This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.mft File: 5INFqgzXAm1iHFAIT52du1ucwvA.mft (raw, json) Hash identifier: a+M6E4wK/Nzb8couJL9/FJSs+8xBOEDFyQ35wcdftnY= Subject key identifier: F2:6D:F3:15:38:F2:41:6B:CF:41:36:EF:65:07:88:84:B5:C8:A2:07 Authority key identifier: E4:83:45:AA:0C:D7:02:6D:62:1C:50:08:4F:9D:9D:BB:5B:9C:C2:F0 Certificate issuer: /CN=e48345aa0cd7026d621c50084f9d9dbb5b9cc2f0 Certificate serial: 019B52983B8729642210244B6D8217CFE84A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5INFqgzXAm1iHFAIT52du1ucwvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.mft Manifest number: 0EB1 Signing time: Wed 24 Dec 2025 23:01:06 +0000 Manifest this update: Wed 24 Dec 2025 23:01:06 +0000 Manifest next update: Thu 25 Dec 2025 23:01:06 +0000 Files and hashes: 1: 5INFqgzXAm1iHFAIT52du1ucwvA.crl (hash: 7PlHctiM9wuibaHoFCs9zyQJNdRf6B16qIP0UXDm+K0=) 2: kUe56rRopp_KQsUYDln6H32rpVA.roa (hash: Nqm32SYb89EX8JBzdHqkHyeFXZStjUKylm9CZ3PRcrY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.crl rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.mft rsync://rpki.ripe.net/repository/DEFAULT/5INFqgzXAm1iHFAIT52du1ucwvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 23:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:98:3b:87:29:64:22:10:24:4b:6d:82:17:cf:e8:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e48345aa0cd7026d621c50084f9d9dbb5b9cc2f0 Validity Not Before: Dec 24 23:01:06 2025 GMT Not After : Dec 25 23:01:06 2025 GMT Subject: CN=f26df31538f2416bcf4136ef65078884b5c8a207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:07:d2:d1:7f:66:23:34:86:ff:16:c9:12:5c: 35:19:34:57:67:3d:cd:79:65:8e:44:35:fe:db:4b: d2:4f:9d:95:96:38:08:5a:99:aa:69:60:94:ef:e8: a8:ee:54:13:8f:3c:78:d3:8d:c0:cd:42:ce:60:fa: 61:b2:7e:ed:d1:9e:39:16:3d:35:83:76:10:59:f0: 5e:23:27:13:3f:8d:c9:50:70:0e:fe:47:3d:2b:44: c1:54:b1:3a:0d:1f:50:7d:dc:77:7e:0b:13:3f:44: 25:c6:7d:3a:9b:ee:8f:a5:49:d2:26:47:98:fa:71: ba:8b:36:bd:0b:26:5d:57:0c:72:09:7f:9a:37:5d: 63:db:d5:a6:b5:be:92:46:a3:47:50:9f:6e:12:af: 06:0c:70:ac:07:bb:9c:66:29:a6:c5:a8:d1:e7:f4: 6b:48:50:e6:2a:f5:73:0a:e7:40:b2:49:13:21:63: 35:c2:c8:48:10:23:96:84:3f:b7:15:41:61:8d:b0: ad:96:ec:9d:4e:0b:6f:e9:5f:b7:03:d4:08:98:85: 85:ac:a4:e0:8b:ba:51:2b:fb:bb:fb:50:d8:5c:3d: 31:e2:5e:61:0a:2b:61:d8:9d:fd:91:d8:8e:70:3e: 14:e3:53:b3:21:ac:b5:27:8f:9f:9a:d5:b3:f6:af: b7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:6D:F3:15:38:F2:41:6B:CF:41:36:EF:65:07:88:84:B5:C8:A2:07 X509v3 Authority Key Identifier: keyid:E4:83:45:AA:0C:D7:02:6D:62:1C:50:08:4F:9D:9D:BB:5B:9C:C2:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5INFqgzXAm1iHFAIT52du1ucwvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:21:f4:61:bf:48:79:ba:84:f6:9d:63:cc:55:3e:16:5c:93: a4:63:45:95:15:66:e3:32:f6:19:28:13:34:4e:cf:56:22:ce: 41:04:c7:a4:06:da:f4:12:f5:03:1e:3e:d5:b6:ff:bb:cd:68: bb:c1:3b:ca:3f:dd:f9:9d:48:6e:eb:49:d7:cd:4c:bc:93:4e: 76:13:c5:a5:8d:1a:21:4e:c8:68:8d:5b:7c:68:27:0a:2f:e6: 53:bb:3a:99:21:50:1b:d0:dd:85:43:fb:5d:12:30:a7:61:95: cd:6a:1f:5a:2d:2f:ee:fe:75:ea:37:3e:f7:24:d1:4c:fe:4e: 66:4d:2f:3f:fb:ab:69:7a:0c:9c:c6:14:58:85:48:9c:a1:eb: 13:b8:cf:bd:1f:11:85:5e:2b:c3:6c:46:99:63:b9:fb:b4:52: 86:18:5d:4d:b7:91:33:6f:89:e9:13:ed:be:2f:fd:95:5d:a0: b9:5e:c9:6b:cf:4f:65:dc:40:14:67:16:3f:2f:05:9b:88:05: be:54:98:b2:ff:52:47:95:e4:a5:09:1e:b2:46:82:e0:5e:64: 6f:10:4a:67:50:29:30:65:98:a1:4c:92:ca:a4:7e:50:74:49: 8d:10:c9:50:82:2c:7a:25:51:2f:9c:20:8f:54:37:65:1e:f6: 9c:2b:15:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSmDuHKWQiECRLbYIXz+hKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ODM0NWFhMGNkNzAyNmQ2MjFjNTAwODRmOWQ5ZGJiNWI5 Y2MyZjAwHhcNMjUxMjI0MjMwMTA2WhcNMjUxMjI1MjMwMTA2WjAzMTEwLwYDVQQD EyhmMjZkZjMxNTM4ZjI0MTZiY2Y0MTM2ZWY2NTA3ODg4NGI1YzhhMjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgfS0X9mIzSG/xbJElw1GTRXZz3N eWWORDX+20vST52VljgIWpmqaWCU7+io7lQTjzx4043AzULOYPphsn7t0Z45Fj01 g3YQWfBeIycTP43JUHAO/kc9K0TBVLE6DR9Qfdx3fgsTP0Qlxn06m+6PpUnSJkeY +nG6iza9CyZdVwxyCX+aN11j29Wmtb6SRqNHUJ9uEq8GDHCsB7ucZimmxajR5/Rr SFDmKvVzCudAskkTIWM1wshIECOWhD+3FUFhjbCtluydTgtv6V+3A9QImIWFrKTg i7pRK/u7+1DYXD0x4l5hCith2J39kdiOcD4U41OzIay1J4+fmtWz9q+3PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPJt8xU48kFrz0E272UHiIS1yKIHMB8GA1UdIwQY MBaAFOSDRaoM1wJtYhxQCE+dnbtbnMLwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUlORnFnelhBbTFpSEZBSVQ1MmR1MXVjd3ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xNzRmMzItMWFkMS00NGY4LThhN2Yt NWZkYjk1NjMxMTNjLzEvNUlORnFnelhBbTFpSEZBSVQ1MmR1MXVjd3ZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi8xNzRmMzItMWFkMS00NGY4LThhN2YtNWZkYjk1NjMxMTNj LzEvNUlORnFnelhBbTFpSEZBSVQ1MmR1MXVjd3ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQyH0Yb9I ebqE9p1jzFU+FlyTpGNFlRVm4zL2GSgTNE7PViLOQQTHpAba9BL1Ax4+1bb/u81o u8E7yj/d+Z1IbutJ181MvJNOdhPFpY0aIU7IaI1bfGgnCi/mU7s6mSFQG9DdhUP7 XRIwp2GVzWofWi0v7v516jc+9yTRTP5OZk0vP/uraXoMnMYUWIVInKHrE7jPvR8R hV4rw2xGmWO5+7RShhhdTbeRM2+J6RPtvi/9lV2guV7Ja89PZdxAFGcWPy8Fm4gF vlSYsv9SR5XkpQkeskaC4F5kbxBKZ1ApMGWYoUySyqR+UHRJjRDJUIIseiVRL5wg j1Q3ZR72nCsVlQ== -----END CERTIFICATE-----Generated at Thu Dec 25 06:24:51 2025 by rpki-client