This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.mft File: 5eioFf01iudtJ0sEWwpxW9UcYng.mft (raw, json) Hash identifier: 87eqidB3O4yE2L+cziKMz31hemfKo8swtq2h/JJaG30= Subject key identifier: D1:A2:13:02:DE:21:22:1B:3E:A9:8C:AC:35:BA:09:54:D3:62:0A:A2 Authority key identifier: E5:E8:A8:15:FD:35:8A:E7:6D:27:4B:04:5B:0A:71:5B:D5:1C:62:78 Certificate issuer: /CN=e5e8a815fd358ae76d274b045b0a715bd51c6278 Certificate serial: 019B451393EEBD31C2C46321DD6E959E050A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eioFf01iudtJ0sEWwpxW9UcYng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.mft Manifest number: 05F4 Signing time: Mon 22 Dec 2025 08:01:09 +0000 Manifest this update: Mon 22 Dec 2025 08:01:09 +0000 Manifest next update: Tue 23 Dec 2025 08:01:09 +0000 Files and hashes: 1: 5eioFf01iudtJ0sEWwpxW9UcYng.crl (hash: pAxXsI8tFAn/VX7lBPbj8i3VvhtqwYoXFWg0ODmIc38=) 2: zgXChFab3CAW1cEIvlaaHwBihDQ.roa (hash: KIPNLp3NHIAV1bWGC3MaoaY8HHw3uTlNTX/DpY4nEoA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.mft rsync://rpki.ripe.net/repository/DEFAULT/5eioFf01iudtJ0sEWwpxW9UcYng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 08:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:13:93:ee:bd:31:c2:c4:63:21:dd:6e:95:9e:05:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5e8a815fd358ae76d274b045b0a715bd51c6278 Validity Not Before: Dec 22 08:01:09 2025 GMT Not After : Dec 23 08:01:09 2025 GMT Subject: CN=d1a21302de21221b3ea98cac35ba0954d3620aa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9f:f4:3f:7a:30:f0:15:8a:a4:53:ff:bd:bb: 10:8c:88:1d:d1:81:9f:a9:d2:53:b8:db:d9:1e:db: d3:ad:b9:8e:66:ad:29:f9:15:95:8e:11:05:80:32: ca:65:82:58:d8:1b:72:e3:97:37:c1:f7:66:77:b7: 3b:09:77:81:f6:e6:8a:68:6f:a7:40:5e:0c:e6:8a: 33:5a:91:d6:d7:f8:c1:4f:46:90:7f:2a:29:96:a9: 63:3e:1b:e0:fc:df:cc:98:23:d3:80:9c:55:e8:c5: d9:65:38:2f:17:62:dc:6b:12:9f:14:06:7d:95:de: eb:fa:85:f9:37:5c:a1:13:cf:e3:e2:26:ab:e6:ac: c3:5d:83:a5:14:c1:de:76:70:f5:22:d2:a0:bb:2d: a6:57:8f:0c:82:ac:18:93:cc:34:ae:aa:bc:cb:88: 1c:1b:1e:5a:39:96:44:fd:bc:3b:68:68:0c:aa:2d: aa:df:5d:d5:23:8d:a0:55:27:9f:15:6a:35:17:96: 7e:7a:62:8d:b1:69:d2:20:b9:9d:8c:d2:69:2f:04: 39:3a:ca:9e:91:bf:5b:54:e4:8f:ec:cb:bf:03:6b: 9e:e8:e0:e8:75:10:16:28:c4:42:3d:28:61:f3:38: c7:86:18:63:d5:47:13:a1:42:be:dd:b0:b3:2c:64: bd:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:A2:13:02:DE:21:22:1B:3E:A9:8C:AC:35:BA:09:54:D3:62:0A:A2 X509v3 Authority Key Identifier: keyid:E5:E8:A8:15:FD:35:8A:E7:6D:27:4B:04:5B:0A:71:5B:D5:1C:62:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eioFf01iudtJ0sEWwpxW9UcYng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:f8:e6:21:4a:5c:9d:ea:f4:6c:a3:a1:b0:56:85:5a:38:8c: ca:77:b8:45:94:12:c4:38:5c:23:53:d3:8c:59:a1:b1:f2:91: 46:1b:b4:41:92:9b:8b:4f:61:df:c8:00:39:45:1f:28:83:31: a9:05:e2:78:12:80:50:9d:dd:33:3f:89:3f:79:69:9d:f6:9e: a8:bb:4c:09:c7:28:08:da:04:15:13:91:69:6d:3f:e2:d8:a6: af:1e:dc:84:79:0a:fc:74:6f:7f:a9:b4:1e:33:ff:53:ae:3d: 69:f2:e2:e8:37:ff:3a:99:0d:c9:e7:a0:34:f5:8b:7b:f3:5a: 1b:63:e7:b1:f5:3f:6b:82:00:72:5b:05:e6:52:ae:cc:be:c8: ea:a0:10:47:85:e8:75:df:42:ae:60:0d:51:ec:34:bc:86:af: 58:16:96:ad:1c:d4:06:b9:17:52:b5:95:0f:60:ee:0c:04:38: 05:79:05:0a:b6:da:fe:18:f8:bc:91:47:01:02:d9:80:89:41: a8:59:55:e8:42:78:60:c6:65:84:50:e3:61:4a:70:4a:04:7b: 1c:7f:60:a7:09:ca:24:08:11:bf:73:6a:5d:ce:26:23:4e:17: b4:a7:89:6c:11:11:96:37:c0:25:30:c6:5d:ff:4b:c9:2c:54: 3a:f3:96:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFE5PuvTHCxGMh3W6VngUKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ZThhODE1ZmQzNThhZTc2ZDI3NGIwNDViMGE3MTViZDUx YzYyNzgwHhcNMjUxMjIyMDgwMTA5WhcNMjUxMjIzMDgwMTA5WjAzMTEwLwYDVQQD EyhkMWEyMTMwMmRlMjEyMjFiM2VhOThjYWMzNWJhMDk1NGQzNjIwYWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3p/0P3ow8BWKpFP/vbsQjIgd0YGf qdJTuNvZHtvTrbmOZq0p+RWVjhEFgDLKZYJY2Bty45c3wfdmd7c7CXeB9uaKaG+n QF4M5oozWpHW1/jBT0aQfyoplqljPhvg/N/MmCPTgJxV6MXZZTgvF2LcaxKfFAZ9 ld7r+oX5N1yhE8/j4iar5qzDXYOlFMHednD1ItKguy2mV48MgqwYk8w0rqq8y4gc Gx5aOZZE/bw7aGgMqi2q313VI42gVSefFWo1F5Z+emKNsWnSILmdjNJpLwQ5Osqe kb9bVOSP7Mu/A2ue6ODodRAWKMRCPShh8zjHhhhj1UcToUK+3bCzLGS9dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNGiEwLeISIbPqmMrDW6CVTTYgqiMB8GA1UdIwQY MBaAFOXoqBX9NYrnbSdLBFsKcVvVHGJ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWVpb0ZmMDFpdWR0SjBzRVd3cHhXOVVjWW5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi85MjNlNzgtNzhhNy00ZDk3LTlhN2Mt Nzg2ZGUzZDFhYmU0LzEvNWVpb0ZmMDFpdWR0SjBzRVd3cHhXOVVjWW5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi85MjNlNzgtNzhhNy00ZDk3LTlhN2MtNzg2ZGUzZDFhYmU0 LzEvNWVpb0ZmMDFpdWR0SjBzRVd3cHhXOVVjWW5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIfjmIUpc ner0bKOhsFaFWjiMyne4RZQSxDhcI1PTjFmhsfKRRhu0QZKbi09h38gAOUUfKIMx qQXieBKAUJ3dMz+JP3lpnfaeqLtMCccoCNoEFRORaW0/4timrx7chHkK/HRvf6m0 HjP/U649afLi6Df/OpkNyeegNPWLe/NaG2PnsfU/a4IAclsF5lKuzL7I6qAQR4Xo dd9CrmANUew0vIavWBaWrRzUBrkXUrWVD2DuDAQ4BXkFCrba/hj4vJFHAQLZgIlB qFlV6EJ4YMZlhFDjYUpwSgR7HH9gpwnKJAgRv3NqXc4mI04XtKeJbBERljfAJTDG Xf9LySxUOvOWaA== -----END CERTIFICATE-----Generated at Mon Dec 22 17:08:41 2025 by rpki-client