This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft File: 5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft (raw, json) Hash identifier: EUNobJ53xbtX6mcCBBgUVYtT8KDOAEaVOlzRzWFeFy8= Subject key identifier: 27:F5:57:37:BA:BE:53:0E:E0:26:E4:08:8E:06:AC:D1:A1:E5:E9:D9 Authority key identifier: E5:DA:8E:9C:FC:8B:16:0E:C5:9B:54:0F:39:D8:97:3D:42:18:31:2A Certificate issuer: /CN=e5da8e9cfc8b160ec59b540f39d8973d4218312a Certificate serial: 019B454A2AEF9F26C7632F8EAC23FE9EBD03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft Manifest number: CA Signing time: Mon 22 Dec 2025 09:00:47 +0000 Manifest this update: Mon 22 Dec 2025 09:00:47 +0000 Manifest next update: Tue 23 Dec 2025 09:00:47 +0000 Files and hashes: 1: 4T1bySiGudbsbv8Y6SYMT68IAlk.roa (hash: j45Gs5R+QR12QMbnB1e3ALfJJc32d03rqtj+AWZZhSU=) 2: 5dqOnPyLFg7Fm1QPOdiXPUIYMSo.crl (hash: HfQ4v4NYFzLEQ74UBELhnSvufMmTJUT98FGO75E1F48=) 3: rD8reJf-xFp9NkhhBOaHbdsK8CQ.roa (hash: vWwQMoE/PcCmAMEjuRLL+8UidHSYOb6QmW8QLct4Gd8=) 4: yLhKfT4WYSZkn2VNCGfPfTmwkYE.roa (hash: 8tnnWUxQ+gmE22xkxlM/+md2moZokj3FfemqmCXdm1E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.crl rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:4a:2a:ef:9f:26:c7:63:2f:8e:ac:23:fe:9e:bd:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5da8e9cfc8b160ec59b540f39d8973d4218312a Validity Not Before: Dec 22 09:00:47 2025 GMT Not After : Dec 23 09:00:47 2025 GMT Subject: CN=27f55737babe530ee026e4088e06acd1a1e5e9d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c4:63:bf:f2:24:51:23:bf:0e:43:49:3c:26: e4:8b:99:6a:ac:27:59:63:e0:5f:a3:5d:59:8e:31: 32:29:91:76:f1:ca:ff:b4:5e:0b:ee:66:9d:0e:d2: 32:41:38:5e:bf:2c:3f:02:f5:ed:b8:0d:fb:84:f0: 7e:f1:12:2c:2d:08:9d:c0:2d:64:53:61:cd:10:a9: e3:7a:ef:ec:ec:fc:1d:98:50:16:70:ce:f1:3f:cb: 13:cf:b0:8b:7f:c3:12:af:d0:21:91:07:3d:fb:17: 3a:c3:ca:48:74:19:59:17:e4:57:0a:7a:8c:11:dc: 26:36:2c:26:04:b5:6a:2f:03:0d:9b:15:6a:41:3f: f5:f2:26:9d:4e:54:3a:b3:22:4a:06:6a:1c:83:fb: 8e:8d:44:97:86:3f:0c:da:e7:58:e9:28:66:50:e5: 8d:d8:fe:26:df:a0:0b:aa:dd:c8:22:3e:2b:37:f5: e1:3e:b9:c0:72:22:04:02:fb:fc:9d:dd:22:04:81: 55:34:11:2b:33:a4:bb:ce:54:10:8c:e7:62:81:3f: 24:46:dd:a5:01:91:5c:ed:63:2a:7f:26:4f:78:d8: c9:0b:28:22:25:d0:aa:25:e2:ad:05:ca:c9:4a:e8: 82:42:75:cd:41:a4:a9:6a:68:b1:bc:75:0e:8d:d1: b9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:F5:57:37:BA:BE:53:0E:E0:26:E4:08:8E:06:AC:D1:A1:E5:E9:D9 X509v3 Authority Key Identifier: keyid:E5:DA:8E:9C:FC:8B:16:0E:C5:9B:54:0F:39:D8:97:3D:42:18:31:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:cf:c5:4e:8c:a8:3d:05:a1:94:20:a5:67:af:f8:33:6a:23: 47:90:78:17:93:cb:d6:00:f1:5e:54:1b:35:8a:01:9a:7d:89: f1:57:37:33:e8:de:c3:0d:65:5d:9f:6e:7a:d4:d9:72:f3:2f: 0d:a9:09:22:33:d5:4d:10:92:c4:3f:53:4e:e1:b0:e5:14:0c: bd:67:c3:c6:da:88:55:3e:a1:de:65:ad:e4:f8:74:23:2b:7d: 27:1f:37:c5:92:99:5e:47:17:b1:00:ae:9e:de:1f:cc:cb:35: e3:dd:01:bb:83:74:53:a8:bf:3e:c7:5b:75:e6:9b:a4:27:c7: 5a:b6:88:cf:5e:ff:17:4e:88:4c:46:26:ef:8a:a3:6b:1a:5c: f0:63:c7:f5:0f:1d:e3:74:dc:7d:d3:07:dd:72:7e:a3:eb:ef: 2d:6d:87:79:10:76:a0:2a:0d:13:e4:d4:4d:13:25:21:8b:8a: 88:2d:9b:04:65:af:67:25:a5:17:2a:27:3a:c4:cc:ce:93:7d: d4:c7:b7:48:49:aa:2e:84:1b:e2:13:ef:52:7a:1c:13:49:9d: c9:09:5c:be:46:16:22:36:1f:a1:11:53:1e:60:d8:8b:46:8f: 2b:e5:e3:a4:97:7d:24:1c:dc:38:4c:33:86:30:49:08:57:45: bb:b2:82:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFSirvnybHYy+OrCP+nr0DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ZGE4ZTljZmM4YjE2MGVjNTliNTQwZjM5ZDg5NzNkNDIx ODMxMmEwHhcNMjUxMjIyMDkwMDQ3WhcNMjUxMjIzMDkwMDQ3WjAzMTEwLwYDVQQD EygyN2Y1NTczN2JhYmU1MzBlZTAyNmU0MDg4ZTA2YWNkMWExZTVlOWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8Rjv/IkUSO/DkNJPCbki5lqrCdZ Y+Bfo11ZjjEyKZF28cr/tF4L7madDtIyQThevyw/AvXtuA37hPB+8RIsLQidwC1k U2HNEKnjeu/s7PwdmFAWcM7xP8sTz7CLf8MSr9AhkQc9+xc6w8pIdBlZF+RXCnqM EdwmNiwmBLVqLwMNmxVqQT/18iadTlQ6syJKBmocg/uOjUSXhj8M2udY6ShmUOWN 2P4m36ALqt3IIj4rN/XhPrnAciIEAvv8nd0iBIFVNBErM6S7zlQQjOdigT8kRt2l AZFc7WMqfyZPeNjJCygiJdCqJeKtBcrJSuiCQnXNQaSpamixvHUOjdG5swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCf1Vze6vlMO4CbkCI4GrNGh5enZMB8GA1UdIwQY MBaAFOXajpz8ixYOxZtUDznYlz1CGDEqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWRxT25QeUxGZzdGbTFRUE9kaVhQVUlZTVNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8wMDNjYTktYzM5MC00Mjc0LThmYzYt N2M1MDQ3MDNiYjAyLzEvNWRxT25QeUxGZzdGbTFRUE9kaVhQVUlZTVNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8wMDNjYTktYzM5MC00Mjc0LThmYzYtN2M1MDQ3MDNiYjAy LzEvNWRxT25QeUxGZzdGbTFRUE9kaVhQVUlZTVNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXs/FToyo PQWhlCClZ6/4M2ojR5B4F5PL1gDxXlQbNYoBmn2J8Vc3M+jeww1lXZ9uetTZcvMv DakJIjPVTRCSxD9TTuGw5RQMvWfDxtqIVT6h3mWt5Ph0Iyt9Jx83xZKZXkcXsQCu nt4fzMs1490Bu4N0U6i/PsdbdeabpCfHWraIz17/F06ITEYm74qjaxpc8GPH9Q8d 43TcfdMH3XJ+o+vvLW2HeRB2oCoNE+TUTRMlIYuKiC2bBGWvZyWlFyonOsTMzpN9 1Me3SEmqLoQb4hPvUnocE0mdyQlcvkYWIjYfoRFTHmDYi0aPK+XjpJd9JBzcOEwz hjBJCFdFu7KCXg== -----END CERTIFICATE-----Generated at Mon Dec 22 10:35:14 2025 by rpki-client