This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft File: 5MzXNQiptZmF1Vl4aOOl1ex0X14.mft (raw, json) Hash identifier: nfSshSZhTcNxu/xUcUu7oKE/zyFkyWwMsy/iaHNOmNA= Subject key identifier: 4A:07:CE:8A:9F:95:EF:AA:E9:E6:25:23:19:0E:97:94:C8:00:A0:7F Authority key identifier: E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E Certificate issuer: /CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e Certificate serial: 019B65B131FA5FEB040EBB4D3207C20937AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft Manifest number: 0F6E Signing time: Sun 28 Dec 2025 16:01:09 +0000 Manifest this update: Sun 28 Dec 2025 16:01:09 +0000 Manifest next update: Mon 29 Dec 2025 16:01:09 +0000 Files and hashes: 1: 5MzXNQiptZmF1Vl4aOOl1ex0X14.crl (hash: fsbN2bPhcv9MTmbRG0Ch61wAU5uKhwwpidO9bz3mUno=) 2: 9cidng2JNpciqXWnAOhVR-xci3k.roa (hash: KdGn77knG5L66v7NxGPd44OS8+DeTlDe5QBcInKG3Yk=) 3: olWcwiaAoq2wbYuXrz1GVqOmILU.roa (hash: Elg7s5AYrUxQTxV0rajyo3IZzGiW80+xg0M4V3aItiA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 16:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:b1:31:fa:5f:eb:04:0e:bb:4d:32:07:c2:09:37:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e Validity Not Before: Dec 28 16:01:09 2025 GMT Not After : Dec 29 16:01:09 2025 GMT Subject: CN=4a07ce8a9f95efaae9e62523190e9794c800a07f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:97:af:a3:5b:a4:c0:83:4f:c8:2b:29:76:6d: bb:4b:26:4b:3d:f7:fb:40:11:52:78:8d:89:73:fe: 34:76:19:b8:a0:7f:08:76:bb:f0:c6:52:dd:9b:1a: 70:70:6d:89:bb:5f:45:42:85:39:d8:50:ec:fc:cf: b7:72:83:92:a5:f3:c3:0f:f7:92:5b:8b:17:2c:77: 41:8c:b8:dc:83:85:0a:31:35:14:14:59:3f:fb:a8: 7d:bd:53:7f:9c:20:87:9c:3c:b2:38:22:b3:78:a1: 0b:ea:06:24:a2:b7:4a:bf:e8:2f:ed:a2:0a:02:20: c3:25:5c:7b:fc:1c:e2:22:2c:91:9d:18:36:8f:a8: 77:cf:e2:27:6f:e2:3c:db:57:fc:76:79:12:5d:da: 5b:b4:18:0c:4a:20:e6:15:27:3a:4a:71:69:e8:3e: d2:20:d7:22:9b:17:b4:1a:24:b7:03:13:ed:6e:05: e9:92:55:bb:ad:a7:a0:66:e4:da:c1:04:29:e7:f4: 6d:8d:9c:d0:ce:fb:ed:ba:12:75:31:d0:77:72:18: 2a:64:75:80:f9:08:28:34:c1:ac:38:67:b0:0e:b3: e6:f9:c4:3c:51:b9:76:ce:14:2e:6c:46:e7:9b:ae: 0b:0e:68:bd:c7:66:68:71:56:f4:41:43:5b:a2:e6: 90:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:07:CE:8A:9F:95:EF:AA:E9:E6:25:23:19:0E:97:94:C8:00:A0:7F X509v3 Authority Key Identifier: keyid:E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:5e:7b:93:0e:05:2f:cf:b9:18:65:79:f8:4e:89:a0:fc:3f: 