This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft File: 5c4xqiBddBAUR-_9bDE1GGFGRTo.mft (raw, json) Hash identifier: 5eFxl/ws8ObHiogdJuZG5I+Jv6a8Sk26qT86PSlp+7Y= Subject key identifier: 03:36:6D:B5:D7:FD:57:3D:6D:67:0C:A0:1E:63:CB:4D:EC:89:50:2B Authority key identifier: E5:CE:31:AA:20:5D:74:10:14:47:EF:FD:6C:31:35:18:61:46:45:3A Certificate issuer: /CN=e5ce31aa205d74101447effd6c3135186146453a Certificate serial: 019B35A07A9B44B920BBCD84559F657FE385 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft Manifest number: 1782 Signing time: Fri 19 Dec 2025 08:01:08 +0000 Manifest this update: Fri 19 Dec 2025 08:01:08 +0000 Manifest next update: Sat 20 Dec 2025 08:01:08 +0000 Files and hashes: 1: 1prUVz0HPmxrICK89MLWQGvd_os.roa (hash: nYOxG6xI/OF/g1onNafntFHFC9rtfVRgZj8b/z6tXRg=) 2: 5c4xqiBddBAUR-_9bDE1GGFGRTo.crl (hash: NRTV14NEuzd8htccTOdWhBcKK1K5vbhPvYCHYI82iE4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.crl rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:7a:9b:44:b9:20:bb:cd:84:55:9f:65:7f:e3:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5ce31aa205d74101447effd6c3135186146453a Validity Not Before: Dec 19 08:01:08 2025 GMT Not After : Dec 20 08:01:08 2025 GMT Subject: CN=03366db5d7fd573d6d670ca01e63cb4dec89502b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:39:36:e8:e6:19:46:51:da:54:94:59:cd:0f: 64:e8:2b:07:c7:21:b3:d2:75:60:95:27:64:21:1d: b7:4a:78:aa:d8:2f:43:63:51:b8:5a:a4:a6:4b:eb: 5e:4c:a6:94:0c:c1:3c:91:54:3e:c0:ac:23:bc:a4: 4f:8b:21:41:8e:cc:56:30:cb:88:17:23:1a:cf:c3: 71:b7:bd:4f:f4:24:40:f9:92:01:e6:e5:4b:5e:d5: fa:f4:95:56:e2:42:30:f1:61:fd:e0:6f:97:64:c3: 24:c4:71:83:d8:1d:a6:5b:5b:0d:ff:40:b8:c8:74: 3f:7e:24:9b:b6:6b:47:59:2f:d5:59:e9:b4:06:df: 12:e7:db:9d:d0:a2:a4:fd:70:c1:95:c6:43:7d:50: ab:d6:f1:19:3f:5e:45:4b:f5:f0:cd:d7:a8:fe:76: 98:64:b3:bc:23:44:89:37:2e:66:a5:e3:3b:a8:cc: b6:b8:99:79:3f:c9:53:9c:b3:d0:2c:42:0a:f6:8f: 49:9b:66:e6:cf:67:9e:a6:0a:ef:85:d0:64:96:f9: bf:38:a2:15:fe:2b:dc:09:f2:d7:87:77:c3:f4:2d: bb:e4:25:16:ca:fc:6a:63:52:72:bf:f6:32:97:05: fe:41:53:15:5e:c6:62:85:d5:60:5d:76:cc:78:ce: 94:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:36:6D:B5:D7:FD:57:3D:6D:67:0C:A0:1E:63:CB:4D:EC:89:50:2B X509v3 Authority Key Identifier: keyid:E5:CE:31:AA:20:5D:74:10:14:47:EF:FD:6C:31:35:18:61:46:45:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:d4:a9:ce:12:94:02:0f:87:b9:d4:ea:a5:62:47:b4:3b:bf: