This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft File: 5vgk5Lxc2BiG7CS14VJm6V-N35M.mft (raw, json) Hash identifier: SsB7h9Lzmmox7c1sC5fcyBvm6Gc7NHkhTD6YniHDj7o= Subject key identifier: 30:D9:CE:1F:27:D2:E7:17:1F:95:82:54:79:13:13:D8:64:13:56:78 Authority key identifier: E6:F8:24:E4:BC:5C:D8:18:86:EC:24:B5:E1:52:66:E9:5F:8D:DF:93 Certificate issuer: /CN=e6f824e4bc5cd81886ec24b5e15266e95f8ddf93 Certificate serial: 019B4994FD111CC59BE2A80661C7AA0F2D49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vgk5Lxc2BiG7CS14VJm6V-N35M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft Manifest number: 0D03 Signing time: Tue 23 Dec 2025 05:00:59 +0000 Manifest this update: Tue 23 Dec 2025 05:00:59 +0000 Manifest next update: Wed 24 Dec 2025 05:00:59 +0000 Files and hashes: 1: 5vgk5Lxc2BiG7CS14VJm6V-N35M.crl (hash: har2c3kPLcJ3xV0xGzSM2iZiMl77hwP5qM3qeMQehUU=) 2: rf8xmxH0lxQMZaEoNGLhxRtMOZM.roa (hash: 8uXylOlK6BkO3v7SWg2Pp+uIEZNpg7MPKeK8yn1WMAc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.crl rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft rsync://rpki.ripe.net/repository/DEFAULT/5vgk5Lxc2BiG7CS14VJm6V-N35M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 05:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:94:fd:11:1c:c5:9b:e2:a8:06:61:c7:aa:0f:2d:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6f824e4bc5cd81886ec24b5e15266e95f8ddf93 Validity Not Before: Dec 23 05:00:59 2025 GMT Not After : Dec 24 05:00:59 2025 GMT Subject: CN=30d9ce1f27d2e7171f958254791313d864135678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:65:9b:fb:0b:9c:1f:49:bf:25:a0:c3:23:95: a9:85:9f:cc:42:2f:ad:93:b4:0d:15:b8:5f:eb:00: b6:4c:31:97:69:c8:ce:49:d0:f6:a6:b5:0e:4b:17: 7a:6d:32:36:23:41:35:67:7d:0f:c3:9d:f4:d5:ae: 1f:7c:27:c1:5b:e2:8a:18:b0:ee:1f:c1:13:35:11: 86:2d:cc:d1:ad:5d:c6:3f:1c:ed:c0:37:70:6a:4f: 6e:90:94:13:b8:1e:44:d1:d4:e8:c6:03:cb:fc:0f: cf:d7:da:50:f1:2e:bd:01:81:a0:31:b2:70:43:b4: 80:9c:02:42:b4:5d:87:14:3f:77:54:74:4d:5c:78: 2d:89:65:a3:1b:bd:23:34:53:75:ca:71:3d:36:83: f2:a4:b7:31:1f:bd:ea:12:df:0a:0e:e0:b7:59:3a: 59:67:0b:07:54:b1:4b:c5:39:7b:26:e0:d6:0d:d0: 99:f8:5c:47:9a:59:41:a9:5f:e9:e4:ce:f0:63:bd: 67:d0:bc:f8:81:88:9f:4a:59:4c:ea:70:cd:2d:67: 99:18:50:d5:78:0c:2c:f2:f5:61:9e:79:08:a3:b3: 1f:e2:f0:29:f8:1d:a7:87:01:bb:ac:03:cc:e7:dc: b4:7a:47:dd:b3:5f:e6:87:3c:fb:0b:8d:a5:93:26: b9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D9:CE:1F:27:D2:E7:17:1F:95:82:54:79:13:13:D8:64:13:56:78 X509v3 Authority Key Identifier: keyid:E6:F8:24:E4:BC:5C:D8:18:86:EC:24:B5:E1:52:66:E9:5F:8D:DF:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vgk5Lxc2BiG7CS14VJm6V-N35M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:dd:59:4b:c4:71:c4:d2:23:f9:98:6e:82:b5:6d:6f:ef:7b: 1f:10:f8:2c:89:d0:64:1a:72:07:e4:42:03:55:d3:91:84:82: 65:2b:c1:d2:09:4c:d9:58:23:81:d0:fe:cf:53:7a:34:75:7e: 63:d4:4d:2b:fe:d9:c2:b3:e6:68:e7:ea:ad:4b:84:ca:22:1b: 67:3b:c6:44:65:d1:bd:fe:d7:0c:6e:30:e6:4f:0e:1d:b5:0b: d2:79:80:87:ac:59:10:8c:39:ac:fc:88:04:8b:09:d4:fb:97: 15:e4:8b:dd:b0:84:a1:62:7e:1d:c0:41:6b:c5:12:39:84:44: 34:ac:7c:f3:51:8a:b2:1b:a9:21:c3:90:93:1f:46:db:84:ca: f1:f5:1f:28:17:90:35:eb:29:9d:8c:fd:3d:b3:d7:15:a9:3c: 41:04:e9:fe:c8:ed:ce:a5:ef:cc:76:ac:5a:9d:e8:17:fa:79: 62:da:4e:72:6b:e5:d8:db:40:48:2b:0d:5a:c4:f3:24:72:f4: eb:ab:34:3e:93:d4:75:29:09:b8:7c:74:cf:96:bc:98:10:c2: 65:b0:0c:5e:41:88:c6:4d:b7:4b:f9:c6:27:d5:8e:c4:a3:b0: ea:d4:f3:22:08:dd:36:11:f2:d5:2b:f6:42:86:f8:dd:3f:43: f3:70:94:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJlP0RHMWb4qgGYceqDy1JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2ZjgyNGU0YmM1Y2Q4MTg4NmVjMjRiNWUxNTI2NmU5NWY4 ZGRmOTMwHhcNMjUxMjIzMDUwMDU5WhcNMjUxMjI0MDUwMDU5WjAzMTEwLwYDVQQD EygzMGQ5Y2UxZjI3ZDJlNzE3MWY5NTgyNTQ3OTEzMTNkODY0MTM1Njc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA82Wb+wucH0m/JaDDI5WphZ/MQi+t k7QNFbhf6wC2TDGXacjOSdD2prUOSxd6bTI2I0E1Z30Pw5301a4ffCfBW+KKGLDu H8ETNRGGLczRrV3GPxztwDdwak9ukJQTuB5E0dToxgPL/A/P19pQ8S69AYGgMbJw Q7SAnAJCtF2HFD93VHRNXHgtiWWjG70jNFN1ynE9NoPypLcxH73qEt8KDuC3WTpZ ZwsHVLFLxTl7JuDWDdCZ+FxHmllBqV/p5M7wY71n0Lz4gYifSllM6nDNLWeZGFDV eAws8vVhnnkIo7Mf4vAp+B2nhwG7rAPM59y0ekfds1/mhzz7C42lkya5HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDDZzh8n0ucXH5WCVHkTE9hkE1Z4MB8GA1UdIwQY MBaAFOb4JOS8XNgYhuwkteFSZulfjd+TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXZnazVMeGMyQmlHN0NTMTRWSm02Vi1OMzVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9hZDM3OTctMzM0Ni00NzhmLTllOWQt YTg5Zjk1OWJlMjA0LzEvNXZnazVMeGMyQmlHN0NTMTRWSm02Vi1OMzVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9hZDM3OTctMzM0Ni00NzhmLTllOWQtYTg5Zjk1OWJlMjA0 LzEvNXZnazVMeGMyQmlHN0NTMTRWSm02Vi1OMzVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhd1ZS8Rx xNIj+ZhugrVtb+97HxD4LInQZBpyB+RCA1XTkYSCZSvB0glM2VgjgdD+z1N6NHV+ Y9RNK/7ZwrPmaOfqrUuEyiIbZzvGRGXRvf7XDG4w5k8OHbUL0nmAh6xZEIw5rPyI BIsJ1PuXFeSL3bCEoWJ+HcBBa8USOYRENKx881GKshupIcOQkx9G24TK8fUfKBeQ NespnYz9PbPXFak8QQTp/sjtzqXvzHasWp3oF/p5YtpOcmvl2NtASCsNWsTzJHL0 66s0PpPUdSkJuHx0z5a8mBDCZbAMXkGIxk23S/nGJ9WOxKOw6tTzIgjdNhHy1Sv2 Qob43T9D83CUow== -----END CERTIFICATE-----Generated at Tue Dec 23 14:24:12 2025 by rpki-client