This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft File: 5_2MB2tTpxIbVBePW2p-KRNbzOw.mft (raw, json) Hash identifier: aEA6ygD9/SzXzVrpkOJ7dx7fjQRseayD00BwRT51ocY= Subject key identifier: 4D:2C:46:F7:AD:58:83:B3:52:14:6E:6C:B8:EA:DF:2F:D9:C7:FD:D2 Authority key identifier: E7:FD:8C:07:6B:53:A7:12:1B:54:17:8F:5B:6A:7E:29:13:5B:CC:EC Certificate issuer: /CN=e7fd8c076b53a7121b54178f5b6a7e29135bccec Certificate serial: 019B4091E1E0E5F8B61157915430BD8DF132 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_2MB2tTpxIbVBePW2p-KRNbzOw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft Manifest number: 023A Signing time: Sun 21 Dec 2025 11:01:00 +0000 Manifest this update: Sun 21 Dec 2025 11:01:00 +0000 Manifest next update: Mon 22 Dec 2025 11:01:00 +0000 Files and hashes: 1: 5_2MB2tTpxIbVBePW2p-KRNbzOw.crl (hash: bsDKa894gux/Hqerw/A2mFYy7tZqxTnRHAibb8bGhSU=) 2: G8yJSDi_qI6C3zmPW3k-kpCis5w.roa (hash: qlE3sGxxzJA/T2NGOl/URoTdfcV9KKmY+S6/Dr5mN74=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.crl rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft rsync://rpki.ripe.net/repository/DEFAULT/5_2MB2tTpxIbVBePW2p-KRNbzOw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:e1:e0:e5:f8:b6:11:57:91:54:30:bd:8d:f1:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7fd8c076b53a7121b54178f5b6a7e29135bccec Validity Not Before: Dec 21 11:01:00 2025 GMT Not After : Dec 22 11:01:00 2025 GMT Subject: CN=4d2c46f7ad5883b352146e6cb8eadf2fd9c7fdd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:68:f7:0b:c2:df:b3:11:6a:92:ea:35:0b:c0: dc:07:a2:a4:dd:a2:d0:27:7d:ae:68:9a:a2:86:2e: d2:0a:0f:75:63:86:d2:0a:78:0e:0f:c2:37:f1:c5: 3a:b8:ab:68:ac:d8:c2:dc:16:42:1b:7c:cb:41:b9: c2:38:4b:dd:88:96:ea:0a:85:24:d2:47:25:36:75: 70:eb:f0:43:f0:33:97:e8:70:e1:6d:6c:b2:0a:09: b7:3b:ba:c3:79:4c:6c:cc:12:b5:59:e3:33:9d:bd: 98:6e:14:16:47:4d:85:d2:85:cf:b3:19:a2:46:b4: 8b:4d:29:48:84:90:5d:c3:8b:aa:17:16:78:c5:f3: ae:b4:7d:b5:ee:de:d8:db:a0:d3:cf:7f:8a:43:99: ed:0b:8b:ca:32:13:05:95:6a:a6:bd:f6:58:e4:3e: 7c:91:2b:c3:f4:86:23:1f:04:52:c4:81:f7:a3:f7: 46:ba:e6:af:c6:98:1f:da:a8:88:c4:ea:9d:99:63: 3f:19:c9:7e:06:e1:bc:70:1b:5a:e0:11:72:09:19: 8a:d9:e4:93:f0:49:d0:56:d5:5b:bd:2c:b4:e9:c3: 10:cd:16:b7:50:86:ca:74:bf:f8:bb:50:79:35:d0: 76:4d:8b:51:7a:4d:a5:17:06:26:56:9b:fa:4e:82: d3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:2C:46:F7:AD:58:83:B3:52:14:6E:6C:B8:EA:DF:2F:D9:C7:FD:D2 X509v3 Authority Key Identifier: