20:8a:d6:92:4a:cc:fb:a9: be:e0:0e:89:b4:2a:6b:36:bc:93:92:a2:fb:01:2b: 29:72:91:50:98:e6:2b:a0:96:b7:2a:50:42:16:ec: 1a:8b:ee:cc:2f:23:c0:d9:55:f1:b4:4b:88:36:e1: 0b:88:71:a0:4f:a6:91:01:2a:39:09:55:68:4e:7f: 29:4d:f8:b1:a0:95:85:3b:2e:0e:66:39:af:7b:48: 7c:f0:1b:30:b4:97:88:f9:d5:e8:be:33:33:76:b9: a0:a0:a8:20:54:cd:a6:f9:5a:25:dc:84:b0:0b:c1: b9:73:29:19:75:63:86:3c:4f:e4:90:72:af:43:31: 7b:cc:49:6b:c6:9b:b6:a9:37:ad:67:57:2a:76:97: 4f:e2:a5:25:75:f6:35:64:1e:ed:af:fe:2f:62:c5: 79:c7:1c:db:78:70:d9:82:64:e2:a3:2a:93:00:4a: de:10:75:7d:3e:b0:81:09:12:25:ab:f4:0e:ea:61: 10:a1:4d:0e:a1:8d:2b:1a:ca:79:3f:7b:25:0c:ec: 54:c6:e8:ec:7e:0b:cc:a5:c7:85:ed:1a:ac:9e:58: 16:d8:58:47:04:cc:c9:00:76:10:62:b0:32:d7:bf: 6a:09:3a:76:10:a0:1c:69:64:ac:0c:6b:a8:e4:b9: f2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:D5:03:13:07:53:7A:A8:73:B4:E3:26:6F:E6:76:64:3C:C3:F4:D7 X509v3 Authority Key Identifier: keyid:E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:f1:c6:e2:34:31:12:39:72:e7:ba:35:e4:67:79:ee:e3:5b: 4c:99:65:b3:04:aa:a1:6e:cf:dd:dc:3f:48:6a:51:9e:fd:65: da:f3:b6:9a:c0:34:c8:57:2f:1a:81:7f:c2:08:bc:13:df:77: de:c5:63:81:74:19:1a:6d:bf:4a:33:6f:6d:8b:7a:57:0c:a0: d0:ac:02:c2:f0:0f:cb:8c:b4:0b:48:9e:bf:07:32:74:95:fb: ec:80:02:2c:23:66:b4:7b:33:2c:79:e9:ca:a0:fd:56:82:95: 90:63:fb:15:b7:05:bb:13:1c:12:7f:cd:3c:73:40:9d:8a:95: 81:e5:34:ab:6e:2e:bc:15:8c:01:0f:b9:a5:ea:4f:de:97:50: 08:4e:f7:d4:78:3b:e5:8d:bf:d4:72:c9:4d:4b:46:9a:d0:d5: cc:49:92:0a:59:ac:c6:f1:b3:28:2d:09:7b:14:9a:62:2a:d1: c7:fb:cf:0a:13:ec:6f:4c:a3:26:64:ed:ff:80:6f:ac:c1:86: e5:df:31:eb:15:f2:fc:75:22:43:4f:7f:bc:d8:db:ea:8a:a1: 88:3d:75:f0:7f:86:d5:6c:2e:11:98:d6:e5:fa:8a:d2:01:3c: 54:5e:15:0a:bc:07:32:32:2b:87:0a:60:06:89:5f:33:4b:83: 4d:cb:a9:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRF4LmqNbEq8de4XmkwNmnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YTcxNGZmYzU5OGIxNTY0N2JiYWZlMmM2NDYwYTg3ZWFm YmNmOTcwHhcNMjUxMjI0MTYwMDUzWhcNMjUxMjI1MTYwMDUzWjAzMTEwLwYDVQQD EygxZGQ1MDMxMzA3NTM3YWE4NzNiNGUzMjY2ZmU2NzY2NDNjYzNmNGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNywPhG0IIrWkkrM+6m+4A6JtCpr NryTkqL7ASspcpFQmOYroJa3KlBCFuwai+7MLyPA2VXxtEuINuELiHGgT6aRASo5 CVVoTn8pTfixoJWFOy4OZjmve0h88BswtJeI+dXovjMzdrmgoKggVM2m+Vol3ISw C8G5cykZdWOGPE/kkHKvQzF7zElrxpu2qTetZ1cqdpdP4qUldfY1ZB7tr/4vYsV5 xxzbeHDZgmTioyqTAEreEHV9PrCBCRIlq/QO6mEQoU0OoY0rGsp5P3slDOxUxujs fgvMpceF7RqsnlgW2FhHBMzJAHYQYrAy179qCTp2EKAcaWSsDGuo5Lny9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB3VAxMHU3qoc7TjJm/mdmQ8w/TXMB8GA1UdIwQY MBaAFOSnFP/FmLFWR7uv4sZGCofq+8+XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUtjVV84V1lzVlpIdTZfaXhrWUtoLXI3ejVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kOTZkYTYtMTJiMi00NDZlLThkOTkt N2NiMzQ1ZTg1NDFhLzEvNUtjVV84V1lzVlpIdTZfaXhrWUtoLXI3ejVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9kOTZkYTYtMTJiMi00NDZlLThkOTktN2NiMzQ1ZTg1NDFh LzEvNUtjVV84V1lzVlpIdTZfaXhrWUtoLXI3ejVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwfHG4jQx Ejly57o15Gd57uNbTJllswSqoW7P3dw/SGpRnv1l2vO2msA0yFcvGoF/wgi8E993 3sVjgXQZGm2/SjNvbYt6Vwyg0KwCwvAPy4y0C0ievwcydJX77IACLCNmtHszLHnp yqD9VoKVkGP7FbcFuxMcEn/NPHNAnYqVgeU0q24uvBWMAQ+5pepP3pdQCE731Hg7 5Y2/1HLJTUtGmtDVzEmSClmsxvGzKC0JexSaYirRx/vPChPsb0yjJmTt/4BvrMGG 5d8x6xXy/HUiQ09/vNjb6oqhiD118H+G1WwuEZjW5fqK0gE8VF4VCrwHMjIrhwpg BolfM0uDTcupIw== -----END CERTIFICATE-----Generated at Wed Dec 24 23:28:06 2025 by rpki-client