This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.mft File: 5Wbg5RYoVUzZJjS3Eat1j4RnxIU.mft (raw, json) Hash identifier: vByc0JA2ZryYRkCJdtSnhLCZKx0srmI3AgUaV1MNoAQ= Subject key identifier: 9F:BC:D3:F7:54:72:91:44:C3:0F:11:D4:AC:69:66:33:C0:4F:73:99 Authority key identifier: E5:66:E0:E5:16:28:55:4C:D9:26:34:B7:11:AB:75:8F:84:67:C4:85 Certificate issuer: /CN=e566e0e51628554cd92634b711ab758f8467c485 Certificate serial: 019B4994AFB6420BF7A2B71EE5BD17E3828E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.mft Manifest number: 178F Signing time: Tue 23 Dec 2025 05:00:39 +0000 Manifest this update: Tue 23 Dec 2025 05:00:39 +0000 Manifest next update: Wed 24 Dec 2025 05:00:39 +0000 Files and hashes: 1: 5Wbg5RYoVUzZJjS3Eat1j4RnxIU.crl (hash: 5URMnYGJJ9HwOs8DkX9Gz2AFgGqGeTIKkvAjv0TJ5EI=) 2: wXYrr5S6sLNczud4QNKL5j-Xgqk.roa (hash: 4Keb/PY19EWO9qNRBP6d1iNJWH59G6NwS5aeFCqxnF4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.crl rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.mft rsync://rpki.ripe.net/repository/DEFAULT/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 05:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:94:af:b6:42:0b:f7:a2:b7:1e:e5:bd:17:e3:82:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e566e0e51628554cd92634b711ab758f8467c485 Validity Not Before: Dec 23 05:00:39 2025 GMT Not After : Dec 24 05:00:39 2025 GMT Subject: CN=9fbcd3f754729144c30f11d4ac696633c04f7399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4e:d2:05:c1:8c:de:29:f0:15:42:54:30:57: 43:b5:6d:a7:26:24:29:ba:e5:ab:95:95:61:d4:04: da:15:86:6c:6f:17:35:d1:3b:8b:03:46:c4:46:f5: 5e:89:1b:e6:7c:73:0f:72:09:66:61:c1:93:ec:68: e8:95:52:15:6e:8d:66:39:eb:a7:24:45:35:3d:4e: 1f:2a:37:60:f2:bf:c5:2f:72:14:e4:bc:49:7c:b1: c9:20:5f:6b:06:97:74:19:5e:2d:fa:2d:ad:c4:70: 61:87:29:ca:bc:1c:cd:47:51:05:e3:66:50:b1:11: 1c:22:27:26:d0:13:16:84:73:a4:af:54:09:c8:e6: 4f:8a:30:19:e1:8c:19:23:f3:c0:ba:c6:44:d2:23: 0b:87:78:a2:58:fd:f7:32:d2:ba:da:e6:f7:5c:42: e6:7f:d4:9f:e8:b2:10:74:d0:df:fc:a6:be:0a:03: 8b:df:55:af:f8:4e:d4:40:60:b7:10:11:48:ac:d8: 47:04:d1:e6:a0:b6:27:f3:ed:59:ac:00:09:c1:82: 3d:e9:98:ce:1c:dd:b9:4c:99:e8:6a:4b:27:fa:73: 8d:23:91:b1:38:c3:4c:81:ec:ac:48:0b:d8:d6:d1: 6d:12:c3:df:43:8d:8d:9c:47:be:cb:72:f5:9c:82: ae:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:BC:D3:F7:54:72:91:44:C3:0F:11:D4:AC:69:66:33:C0:4F:73:99 X509v3 Authority Key Identifier: keyid:E5:66:E0:E5:16:28:55:4C:D9:26:34:B7:11:AB:75:8F:84:67:C4:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:c6:2b:1c:e3:4f:02:a5:94:94:6a:cc:24:64:6d:f3:6b:9f: f7:a5:49:64:b1:34:f7:17:64:aa:87:55:84:12:f8:95:1d:5d: d4:ea:23:8e:ef:8f:58:4a:41:3a:a8:0b:ce:b6:0c:f0:56:ac: c1:ad:d9:24:ae:1e:1d:2a:27:5f:ba:27:fc:f5:72:b3:50:ea: bd:bf:e9:d3:c9:d2:f3:06:87:f3:3b:92:ce:d4:03:04:09:92: 95:fe:8f:ce:22:e3:8e:fd:e9:bc:25:0e:e0:6d:a6:f6:89:67: 98:1b:c4:28:1f:8d:4f:15:89:68:42:dc:4f:d8:54:96:69:0b: eb:76:19:d1:b5:ba:94:56:49:54:26:e2:21:cb:bb:11:ea:7c: d2:7e:20:58:7c:c3:57:4d:60:64:71:d6:bb:9a:f0:0d:38:43: 68:2b:1a:9a:ec:ea:76:12:59:2f:40:29:4e:1b:90:35:55:87: ed:d4:9e:61:79:03:8e:2f:c5:35:80:f4:45:2b:25:92:38:86: f0:df:a3:61:65:1c:8c:3f:f7:03:af:d1:08:a0:aa:97:b7:cd: e8:33:c5:9b:5b:94:5d:48:81:4a:bf:27:e7:46:51:34:33:a5: 18:d6:67:bc:13:1a:00:44:48:43:96:51:48:ab:e0:e0:ce:2d: d1:5e:70:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJlK+2Qgv3orce5b0X44KOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NjZlMGU1MTYyODU1NGNkOTI2MzRiNzExYWI3NThmODQ2 N2M0ODUwHhcNMjUxMjIzMDUwMDM5WhcNMjUxMjI0MDUwMDM5WjAzMTEwLwYDVQQD Eyg5ZmJjZDNmNzU0NzI5MTQ0YzMwZjExZDRhYzY5NjYzM2MwNGY3Mzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkU7SBcGM3inwFUJUMFdDtW2nJiQp uuWrlZVh1ATaFYZsbxc10TuLA0bERvVeiRvmfHMPcglmYcGT7GjolVIVbo1mOeun JEU1PU4fKjdg8r/FL3IU5LxJfLHJIF9rBpd0GV4t+i2txHBhhynKvBzNR1EF42ZQ sREcIicm0BMWhHOkr1QJyOZPijAZ4YwZI/PAusZE0iMLh3iiWP33MtK62ub3XELm f9Sf6LIQdNDf/Ka+CgOL31Wv+E7UQGC3EBFIrNhHBNHmoLYn8+1ZrAAJwYI96ZjO HN25TJnoaksn+nONI5GxOMNMgeysSAvY1tFtEsPfQ42NnEe+y3L1nIKuHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ+80/dUcpFEww8R1KxpZjPAT3OZMB8GA1UdIwQY MBaAFOVm4OUWKFVM2SY0txGrdY+EZ8SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVdiZzVSWW9WVXpaSmpTM0VhdDFqNFJueElVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kOWUxNmQtN2U4Yy00M2VjLTk5Zjct ZTI5NmNmZDk3MjA5LzEvNVdiZzVSWW9WVXpaSmpTM0VhdDFqNFJueElVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9kOWUxNmQtN2U4Yy00M2VjLTk5ZjctZTI5NmNmZDk3MjA5 LzEvNVdiZzVSWW9WVXpaSmpTM0VhdDFqNFJueElVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUMYrHONP AqWUlGrMJGRt82uf96VJZLE09xdkqodVhBL4lR1d1Oojju+PWEpBOqgLzrYM8Fas wa3ZJK4eHSonX7on/PVys1Dqvb/p08nS8waH8zuSztQDBAmSlf6PziLjjv3pvCUO 4G2m9olnmBvEKB+NTxWJaELcT9hUlmkL63YZ0bW6lFZJVCbiIcu7Eep80n4gWHzD V01gZHHWu5rwDThDaCsamuzqdhJZL0ApThuQNVWH7dSeYXkDji/FNYD0RSslkjiG 8N+jYWUcjD/3A6/RCKCql7fN6DPFm1uUXUiBSr8n50ZRNDOlGNZnvBMaAERIQ5ZR SKvg4M4t0V5w2A== -----END CERTIFICATE-----Generated at Tue Dec 23 14:13:17 2025 by rpki-client