This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft File: 5aiGWRTezNyYByQf1wtrsIOkRLM.mft (raw, json) Hash identifier: 78nVN1+AUKccFypKgUH0JHJrL5giPIxH4DR4A+H+Q0w= Subject key identifier: B0:C3:80:43:C4:80:95:F8:F6:D8:3B:2C:90:1C:EB:5A:27:13:C0:C1 Authority key identifier: E5:A8:86:59:14:DE:CC:DC:98:07:24:1F:D7:0B:6B:B0:83:A4:44:B3 Certificate issuer: /CN=e5a8865914deccdc9807241fd70b6bb083a444b3 Certificate serial: 019B2B540D88D79858DA077CB651AF892F37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft Manifest number: 10FB Signing time: Wed 17 Dec 2025 08:01:27 +0000 Manifest this update: Wed 17 Dec 2025 08:01:27 +0000 Manifest next update: Thu 18 Dec 2025 08:01:27 +0000 Files and hashes: 1: 5aiGWRTezNyYByQf1wtrsIOkRLM.crl (hash: xJBW+xrh0GJi8t0x8OKEidtizlvENfer70wRO+lUYN0=) 2: syWGgITCZamVo-nCUcKih8Fhw7k.roa (hash: Y9UTs9CcobIoVtNfLT2NYBFUloNQFN2szm6vlcjIvRY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft rsync://rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 08:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:54:0d:88:d7:98:58:da:07:7c:b6:51:af:89:2f:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5a8865914deccdc9807241fd70b6bb083a444b3 Validity Not Before: Dec 17 08:01:27 2025 GMT Not After : Dec 18 08:01:27 2025 GMT Subject: CN=b0c38043c48095f8f6d83b2c901ceb5a2713c0c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:cd:ff:16:da:2f:3e:89:42:a9:ea:68:53:fc: 1b:42:76:e1:0f:93:5f:ef:a7:51:64:b9:26:5d:41: c0:f0:44:52:25:a0:eb:2d:1e:1f:f8:df:3d:16:06: aa:b1:1f:0c:70:f7:a5:f9:ba:ef:b0:f6:4a:40:18: 1f:be:1e:90:12:02:1e:35:99:b3:98:fc:df:b3:96: b8:8d:ed:78:91:99:07:7f:30:22:0a:f5:fa:f8:e9: 61:b9:99:a8:43:6c:98:31:ad:d8:aa:97:a1:ec:25: 7b:e8:df:a8:1c:11:8f:6c:30:82:34:9d:e1:79:39: 38:73:b1:07:5a:90:a3:5c:81:1c:8f:5e:31:5d:7a: 26:b1:83:36:b3:26:2a:7b:11:db:39:b9:3d:75:ea: 6e:f9:22:a9:47:64:68:dd:92:79:50:fb:64:70:b6: 56:c5:cd:2f:e4:a6:00:30:bc:25:96:07:66:b2:ca: c9:07:4f:c0:26:47:02:b1:c7:f9:ef:7d:c2:2c:40: d0:b5:40:22:b4:fa:c1:e0:be:69:b1:43:04:1c:6e: 60:94:af:49:21:b4:c5:ba:9b:51:51:fc:dd:5e:70: 19:ab:a4:92:e5:a7:64:27:84:9c:0b:23:8c:dc:37: 3d:cd:fa:50:2f:2e:7c:c4:07:31:59:90:a6:10:92: c4:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:C3:80:43:C4:80:95:F8:F6:D8:3B:2C:90:1C:EB:5A:27:13:C0:C1 X509v3 Authority Key Identifier: keyid:E5:A8:86:59:14:DE:CC:DC:98:07:24:1F:D7:0B:6B:B0:83:A4:44:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:3c:07:56:28:e3:84:ab:07:29:21:ce:bf:63:3f:ec:04:66: 