This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft File: 5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft (raw, json) Hash identifier: 8ZQuDYltGobGA6ZmoiytLImqE1KhOFqyJnKO83xpIM8= Subject key identifier: C2:EB:CB:EB:33:10:5D:3A:F9:EC:2A:73:45:4B:2C:C9:39:2C:01:44 Authority key identifier: E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2 Certificate issuer: /CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2 Certificate serial: 019B3D235B446F5DBB90F6D4CF8A79F92FAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft Manifest number: 1793 Signing time: Sat 20 Dec 2025 19:01:25 +0000 Manifest this update: Sat 20 Dec 2025 19:01:25 +0000 Manifest next update: Sun 21 Dec 2025 19:01:25 +0000 Files and hashes: 1: 5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl (hash: atP9OjydfTnqNC8Z4KqqfSu8f8//kzPS0xmcwTCb6xo=) 2: Q5lprEAu1AjZg8eC8e9vCRTQc5c.roa (hash: 1TVaYcq6pwwmReP0rlqvmkebRDkja4y3qu5GJXEAYFk=) 3: ScDiG1bEMg_iYAnwZ5RqZ9iuBfE.roa (hash: M8oZJ8Uj/JF9chZaxOYRuKYLCgT5+KWo335qmSJiUXs=) 4: _jwv_lcEjeP6obJDvR7tAaQUU-k.roa (hash: 5K6HFH8TXSLWVxpMWf5RIreFCOahhdZCzVwIY3yAflg=) 5: a3iaEBF86wbe5VjQTp-OMfHJc1E.roa (hash: nuf4ev5fGHCC4PXZAB5L19yGP986oYjP7JfQB1/fdXU=) 6: a9_bN0F2h_Kug5sgN-Kpf5AuF0Y.roa (hash: f6TkQWvmEWMglWzfpXp6gmToVC7S2f1cCbDqMTnyBzg=) 7: lihzuQoSb7FSiRKzRwb1us4H1SM.roa (hash: KHb+Gcf8LKwRqmsQV3Dwa1dFj1b8D+2+U6h0xyQG13I=) 8: qi8JXs2yo200PkF0ybkWzT5gLbA.roa (hash: rDwlWPK/DQ56zjNjEs53TpTRvG/Y0OQ9Sl2iycPDuH4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:5b:44:6f:5d:bb:90:f6:d4:cf:8a:79:f9:2f:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2 Validity Not Before: Dec 20 19:01:25 2025 GMT Not After : Dec 21 19:01:25 2025 GMT Subject: CN=c2ebcbeb33105d3af9ec2a73454b2cc9392c0144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0b:65:5f:c8:57:d7:d1:c3:de:98:c3:b0:ee: 03:75:17:15:8c:cc:ea:67:21:e5:26:d3:dd:9c:02: 80:82:77:45:31:c7:97:70:28:6c:8f:4d:b1:69:cf: 96:2e:0c:62:b5:13:53:10:24:6d:93:35:1b:b4:fe: c3:65:3c:fb:62:af:43:7b:55:92:0b:55:77:4c:10: 8b:f8:0f:47:ad:d2:dd:e6:4c:4b:c8:fc:5f:4e:78: 4b:b1:bb:1e:59:cf:1e:b9:d7:64:42:33:39:be:58: 12:ff:0a:22:90:f3:7c:e7:70:e9:09:6f:84:f6:76: 7c:e6:23:cb:44:26:10:23:37:26:9e:04:1b:fa:99: 75:a5:b0:11:48:7d:73:2f:e6:76:51:8e:96:12:20: 2a:7e:e7:45:68:b4:58:c5:68:80:d3:8e:fc:1d:f3: 61:79:35:87:d9:be:ff:c7:2a:59:c6:27:e0:7b:4f: 78:65:81:c4:ea:46:de:96:86:7c:52:32:c2:1c:cf: a4:05:36:73:9b:57:2c:e9:d5:5c:a0:8a:31:a5:1c: 32:97:01:03:e5:de:d1:74:ae:1d:e2:53:08:99:c3: 6a:4f:8b:31:80:66:51:8a:01:53:81:d1:a8:8f:26: 54:06:48:02:07:63:75:0c:4d:cb:a8:4d:56:8e:38: d1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:EB:CB:EB:33:10:5D:3A:F9:EC:2A:73:45:4B:2C:C9:39:2C:01:44 X509v3 Authority Key Identifier: keyid:E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:91:cc:c7:33:fe:ae:8c:29:ea:11:9c:f2:89:48:dd:b7:86: bf:5b:96:1a:0e:4b:23:8f:5a:5f:d7:90:14:81:44:64:49:5d: 22:7f:45:e5:49:aa:ce:f4:17:13:05:6b:52:41:63:1e:70:53: ba:0d:6e:b9:45:30:b1:fd:ee:f7:32:d3:5c:b0:c7:14:cc:86: 31:e1:b1:28:07:1a:73:da:08:f3:b3:bd:09:3a:b4:b4:e4:f4: 64:52:be:e8:8f:54:04:df:8e:b2:9f:60:e1:95:07:f5:be:98: 05:02:49:4d:19:d3:c5:be:d2:40:59:a3:97:b7:af:af:5d:5f: 70:94:99:38:07:35:17:43:79:d6:86:7e:c9:be:bc:a0:d7:0a: 98:2a:64:db:bd:8c:6f:95:28:ca:a3:e8:f4:6d:21:c4:be:8e: 9d:57:a2:a0:d6:84:31:a8:c7:1b:8c:4b:2e:13:de:fb:f8:f5: 4e:c2:1c:d1:63:64:f7:22:b8:22:f5:53:1e:5e:16:3d:8f:b6: bb:bc:29:b0:30:7e:db:84:d8:32:d7:94:d5:9f:25:17:04:6b: 20:25:f4:69:12:bd:5d:4a:ad:56:9e:6c:29:ce:e6:77:ec:89: f5:8c:a4:dc:97:67:70:df:19:49:6c:94:f8:be:73:ed:17:ef: 17:3b:e6:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9I1tEb127kPbUz4p5+S+rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YTFiMzY1NTJmOWRhY2NiOTJhYzVjM2I0NGI0MjZkNjQz NzQ5ZTIwHhcNMjUxMjIwMTkwMTI1WhcNMjUxMjIxMTkwMTI1WjAzMTEwLwYDVQQD EyhjMmViY2JlYjMzMTA1ZDNhZjllYzJhNzM0NTRiMmNjOTM5MmMwMTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQtlX8hX19HD3pjDsO4DdRcVjMzq ZyHlJtPdnAKAgndFMceXcChsj02xac+WLgxitRNTECRtkzUbtP7DZTz7Yq9De1WS C1V3TBCL+A9HrdLd5kxLyPxfTnhLsbseWc8euddkQjM5vlgS/woikPN853DpCW+E 9nZ85iPLRCYQIzcmngQb+pl1pbARSH1zL+Z2UY6WEiAqfudFaLRYxWiA0478HfNh eTWH2b7/xypZxifge094ZYHE6kbeloZ8UjLCHM+kBTZzm1cs6dVcoIoxpRwylwED 5d7RdK4d4lMImcNqT4sxgGZRigFTgdGojyZUBkgCB2N1DE3LqE1WjjjRDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMLry+szEF06+ewqc0VLLMk5LAFEMB8GA1UdIwQY MBaAFOWhs2VS+drMuSrFw7RLQm1kN0niMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWFHelpWTDUyc3k1S3NYRHRFdENiV1EzU2VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iOGVhNWItM2RkNC00Mzc0LWE3OTMt YzVlNmQyM2Y4YjA5LzEvNWFHelpWTDUyc3k1S3NYRHRFdENiV1EzU2VJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9iOGVhNWItM2RkNC00Mzc0LWE3OTMtYzVlNmQyM2Y4YjA5 LzEvNWFHelpWTDUyc3k1S3NYRHRFdENiV1EzU2VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAspHMxzP+ rowp6hGc8olI3beGv1uWGg5LI49aX9eQFIFEZEldIn9F5UmqzvQXEwVrUkFjHnBT ug1uuUUwsf3u9zLTXLDHFMyGMeGxKAcac9oI87O9CTq0tOT0ZFK+6I9UBN+Osp9g 4ZUH9b6YBQJJTRnTxb7SQFmjl7evr11fcJSZOAc1F0N51oZ+yb68oNcKmCpk272M b5UoyqPo9G0hxL6OnVeioNaEMajHG4xLLhPe+/j1TsIc0WNk9yK4IvVTHl4WPY+2 u7wpsDB+24TYMteU1Z8lFwRrICX0aRK9XUqtVp5sKc7md+yJ9Yyk3JdncN8ZSWyU +L5z7RfvFzvmuw== -----END CERTIFICATE-----Generated at Sat Dec 20 22:03:11 2025 by rpki-client