2e:23:df:3f:c4:5c:45:d4:37:22:e6:ec:24:f7:84:df:ce:5d: 09:0f:b7:8a:01:43:37:4e:78:b8:d0:d3:39:fa:92:f7:18:ca: 7e:70:26:0a:c8:4f:2e:e3:b3:ad:67:5a:29:3a:4f:4e:29:80: 37:20:c0:bd:3c:35:67:dd:79:14:41:79:fa:cc:65:94:e1:19: 20:73:50:bd:e8:c2:e9:a4:ab:53:18:15:2e:b0:53:23:ca:a6: c9:69:0c:90:d1:06:1d:31:b4:33:20:9e:ab:e7:b4:50:2b:18: 32:21:6b:d3:0b:ba:8d:c2:d0:34:7a:61:bc:c1:83:31:b9:6d: ad:cc:9a:75:4c:f7:fb:b6:1b:a1:0f:bf:67:0e:d9:55:46:2e: 1d:4a:b6:52:05:cb:ea:51:eb:7b:c2:bc:96:3d:d2:75:2c:73: 70:9e:64:e1:29:14:bc:7a:b9:f7:f4:f1:16:c0:62:4a:9f:09: 4b:33:27:1b:73:07:6c:05:7b:9d:37:e6:dc:f0:95:89:a4:0b: d9:38:5f:a3:99:c8:68:ea:c0:f0:a4:33:24:43:ce:07:f6:03: 71:a5:56:9f:f2:90:d1:12:ac:55:7f:8d:6e:a8:80:1e:91:00: fa:38:4e:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlsTH6X+sEDrtNMgfCCTeqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0Y2NkNzM1MDhhOWI1OTk4NWQ1NTk3ODY4ZTNhNWQ1ZWM3 NDVmNWUwHhcNMjUxMjI4MTYwMTA5WhcNMjUxMjI5MTYwMTA5WjAzMTEwLwYDVQQD Eyg0YTA3Y2U4YTlmOTVlZmFhZTllNjI1MjMxOTBlOTc5NGM4MDBhMDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5evo1ukwINPyCspdm27SyZLPff7 QBFSeI2Jc/40dhm4oH8IdrvwxlLdmxpwcG2Ju19FQoU52FDs/M+3coOSpfPDD/eS W4sXLHdBjLjcg4UKMTUUFFk/+6h9vVN/nCCHnDyyOCKzeKEL6gYkordKv+gv7aIK AiDDJVx7/BziIiyRnRg2j6h3z+Inb+I821f8dnkSXdpbtBgMSiDmFSc6SnFp6D7S INcimxe0GiS3AxPtbgXpklW7raegZuTawQQp5/RtjZzQzvvtuhJ1MdB3chgqZHWA +QgoNMGsOGewDrPm+cQ8Ubl2zhQubEbnm64LDmi9x2ZocVb0QUNbouaQjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEoHzoqfle+q6eYlIxkOl5TIAKB/MB8GA1UdIwQY MBaAFOTM1zUIqbWZhdVZeGjjpdXsdF9eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU16WE5RaXB0Wm1GMVZsNGFPT2wxZXgwWDE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC80NTNhZWQtNzY0NS00NTlkLTg1ZDgt ODVkODBhNTQ0YmViLzEvNU16WE5RaXB0Wm1GMVZsNGFPT2wxZXgwWDE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC80NTNhZWQtNzY0NS00NTlkLTg1ZDgtODVkODBhNTQ0YmVi LzEvNU16WE5RaXB0Wm1GMVZsNGFPT2wxZXgwWDE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEl57kw4F L8+5GGV5+E6JoPw/LiPfP8RcRdQ3IubsJPeE385dCQ+3igFDN054uNDTOfqS9xjK fnAmCshPLuOzrWdaKTpPTimANyDAvTw1Z915FEF5+sxllOEZIHNQvejC6aSrUxgV LrBTI8qmyWkMkNEGHTG0MyCeq+e0UCsYMiFr0wu6jcLQNHphvMGDMbltrcyadUz3 +7YboQ+/Zw7ZVUYuHUq2UgXL6lHre8K8lj3SdSxzcJ5k4SkUvHq59/TxFsBiSp8J SzMnG3MHbAV7nTfm3PCViaQL2Thfo5nIaOrA8KQzJEPOB/YDcaVWn/KQ0RKsVX+N bqiAHpEA+jhO/Q== -----END CERTIFICATE-----Generated at Mon Dec 29 01:50:19 2025 by rpki-client