This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft File: 5pySw7nuYLoBPZQYIgQvJQBMlew.mft (raw, json) Hash identifier: K0mut08vyh9BlrHI3sOTQi6ZK90HYoW44ZrHeIDATlg= Subject key identifier: E1:B4:B5:0B:49:7B:F1:76:C7:D0:02:A4:5B:FE:58:01:AA:90:4C:04 Authority key identifier: E6:9C:92:C3:B9:EE:60:BA:01:3D:94:18:22:04:2F:25:00:4C:95:EC Certificate issuer: /CN=e69c92c3b9ee60ba013d941822042f25004c95ec Certificate serial: 019B544F3FB35E586B42C62EA75AE5876750 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft Manifest number: 1794 Signing time: Thu 25 Dec 2025 07:00:38 +0000 Manifest this update: Thu 25 Dec 2025 07:00:38 +0000 Manifest next update: Fri 26 Dec 2025 07:00:38 +0000 Files and hashes: 1: 5pySw7nuYLoBPZQYIgQvJQBMlew.crl (hash: DouTd0KhTPII//ucHuJAaH7u81BfpqI2/qntl1XBMZw=) 2: rR9_uvw4xytf2agupQ_iUhFHPXQ.roa (hash: X8fcaKRyDp0VyO5muGsQviUm1Dvz7ExE7FAL5YYozyg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.crl rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:4f:3f:b3:5e:58:6b:42:c6:2e:a7:5a:e5:87:67:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e69c92c3b9ee60ba013d941822042f25004c95ec Validity Not Before: Dec 25 07:00:38 2025 GMT Not After : Dec 26 07:00:38 2025 GMT Subject: CN=e1b4b50b497bf176c7d002a45bfe5801aa904c04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:27:0d:22:6d:54:46:a3:e6:f2:77:dd:fe:6a: da:bb:35:02:ed:b1:d5:34:b0:7f:a4:2c:c4:f9:e7: 23:bd:33:03:0f:f3:e9:39:5c:ce:f1:f9:43:6f:3e: 36:34:e9:98:56:91:9a:ed:42:6d:d2:15:f3:64:b6: 26:03:c5:cd:d2:5a:9a:b0:b0:73:18:fd:c3:8e:68: 5f:d1:8f:48:5e:e3:c7:30:bd:31:fd:e1:12:ee:c6: 06:7e:a2:1e:3c:67:78:07:8c:23:f1:20:f7:d0:38: 05:e5:ba:3b:2f:97:be:53:c2:8b:29:1c:23:90:2b: 4c:8a:30:6f:06:bd:83:2a:f5:e8:88:a6:e0:9e:7e: 3c:ee:76:70:4d:fd:97:d3:75:2a:f5:21:19:ee:88: ce:a2:01:68:5d:53:9c:7e:83:f1:73:21:30:09:86: fe:6c:86:56:6c:79:fc:fb:2a:a1:32:bf:1b:05:62: 2d:f6:ba:a6:9e:4e:42:37:2d:ae:34:c2:24:5e:24: 73:4b:77:ee:cb:27:95:3c:78:15:68:c5:47:18:61: 61:5c:c8:80:b9:91:fd:f2:df:be:9d:5d:88:f3:dd: 77:0f:a2:c1:76:47:c8:fa:64:ae:91:a9:1e:15:43: be:d5:05:47:54:56:27:a5:db:73:f9:ee:7a:9a:8e: 53:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B4:B5:0B:49:7B:F1:76:C7:D0:02:A4:5B:FE:58:01:AA:90:4C:04 X509v3 Authority Key Identifier: keyid:E6:9C:92:C3:B9:EE:60:BA:01:3D:94:18:22:04:2F:25:00:4C:95:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:c9:b0:57:55:aa:d8:bb:c5:ab:f6:a6:d1:06:31:74:f3:60: 