This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft File: 5D8j1ok3SUKI38x6Dv4f50ogNuE.mft (raw, json) Hash identifier: h7pa1Jw7LzF/yVMxrIJ7qUMi31ZSSV/qRFdiltW+XDE= Subject key identifier: EA:B2:81:EC:46:E2:8E:60:2D:B6:28:87:F1:C2:0A:79:2C:59:AD:19 Authority key identifier: E4:3F:23:D6:89:37:49:42:88:DF:CC:7A:0E:FE:1F:E7:4A:20:36:E1 Certificate issuer: /CN=e43f23d68937494288dfcc7a0efe1fe74a2036e1 Certificate serial: 019B5ED31159AC8507EE0B28DE99E04C0A55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft Manifest number: 179C Signing time: Sat 27 Dec 2025 08:00:49 +0000 Manifest this update: Sat 27 Dec 2025 08:00:49 +0000 Manifest next update: Sun 28 Dec 2025 08:00:49 +0000 Files and hashes: 1: 1-rRkYRd227_5bnec3bYwnL5SxpY.roa (hash: R+OpLqItt4unWxgfStcunzTz6dBOZ563zxthlacRJZ4=) 2: 5D8j1ok3SUKI38x6Dv4f50ogNuE.crl (hash: smdwlWtVn6TyEopJMRRci1r/bCWIQHenJz9tX9BfcYM=) 3: 7QAi3hol-4GpeEk0vacoCeiMLE8.roa (hash: 41WAyyFZEfqE7fT5J+jGu94yYNN3Qp+eHjuNlnSVUDI=) 4: N8lbW7Yoyaq7hT551OkHLLE0p-8.roa (hash: PaYSmfBdwZ0Nhmv4gZsttQQCgk3Gm/XsPJfIIlvLQgs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.crl rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 08:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5e:d3:11:59:ac:85:07:ee:0b:28:de:99:e0:4c:0a:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e43f23d68937494288dfcc7a0efe1fe74a2036e1 Validity Not Before: Dec 27 08:00:49 2025 GMT Not After : Dec 28 08:00:49 2025 GMT Subject: CN=eab281ec46e28e602db62887f1c20a792c59ad19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:92:fe:b9:01:25:f8:93:f3:fc:bf:26:b7:5f: 58:89:38:0b:2b:90:78:5e:46:b9:34:18:c6:76:90: c2:22:6c:87:13:28:f8:79:a5:e3:41:27:c1:ba:b0: 1c:75:7d:b9:9c:dc:37:9b:1e:03:fa:72:e3:df:d8: 62:7c:9d:7e:d6:df:56:ff:06:43:9a:10:e3:9b:c8: 8a:af:41:73:60:66:f3:6d:e9:9a:ed:a5:51:bc:88: 6a:7c:b6:9b:53:86:2b:9c:e4:2c:29:b3:a8:98:c6: 7d:a7:43:45:09:63:bc:06:ae:fb:67:17:42:f8:7e: c9:74:a7:6a:18:1f:6b:b0:41:fe:7f:31:da:f6:d8: 71:8d:ff:52:3a:c5:7d:25:44:64:7c:31:53:43:5b: 8c:90:9b:23:cf:ff:f5:81:6b:4b:09:14:bf:ba:a7: a3:81:3c:ca:c2:b2:e3:ed:c3:5d:27:b8:4a:95:ed: 8f:21:c4:80:af:92:23:04:35:ac:ab:cd:74:4e:4f: a7:ff:a5:65:f6:83:e8:b8:8d:d5:ef:18:d8:5a:f1: 2d:28:6a:ed:4d:72:57:d3:ea:2f:f7:12:e6:30:75: 01:ff:fa:3d:66:65:06:31:d7:dc:a0:97:ee:1d:4b: 9b:2f:18:d7:1d:ca:8c:44:50:7a:fd:ad:12:19:b0: 83:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:B2:81:EC:46:E2:8E:60:2D:B6:28:87:F1:C2:0A:79:2C:59:AD:19 X509v3 Authority Key Identifier: keyid:E4:3F:23:D6:89:37:49:42:88:DF:CC:7A:0E:FE:1F:E7:4A:20:36:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:cd:0e:04:a2:ad:f1:d5:08:57:96:d9:a5:4d:68:d3:bf:5d: 6c:38:9d:5f:84:55:32:36:37:2d:60:6a:b9:b4:99:56:15:d3: 47:4f:8a:e0:16:57:ad:f8:59:57:06:2e:49:bd:b5:e4:d3:18: d7:4d:af:f9:b2:01:80:87:b6:21:04:5e:8c:d7:70:ff:cf:a6: db:70:fa:cb:05:d4:d1:28:7b:44:e2:af:89:d7:49:6d:69:e0: 0c:0e:5d:3f:1b:0d:39:08:14:1b:70:2b:16:e3:86:ba:79:2a: ca:df:f8:81:47:0d:43:1b:b3:e7:ac:3d:49:bf:90:e8:b2:79: e8:a2:51:d8:e0:ad:61:f9:03:9b:bb:11:ab:c7:27:f8:91:1b: e3:ee:c2:cf:45:dc:2a:85:51:ee:f3:51:00:00:be:c7:77:72: 87:64:e0:d7:33:0f:46:30:0a:7e:86:44:66:43:70:bd:b1:86: b7:6d:90:fe:c3:3c:d2:e1:f4:8f:4c:ad:8e:fa:ec:07:47:48: f8:47:86:de:65:0e:9f:f8:79:56:6b:3c:98:04:b9:82:88:7e: 42:0d:60:d2:ab:d2:e1:c6:47:42:d4:b8:8e:a7:de:34:78:b1: 71:5f:7c:94:8f:d2:65:4d:6d:ba:e6:28:5b:3a:1e:75:8d:6e: 8d:7a:88:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZte0xFZrIUH7gso3pngTApVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0M2YyM2Q2ODkzNzQ5NDI4OGRmY2M3YTBlZmUxZmU3NGEy MDM2ZTEwHhcNMjUxMjI3MDgwMDQ5WhcNMjUxMjI4MDgwMDQ5WjAzMTEwLwYDVQQD EyhlYWIyODFlYzQ2ZTI4ZTYwMmRiNjI4ODdmMWMyMGE3OTJjNTlhZDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5L+uQEl+JPz/L8mt19YiTgLK5B4 Xka5NBjGdpDCImyHEyj4eaXjQSfBurAcdX25nNw3mx4D+nLj39hifJ1+1t9W/wZD mhDjm8iKr0FzYGbzbema7aVRvIhqfLabU4YrnOQsKbOomMZ9p0NFCWO8Bq77ZxdC +H7JdKdqGB9rsEH+fzHa9thxjf9SOsV9JURkfDFTQ1uMkJsjz//1gWtLCRS/uqej gTzKwrLj7cNdJ7hKle2PIcSAr5IjBDWsq810Tk+n/6Vl9oPouI3V7xjYWvEtKGrt TXJX0+ov9xLmMHUB//o9ZmUGMdfcoJfuHUubLxjXHcqMRFB6/a0SGbCDrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOqygexG4o5gLbYoh/HCCnksWa0ZMB8GA1UdIwQY MBaAFOQ/I9aJN0lCiN/Meg7+H+dKIDbhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUQ4ajFvazNTVUtJMzh4NkR2NGY1MG9nTnVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hYjVmZGMtOWQ2Yi00Njc1LTlhMTMt OWQxODVmNzM4MjExLzEvNUQ4ajFvazNTVUtJMzh4NkR2NGY1MG9nTnVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9hYjVmZGMtOWQ2Yi00Njc1LTlhMTMtOWQxODVmNzM4MjEx LzEvNUQ4ajFvazNTVUtJMzh4NkR2NGY1MG9nTnVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK80OBKKt 8dUIV5bZpU1o079dbDidX4RVMjY3LWBqubSZVhXTR0+K4BZXrfhZVwYuSb215NMY 102v+bIBgIe2IQRejNdw/8+m23D6ywXU0Sh7ROKviddJbWngDA5dPxsNOQgUG3Ar FuOGunkqyt/4gUcNQxuz56w9Sb+Q6LJ56KJR2OCtYfkDm7sRq8cn+JEb4+7Cz0Xc KoVR7vNRAAC+x3dyh2Tg1zMPRjAKfoZEZkNwvbGGt22Q/sM80uH0j0ytjvrsB0dI +EeG3mUOn/h5Vms8mAS5goh+Qg1g0qvS4cZHQtS4jqfeNHixcV98lI/SZU1tuuYo WzoedY1ujXqI1A== -----END CERTIFICATE-----Generated at Sat Dec 27 10:49:53 2025 by rpki-client