4e:ee:0d:60:43:b5:23:a8:c0:a6:6a:87:fb:1c:15:b3:bb:92: de:ce:3d:f2:5d:ab:08:6a:99:3a:4e:9e:14:54:8a:d6:c1:19: 92:46:ae:a1:8f:a3:f2:3e:53:22:dc:2c:28:ea:0b:d5:a9:1a: 6e:eb:7a:c7:58:33:d7:9c:e2:46:1f:71:7e:0b:4d:71:55:39: 5b:41:79:8e:21:b0:50:83:c2:4e:6f:15:2b:52:b3:0b:0f:b5: c4:18:5b:e4:6c:13:02:c8:e5:e4:cc:90:93:e9:98:38:49:85: 33:b1:9d:6d:57:0d:9e:2e:40:c6:c8:df:26:25:02:2c:f3:5d: 51:c8:6a:d6:58:cd:b7:12:c9:f9:1c:fd:db:35:71:e1:35:ad: 69:8f:3a:41:93:8a:fc:4e:9e:6e:c6:df:74:56:af:c3:71:1f: 25:03:3a:ed:ab:02:86:ac:75:b0:70:46:95:73:ae:ec:e0:31: 8d:3a:cf:57:87:c3:88:b4:a7:84:ed:87:07:2e:2f:4c:a3:37: 79:c5:0b:44:f8:3e:cf:70:5b:b9:ac:be:5d:2a:6a:9e:49:3f: 21:09:61:d3:6c:f3:57:38:1c:ef:a0:03:4f:f0:b7:09:00:ec: 7b:e2:15:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrVA2I15hY2gd8tlGviS83MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YTg4NjU5MTRkZWNjZGM5ODA3MjQxZmQ3MGI2YmIwODNh NDQ0YjMwHhcNMjUxMjE3MDgwMTI3WhcNMjUxMjE4MDgwMTI3WjAzMTEwLwYDVQQD EyhiMGMzODA0M2M0ODA5NWY4ZjZkODNiMmM5MDFjZWI1YTI3MTNjMGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi83/FtovPolCqepoU/wbQnbhD5Nf 76dRZLkmXUHA8ERSJaDrLR4f+N89FgaqsR8McPel+brvsPZKQBgfvh6QEgIeNZmz mPzfs5a4je14kZkHfzAiCvX6+OlhuZmoQ2yYMa3Yqpeh7CV76N+oHBGPbDCCNJ3h eTk4c7EHWpCjXIEcj14xXXomsYM2syYqexHbObk9depu+SKpR2Ro3ZJ5UPtkcLZW xc0v5KYAMLwllgdmssrJB0/AJkcCscf5733CLEDQtUAitPrB4L5psUMEHG5glK9J IbTFuptRUfzdXnAZq6SS5adkJ4ScCyOM3Dc9zfpQLy58xAcxWZCmEJLEWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLDDgEPEgJX49tg7LJAc61onE8DBMB8GA1UdIwQY MBaAFOWohlkU3szcmAckH9cLa7CDpESzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWFpR1dSVGV6TnlZQnlRZjF3dHJzSU9rUkxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8zYWZjODEtMzBlNi00YjhlLThkM2It NTdmNTRlYTQzZTE2LzEvNWFpR1dSVGV6TnlZQnlRZjF3dHJzSU9rUkxNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi8zYWZjODEtMzBlNi00YjhlLThkM2ItNTdmNTRlYTQzZTE2 LzEvNWFpR1dSVGV6TnlZQnlRZjF3dHJzSU9rUkxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALjwHVijj hKsHKSHOv2M/7ARmTu4NYEO1I6jApmqH+xwVs7uS3s498l2rCGqZOk6eFFSK1sEZ kkauoY+j8j5TItwsKOoL1akabut6x1gz15ziRh9xfgtNcVU5W0F5jiGwUIPCTm8V K1KzCw+1xBhb5GwTAsjl5MyQk+mYOEmFM7GdbVcNni5AxsjfJiUCLPNdUchq1ljN txLJ+Rz92zVx4TWtaY86QZOK/E6ebsbfdFavw3EfJQM67asChqx1sHBGlXOu7OAx jTrPV4fDiLSnhO2HBy4vTKM3ecULRPg+z3Bbuay+XSpqnkk/IQlh02zzVzgc76AD T/C3CQDse+IV0g== -----END CERTIFICATE-----Generated at Wed Dec 17 16:47:25 2025 by rpki-client