b9:3a:ff:11:f7:92:a6:28:0d:ab:2c:f2:d3:22:83:7b:2c:2c: 87:01:9c:cb:30:94:3c:56:04:43:af:24:af:b2:6b:12:13:90: 7b:67:1a:96:87:60:b5:16:97:79:c7:c1:df:32:43:03:2d:80: e1:d8:6e:88:b0:81:3b:83:09:9c:ca:60:5a:07:5f:15:b4:6c: fa:08:fb:b8:a4:ae:f0:8e:9d:b0:00:6c:63:48:0b:42:2e:0a: 8d:27:53:c2:dc:5c:c8:57:92:49:53:11:46:a0:4c:da:45:b2: 5c:57:b7:fb:db:d4:88:f9:9e:6b:0d:67:a6:6d:22:30:2f:1b: 00:68:01:eb:3a:99:6a:b3:e5:0f:3f:bf:e6:65:8e:51:3e:73: 60:0d:7d:af:d3:11:2e:c2:a2:7f:20:49:06:fc:db:0b:10:f4: 89:14:dd:b7:c3:c1:b7:12:25:b2:72:df:fb:88:d7:71:a9:81: 24:2d:23:6e:a2:fd:38:79:41:af:14:51:cd:66:80:16:bc:de: e0:7b:8c:bd:cd:d7:6c:5f:d5:69:e2:b1:3e:02:06:8e:08:68: cb:25:72:c4:e0:1c:db:0c:32:a7:a6:1a:55:f4:e6:2a:cb:1b: 0b:cf:33:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oHqbRLkgu82EVZ9lf+OFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1Y2UzMWFhMjA1ZDc0MTAxNDQ3ZWZmZDZjMzEzNTE4NjE0 NjQ1M2EwHhcNMjUxMjE5MDgwMTA4WhcNMjUxMjIwMDgwMTA4WjAzMTEwLwYDVQQD EygwMzM2NmRiNWQ3ZmQ1NzNkNmQ2NzBjYTAxZTYzY2I0ZGVjODk1MDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjk26OYZRlHaVJRZzQ9k6CsHxyGz 0nVglSdkIR23Sniq2C9DY1G4WqSmS+teTKaUDME8kVQ+wKwjvKRPiyFBjsxWMMuI FyMaz8Nxt71P9CRA+ZIB5uVLXtX69JVW4kIw8WH94G+XZMMkxHGD2B2mW1sN/0C4 yHQ/fiSbtmtHWS/VWem0Bt8S59ud0KKk/XDBlcZDfVCr1vEZP15FS/Xwzdeo/naY ZLO8I0SJNy5mpeM7qMy2uJl5P8lTnLPQLEIK9o9Jm2bmz2eepgrvhdBklvm/OKIV /ivcCfLXh3fD9C275CUWyvxqY1Jyv/YylwX+QVMVXsZihdVgXXbMeM6U8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAM2bbXX/Vc9bWcMoB5jy03siVArMB8GA1UdIwQY MBaAFOXOMaogXXQQFEfv/WwxNRhhRkU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWM0eHFpQmRkQkFVUi1fOWJERTFHR0ZHUlRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC84Yzg1MjQtN2Y4NS00MzEzLThlZDIt YmY4NjZkYTc0N2FmLzEvNWM0eHFpQmRkQkFVUi1fOWJERTFHR0ZHUlRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC84Yzg1MjQtN2Y4NS00MzEzLThlZDItYmY4NjZkYTc0N2Fm LzEvNWM0eHFpQmRkQkFVUi1fOWJERTFHR0ZHUlRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbdSpzhKU Ag+HudTqpWJHtDu/uTr/EfeSpigNqyzy0yKDeywshwGcyzCUPFYEQ68kr7JrEhOQ e2calodgtRaXecfB3zJDAy2A4dhuiLCBO4MJnMpgWgdfFbRs+gj7uKSu8I6dsABs Y0gLQi4KjSdTwtxcyFeSSVMRRqBM2kWyXFe3+9vUiPmeaw1npm0iMC8bAGgB6zqZ arPlDz+/5mWOUT5zYA19r9MRLsKifyBJBvzbCxD0iRTdt8PBtxIlsnLf+4jXcamB JC0jbqL9OHlBrxRRzWaAFrze4HuMvc3XbF/VaeKxPgIGjghoyyVyxOAc2wwyp6Ya VfTmKssbC88z7Q== -----END CERTIFICATE-----Generated at Fri Dec 19 10:21:20 2025 by rpki-client