This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft File: 5hbHsgGVYH8nsT2I-Svx0Os45g8.mft (raw, json) Hash identifier: 9CGn5+hkzRVVPV003EX2Dvs0dk22Xw96JGQcbhpThJg= Subject key identifier: 1A:A5:C5:68:21:35:44:DE:2F:36:21:F3:02:8F:F0:6C:0E:71:C3:D8 Authority key identifier: E6:16:C7:B2:01:95:60:7F:27:B1:3D:88:F9:2B:F1:D0:EB:38:E6:0F Certificate issuer: /CN=e616c7b20195607f27b13d88f92bf1d0eb38e60f Certificate serial: 019B649EAA68379CA5D17339B4A581EA7C07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hbHsgGVYH8nsT2I-Svx0Os45g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft Manifest number: 0251 Signing time: Sun 28 Dec 2025 11:01:18 +0000 Manifest this update: Sun 28 Dec 2025 11:01:18 +0000 Manifest next update: Mon 29 Dec 2025 11:01:18 +0000 Files and hashes: 1: 5hbHsgGVYH8nsT2I-Svx0Os45g8.crl (hash: mBV+/8BdSZQiEwpEAvANcHg3HW+LNHHZ6TR3mg6cxRQ=) 2: kGI3GYIY0x4KUvkaQBv3fV9ynWg.roa (hash: gmJPfaxRI83koFjZWztv8K0vXqe3xOaLvXeiVBQz3Ts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.crl rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft rsync://rpki.ripe.net/repository/DEFAULT/5hbHsgGVYH8nsT2I-Svx0Os45g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:64:9e:aa:68:37:9c:a5:d1:73:39:b4:a5:81:ea:7c:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e616c7b20195607f27b13d88f92bf1d0eb38e60f Validity Not Before: Dec 28 11:01:18 2025 GMT Not After : Dec 29 11:01:18 2025 GMT Subject: CN=1aa5c568213544de2f3621f3028ff06c0e71c3d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:39:e4:21:2b:f5:ca:aa:55:cb:20:e8:04:41: 1f:a2:42:2f:9d:2a:d9:02:73:2a:1c:ba:37:8a:90: 4f:05:c3:9b:35:69:dd:4b:88:74:1e:29:e5:e9:76: 55:7a:94:07:91:c2:45:4a:dc:48:5b:8c:f9:b2:c2: bd:b0:e5:fa:6c:54:ed:c0:95:3d:99:83:80:69:5f: c3:ae:ab:f8:64:0a:eb:21:94:0c:0b:fd:48:20:c5: 54:5e:14:14:f3:b9:9a:41:ae:d6:e3:bb:2f:36:8f: 08:b7:9b:38:7f:8e:e3:8a:8e:a2:2e:5b:e4:7e:42: 23:20:6e:6a:d9:a4:13:ea:a7:91:18:fa:89:3e:65: ba:88:66:73:f6:43:f1:be:dc:41:eb:c8:41:1a:97: 8d:c0:69:cc:44:d9:e1:9c:f0:8b:54:e1:2b:82:d5: fa:94:a9:9b:73:95:2f:ae:61:4c:62:fe:ab:56:00: 45:07:2e:b8:b2:1c:55:f9:e7:62:31:ec:10:b0:f3: 7f:e3:15:ae:28:06:0a:d7:65:f3:e5:0c:e4:b4:6c: 96:57:cb:4b:c9:65:5e:f9:da:11:82:b9:e7:e6:83: 7c:e5:d9:01:d4:7b:3f:e7:9d:62:69:25:65:cd:48: 07:3d:19:14:4d:f0:b5:24:fe:29:c9:1b:7e:9d:4e: c5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A5:C5:68:21:35:44:DE:2F:36:21:F3:02:8F:F0:6C:0E:71:C3:D8 X509v3 Authority Key Identifier: keyid:E6:16:C7:B2:01:95:60:7F:27:B1:3D:88:F9:2B:F1:D0:EB:38:E6:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hbHsgGVYH8nsT2I-Svx0Os45g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:e7:cd:84:ef:29:0f:2c:e7:72:11:4b:46:50:3a:f1:23:4a: 2b:52:10:00:ea:0e:02:8a:0d:f7:1e:03:13:15:fa:95:74:0e: 9f:d8:51:fb:09:6b:e0:41:c3:e3:44:2d:97:27:e7:76:49:f9: 6e:e6:87:33:d0:26:c1:28:17:6d:e5:99:1b:55:9f:f9:b7:a2: b8:6f:4d:e6:bb:d7:ce:6a:f0:df:f4:e2:f0:38:8c:7c:4d:22: c6:c7:ef:b9:bc:c9:7c:d0:76:ae:32:93:bd:45:dd:2d:48:f2: 78:9c:ec:4f:e3:51:fb:37:c9:bd:97:55:62:56:01:5b:34:77: 7d:35:68:3f:cb:f3:07:97:e3:93:f3:54:07:d4:16:ca:c4:6a: 10:e9:bc:f5:13:bb:62:b4:55:1d:43:24:40:6e:bd:cb:63:3a: 73:28:b2:a0:da:7a:82:cd:a3:03:c0:e1:ac:8c:05:9b:2e:73: 6c:6a:60:6d:27:b1:eb:fc:a2:f0:c2:ca:84:93:a2:cf:8a:4b: 51:da:a1:70:eb:ee:ba:32:f1:6f:85:eb:d1:e5:9e:20:31:b7: d2:f3:a4:49:81:1c:e2:22:eb:3e:6a:01:10:12:de:c1:b0:7b: 17:f9:1e:fa:96:ed:8b:12:12:19:90:c9:de:3c:17:34:7e:5e: 59:b5:0c:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtknqpoN5yl0XM5tKWB6nwHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MTZjN2IyMDE5NTYwN2YyN2IxM2Q4OGY5MmJmMWQwZWIz OGU2MGYwHhcNMjUxMjI4MTEwMTE4WhcNMjUxMjI5MTEwMTE4WjAzMTEwLwYDVQQD EygxYWE1YzU2ODIxMzU0NGRlMmYzNjIxZjMwMjhmZjA2YzBlNzFjM2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDnkISv1yqpVyyDoBEEfokIvnSrZ AnMqHLo3ipBPBcObNWndS4h0Hinl6XZVepQHkcJFStxIW4z5ssK9sOX6bFTtwJU9 mYOAaV/Drqv4ZArrIZQMC/1IIMVUXhQU87maQa7W47svNo8It5s4f47jio6iLlvk fkIjIG5q2aQT6qeRGPqJPmW6iGZz9kPxvtxB68hBGpeNwGnMRNnhnPCLVOErgtX6 lKmbc5UvrmFMYv6rVgBFBy64shxV+ediMewQsPN/4xWuKAYK12Xz5QzktGyWV8tL yWVe+doRgrnn5oN85dkB1Hs/551iaSVlzUgHPRkUTfC1JP4pyRt+nU7FdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBqlxWghNUTeLzYh8wKP8GwOccPYMB8GA1UdIwQY MBaAFOYWx7IBlWB/J7E9iPkr8dDrOOYPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWhiSHNnR1ZZSDhuc1QySS1TdngwT3M0NWc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8wMzYzODAtN2ZiZS00NDQ0LTg0ZDkt NWNkMDA0ZDZlMzY2LzEvNWhiSHNnR1ZZSDhuc1QySS1TdngwT3M0NWc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8wMzYzODAtN2ZiZS00NDQ0LTg0ZDktNWNkMDA0ZDZlMzY2 LzEvNWhiSHNnR1ZZSDhuc1QySS1TdngwT3M0NWc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlufNhO8p DyznchFLRlA68SNKK1IQAOoOAooN9x4DExX6lXQOn9hR+wlr4EHD40Qtlyfndkn5 buaHM9AmwSgXbeWZG1Wf+beiuG9N5rvXzmrw3/Ti8DiMfE0ixsfvubzJfNB2rjKT vUXdLUjyeJzsT+NR+zfJvZdVYlYBWzR3fTVoP8vzB5fjk/NUB9QWysRqEOm89RO7 YrRVHUMkQG69y2M6cyiyoNp6gs2jA8DhrIwFmy5zbGpgbSex6/yi8MLKhJOiz4pL UdqhcOvuujLxb4Xr0eWeIDG30vOkSYEc4iLrPmoBEBLewbB7F/ke+pbtixISGZDJ 3jwXNH5eWbUMIg== -----END CERTIFICATE-----Generated at Sun Dec 28 12:32:23 2025 by rpki-client