This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft File: 5snUihjDwNLk5jp7g4haeWd1WCY.mft (raw, json) Hash identifier: fh1qF5HHSbDw8Y3kbhHgKq2wSezUQ1nUbeqgS4NyzPk= Subject key identifier: 45:D5:81:95:87:2F:7B:32:61:68:D9:62:22:00:CA:3E:70:E1:6B:25 Authority key identifier: E6:C9:D4:8A:18:C3:C0:D2:E4:E6:3A:7B:83:88:5A:79:67:75:58:26 Certificate issuer: /CN=e6c9d48a18c3c0d2e4e63a7b83885a7967755826 Certificate serial: 019B3DC7A36F891FE76112BDF01E15D35694 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 22:00:52 +0000 Manifest this update: Sat 20 Dec 2025 22:00:52 +0000 Manifest next update: Sun 21 Dec 2025 22:00:52 +0000 Files and hashes: 1: 5snUihjDwNLk5jp7g4haeWd1WCY.crl (hash: NyEZQ7oPBIFo/miaLjtLHPHznAnIriuPhovd7Sycras=) 2: zohWKsAJg1AB7BcLgO5mP203ZJ8.roa (hash: qyr9zS4mbTGjUUiqIIIhploYFAxZHgevrVarc4Vt5k8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.crl rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:a3:6f:89:1f:e7:61:12:bd:f0:1e:15:d3:56:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6c9d48a18c3c0d2e4e63a7b83885a7967755826 Validity Not Before: Dec 20 22:00:52 2025 GMT Not After : Dec 21 22:00:52 2025 GMT Subject: CN=45d58195872f7b326168d9622200ca3e70e16b25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4b:e0:a6:97:92:9e:c1:17:c3:f2:4f:ed:ab: e2:31:af:53:10:3b:5f:1b:65:b3:5e:c7:2e:dc:18: c8:93:c7:da:77:13:1c:d7:4c:48:47:dd:28:d0:ea: ec:3c:6e:f3:ca:0c:4e:e8:c7:c4:15:aa:a9:f9:81: 00:e1:64:b2:2f:2f:e7:b6:12:90:c3:ad:5c:7a:81: 12:77:31:69:4f:1f:e8:cb:7b:a8:bf:aa:94:bc:f9: 62:92:46:09:fe:1e:a7:f9:fc:e5:8a:e2:2c:5f:45: 5c:a8:42:e8:eb:8d:2e:95:11:62:5b:c3:04:e4:bc: 1c:a2:e4:cf:0a:e7:92:53:db:c5:62:12:4b:f3:67: 8e:e4:d5:60:35:00:ff:ff:92:eb:80:02:15:15:a8: bf:40:f5:c7:e4:15:bc:99:31:e8:b4:1a:4e:5e:50: 5b:d4:50:5c:99:7a:05:a9:7b:c7:f0:83:ac:60:91: 32:f1:69:9d:d3:7b:33:eb:a9:f2:0d:f7:7f:0d:a7: 6c:c3:89:ff:2c:28:84:1a:0a:35:69:fc:5f:97:2c: 2e:b7:8b:6b:5e:48:ac:7d:83:7e:60:43:93:5b:43: ff:35:42:70:64:b4:3d:08:9b:01:4b:c3:95:9e:09: 42:0d:84:a8:7e:e1:5b:48:bc:cb:ee:aa:cd:a2:c0: e7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D5:81:95:87:2F:7B:32:61:68:D9:62:22:00:CA:3E:70:E1:6B:25 X509v3 Authority Key Identifier: keyid:E6:C9:D4:8A:18:C3:C0:D2:E4:E6:3A:7B:83:88:5A:79:67:75:58:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:e6:24:b3:f1:58:8c:a0:92:e3:f3:f4:74:4f:a5:a9:57:3c: 