This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.mft File: 5uGvN6YKmYaO-7qggXtJgPGaVPs.mft (raw, json) Hash identifier: eF4OlSWzSCbwX9Qxs53gD/7d2iMqWt8sLobfYslQzqU= Subject key identifier: BD:8D:80:37:EE:7E:E7:DF:C8:FA:7A:41:E5:F1:4B:D3:C9:B6:AD:26 Authority key identifier: E6:E1:AF:37:A6:0A:99:86:8E:FB:BA:A0:81:7B:49:80:F1:9A:54:FB Certificate issuer: /CN=e6e1af37a60a99868efbbaa0817b4980f19a54fb Certificate serial: 019B4F601DFD00F2804A957B5A66854D7B21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5uGvN6YKmYaO-7qggXtJgPGaVPs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.mft Manifest number: 0B7A Signing time: Wed 24 Dec 2025 08:00:57 +0000 Manifest this update: Wed 24 Dec 2025 08:00:57 +0000 Manifest next update: Thu 25 Dec 2025 08:00:57 +0000 Files and hashes: 1: 04IK808ti0G_mrePZiLfyMd8LPg.roa (hash: KEsbMkessHVdMEPjooQbuvxux4M4IDtjKN92Pi/27Vo=) 2: 5uGvN6YKmYaO-7qggXtJgPGaVPs.crl (hash: 5K6IdYg9KRJIzx4U9Dg0YBNb8Px/QaTzVDzaFaD86qg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.mft rsync://rpki.ripe.net/repository/DEFAULT/5uGvN6YKmYaO-7qggXtJgPGaVPs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 08:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:60:1d:fd:00:f2:80:4a:95:7b:5a:66:85:4d:7b:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6e1af37a60a99868efbbaa0817b4980f19a54fb Validity Not Before: Dec 24 08:00:57 2025 GMT Not After : Dec 25 08:00:57 2025 GMT Subject: CN=bd8d8037ee7ee7dfc8fa7a41e5f14bd3c9b6ad26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:3e:34:51:f4:a7:b6:f8:96:00:73:b0:24:a0: 41:3a:dc:a1:af:7d:7e:c4:f6:c2:2d:f0:95:50:1e: 6d:96:d0:06:35:bd:90:c0:b8:34:79:b6:47:91:cb: 21:e2:c8:bc:df:e9:b9:21:ee:cf:c1:9f:0a:3d:f3: 0d:89:0c:74:6e:52:5d:4d:62:36:c3:65:bf:b9:a4: 2c:b5:8f:a3:69:af:c5:e0:ab:0f:4e:4d:21:bd:b6: e3:52:52:e9:10:c2:5c:f4:21:34:fc:41:21:ca:a0: fb:98:84:51:07:05:04:b3:c4:d2:04:9d:e6:43:c5: d0:b2:d1:07:f2:d2:4f:83:7e:3e:40:10:0f:08:37: 85:17:73:2f:00:fb:c0:cf:7e:6c:a8:79:9a:44:b5: ee:6d:4f:95:fc:f6:9f:0c:87:03:96:44:bc:b1:48: 1e:80:c3:ae:11:2f:30:34:df:07:0c:39:55:12:93: d3:fa:4a:d2:58:7a:1c:4c:0e:d8:93:01:af:a5:8a: 20:e6:32:f3:18:6d:d5:27:ec:6e:dd:5f:af:db:af: fc:3e:20:ed:e3:ad:22:fa:8e:81:0d:0d:1e:8b:b9: 0e:b5:21:de:03:e6:3a:70:f9:1f:2b:42:eb:50:16: b9:82:f2:24:33:7d:9c:7a:0a:59:13:89:ba:0b:db: c3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:8D:80:37:EE:7E:E7:DF:C8:FA:7A:41:E5:F1:4B:D3:C9:B6:AD:26 X509v3 Authority Key Identifier: keyid:E6:E1:AF:37:A6:0A:99:86:8E:FB:BA:A0:81:7B:49:80:F1:9A:54:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uGvN6YKmYaO-7qggXtJgPGaVPs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:22:ca:17:29:74:16:be:fe:9f:53:c8:f3:c8:a9:be:1e:17: c6:65:1c:b5:fa:15:37:73:1a:dc:57:3d:92:9d:92:9d:dc:25: 88:c9:48:e7:c9:65:70:a2:ca:ff:1d:64:53:a9:71:de:4e:e3: 15:1c:3c:bc:95:fa:1e:64:70:1a:01:8b:ec:44:24:19:1c:44: fb:ce:59:a2:74:b2:cb:0e:52:2b:35:a0:2b:e3:5b:7e:55:3d: ff:df:41:41:8a:fe:35:05:63:80:91:7e:70:3e:2b:2f:0d:6a: e9:57:ef:79:59:c1:5b:8e:6f:ac:db:c3:b7:18:b7:51:89:47: d6:fb:fa:7e:fc:2f:cb:f7:5b:68:13:3d:65:d5:2c:2e:e0:f6: dd:1e:09:36:fd:d1:d9:cc:96:73:87:a0:c4:10:5c:d0:bc:94: 94:18:cd:22:79:f4:15:2e:13:7e:58:6a:14:f6:f0:0e:bc:3d: 39:f8:ba:22:3e:a0:e9:44:ea:8a:a5:2e:7c:49:78:42:ca:5a: 5d:48:ef:9b:bc:52:23:21:1b:a9:54:a0:fb:81:aa:7c:dd:5d: 17:47:08:b1:f0:54:f1:9d:96:de:26:09:15:fd:29:e9:a8:c7: a8:88:c5:a5:47:c1:47:d1:15:b3:3e:fe:4d:8e:d3:b7:f8:ac: 9f:9d:61:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPYB39APKASpV7WmaFTXshMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2ZTFhZjM3YTYwYTk5ODY4ZWZiYmFhMDgxN2I0OTgwZjE5 YTU0ZmIwHhcNMjUxMjI0MDgwMDU3WhcNMjUxMjI1MDgwMDU3WjAzMTEwLwYDVQQD EyhiZDhkODAzN2VlN2VlN2RmYzhmYTdhNDFlNWYxNGJkM2M5YjZhZDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6j40UfSntviWAHOwJKBBOtyhr31+ xPbCLfCVUB5tltAGNb2QwLg0ebZHkcsh4si83+m5Ie7PwZ8KPfMNiQx0blJdTWI2 w2W/uaQstY+jaa/F4KsPTk0hvbbjUlLpEMJc9CE0/EEhyqD7mIRRBwUEs8TSBJ3m Q8XQstEH8tJPg34+QBAPCDeFF3MvAPvAz35sqHmaRLXubU+V/PafDIcDlkS8sUge gMOuES8wNN8HDDlVEpPT+krSWHocTA7YkwGvpYog5jLzGG3VJ+xu3V+v26/8PiDt 460i+o6BDQ0ei7kOtSHeA+Y6cPkfK0LrUBa5gvIkM32cegpZE4m6C9vDDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL2NgDfufuffyPp6QeXxS9PJtq0mMB8GA1UdIwQY MBaAFObhrzemCpmGjvu6oIF7SYDxmlT7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXVHdk42WUttWWFPLTdxZ2dYdEpnUEdhVlBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9lNjU4MGItYmZmNy00MWU4LWIzMTQt MTQwNDViNjRhZTI5LzEvNXVHdk42WUttWWFPLTdxZ2dYdEpnUEdhVlBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9lNjU4MGItYmZmNy00MWU4LWIzMTQtMTQwNDViNjRhZTI5 LzEvNXVHdk42WUttWWFPLTdxZ2dYdEpnUEdhVlBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoyLKFyl0 Fr7+n1PI88ipvh4XxmUctfoVN3Ma3Fc9kp2SndwliMlI58llcKLK/x1kU6lx3k7j FRw8vJX6HmRwGgGL7EQkGRxE+85ZonSyyw5SKzWgK+NbflU9/99BQYr+NQVjgJF+ cD4rLw1q6VfveVnBW45vrNvDtxi3UYlH1vv6fvwvy/dbaBM9ZdUsLuD23R4JNv3R 2cyWc4egxBBc0LyUlBjNInn0FS4TflhqFPbwDrw9Ofi6Ij6g6UTqiqUufEl4Qspa XUjvm7xSIyEbqVSg+4GqfN1dF0cIsfBU8Z2W3iYJFf0p6ajHqIjFpUfBR9EVsz7+ TY7Tt/isn51h4w== -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:54 2025 by rpki-client