This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft File: 5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft (raw, json) Hash identifier: ZsVrK3Kxav7cPamZ2dh5kYQSYC6RB24twGXS76ToI4g= Subject key identifier: 23:3A:7D:E1:6E:0C:07:2B:0A:23:15:00:34:F0:AA:8D:AC:93:DF:03 Authority key identifier: E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70 Certificate issuer: /CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70 Certificate serial: 019B3F48C7986BF8DBB6764848F522ABCF60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 05:01:32 +0000 Manifest this update: Sun 21 Dec 2025 05:01:32 +0000 Manifest next update: Mon 22 Dec 2025 05:01:32 +0000 Files and hashes: 1: 5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl (hash: m1e5GWTxsQLIsBfo3W5/j2IA1/YfcJkqxx4+0L7cCAQ=) 2: fTo1f8ubRBwfU0xVoHHtzOApYuU.roa (hash: 6qDVE6eG6EbcIMXQ5M9bjDvf2Vx2WIt3k9ZSfVGTUr8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:c7:98:6b:f8:db:b6:76:48:48:f5:22:ab:cf:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70 Validity Not Before: Dec 21 05:01:32 2025 GMT Not After : Dec 22 05:01:32 2025 GMT Subject: CN=233a7de16e0c072b0a23150034f0aa8dac93df03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3b:33:af:d3:ad:91:94:fb:76:60:37:c3:ec: 77:e0:25:83:1b:82:02:2a:4d:03:39:15:71:6c:30: 8e:7e:eb:eb:d9:20:7d:ef:cf:6e:bb:98:28:b7:77: ac:4d:78:49:30:9d:c3:6a:fa:6d:b6:a6:99:c3:6d: 5a:7e:25:5f:6b:da:e3:18:be:30:db:58:00:43:76: 8c:77:5d:af:07:50:7c:b9:43:f2:5b:9b:d4:88:32: 50:3c:08:3c:7b:4f:5e:fe:33:65:a3:d4:a1:4e:0c: 57:3c:74:a8:38:65:72:5e:d0:6f:0e:4e:d8:1f:dd: 45:50:05:12:e3:e4:fa:2d:e9:32:13:f4:c7:c8:90: c2:b8:f7:ee:08:ad:ba:be:9f:7d:5d:1f:07:0e:df: 38:57:90:64:72:01:2e:3e:ef:8f:ec:c6:2a:67:08: 69:1e:fc:08:11:a4:7d:24:3c:48:5c:92:6f:29:2c: 07:fe:3e:ef:35:f6:a6:25:4b:3e:59:e3:d2:e4:ff: 1e:4b:e3:2a:e4:c6:76:92:2c:60:54:03:76:c4:7f: 91:cd:61:7e:ff:ce:4a:26:77:b0:35:74:f9:1b:f1: 95:e8:8a:67:4b:18:c3:71:cc:e5:62:21:90:f4:ea: 1a:5d:db:66:4e:78:85:51:64:c4:3b:12:7c:c1:35: dd:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:3A:7D:E1:6E:0C:07:2B:0A:23:15:00:34:F0:AA:8D:AC:93:DF:03 X509v3 Authority Key Identifier: keyid:E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:c4:70:5c:1d:d6:be:41:b3:fa:57:93:03:4b:0d:ed:54:68: 12:0c:ef:3f:36:57:87:17:56:22:c8:b6:04:d3:3c:31:6b:68: ae:cd:cd:14:90:15:17:a4:4b:5c:c9:3f:5b:10:f7:bf:91:60: 72:80:cd:f8:06:3a:de:b3:48:b1:23:70:47:b5:de:b6:74:25: 0c:42:4d:53:2c:09:bb:82:4f:f9:a5:fe:c1:c0:75:31:06:d1: 8f:53:f5:9f:1a:29:04:51:dc:f8:17:6f:e3:5e:a8:11:1f:c4: 9f:90:49:7a:d4:48:22:7e:92:d0:24:6d:2e:a0:e6:d6:cf:13: 16:d7:26:df:e8:3d:bd:48:22:dc:d8:c6:0d:a6:ca:5e:04:89: 64:7c:dc:47:bf:7f:56:c8:c3:33:9b:6e:1e:de:93:2b:d8:dd: 54:60:47:28:d4:39:cf:22:50:9b:64:c5:59:3c:de:0a:7d:ad: 35:73:62:cd:23:15:7d:90:a0:c1:9d:f9:92:9b:dd:27:52:9e: 6a:13:13:af:f1:72:11:95:8e:94:36:25:8b:8c:50:ab:33:e6: 22:e8:b2:f5:65:b9:5b:82:db:35:07:6e:2f:08:0e:f3:e3:25: 47:35:79:5c:fc:a3:d6:2e:47:99:90:e6:e3:56:4f:5f:5c:37: 7c:b2:a1:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SMeYa/jbtnZISPUiq89gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YmE5MWQ2MjY1MDRjY2JjNjRkODk3NDBiNjNjYjJlYjQy MzRmNzAwHhcNMjUxMjIxMDUwMTMyWhcNMjUxMjIyMDUwMTMyWjAzMTEwLwYDVQQD EygyMzNhN2RlMTZlMGMwNzJiMGEyMzE1MDAzNGYwYWE4ZGFjOTNkZjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzszr9OtkZT7dmA3w+x34CWDG4IC Kk0DORVxbDCOfuvr2SB9789uu5got3esTXhJMJ3DavpttqaZw21afiVfa9rjGL4w 21gAQ3aMd12vB1B8uUPyW5vUiDJQPAg8e09e/jNlo9ShTgxXPHSoOGVyXtBvDk7Y H91FUAUS4+T6LekyE/THyJDCuPfuCK26vp99XR8HDt84V5BkcgEuPu+P7MYqZwhp HvwIEaR9JDxIXJJvKSwH/j7vNfamJUs+WePS5P8eS+Mq5MZ2kixgVAN2xH+RzWF+ /85KJnewNXT5G/GV6IpnSxjDcczlYiGQ9OoaXdtmTniFUWTEOxJ8wTXd7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCM6feFuDAcrCiMVADTwqo2sk98DMB8GA1UdIwQY MBaAFOS6kdYmUEzLxk2JdAtjyy60I09wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUxxUjFpWlFUTXZHVFlsMEMyUExMclFqVDNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy84ODdlOTQtZWI5Ny00MTA5LTlkYTgt Y2JmMThkMmQ2NmMzLzEvNUxxUjFpWlFUTXZHVFlsMEMyUExMclFqVDNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy84ODdlOTQtZWI5Ny00MTA5LTlkYTgtY2JmMThkMmQ2NmMz LzEvNUxxUjFpWlFUTXZHVFlsMEMyUExMclFqVDNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHsRwXB3W vkGz+leTA0sN7VRoEgzvPzZXhxdWIsi2BNM8MWtors3NFJAVF6RLXMk/WxD3v5Fg coDN+AY63rNIsSNwR7XetnQlDEJNUywJu4JP+aX+wcB1MQbRj1P1nxopBFHc+Bdv 416oER/En5BJetRIIn6S0CRtLqDm1s8TFtcm3+g9vUgi3NjGDabKXgSJZHzcR79/ VsjDM5tuHt6TK9jdVGBHKNQ5zyJQm2TFWTzeCn2tNXNizSMVfZCgwZ35kpvdJ1Ke ahMTr/FyEZWOlDYli4xQqzPmIuiy9WW5W4LbNQduLwgO8+MlRzV5XPyj1i5HmZDm 41ZPX1w3fLKh7g== -----END CERTIFICATE-----Generated at Sun Dec 21 09:30:43 2025 by rpki-client