This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft File: 5Duq_GSzPkPbeNx67WBe9wQG2a8.mft (raw, json) Hash identifier: E8Hu24PYlXmyFOcZlFxNk8WPV0avUvDik4U2EuKp0lk= Subject key identifier: C2:06:8D:3B:D0:D6:03:BE:A4:97:9B:B9:0A:C9:14:56:29:79:8A:FB Authority key identifier: E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF Certificate issuer: /CN=e43baafc64b33e43db78dc7aed605ef70406d9af Certificate serial: 019B3CEC08B1139886D4E18767F31189FDD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft Manifest number: 081B Signing time: Sat 20 Dec 2025 18:01:00 +0000 Manifest this update: Sat 20 Dec 2025 18:01:00 +0000 Manifest next update: Sun 21 Dec 2025 18:01:00 +0000 Files and hashes: 1: 5Duq_GSzPkPbeNx67WBe9wQG2a8.crl (hash: JkOpS6AnX4/6pHxHXWbdZQ14mky200tu+i6JLIc78Xc=) 2: FUn2t9ppYu0Wn0pkoCRZ-HiUy7U.roa (hash: IgKhBAHaInAK8D+wEDHgOoVh2qEqWhDFRzWVOdnNaSE=) 3: H4hpUNA2nrrRur4Tk2W8HjJVqu4.roa (hash: oa7awxP7blKcpEGQ8hgbpBoX6kUOq34Ta41x1XECaFw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:08:b1:13:98:86:d4:e1:87:67:f3:11:89:fd:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e43baafc64b33e43db78dc7aed605ef70406d9af Validity Not Before: Dec 20 18:01:00 2025 GMT Not After : Dec 21 18:01:00 2025 GMT Subject: CN=c2068d3bd0d603bea4979bb90ac9145629798afb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5c:16:b8:44:18:2d:02:e7:9e:49:12:a2:bd: 4c:05:b9:fb:e6:fc:5a:7b:ec:57:7d:99:3f:a0:b3: 1f:a8:0d:6b:64:f8:97:31:93:0d:aa:3c:ff:f1:71: 3e:30:4b:d6:98:8b:05:60:ee:18:8f:2c:07:a6:96: 9f:e8:46:59:00:39:e4:90:d0:f1:d1:b7:ec:04:7b: 32:a7:f3:b4:d7:ca:da:ad:cb:a5:b5:9e:6e:b7:1a: 2f:3e:f2:fe:59:f5:c6:01:28:2b:59:04:04:f6:d0: 09:f5:b9:c9:e9:3a:a6:dc:14:5b:ee:f6:72:90:52: c6:ee:53:6d:44:c1:d1:64:72:64:b0:d4:8f:0c:9e: 63:01:32:5b:fa:79:ea:e6:13:55:7e:c4:d5:da:29: c3:e8:e9:87:17:17:0b:ee:10:f8:39:d6:52:60:02: 99:5a:06:e1:5f:ad:f9:d2:76:1f:57:90:09:ba:63: 4a:e4:32:0b:f8:10:5a:77:4f:fc:2e:83:f4:5d:45: d9:0b:b2:6d:ca:ec:bc:f4:d8:82:f4:6c:b3:f6:37: b5:5b:3b:41:d4:ab:c5:fc:dd:fe:bb:8a:88:37:8a: 81:d9:62:50:6a:68:2e:9e:d6:5d:37:3d:29:c2:d3: 2d:3b:9d:87:2d:b2:c9:c0:71:61:7d:a5:ed:2a:a3: 5d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:06:8D:3B:D0:D6:03:BE:A4:97:9B:B9:0A:C9:14:56:29:79:8A:FB X509v3 Authority Key Identifier: keyid:E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:29:ab:2d:97:2a:c5:22:1a:3b:c3:60:d7:8a:d0:0a:77:5b: 