This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft File: 5YJfvufEOimDjqvk_IfXlDScDIA.mft (raw, json) Hash identifier: W7gkhorcK7F3dI3WkI6Oa0Cry9JEvJkg0p4UZ4DcPGc= Subject key identifier: 66:83:D6:09:C8:D6:0A:FA:D7:B3:E8:39:8E:46:D3:CC:7A:47:5E:94 Authority key identifier: E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80 Certificate issuer: /CN=e5825fbee7c43a29838eabe4fc87d794349c0c80 Certificate serial: 019B42EE82334D5114DFEFC56E7CDE5AB777 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft Manifest number: 14E5 Signing time: Sun 21 Dec 2025 22:01:25 +0000 Manifest this update: Sun 21 Dec 2025 22:01:25 +0000 Manifest next update: Mon 22 Dec 2025 22:01:25 +0000 Files and hashes: 1: 243IV1WXDUNyw7rjuRN5vP7IoKY.roa (hash: 0O92Hb85YHbJvLZRlVOgE6xTVbqzeKYfm5ftactSgfc=) 2: 5YJfvufEOimDjqvk_IfXlDScDIA.crl (hash: LwpUQYjj8U+zaDOWbDL0ZKNRhZRxaHVIVYU5iu4hx5w=) 3: 9MYfbdEtLjtEuoq4B1OcPGIAtDU.roa (hash: zTkYPMu8h5Z/txGXaV3nKQYC/0+0sqJF536VnkSLAUQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:82:33:4d:51:14:df:ef:c5:6e:7c:de:5a:b7:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5825fbee7c43a29838eabe4fc87d794349c0c80 Validity Not Before: Dec 21 22:01:25 2025 GMT Not After : Dec 22 22:01:25 2025 GMT Subject: CN=6683d609c8d60afad7b3e8398e46d3cc7a475e94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e4:cb:26:6d:09:a0:2e:0b:e5:e9:2f:54:21: a2:c2:39:85:28:34:cd:16:f2:73:79:bb:a7:5b:a1: 72:2a:0b:34:67:94:41:9b:20:40:59:cb:1b:ec:fd: 94:e2:7a:11:57:4a:20:1b:91:27:75:0c:cd:68:0b: 57:56:24:42:4b:09:6b:bf:09:79:14:4f:d1:67:89: 2e:4f:5a:77:77:fc:8f:c4:db:0b:12:79:d1:b2:64: 46:26:f2:ea:cf:c0:4f:ea:df:e5:1c:30:01:e6:a1: 1f:1a:a5:8b:c5:b0:ff:46:fc:79:10:6e:ac:81:b1: 12:73:3e:1a:11:89:7a:38:53:2b:77:fb:86:d3:a2: 01:7d:0c:fa:ff:03:f7:c2:fd:9f:fb:ae:35:4b:d2: 76:ec:e7:e9:e5:de:5d:6d:6a:a3:96:e5:8e:36:0d: 43:a6:23:f0:d6:09:bd:56:51:56:84:bd:65:2b:fe: 34:cc:e1:85:0a:15:d4:de:e4:70:91:23:48:89:1d: c2:7b:76:e6:5a:3d:28:e5:29:3d:3b:b2:de:21:1a: 12:08:a3:b5:c6:5d:b4:af:cc:62:01:c8:62:6f:01: e9:2a:60:ba:7e:2b:67:c3:79:e4:e0:ec:80:1c:7f: eb:06:eb:83:8b:33:f3:73:48:9f:77:5a:59:1f:58: 23:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:83:D6:09:C8:D6:0A:FA:D7:B3:E8:39:8E:46:D3:CC:7A:47:5E:94 X509v3 Authority Key Identifier: keyid:E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:97:8b:0a:2e:da:bf:64:af:57:28:3e:75:4d:fd:3e:c6:79: b5:e1:3c:c0:65:1b:c3:f8:11:e2:c4:74:cb:a7:71:dc:62:cd: 48:d6:4e:46:d4:17:3f:1e:07:2a:3f:58:5a:b3:dc:c7:fa:cd: c8:3d:7e:7a:cd:e9:f6:c2:72:8f:3e:18:0f:8a:a5:27:fe:e7: 3a:70:db:ed:ea:f6:ff:a6:44:18:2b:d7:9d:4d:bf:72:99:1a: a3:b4:5a:b3:20:94:dd:94:8b:ac:b9:55:b6:02:12:1f:38:8e: 1c:64:f6:7b:67:cd:84:2e:8a:b4:19:3a:53:ac:39:8b:d3:97: 07:3a:f6:e6:5f:87:f8:e9:4b:ea:f8:62:10:53:9f:7f:22:b0: 4f:17:03:3d:0f:93:b6:76:a1:cf:60:d5:a4:3e:33:85:68:f8: c4:96:e9:35:c1:be:70:5b:7c:b4:46:de:54:9b:97:b1:12:fc: 9c:01:e7:a3:66:b1:00:b6:92:10:6d:d1:8d:41:b0:e0:3c:12: cd:91:33:8a:15:6e:6a:c0:1f:e4:dc:41:ef:9a:3b:de:51:4f: fe:47:b7:a5:e5:92:0a:a9:6c:7b:68:e9:70:62:02:83:20:52: 38:1f:23:d5:8c:0a:c9:f5:12:22:b7:ac:28:3f:29:fa:77:ad: 1a:a0:fc:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7oIzTVEU3+/FbnzeWrd3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ODI1ZmJlZTdjNDNhMjk4MzhlYWJlNGZjODdkNzk0MzQ5 YzBjODAwHhcNMjUxMjIxMjIwMTI1WhcNMjUxMjIyMjIwMTI1WjAzMTEwLwYDVQQD Eyg2NjgzZDYwOWM4ZDYwYWZhZDdiM2U4Mzk4ZTQ2ZDNjYzdhNDc1ZTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOTLJm0JoC4L5ekvVCGiwjmFKDTN FvJzebunW6FyKgs0Z5RBmyBAWcsb7P2U4noRV0ogG5EndQzNaAtXViRCSwlrvwl5 FE/RZ4kuT1p3d/yPxNsLEnnRsmRGJvLqz8BP6t/lHDAB5qEfGqWLxbD/Rvx5EG6s gbEScz4aEYl6OFMrd/uG06IBfQz6/wP3wv2f+641S9J27Ofp5d5dbWqjluWONg1D piPw1gm9VlFWhL1lK/40zOGFChXU3uRwkSNIiR3Ce3bmWj0o5Sk9O7LeIRoSCKO1 xl20r8xiAchibwHpKmC6fitnw3nk4OyAHH/rBuuDizPzc0ifd1pZH1gjFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGaD1gnI1gr617PoOY5G08x6R16UMB8GA1UdIwQY MBaAFOWCX77nxDopg46r5PyH15Q0nAyAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVlKZnZ1ZkVPaW1EanF2a19JZlhsRFNjRElBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS83NThjOTYtNjExZC00MTY3LTgwY2Qt MDQxYWIzMDJjMmY5LzEvNVlKZnZ1ZkVPaW1EanF2a19JZlhsRFNjRElBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS83NThjOTYtNjExZC00MTY3LTgwY2QtMDQxYWIzMDJjMmY5 LzEvNVlKZnZ1ZkVPaW1EanF2a19JZlhsRFNjRElBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPpeLCi7a v2SvVyg+dU39PsZ5teE8wGUbw/gR4sR0y6dx3GLNSNZORtQXPx4HKj9YWrPcx/rN yD1+es3p9sJyjz4YD4qlJ/7nOnDb7er2/6ZEGCvXnU2/cpkao7RasyCU3ZSLrLlV tgISHziOHGT2e2fNhC6KtBk6U6w5i9OXBzr25l+H+OlL6vhiEFOffyKwTxcDPQ+T tnahz2DVpD4zhWj4xJbpNcG+cFt8tEbeVJuXsRL8nAHno2axALaSEG3RjUGw4DwS zZEzihVuasAf5NxB75o73lFP/ke3peWSCqlse2jpcGICgyBSOB8j1YwKyfUSIres KD8p+netGqD8cQ== -----END CERTIFICATE-----Generated at Mon Dec 22 01:46:58 2025 by rpki-client