This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft File: 5f4C8qp2xAK312oRTcdzXV-TW4g.mft (raw, json) Hash identifier: CLB+UHu5LDztLim6L7G47YnJpB83iuXpLOY8oFDrlp4= Subject key identifier: 77:AE:AF:DF:06:E5:D4:70:D3:E5:9E:6D:8F:57:D5:43:45:F7:8F:BD Authority key identifier: E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88 Certificate issuer: /CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88 Certificate serial: 019B3C7DD8A0CE7D7197C23C77DBC73635BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 16:00:38 +0000 Manifest this update: Sat 20 Dec 2025 16:00:38 +0000 Manifest next update: Sun 21 Dec 2025 16:00:38 +0000 Files and hashes: 1: 5f4C8qp2xAK312oRTcdzXV-TW4g.crl (hash: 8TdW88q0sx55DUgN1QkxyA4yb9221T0uvdgqNWOOhAY=) 2: O7xkMgYDWmT39_oyZPNETli4dGo.roa (hash: BJVxC4UljGsK/BbuRqwBk8+Scbbux5UgI7xaPeJbQCA=) 3: mTHF4xRS849mOw36faqzyw4dbV0.roa (hash: wG6gmT9BywW9Amqbl4suJT23ZQUJGIpmhCizynoZqms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:d8:a0:ce:7d:71:97:c2:3c:77:db:c7:36:35:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88 Validity Not Before: Dec 20 16:00:38 2025 GMT Not After : Dec 21 16:00:38 2025 GMT Subject: CN=77aeafdf06e5d470d3e59e6d8f57d54345f78fbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c1:f6:fa:4c:37:30:99:84:99:2c:43:cf:22: 0b:75:70:7f:19:ee:8c:c1:b5:04:c3:e4:de:a9:23: 9d:ae:05:b2:1b:fa:26:f7:20:c7:ec:48:75:01:b7: 2e:20:11:f2:4d:ae:44:16:fe:1a:ce:84:2e:54:9c: f2:ea:b6:d4:94:5a:47:c6:83:2a:a0:1e:0d:90:16: a5:00:7e:1e:ec:af:66:a3:9f:a1:2a:4c:6b:c1:a1: 1e:9a:6a:9c:ea:3d:41:55:e6:d2:a6:2b:6e:89:98: 41:3d:2d:c3:0a:14:21:d9:d6:67:29:57:77:92:39: 23:99:08:09:b5:1a:93:eb:92:92:3c:bc:ad:0e:8a: 33:cf:36:91:fc:fb:18:2c:9d:e6:99:5c:fb:87:ec: 4d:69:a7:62:9d:d2:20:6b:b2:3a:8a:51:1d:04:f9: 53:03:3f:31:d6:e8:e6:6a:4a:02:ed:f6:f0:a1:7a: e8:9c:5b:a6:de:56:ef:b3:e6:fd:07:ee:05:72:bd: df:58:7b:e4:e9:cf:4f:78:30:da:a2:94:62:8a:b7: bc:a4:fe:d3:b0:f4:b5:59:ce:80:63:d3:f9:e2:b7: d0:80:bc:01:b6:c2:06:81:aa:c5:60:b4:88:5b:d0: b7:6f:c9:83:d0:c2:b3:c5:7d:8b:04:aa:f8:c3:31: 6b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:AE:AF:DF:06:E5:D4:70:D3:E5:9E:6D:8F:57:D5:43:45:F7:8F:BD X509v3 Authority Key Identifier: keyid:E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:29:b7:7d:e7:e3:76:eb:be:d3:06:4c:b5:1a:51:93:03:a5: be:2c:cb:aa:dd:65:d3:f1:af:6f:81:b7:9a:eb:13:bd:77:72: a7:e6:2c:75:ed:01:86:1a:74:7a:c9:09:63:d5:fc:d6:82:df: 92:e5:30:18:78:c1:ef:c7:96:99:6e:8f:f4:9e:5f:25:b5:3c: 31:28:42:49:44:f0:b8:50:56:bd:b0:86:87:53:94:23:17:da: d6:84:0e:ea:45:59:a3:63:b5:1e:56:20:ae:62:dd:ac:b9:ab: a9:9a:21:c9:81:4c:b3:4b:7e:88:bb:50:0d:f5:bf:0e:07:4c: 91:7e:ee:74:cb:a8:ef:2d:3f:48:97:56:af:e3:af:ab:a7:80: 82:aa:96:30:98:9a:9e:57:99:3c:67:42:47:cf:bc:5f:3d:80: fe:ba:3d:a3:f0:3c:3b:b4:11:76:ba:2b:9f:e6:35:29:08:3d: 06:bf:d6:33:6f:b3:13:fb:59:27:8d:2e:37:99:49:1e:a9:50: 38:c6:4e:0b:ef:a9:45:67:b9:df:92:8c:7d:25:f7:8c:4c:ce: 1d:b0:db:17:37:8b:a1:55:ab:a5:df:16:93:54:31:b4:09:9a: d1:eb:d4:4e:e6:86:aa:57:8a:ca:75:af:1e:fc:4d:63:70:9b: 11:17:e0:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fdigzn1xl8I8d9vHNjW/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ZmUwMmYyYWE3NmM0MDJiN2Q3NmExMTRkYzc3MzVkNWY5 MzViODgwHhcNMjUxMjIwMTYwMDM4WhcNMjUxMjIxMTYwMDM4WjAzMTEwLwYDVQQD Eyg3N2FlYWZkZjA2ZTVkNDcwZDNlNTllNmQ4ZjU3ZDU0MzQ1Zjc4ZmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcH2+kw3MJmEmSxDzyILdXB/Ge6M wbUEw+TeqSOdrgWyG/om9yDH7Eh1AbcuIBHyTa5EFv4azoQuVJzy6rbUlFpHxoMq oB4NkBalAH4e7K9mo5+hKkxrwaEemmqc6j1BVebSpituiZhBPS3DChQh2dZnKVd3 kjkjmQgJtRqT65KSPLytDoozzzaR/PsYLJ3mmVz7h+xNaadindIga7I6ilEdBPlT Az8x1ujmakoC7fbwoXronFum3lbvs+b9B+4Fcr3fWHvk6c9PeDDaopRiire8pP7T sPS1Wc6AY9P54rfQgLwBtsIGgarFYLSIW9C3b8mD0MKzxX2LBKr4wzFrSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHeur98G5dRw0+WebY9X1UNF94+9MB8GA1UdIwQY MBaAFOX+AvKqdsQCt9dqEU3Hc11fk1uIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWY0QzhxcDJ4QUszMTJvUlRjZHpYVi1UVzRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8zMWMzYmQtZTM1Yy00ODFkLTg1ODgt ZmM2MGZiMTI1NTczLzEvNWY0QzhxcDJ4QUszMTJvUlRjZHpYVi1UVzRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8zMWMzYmQtZTM1Yy00ODFkLTg1ODgtZmM2MGZiMTI1NTcz LzEvNWY0QzhxcDJ4QUszMTJvUlRjZHpYVi1UVzRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeSm3fefj duu+0wZMtRpRkwOlvizLqt1l0/Gvb4G3musTvXdyp+Ysde0Bhhp0eskJY9X81oLf kuUwGHjB78eWmW6P9J5fJbU8MShCSUTwuFBWvbCGh1OUIxfa1oQO6kVZo2O1HlYg rmLdrLmrqZohyYFMs0t+iLtQDfW/DgdMkX7udMuo7y0/SJdWr+Ovq6eAgqqWMJia nleZPGdCR8+8Xz2A/ro9o/A8O7QRdrorn+Y1KQg9Br/WM2+zE/tZJ40uN5lJHqlQ OMZOC++pRWe535KMfSX3jEzOHbDbFzeLoVWrpd8Wk1QxtAma0evUTuaGqleKynWv HvxNY3CbERfgOQ== -----END CERTIFICATE-----Generated at Sun Dec 21 01:36:58 2025 by rpki-client