07:74:6c:9f:a3:f5:c2:c6:4c:08:ef:8e:68:0b:80:d0:ae:9d: b4:f8:14:43:15:6c:8f:59:27:b5:1c:c6:15:4b:67:b6:b2:25: 1f:d2:be:f8:04:6a:7e:bb:c6:1d:82:d6:33:a7:1b:5a:5a:84: 80:ce:2d:41:b9:c5:6c:67:7d:a2:59:7c:a2:71:bb:fd:cd:77: 9d:03:04:6d:7d:02:1a:66:54:2b:6b:11:d8:4b:a2:ad:a6:02: 74:35:17:5b:72:49:d5:fd:da:39:86:c1:e3:92:b6:1d:d3:48: 03:49:22:c5:c6:32:31:7c:68:ef:43:0f:5a:1d:41:c3:4d:f5: 76:fc:4a:0e:7a:87:7e:1b:65:eb:a4:7b:1e:fa:dd:e3:82:52: ad:54:b7:ec:33:43:8d:3a:56:3f:a3:f4:f4:e7:fe:11:37:0c: 30:fd:0e:a2:8e:bd:94:3a:5e:3e:ce:52:08:00:c3:c5:8b:bb: 34:bb:74:e0:9e:a6:50:df:b3:33:9d:42:4d:c8:eb:03:d9:51: ef:bb:66:fa:e0:ef:05:c8:84:3a:8b:09:3c:40:ec:53:78:74: 85:40:2d:23:b5:8c:fe:14:35:51:e4:4d:b8:e5:29:48:8d:43: 59:57:82:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87AixE5iG1OGHZ/MRif3TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0M2JhYWZjNjRiMzNlNDNkYjc4ZGM3YWVkNjA1ZWY3MDQw NmQ5YWYwHhcNMjUxMjIwMTgwMTAwWhcNMjUxMjIxMTgwMTAwWjAzMTEwLwYDVQQD EyhjMjA2OGQzYmQwZDYwM2JlYTQ5NzliYjkwYWM5MTQ1NjI5Nzk4YWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFwWuEQYLQLnnkkSor1MBbn75vxa e+xXfZk/oLMfqA1rZPiXMZMNqjz/8XE+MEvWmIsFYO4YjywHppaf6EZZADnkkNDx 0bfsBHsyp/O018rarcultZ5utxovPvL+WfXGASgrWQQE9tAJ9bnJ6Tqm3BRb7vZy kFLG7lNtRMHRZHJksNSPDJ5jATJb+nnq5hNVfsTV2inD6OmHFxcL7hD4OdZSYAKZ WgbhX6350nYfV5AJumNK5DIL+BBad0/8LoP0XUXZC7Jtyuy89NiC9Gyz9je1WztB 1KvF/N3+u4qIN4qB2WJQamguntZdNz0pwtMtO52HLbLJwHFhfaXtKqNddwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMIGjTvQ1gO+pJebuQrJFFYpeYr7MB8GA1UdIwQY MBaAFOQ7qvxksz5D23jceu1gXvcEBtmvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUR1cV9HU3pQa1BiZU54NjdXQmU5d1FHMmE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jODBkNDgtODMwYy00Y2MzLWFlNTIt ZTY4MTJkYWI2OTk5LzEvNUR1cV9HU3pQa1BiZU54NjdXQmU5d1FHMmE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9jODBkNDgtODMwYy00Y2MzLWFlNTItZTY4MTJkYWI2OTk5 LzEvNUR1cV9HU3pQa1BiZU54NjdXQmU5d1FHMmE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjymrLZcq xSIaO8Ng14rQCndbB3Rsn6P1wsZMCO+OaAuA0K6dtPgUQxVsj1kntRzGFUtntrIl H9K++ARqfrvGHYLWM6cbWlqEgM4tQbnFbGd9oll8onG7/c13nQMEbX0CGmZUK2sR 2EuiraYCdDUXW3JJ1f3aOYbB45K2HdNIA0kixcYyMXxo70MPWh1Bw031dvxKDnqH fhtl66R7Hvrd44JSrVS37DNDjTpWP6P09Of+ETcMMP0Ooo69lDpePs5SCADDxYu7 NLt04J6mUN+zM51CTcjrA9lR77tm+uDvBciEOosJPEDsU3h0hUAtI7WM/hQ1UeRN uOUpSI1DWVeCPQ== -----END CERTIFICATE-----Generated at Sun Dec 21 01:33:50 2025 by rpki-client