This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.mft File: 5M1uYcFOg5EAWoF7JyL3xKgeuZM.mft (raw, json) Hash identifier: 8PE+D6O4PrOyiQfYsFl2s5pOw/EhpiFsvUGKgE2Xsuc= Subject key identifier: 76:21:AC:89:B6:A0:7B:E7:38:61:A1:06:B5:B3:A1:87:30:D9:E4:F6 Authority key identifier: E4:CD:6E:61:C1:4E:83:91:00:5A:81:7B:27:22:F7:C4:A8:1E:B9:93 Certificate issuer: /CN=e4cd6e61c14e8391005a817b2722f7c4a81eb993 Certificate serial: 019B42B7234598AE2EFFE33643AE075FF0B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5M1uYcFOg5EAWoF7JyL3xKgeuZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.mft Manifest number: 0A43 Signing time: Sun 21 Dec 2025 21:00:56 +0000 Manifest this update: Sun 21 Dec 2025 21:00:56 +0000 Manifest next update: Mon 22 Dec 2025 21:00:56 +0000 Files and hashes: 1: 5M1uYcFOg5EAWoF7JyL3xKgeuZM.crl (hash: 210+dAypjT7hk+rm0e+ByaEYt8U2aYKxyQe6O2J+ULk=) 2: pLApfkxIdjxoT9Fus2V1e6urFrI.roa (hash: vf/DF5zyaMPjk4SS8zEJvZOPKo0v68Ai1w0hvPkh9bQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.crl rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.mft rsync://rpki.ripe.net/repository/DEFAULT/5M1uYcFOg5EAWoF7JyL3xKgeuZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:23:45:98:ae:2e:ff:e3:36:43:ae:07:5f:f0:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4cd6e61c14e8391005a817b2722f7c4a81eb993 Validity Not Before: Dec 21 21:00:56 2025 GMT Not After : Dec 22 21:00:56 2025 GMT Subject: CN=7621ac89b6a07be73861a106b5b3a18730d9e4f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4b:8a:87:86:4d:23:7a:f0:cd:03:e7:91:22: ac:b3:80:32:48:67:3e:af:88:34:a4:73:71:de:c9: d8:ec:5f:4f:00:07:22:6a:b8:b0:58:b2:22:07:d7: fb:14:38:f1:ee:d5:9d:64:20:60:9b:47:20:d2:0d: 43:ca:5a:e8:3f:d6:07:f7:90:fd:61:31:c9:7c:09: e6:80:61:0b:de:4b:ca:dc:27:7a:fd:70:b7:d5:be: 1b:13:c8:a1:9b:92:ac:0f:8a:01:5a:38:b3:8d:cb: 27:1e:e6:50:bf:3f:82:eb:3c:ba:74:26:dc:ba:fb: fe:f7:96:0d:14:c2:79:d4:00:26:ef:d8:3c:dc:3c: e3:b3:c4:fa:45:50:47:0c:51:2f:76:58:e7:80:de: 7d:18:c8:a7:0a:a5:97:7e:d6:5f:81:b7:e4:b3:5b: 24:ed:b6:59:d5:77:1e:8a:1e:39:b7:77:da:b1:9d: bc:6a:ac:a3:3a:72:28:b0:2d:d2:5e:9f:59:87:30: 84:cb:98:24:65:a4:5a:57:8d:5c:f9:aa:05:8a:a5: c0:8a:29:d9:b4:b9:9e:64:94:7f:73:0c:20:5e:09: 0f:9f:64:46:40:14:27:e1:af:e3:2a:59:13:b0:62: 34:76:d6:8c:e6:37:3b:85:29:5c:f8:f1:ca:fc:e3: 71:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:21:AC:89:B6:A0:7B:E7:38:61:A1:06:B5:B3:A1:87:30:D9:E4:F6 X509v3 Authority Key Identifier: keyid:E4:CD:6E:61:C1:4E:83:91:00:5A:81:7B:27:22:F7:C4:A8:1E:B9:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5M1uYcFOg5EAWoF7JyL3xKgeuZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:04:ff:86:99:9c:f1:46:f1:74:71:15:55:8e:6f:1b:cd:28: d7:cc:2d:12:48:df:2a:98:80:2c:ea:ca:55:09:c8:d4:39:29: fe:73:d6:5e:30:7f:80:51:fd:81:c7:bc:57:10:e0:c0:24:aa: cd:9a:9e:0f:3c:f8:7e:d5:d2:3e:71:25:c0:ae:56:e7:f6:76: 60:2e:25:65:67:b3:23:19:75:4b:2a:63:aa:b1:e6:36:c0:12: e0:c5:cf:9b:95:0e:3a:d1:c0:5b:2b:13:db:a7:e5:64:09:97: fa:c7:5b:19:34:e6:9e:71:0a:cf:61:c2:c9:40:31:67:d0:d2: b5:0b:61:9e:a1:d6:5a:67:30:1e:b9:b4:be:34:7e:ac:99:36: e8:ae:b3:09:cf:a4:df:68:05:92:cd:3f:a4:72:40:05:ae:ed: c6:b6:38:a6:58:01:d1:06:13:a9:ae:16:bd:dc:73:2b:1b:9c: 32:2e:8c:29:3f:9b:33:d4:d2:65:bd:b8:3c:4c:86:00:90:38: 75:c8:3c:27:88:06:04:96:60:5d:50:ef:2c:d9:e0:a5:34:f1: db:60:80:1f:a8:89:a2:80:bc:30:08:1f:b0:c6:0e:a7:6d:64: c9:33:a7:b2:34:5f:c9:8e:7a:1d:ab:bc:4b:4c:87:59:3c:67: 33:f7:02:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCtyNFmK4u/+M2Q64HX/CxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0Y2Q2ZTYxYzE0ZTgzOTEwMDVhODE3YjI3MjJmN2M0YTgx ZWI5OTMwHhcNMjUxMjIxMjEwMDU2WhcNMjUxMjIyMjEwMDU2WjAzMTEwLwYDVQQD Eyg3NjIxYWM4OWI2YTA3YmU3Mzg2MWExMDZiNWIzYTE4NzMwZDllNGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EuKh4ZNI3rwzQPnkSKss4AySGc+ r4g0pHNx3snY7F9PAAciariwWLIiB9f7FDjx7tWdZCBgm0cg0g1DylroP9YH95D9 YTHJfAnmgGEL3kvK3Cd6/XC31b4bE8ihm5KsD4oBWjizjcsnHuZQvz+C6zy6dCbc uvv+95YNFMJ51AAm79g83Dzjs8T6RVBHDFEvdljngN59GMinCqWXftZfgbfks1sk 7bZZ1Xceih45t3fasZ28aqyjOnIosC3SXp9ZhzCEy5gkZaRaV41c+aoFiqXAiinZ tLmeZJR/cwwgXgkPn2RGQBQn4a/jKlkTsGI0dtaM5jc7hSlc+PHK/ONxZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHYhrIm2oHvnOGGhBrWzoYcw2eT2MB8GA1UdIwQY MBaAFOTNbmHBToORAFqBeyci98SoHrmTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU0xdVljRk9nNUVBV29GN0p5TDN4S2dldVpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kYTQwY2YtOTgzNi00ODJiLWI3YTYt YzVhZDE2YTU1YzVmLzEvNU0xdVljRk9nNUVBV29GN0p5TDN4S2dldVpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9kYTQwY2YtOTgzNi00ODJiLWI3YTYtYzVhZDE2YTU1YzVm LzEvNU0xdVljRk9nNUVBV29GN0p5TDN4S2dldVpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsAT/hpmc 8UbxdHEVVY5vG80o18wtEkjfKpiALOrKVQnI1Dkp/nPWXjB/gFH9gce8VxDgwCSq zZqeDzz4ftXSPnElwK5W5/Z2YC4lZWezIxl1SypjqrHmNsAS4MXPm5UOOtHAWysT 26flZAmX+sdbGTTmnnEKz2HCyUAxZ9DStQthnqHWWmcwHrm0vjR+rJk26K6zCc+k 32gFks0/pHJABa7txrY4plgB0QYTqa4WvdxzKxucMi6MKT+bM9TSZb24PEyGAJA4 dcg8J4gGBJZgXVDvLNngpTTx22CAH6iJooC8MAgfsMYOp21kyTOnsjRfyY56Hau8 S0yHWTxnM/cC5A== -----END CERTIFICATE-----Generated at Mon Dec 22 06:25:55 2025 by rpki-client