42:d7:f6:c4:60:7a:81:98:8b:72:70:ba:26:ba:6f:16:d8:80: 82:f8:ce:cc:de:00:c8:54:a8:28:2e:4b:9f:f1:39:a6:0e:cc: b9:42:be:d3:f7:ff:db:d9:a5:3b:15:ad:c8:00:78:6f:8c:b4: e5:70:1a:70:d5:be:fd:68:50:20:cf:36:19:f8:ff:af:05:c0: 7e:11:d7:e1:59:da:15:29:cc:47:25:33:cc:7b:cd:90:77:6f: 32:0b:e6:0a:76:18:26:d5:69:f3:ba:d2:29:0c:cf:66:1b:3e: 25:52:62:77:80:7b:90:97:5b:a6:5a:e3:fe:ea:fe:3c:cc:a0: 52:e4:70:bf:a6:3c:c7:2b:5a:ef:b8:d1:74:c5:7c:d3:87:a9: 2a:2a:4d:34:83:cf:bf:d2:a0:33:64:d1:34:a8:8e:02:95:c6: c4:ed:ef:63:69:a0:87:18:5e:28:26:41:f1:10:4c:a9:43:b5: 1c:0e:0a:7e:46:0e:f9:fc:d1:69:a3:40:a3:c0:4b:b5:a3:72: b9:31:c0:36:68:d7:42:d4:f6:8e:a3:28:65:96:28:f2:2e:ee: 62:7b:cd:35:db:47:20:8e:fd:1a:7a:f9:31:eb:fe:2f:a0:cf: 9d:91:cd:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x6NviR/nYRK98B4V01aUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2YzlkNDhhMThjM2MwZDJlNGU2M2E3YjgzODg1YTc5Njc3 NTU4MjYwHhcNMjUxMjIwMjIwMDUyWhcNMjUxMjIxMjIwMDUyWjAzMTEwLwYDVQQD Eyg0NWQ1ODE5NTg3MmY3YjMyNjE2OGQ5NjIyMjAwY2EzZTcwZTE2YjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUvgppeSnsEXw/JP7aviMa9TEDtf G2WzXscu3BjIk8fadxMc10xIR90o0OrsPG7zygxO6MfEFaqp+YEA4WSyLy/nthKQ w61ceoESdzFpTx/oy3uov6qUvPlikkYJ/h6n+fzliuIsX0VcqELo640ulRFiW8ME 5LwcouTPCueSU9vFYhJL82eO5NVgNQD//5LrgAIVFai/QPXH5BW8mTHotBpOXlBb 1FBcmXoFqXvH8IOsYJEy8Wmd03sz66nyDfd/Dadsw4n/LCiEGgo1afxflywut4tr XkisfYN+YEOTW0P/NUJwZLQ9CJsBS8OVnglCDYSofuFbSLzL7qrNosDn2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEXVgZWHL3syYWjZYiIAyj5w4WslMB8GA1UdIwQY MBaAFObJ1IoYw8DS5OY6e4OIWnlndVgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXNuVWloakR3TkxrNWpwN2c0aGFlV2QxV0NZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9kMjVlMTQtNjI1ZC00N2I1LWEwZWMt ODQ4ZjczZGY4YjIwLzEvNXNuVWloakR3TkxrNWpwN2c0aGFlV2QxV0NZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9kMjVlMTQtNjI1ZC00N2I1LWEwZWMtODQ4ZjczZGY4YjIw LzEvNXNuVWloakR3TkxrNWpwN2c0aGFlV2QxV0NZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuuYks/FY jKCS4/P0dE+lqVc8Qtf2xGB6gZiLcnC6JrpvFtiAgvjOzN4AyFSoKC5Ln/E5pg7M uUK+0/f/29mlOxWtyAB4b4y05XAacNW+/WhQIM82Gfj/rwXAfhHX4VnaFSnMRyUz zHvNkHdvMgvmCnYYJtVp87rSKQzPZhs+JVJid4B7kJdbplrj/ur+PMygUuRwv6Y8 xyta77jRdMV804epKipNNIPPv9KgM2TRNKiOApXGxO3vY2mghxheKCZB8RBMqUO1 HA4KfkYO+fzRaaNAo8BLtaNyuTHANmjXQtT2jqMoZZYo8i7uYnvNNdtHII79Gnr5 Mev+L6DPnZHNvg== -----END CERTIFICATE-----Generated at Sat Dec 20 23:54:40 2025 by rpki-client