This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft File: 5D8j1ok3SUKI38x6Dv4f50ogNuE.mft (raw, json) Hash identifier: 39r4wn7JTw6WqmQT9vabUlSYc60TAx03ZNHb3+mxBbw= Subject key identifier: 04:5B:4C:EC:25:7D:6F:BE:52:0D:BF:DC:36:28:8F:67:C0:F5:C5:A3 Authority key identifier: E4:3F:23:D6:89:37:49:42:88:DF:CC:7A:0E:FE:1F:E7:4A:20:36:E1 Certificate issuer: /CN=e43f23d68937494288dfcc7a0efe1fe74a2036e1 Certificate serial: 019B70343410854D42F8551646F9D0EEC674 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft Manifest number: 17A5 Signing time: Tue 30 Dec 2025 17:00:27 +0000 Manifest this update: Tue 30 Dec 2025 17:00:27 +0000 Manifest next update: Wed 31 Dec 2025 17:00:27 +0000 Files and hashes: 1: 1-rRkYRd227_5bnec3bYwnL5SxpY.roa (hash: R+OpLqItt4unWxgfStcunzTz6dBOZ563zxthlacRJZ4=) 2: 5D8j1ok3SUKI38x6Dv4f50ogNuE.crl (hash: zBvx9PInyAN2EsMtnyJpU43ZzyqMXlC0Gip1JAwSLQI=) 3: 7QAi3hol-4GpeEk0vacoCeiMLE8.roa (hash: 41WAyyFZEfqE7fT5J+jGu94yYNN3Qp+eHjuNlnSVUDI=) 4: N8lbW7Yoyaq7hT551OkHLLE0p-8.roa (hash: PaYSmfBdwZ0Nhmv4gZsttQQCgk3Gm/XsPJfIIlvLQgs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.crl rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:34:34:10:85:4d:42:f8:55:16:46:f9:d0:ee:c6:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e43f23d68937494288dfcc7a0efe1fe74a2036e1 Validity Not Before: Dec 30 17:00:27 2025 GMT Not After : Dec 31 17:00:27 2025 GMT Subject: CN=045b4cec257d6fbe520dbfdc36288f67c0f5c5a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c7:1a:ad:4e:76:e9:58:ae:61:79:7a:23:9d: 7a:3a:79:5e:93:06:a8:84:ea:23:de:20:e2:27:55: 98:f6:f6:1a:54:f6:8c:1c:ea:71:6c:36:a5:75:13: 35:4d:d5:7d:47:b8:59:68:37:03:14:c0:02:d4:75: d9:cb:a9:8c:b9:55:77:7e:3d:03:22:e1:77:28:30: c9:c8:91:c3:3d:90:6f:cf:a0:23:5a:6f:b1:1b:f4: 0c:83:43:c2:93:73:77:91:85:85:d6:59:fa:2b:7d: 55:1a:53:72:3c:4c:fc:e7:ec:6f:e6:c0:1c:6f:c6: 9a:a2:d8:b8:20:d2:8b:04:51:a9:9b:1d:16:a1:09: c5:cf:6c:4f:95:47:f7:6b:56:91:14:2b:60:ac:32: 83:1b:fb:91:51:34:93:90:7c:0a:67:75:d4:d1:c4: 30:d7:07:59:6b:fb:c3:4a:e7:b9:3b:c5:03:3f:0a: 06:5d:ce:1a:de:9a:3e:25:3f:3b:9c:fd:ef:6b:d6: b6:e1:0d:c0:4a:1a:90:c1:a5:05:f2:a5:3e:e6:b2: d6:64:c1:19:ef:6f:6f:e4:87:3f:3c:21:05:69:96: 33:2f:93:ca:98:07:a8:97:c3:62:a0:bc:48:b4:2c: 7b:fc:0a:0b:48:4b:fb:5c:b1:7f:80:78:2e:2d:f1: 5c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:5B:4C:EC:25:7D:6F:BE:52:0D:BF:DC:36:28:8F:67:C0:F5:C5:A3 X509v3 Authority Key Identifier: keyid:E4:3F:23:D6:89:37:49:42:88:DF:CC:7A:0E:FE:1F:E7:4A:20:36:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:68:0c:9e:82:30:dd:db:66:ec:39:fa:41:76:55:4a:6c:b5: b1:84:4a:44:07:39:72:1c:a3:9d:9e:8c:ea:40:57:bf:71:2f: 07:e2:68:d2:40:e3:16:66:c6:26:96:74:4c:10:eb:c3:5c:c9: 9a:a4:97:5c:6f:e0:f1:49:57:b6:f0:d3:38:a7:52:37:c5:63: 51:02:2d:7e:54:34:d1:b0:65:c8:53:d2:7b:4a:c7:2d:40:d9: ba:57:aa:15:c7:d5:11:44:93:76:0d:b2:45:12:fd:8e:ed:0b: 70:93:b6:bc:ec:d4:f9:de:ee:6d:65:cb:ea:52:b7:7f:d8:ca: e7:f7:cd:39:75:2e:12:b4:b0:36:82:78:90:a4:8e:c2:f8:d4: 41:48:54:47:34:aa:f7:4e:a6:e4:c9:b3:da:ef:44:04:95:af: 85:d7:a8:33:63:09:30:d8:13:e6:ba:b7:81:0b:6e:77:d7:a6: 7b:0b:99:92:78:15:58:17:47:ff:0b:df:4e:bd:0d:f8:b4:6d: 8f:8d:5f:4c:f8:eb:5f:b3:1d:f7:2f:6d:a3:62:72:0c:dd:d6: 8a:ac:26:cf:28:c6:02:79:a8:ec:70:8f:7e:bb:5e:b5:dd:28: 28:5a:07:4c:57:25:14:ac:62:3d:8b:4d:82:7b:14:74:6d:a5: 6c:1f:23:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtwNDQQhU1C+FUWRvnQ7sZ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0M2YyM2Q2ODkzNzQ5NDI4OGRmY2M3YTBlZmUxZmU3NGEy MDM2ZTEwHhcNMjUxMjMwMTcwMDI3WhcNMjUxMjMxMTcwMDI3WjAzMTEwLwYDVQQD EygwNDViNGNlYzI1N2Q2ZmJlNTIwZGJmZGMzNjI4OGY2N2MwZjVjNWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8carU526ViuYXl6I516Onlekwao hOoj3iDiJ1WY9vYaVPaMHOpxbDaldRM1TdV9R7hZaDcDFMAC1HXZy6mMuVV3fj0D IuF3KDDJyJHDPZBvz6AjWm+xG/QMg0PCk3N3kYWF1ln6K31VGlNyPEz85+xv5sAc b8aaoti4INKLBFGpmx0WoQnFz2xPlUf3a1aRFCtgrDKDG/uRUTSTkHwKZ3XU0cQw 1wdZa/vDSue5O8UDPwoGXc4a3po+JT87nP3va9a24Q3AShqQwaUF8qU+5rLWZMEZ 729v5Ic/PCEFaZYzL5PKmAeol8NioLxItCx7/AoLSEv7XLF/gHguLfFcfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFARbTOwlfW++Ug2/3DYoj2fA9cWjMB8GA1UdIwQY MBaAFOQ/I9aJN0lCiN/Meg7+H+dKIDbhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUQ4ajFvazNTVUtJMzh4NkR2NGY1MG9nTnVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hYjVmZGMtOWQ2Yi00Njc1LTlhMTMt OWQxODVmNzM4MjExLzEvNUQ4ajFvazNTVUtJMzh4NkR2NGY1MG9nTnVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9hYjVmZGMtOWQ2Yi00Njc1LTlhMTMtOWQxODVmNzM4MjEx LzEvNUQ4ajFvazNTVUtJMzh4NkR2NGY1MG9nTnVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWmgMnoIw 3dtm7Dn6QXZVSmy1sYRKRAc5chyjnZ6M6kBXv3EvB+Jo0kDjFmbGJpZ0TBDrw1zJ mqSXXG/g8UlXtvDTOKdSN8VjUQItflQ00bBlyFPSe0rHLUDZuleqFcfVEUSTdg2y RRL9ju0LcJO2vOzU+d7ubWXL6lK3f9jK5/fNOXUuErSwNoJ4kKSOwvjUQUhURzSq 906m5Mmz2u9EBJWvhdeoM2MJMNgT5rq3gQtud9emewuZkngVWBdH/wvfTr0N+LRt j41fTPjrX7Md9y9to2JyDN3WiqwmzyjGAnmo7HCPfrtetd0oKFoHTFclFKxiPYtN gnsUdG2lbB8jBA== -----END CERTIFICATE-----Generated at Tue Dec 30 18:43:06 2025 by rpki-client