This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft File: 5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft (raw, json) Hash identifier: JPLNNspPizPwHYIoIuZu/HmtBF5ilpz/HhstB+SouNU= Subject key identifier: 9A:78:94:92:C3:ED:85:E9:66:47:06:F6:AA:28:C7:5D:E5:ED:ED:BA Authority key identifier: E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB Certificate issuer: /CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb Certificate serial: 019B416DC7954E0C93EE9053C20F015307EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft Manifest number: 1383 Signing time: Sun 21 Dec 2025 15:01:12 +0000 Manifest this update: Sun 21 Dec 2025 15:01:12 +0000 Manifest next update: Mon 22 Dec 2025 15:01:12 +0000 Files and hashes: 1: 5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl (hash: DM/uylGlEf12I3p0TCvWiAi4CRVEWgU0Nh80ROzMUlc=) 2: heGVk36ucrG4MWNpzqidvrKZ7YQ.roa (hash: m5uFEBEQAoAGMceOf2ib4bFCfxUv5uqZ6mZG8baGWlk=) 3: vKXgeHxyf9Ij8PbBtwAWk4PkSNM.roa (hash: FZfpvGBPzqeBXQfd0+/kWA7PAyR+Gx7rv6DgDmnZlfE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:c7:95:4e:0c:93:ee:90:53:c2:0f:01:53:07:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb Validity Not Before: Dec 21 15:01:12 2025 GMT Not After : Dec 22 15:01:12 2025 GMT Subject: CN=9a789492c3ed85e9664706f6aa28c75de5ededba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a5:21:ca:61:ec:6f:cb:58:2b:15:bc:12:a4: 0a:3e:2d:4f:16:53:c6:21:15:9a:8a:fe:9c:6a:e1: 95:61:b2:e2:f1:7c:b7:4b:f8:6f:3d:02:b8:e3:55: ed:96:ae:09:77:1f:ba:3f:6d:43:76:f7:f9:9e:b3: 1c:ca:63:bb:4b:3f:f6:c2:14:5d:68:e2:62:63:d7: 2b:3d:48:77:88:04:7c:a1:5b:53:09:88:78:d0:b9: 74:4f:84:51:f5:24:82:09:21:a7:46:d4:d9:02:0b: 62:91:79:0d:62:e4:f4:52:45:8a:d2:cf:97:fc:dd: ba:6f:92:02:b4:51:f9:9b:49:07:fb:fb:9b:4f:7c: ed:98:12:ac:72:93:fb:55:81:e1:c7:cb:f3:7d:21: 94:47:6c:44:0d:f0:81:1f:fb:41:b7:b1:91:ad:de: 65:f0:16:35:83:b7:0f:0a:a4:83:7f:3b:7f:4c:53: 81:91:d1:52:47:b1:5e:d7:9b:8c:1e:a1:88:31:91: d2:c6:63:27:65:18:d6:f6:07:f4:00:cc:26:5f:7d: 26:fc:df:28:b8:7d:b3:a4:c7:2e:13:51:33:90:3a: c5:f1:7d:c7:2d:33:ac:83:63:b2:dd:dc:e2:c8:01: a8:93:dd:37:79:2f:6c:48:69:f3:2a:80:bd:59:46: f6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:78:94:92:C3:ED:85:E9:66:47:06:F6:AA:28:C7:5D:E5:ED:ED:BA X509v3 Authority Key Identifier: keyid:E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:65:6d:45:5b:b1:e1:e6:74:1c:79:70:37:a1:0d:28:9d:ab: 