This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft File: 5Icdjywm6nGuXBPIRUp70xhxkYQ.mft (raw, json) Hash identifier: nhjHGkER2/4/mZbFpvYgFeR8luTGXRtws6T8vE4RWlU= Subject key identifier: B7:AC:6F:64:2C:88:5F:58:4D:2F:49:24:83:0F:FC:14:DC:CC:18:BC Authority key identifier: E4:87:1D:8F:2C:26:EA:71:AE:5C:13:C8:45:4A:7B:D3:18:71:91:84 Certificate issuer: /CN=e4871d8f2c26ea71ae5c13c8454a7bd318719184 Certificate serial: 019B63C2A1563422C916562691C9A16DC11F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft Manifest number: 0F1C Signing time: Sun 28 Dec 2025 07:00:58 +0000 Manifest this update: Sun 28 Dec 2025 07:00:58 +0000 Manifest next update: Mon 29 Dec 2025 07:00:58 +0000 Files and hashes: 1: 5Icdjywm6nGuXBPIRUp70xhxkYQ.crl (hash: JNZqNvH5i3pJs3sxhMEviR4SOdEs4ZuXcTi8l+gfzj4=) 2: ook9uIQAuCcVv2Fg0PJ5r3IwiNU.roa (hash: Y/wn2KIY7krXyisLSYMbczx5AjYDM8sXL4TRFNZpN6U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:c2:a1:56:34:22:c9:16:56:26:91:c9:a1:6d:c1:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4871d8f2c26ea71ae5c13c8454a7bd318719184 Validity Not Before: Dec 28 07:00:58 2025 GMT Not After : Dec 29 07:00:58 2025 GMT Subject: CN=b7ac6f642c885f584d2f4924830ffc14dccc18bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:2f:29:4e:a8:5f:ef:e1:11:be:79:62:39:db: 40:a7:67:e8:da:ed:a8:5d:76:ff:7c:08:a0:f9:6a: cb:f0:68:51:ba:17:cf:2f:26:3f:e1:89:fa:96:3c: 7b:d0:16:af:8a:61:8c:85:e8:a6:87:5f:d1:1c:8a: 52:a3:a8:8a:9e:55:dc:e6:66:a6:d2:15:7c:eb:74: fc:c4:33:f2:cc:fc:1d:57:eb:49:3c:e4:06:fd:8a: 0c:e8:4f:f4:cf:5d:e4:c9:56:ee:36:a7:cd:7b:65: 00:de:b0:15:e4:a8:f3:fc:bd:29:d1:be:5a:0c:18: d5:35:30:4e:e2:c3:a9:6f:5a:5b:99:f1:7f:90:80: e1:b7:6f:a1:c0:b4:cb:25:70:4b:51:6b:e7:05:9e: 16:c4:4e:48:0f:4c:9e:86:ef:96:b0:d3:27:5a:fc: 21:c5:da:a8:bb:8f:47:ee:6e:fb:01:5b:98:85:57: d9:fa:bb:67:04:01:5b:44:9e:04:59:94:45:05:f7: d9:f9:a1:90:6a:a6:1b:c5:e6:5f:39:db:93:be:1d: d1:89:47:42:85:2d:29:30:48:79:6d:6f:a1:b8:31: 6b:bf:1d:b7:22:97:22:20:e7:16:9c:ed:d4:1d:86: aa:91:8d:b1:af:b7:05:ff:73:5e:fe:de:31:8d:92: 74:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:AC:6F:64:2C:88:5F:58:4D:2F:49:24:83:0F:FC:14:DC:CC:18:BC X509v3 Authority Key Identifier: keyid:E4:87:1D:8F:2C:26:EA:71:AE:5C:13:C8:45:4A:7B:D3:18:71:91:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:55:6a:70:b4:df:72:29:25:94:5b:dc:e7:21:ed:d1:5a:1b: f7:90:ab:d0:3c:4b:e7:2e:77:eb:14:cf:be:ce:f6:0f:c6:bb: 20:9a:7c:84:49:88:04:7d:e5:f7:7d:0d:71:56:a6:ff:0a:61: 0b:87:c7:0c:3e:8f:38:c9:26:19:69:75:4a:ba:e5:be:b3:aa: 43:84:31:5e:7c:53:d2:44:f7:eb:f0:21:a6:d3:63:f5:f3:17: 71:98:bf:7f:16:43:a8:cb:07:01:47:dd:1e:84:5d:36:3c:45: 60:73:0d:5a:c6:b9:ab:f6:78:9d:52:f4:10:6b:aa:e9:3a:ee: e9:62:c2:b0:7c:67:05:14:b5:31:15:44:c3:45:eb:eb:58:27: 0a:83:7a:1d:b0:f1:10:3d:01:c0:66:60:a9:d3:bf:21:74:6f: 4f:76:ad:93:75:38:7d:b0:53:d3:60:35:7a:94:d2:20:da:83: db:7e:3b:42:a7:19:f1:65:44:3c:cb:4f:3c:31:27:69:4a:f2: e4:3b:eb:29:1e:7c:31:56:54:62:ce:2e:61:f7:26:14:f8:f6: fc:44:bb:88:a3:94:7c:7d:fc:08:62:00:be:d3:9b:29:dd:7d: cf:f2:64:9a:cf:33:a1:4d:fd:18:3f:e4:43:8f:f9:e6:24:b7: 9f:a8:0d:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjwqFWNCLJFlYmkcmhbcEfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ODcxZDhmMmMyNmVhNzFhZTVjMTNjODQ1NGE3YmQzMTg3 MTkxODQwHhcNMjUxMjI4MDcwMDU4WhcNMjUxMjI5MDcwMDU4WjAzMTEwLwYDVQQD EyhiN2FjNmY2NDJjODg1ZjU4NGQyZjQ5MjQ4MzBmZmMxNGRjY2MxOGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAii8pTqhf7+ERvnliOdtAp2fo2u2o XXb/fAig+WrL8GhRuhfPLyY/4Yn6ljx70BavimGMheimh1/RHIpSo6iKnlXc5mam 0hV863T8xDPyzPwdV+tJPOQG/YoM6E/0z13kyVbuNqfNe2UA3rAV5Kjz/L0p0b5a DBjVNTBO4sOpb1pbmfF/kIDht2+hwLTLJXBLUWvnBZ4WxE5ID0yehu+WsNMnWvwh xdqou49H7m77AVuYhVfZ+rtnBAFbRJ4EWZRFBffZ+aGQaqYbxeZfOduTvh3RiUdC hS0pMEh5bW+huDFrvx23IpciIOcWnO3UHYaqkY2xr7cF/3Ne/t4xjZJ06QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLesb2QsiF9YTS9JJIMP/BTczBi8MB8GA1UdIwQY MBaAFOSHHY8sJupxrlwTyEVKe9MYcZGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUljZGp5d202bkd1WEJQSVJVcDcweGh4a1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8zNGZlMmUtMjZkNi00NTVkLTg3Nzgt ZjkwNWE4M2JkMzg5LzEvNUljZGp5d202bkd1WEJQSVJVcDcweGh4a1lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8zNGZlMmUtMjZkNi00NTVkLTg3NzgtZjkwNWE4M2JkMzg5 LzEvNUljZGp5d202bkd1WEJQSVJVcDcweGh4a1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVVVqcLTf cikllFvc5yHt0Vob95Cr0DxL5y536xTPvs72D8a7IJp8hEmIBH3l930NcVam/wph C4fHDD6POMkmGWl1SrrlvrOqQ4QxXnxT0kT36/AhptNj9fMXcZi/fxZDqMsHAUfd HoRdNjxFYHMNWsa5q/Z4nVL0EGuq6Tru6WLCsHxnBRS1MRVEw0Xr61gnCoN6HbDx ED0BwGZgqdO/IXRvT3atk3U4fbBT02A1epTSINqD2347QqcZ8WVEPMtPPDEnaUry 5DvrKR58MVZUYs4uYfcmFPj2/ES7iKOUfH38CGIAvtObKd19z/Jkms8zoU39GD/k Q4/55iS3n6gN/Q== -----END CERTIFICATE-----Generated at Sun Dec 28 11:24:59 2025 by rpki-client