keyid:E7:FD:8C:07:6B:53:A7:12:1B:54:17:8F:5B:6A:7E:29:13:5B:CC:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_2MB2tTpxIbVBePW2p-KRNbzOw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:3f:1d:ce:0c:65:80:74:c6:65:1a:4f:90:67:0a:6d:9c:c2: 0d:01:4a:5e:35:02:de:fb:fb:dd:1c:63:1e:32:04:58:10:10: 47:24:f5:76:64:9c:6a:c7:76:b3:fb:a7:5f:8b:d0:9b:20:ac: 4c:5a:f8:7a:8b:c7:5d:2a:8d:a4:2d:d6:da:ee:88:f0:6f:57: 78:5d:79:dc:3a:75:80:c8:ab:e4:17:00:f3:37:91:75:24:da: 54:3e:7a:35:50:d7:e9:10:14:51:a5:52:00:55:82:79:ee:b0: 82:36:36:17:66:ce:cd:4a:50:9e:d6:f2:8d:4a:cf:90:65:32: 3d:bc:dd:84:1c:db:f8:da:34:c6:d2:4e:14:60:bc:d2:7a:97: 2c:15:0b:33:df:63:b1:a7:5a:44:73:8f:7f:81:3e:e2:f3:6a: 0e:56:5f:11:77:60:02:66:47:c2:04:e3:49:65:0e:32:d1:42: e4:92:f3:97:eb:58:56:8b:66:db:32:10:38:f9:03:d8:25:91: e7:f2:65:20:a1:e9:38:8f:2a:d6:ce:7b:c7:0e:63:e6:a2:1e: aa:93:cf:67:90:d3:c6:de:b9:38:e8:89:21:13:76:e7:2c:ec: b0:86:35:3d:9e:1c:a1:68:8e:31:14:2f:79:d8:b7:83:f8:ae: c8:0e:be:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkeHg5fi2EVeRVDC9jfEyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3ZmQ4YzA3NmI1M2E3MTIxYjU0MTc4ZjViNmE3ZTI5MTM1 YmNjZWMwHhcNMjUxMjIxMTEwMTAwWhcNMjUxMjIyMTEwMTAwWjAzMTEwLwYDVQQD Eyg0ZDJjNDZmN2FkNTg4M2IzNTIxNDZlNmNiOGVhZGYyZmQ5YzdmZGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGj3C8LfsxFqkuo1C8DcB6Kk3aLQ J32uaJqihi7SCg91Y4bSCngOD8I38cU6uKtorNjC3BZCG3zLQbnCOEvdiJbqCoUk 0kclNnVw6/BD8DOX6HDhbWyyCgm3O7rDeUxszBK1WeMznb2YbhQWR02F0oXPsxmi RrSLTSlIhJBdw4uqFxZ4xfOutH217t7Y26DTz3+KQ5ntC4vKMhMFlWqmvfZY5D58 kSvD9IYjHwRSxIH3o/dGuuavxpgf2qiIxOqdmWM/Gcl+BuG8cBta4BFyCRmK2eST 8EnQVtVbvSy06cMQzRa3UIbKdL/4u1B5NdB2TYtRek2lFwYmVpv6ToLTuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE0sRvetWIOzUhRubLjq3y/Zx/3SMB8GA1UdIwQY MBaAFOf9jAdrU6cSG1QXj1tqfikTW8zsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNV8yTUIydFRweEliVkJlUFcycC1LUk5iek93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9iNmFiN2ItYjM0OC00NzYzLTk3ZWMt MTZjNjNjNDI2YzMzLzEvNV8yTUIydFRweEliVkJlUFcycC1LUk5iek93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9iNmFiN2ItYjM0OC00NzYzLTk3ZWMtMTZjNjNjNDI2YzMz LzEvNV8yTUIydFRweEliVkJlUFcycC1LUk5iek93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoT8dzgxl gHTGZRpPkGcKbZzCDQFKXjUC3vv73RxjHjIEWBAQRyT1dmScasd2s/unX4vQmyCs TFr4eovHXSqNpC3W2u6I8G9XeF153Dp1gMir5BcA8zeRdSTaVD56NVDX6RAUUaVS AFWCee6wgjY2F2bOzUpQntbyjUrPkGUyPbzdhBzb+No0xtJOFGC80nqXLBULM99j sadaRHOPf4E+4vNqDlZfEXdgAmZHwgTjSWUOMtFC5JLzl+tYVotm2zIQOPkD2CWR 5/JlIKHpOI8q1s57xw5j5qIeqpPPZ5DTxt65OOiJIRN25yzssIY1PZ4coWiOMRQv edi3g/iuyA6+bQ== -----END CERTIFICATE-----Generated at Sun Dec 21 13:05:42 2025 by rpki-client