99:48:0b:7e:4e:37:cf:a6:30:dc:d3:4a:46:c7:3d:1f:27:d2: c7:0d:b6:58:63:94:d6:7f:7e:17:ee:02:ac:87:02:10:56:04: b7:46:cd:1f:02:cd:8b:d2:45:cd:e7:0c:de:68:2a:43:5c:a3: b7:71:ec:04:57:6a:e4:01:0a:ae:9a:cb:05:9b:21:3b:8d:42: e5:0e:2f:0e:0d:b9:26:b5:0d:e9:11:12:d4:84:b0:0e:5d:20: c5:52:54:d0:03:56:49:e0:55:d6:00:48:d0:39:45:84:01:98: 1c:f0:0f:d2:1b:2f:a2:78:ba:ca:ef:38:9a:b2:47:eb:8b:8a: 17:46:f9:42:f6:2d:5b:c4:75:05:8f:7a:70:19:21:fd:ee:24: e9:dd:41:4d:bc:54:0d:62:23:28:02:d1:79:18:18:69:72:34: 4d:c1:d4:9c:5b:32:87:75:79:b1:99:b1:bc:d4:20:2b:e1:dc: 47:a0:0f:dd:70:8b:12:7c:99:9e:4c:55:94:2c:94:17:1b:be: 7f:14:a1:90:31:e5:0b:83:28:a1:cc:34:02:50:7e:f4:ea:e4: 7c:18:ea:2d:d4:83:ce:f2:de:36:4c:df:af:62:91:37:3e:3f: 79:37:07:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbceVTgyT7pBTwg8BUwfrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MTM1ZDYzOTc2OGEzYTYzZWQ5YzVmZjQwYWY1ZWQwMWRm NzQxY2IwHhcNMjUxMjIxMTUwMTEyWhcNMjUxMjIyMTUwMTEyWjAzMTEwLwYDVQQD Eyg5YTc4OTQ5MmMzZWQ4NWU5NjY0NzA2ZjZhYTI4Yzc1ZGU1ZWRlZGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aUhymHsb8tYKxW8EqQKPi1PFlPG IRWaiv6cauGVYbLi8Xy3S/hvPQK441Xtlq4Jdx+6P21Ddvf5nrMcymO7Sz/2whRd aOJiY9crPUh3iAR8oVtTCYh40Ll0T4RR9SSCCSGnRtTZAgtikXkNYuT0UkWK0s+X /N26b5ICtFH5m0kH+/ubT3ztmBKscpP7VYHhx8vzfSGUR2xEDfCBH/tBt7GRrd5l 8BY1g7cPCqSDfzt/TFOBkdFSR7Fe15uMHqGIMZHSxmMnZRjW9gf0AMwmX30m/N8o uH2zpMcuE1EzkDrF8X3HLTOsg2Oy3dziyAGok903eS9sSGnzKoC9WUb2DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJp4lJLD7YXpZkcG9qoox13l7e26MB8GA1UdIwQY MBaAFOYTXWOXaKOmPtnF/0CvXtAd90HLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWhOZFk1ZG9vNlktMmNYX1FLOWUwQjMzUWNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS83NDZhNzUtZDM2MS00ZTkxLTg3M2Et MGE3NzBmMGM3NjA4LzEvNWhOZFk1ZG9vNlktMmNYX1FLOWUwQjMzUWNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS83NDZhNzUtZDM2MS00ZTkxLTg3M2EtMGE3NzBmMGM3NjA4 LzEvNWhOZFk1ZG9vNlktMmNYX1FLOWUwQjMzUWNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ2VtRVux 4eZ0HHlwN6ENKJ2rmUgLfk43z6Yw3NNKRsc9HyfSxw22WGOU1n9+F+4CrIcCEFYE t0bNHwLNi9JFzecM3mgqQ1yjt3HsBFdq5AEKrprLBZshO41C5Q4vDg25JrUN6RES 1ISwDl0gxVJU0ANWSeBV1gBI0DlFhAGYHPAP0hsvoni6yu84mrJH64uKF0b5QvYt W8R1BY96cBkh/e4k6d1BTbxUDWIjKALReRgYaXI0TcHUnFsyh3V5sZmxvNQgK+Hc R6AP3XCLEnyZnkxVlCyUFxu+fxShkDHlC4Moocw0AlB+9OrkfBjqLdSDzvLeNkzf r2KRNz4/eTcH1Q== -----END CERTIFICATE-----Generated at Sun Dec 21 17:28:02 2025 by rpki-client