This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft File: 5nEAZ58HKCzUjLUQe_l69684ick.mft (raw, json) Hash identifier: yAzVY2kzsDWMa6INORPyfoFFFeJ3Q0ptk8Po3zqoWUs= Subject key identifier: 6F:12:32:BE:84:03:EB:4A:BE:84:DA:AE:61:5F:E6:38:58:F9:B1:9E Authority key identifier: E6:71:00:67:9F:07:28:2C:D4:8C:B5:10:7B:F9:7A:F7:AF:38:89:C9 Certificate issuer: /CN=e67100679f07282cd48cb5107bf97af7af3889c9 Certificate serial: 019B687AFE21CF814292AE08A48D708C0BBF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft Manifest number: 17A1 Signing time: Mon 29 Dec 2025 05:00:49 +0000 Manifest this update: Mon 29 Dec 2025 05:00:49 +0000 Manifest next update: Tue 30 Dec 2025 05:00:49 +0000 Files and hashes: 1: 5nEAZ58HKCzUjLUQe_l69684ick.crl (hash: Vrvqd/l1ED0XbNaijJgFYg6Fv5i3cYsPQKdni7lPDN4=) 2: 7eIKY9Ns0L09w5kNzh8lsSD-qX4.roa (hash: y3hJhXF+j9m5PtpyF4jbGxtnUIPaOdhFtO4SCic0Agc=) 3: j-ZyKNm5qJSX-2tMIRTjHHmV6S0.roa (hash: EtviVU5gFIFyi2gZ6S98pdS7AYV4lh9vjrKlnqMRix0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.crl rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 05:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:7a:fe:21:cf:81:42:92:ae:08:a4:8d:70:8c:0b:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e67100679f07282cd48cb5107bf97af7af3889c9 Validity Not Before: Dec 29 05:00:49 2025 GMT Not After : Dec 30 05:00:49 2025 GMT Subject: CN=6f1232be8403eb4abe84daae615fe63858f9b19e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b9:1f:93:33:9d:0e:d9:3e:b4:3c:6e:b2:0c: 6d:4a:44:c6:50:6a:b3:d1:50:ff:bb:b4:52:94:3f: 0b:82:ce:9f:3d:2c:c6:58:70:de:3c:fb:fe:9d:ba: bf:28:7e:ab:d7:eb:c8:2e:c3:ca:4b:ea:92:06:c8: 9c:c8:02:00:08:3b:e9:17:1d:a7:5c:5b:f7:a2:b5: 45:6c:d4:38:ce:31:e1:49:38:4b:49:da:37:02:b3: 7c:3a:34:77:50:9a:3c:13:58:00:35:ec:1e:4d:b0: 55:b1:c1:35:44:7f:e0:d4:6b:c7:04:0c:5a:2a:35: 32:9d:30:8f:76:7d:ca:b2:a8:00:1c:2e:71:6f:94: 34:22:a4:9c:31:85:59:f0:f5:b3:2e:ea:ac:6f:55: 4f:d7:75:50:51:a6:c2:b9:95:78:f8:4d:1f:53:30: 90:41:01:a1:2c:12:e6:50:1e:29:5c:f2:e1:b1:a6: 2e:b0:56:d3:71:87:b9:c7:0b:a3:aa:ec:65:a5:91: 37:2a:c0:97:44:cb:87:a3:05:14:c6:75:11:fe:8b: af:94:ed:bd:96:fe:15:21:94:4c:04:87:d9:98:63: a4:df:0c:e2:72:44:8a:7b:75:40:28:d3:fd:c1:21: 69:4b:32:f6:c3:56:fb:e4:bd:9f:ad:51:25:17:94: 0a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:12:32:BE:84:03:EB:4A:BE:84:DA:AE:61:5F:E6:38:58:F9:B1:9E X509v3 Authority Key Identifier: keyid:E6:71:00:67:9F:07:28:2C:D4:8C:B5:10:7B:F9:7A:F7:AF:38:89:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:35:c1:62:8f:6e:0e:60:3f:9f:b2:a4:29:f8:5b:6c:c0:76: 28:45:a7:0d:db:4b:3e:f9:71:7d:81:18:71:2c:37:5b:a4:9f: df:5c:19:8e:27:1e:6f:d9:26:ed:a6:ac:f6:e5:09:e8:7a:4d: 84:33:33:f8:24:e0:a0:d5:ad:a8:da:cc:37:9e:29:da:90:2a: 75:92:7e:d4:c0:72:3d:e5:6b:21:9b:7e:1c:6b:ed:8f:b0:8d: b5:92:e1:2e:8d:6e:c1:38:72:4e:b3:a1:08:5a:22:09:3e:15: 8b:83:55:25:98:7d:41:de:14:97:99:d1:26:d0:26:46:47:c3: 12:13:c6:81:85:23:b4:56:ac:ef:9a:f0:a1:e3:09:e8:3e:e6: 7e:92:0b:3c:c3:90:c4:a8:b2:79:40:7e:e3:d3:1c:49:8f:6c: 69:68:38:42:ac:c3:49:23:df:56:6c:61:83:20:5a:96:28:61: 8e:7e:e8:26:6b:ec:a1:0d:36:7b:51:0e:a1:64:9a:d3:86:64: 11:1d:4b:a7:9f:a0:3f:a1:ef:9a:a1:b8:9f:33:31:e3:26:70: 9d:7b:6f:5e:97:34:63:59:39:1b:5c:32:4a:6f:f2:44:03:fa: 46:0c:fb:05:c9:38:cf:83:17:42:73:ec:83:ea:e9:4b:6d:00: ef:ff:15:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtoev4hz4FCkq4IpI1wjAu/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2NzEwMDY3OWYwNzI4MmNkNDhjYjUxMDdiZjk3YWY3YWYz ODg5YzkwHhcNMjUxMjI5MDUwMDQ5WhcNMjUxMjMwMDUwMDQ5WjAzMTEwLwYDVQQD Eyg2ZjEyMzJiZTg0MDNlYjRhYmU4NGRhYWU2MTVmZTYzODU4ZjliMTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLkfkzOdDtk+tDxusgxtSkTGUGqz 0VD/u7RSlD8Lgs6fPSzGWHDePPv+nbq/KH6r1+vILsPKS+qSBsicyAIACDvpFx2n XFv3orVFbNQ4zjHhSThLSdo3ArN8OjR3UJo8E1gANeweTbBVscE1RH/g1GvHBAxa KjUynTCPdn3KsqgAHC5xb5Q0IqScMYVZ8PWzLuqsb1VP13VQUabCuZV4+E0fUzCQ QQGhLBLmUB4pXPLhsaYusFbTcYe5xwujquxlpZE3KsCXRMuHowUUxnUR/ouvlO29 lv4VIZRMBIfZmGOk3wzickSKe3VAKNP9wSFpSzL2w1b75L2frVElF5QKVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG8SMr6EA+tKvoTarmFf5jhY+bGeMB8GA1UdIwQY MBaAFOZxAGefBygs1Iy1EHv5evevOInJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNW5FQVo1OEhLQ3pVakxVUWVfbDY5Njg0aWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy81YzI2NWUtNDE4Ny00YTc0LTk5NmUt YWU4YzU4MzBjYzIwLzEvNW5FQVo1OEhLQ3pVakxVUWVfbDY5Njg0aWNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy81YzI2NWUtNDE4Ny00YTc0LTk5NmUtYWU4YzU4MzBjYzIw LzEvNW5FQVo1OEhLQ3pVakxVUWVfbDY5Njg0aWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGzXBYo9u DmA/n7KkKfhbbMB2KEWnDdtLPvlxfYEYcSw3W6Sf31wZjiceb9km7aas9uUJ6HpN hDMz+CTgoNWtqNrMN54p2pAqdZJ+1MByPeVrIZt+HGvtj7CNtZLhLo1uwThyTrOh CFoiCT4Vi4NVJZh9Qd4Ul5nRJtAmRkfDEhPGgYUjtFas75rwoeMJ6D7mfpILPMOQ xKiyeUB+49McSY9saWg4QqzDSSPfVmxhgyBalihhjn7oJmvsoQ02e1EOoWSa04Zk ER1Lp5+gP6HvmqG4nzMx4yZwnXtvXpc0Y1k5G1wySm/yRAP6Rgz7Bck4z4MXQnPs g+rpS20A7/8V4w== -----END CERTIFICATE-----Generated at Mon Dec 29 10:09:56 2025 by rpki-client