1f:be:ec:b4:b9:b1:30:68:79:c3:03:08:f8:09:73:79:81:f6: 90:1c:50:9c:78:84:60:7c:78:39:d8:02:93:5a:f1:51:c2:ce: 68:33:25:4e:fc:70:6e:10:5b:1d:83:ea:e0:30:c2:a7:ac:73: 83:dc:d5:61:c3:ec:72:a5:a5:68:a2:1b:84:7b:e5:2a:51:75: 81:0b:54:6b:27:ac:6f:89:8d:d7:58:95:4c:e9:23:b2:99:99: 27:e9:71:0a:01:a6:69:26:45:63:b5:a8:fd:91:bf:0f:8f:8d: 4c:8e:f6:f4:65:2d:32:e3:5e:67:4d:e6:fc:fe:46:df:c6:4c: 7a:95:8d:43:66:6c:d1:3a:ab:38:1d:74:e2:ed:31:c0:ac:2b: 04:c2:51:a3:e8:50:af:61:81:0e:93:d5:ad:73:b5:12:41:b2: cb:9d:22:0c:a5:95:bc:1c:1e:80:2e:74:89:67:d3:61:df:fb: 57:3d:89:5a:02:f1:f0:16:e7:38:e9:80:fd:72:f9:08:7f:87: 2b:ce:8b:f5:c8:9c:09:4e:6e:b2:49:c6:5b:ce:60:a2:2f:34: 65:d9:c0:18:01:5d:9c:02:38:1f:d3:bb:bd:66:2b:b1:cc:cb: 8b:87:48:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUTz+zXlhrQsYup1rlh2dQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2OWM5MmMzYjllZTYwYmEwMTNkOTQxODIyMDQyZjI1MDA0 Yzk1ZWMwHhcNMjUxMjI1MDcwMDM4WhcNMjUxMjI2MDcwMDM4WjAzMTEwLwYDVQQD EyhlMWI0YjUwYjQ5N2JmMTc2YzdkMDAyYTQ1YmZlNTgwMWFhOTA0YzA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CcNIm1URqPm8nfd/mrauzUC7bHV NLB/pCzE+ecjvTMDD/PpOVzO8flDbz42NOmYVpGa7UJt0hXzZLYmA8XN0lqasLBz GP3Djmhf0Y9IXuPHML0x/eES7sYGfqIePGd4B4wj8SD30DgF5bo7L5e+U8KLKRwj kCtMijBvBr2DKvXoiKbgnn487nZwTf2X03Uq9SEZ7ojOogFoXVOcfoPxcyEwCYb+ bIZWbHn8+yqhMr8bBWIt9rqmnk5CNy2uNMIkXiRzS3fuyyeVPHgVaMVHGGFhXMiA uZH98t++nV2I8913D6LBdkfI+mSukakeFUO+1QVHVFYnpdtz+e56mo5TSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOG0tQtJe/F2x9ACpFv+WAGqkEwEMB8GA1UdIwQY MBaAFOacksO57mC6AT2UGCIELyUATJXsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXB5U3c3bnVZTG9CUFpRWUlnUXZKUUJNbGV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS85Yjg0YzMtZDdmZC00M2Q4LWE4ZjEt OTEzNzEwM2M5M2VmLzEvNXB5U3c3bnVZTG9CUFpRWUlnUXZKUUJNbGV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS85Yjg0YzMtZDdmZC00M2Q4LWE4ZjEtOTEzNzEwM2M5M2Vm LzEvNXB5U3c3bnVZTG9CUFpRWUlnUXZKUUJNbGV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARMmwV1Wq 2LvFq/am0QYxdPNgH77stLmxMGh5wwMI+AlzeYH2kBxQnHiEYHx4OdgCk1rxUcLO aDMlTvxwbhBbHYPq4DDCp6xzg9zVYcPscqWlaKIbhHvlKlF1gQtUayesb4mN11iV TOkjspmZJ+lxCgGmaSZFY7Wo/ZG/D4+NTI729GUtMuNeZ03m/P5G38ZMepWNQ2Zs 0TqrOB104u0xwKwrBMJRo+hQr2GBDpPVrXO1EkGyy50iDKWVvBwegC50iWfTYd/7 Vz2JWgLx8BbnOOmA/XL5CH+HK86L9cicCU5usknGW85goi80ZdnAGAFdnAI4H9O7 vWYrsczLi4dIpQ== -----END CERTIFICATE-----Generated at Thu Dec 25 09:15:58 2025 by rpki-client