This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft File: 5saSR1gKSIv0YbhL97iyrBN01cU.mft (raw, json) Hash identifier: +iP4IOZ1vGLT7gpt2s1CZtMsjvslg4IGTWaJPKM/RJo= Subject key identifier: 1D:12:24:40:0E:DC:EF:83:C2:0C:56:95:02:48:2E:BF:8A:28:75:7B Authority key identifier: E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5 Certificate issuer: /CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5 Certificate serial: 019B4324F9152A1FCF4205EB25CEDB6B5ED9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 23:00:55 +0000 Manifest this update: Sun 21 Dec 2025 23:00:55 +0000 Manifest next update: Mon 22 Dec 2025 23:00:55 +0000 Files and hashes: 1: 5saSR1gKSIv0YbhL97iyrBN01cU.crl (hash: Cq8Y481QTCqiiScfhovlAe2b7TnibXox0T4Vcue7T1U=) 2: l7WjKJBoi3ZOMaBwpHnPjLLele8.roa (hash: VuHVVXaHP8BDF2HI+1C+9vRLPuu0QKmIZQUwhxNEcWs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:24:f9:15:2a:1f:cf:42:05:eb:25:ce:db:6b:5e:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5 Validity Not Before: Dec 21 23:00:55 2025 GMT Not After : Dec 22 23:00:55 2025 GMT Subject: CN=1d1224400edcef83c20c569502482ebf8a28757b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c4:db:2a:41:9e:52:b4:6c:a0:3e:f5:df:16: 5e:99:be:ab:b5:ed:7a:77:24:1a:e8:21:5a:a3:95: 49:43:8c:7b:dc:38:16:1d:ea:a8:8f:00:d3:aa:79: 5f:3a:85:8c:e8:9e:a4:83:fc:50:6d:d6:ca:b8:45: 68:68:ff:6f:3b:58:b9:5f:84:c2:0f:fa:f2:6e:fa: f2:66:73:d1:54:f7:21:12:9f:f7:2e:19:4a:4d:cf: a7:ff:b8:84:85:2e:84:18:1f:8d:10:23:f0:1d:44: f4:6f:7e:51:9c:88:eb:45:0e:d3:84:c7:a2:5a:43: 7d:b1:80:d6:68:72:57:ee:30:bd:ca:17:0d:ad:f3: ce:29:d4:4f:ae:fe:53:24:59:23:2b:95:29:70:87: ec:22:6c:bd:9f:be:72:11:25:b5:93:af:04:e6:35: 91:28:b5:bc:52:83:32:63:98:3f:34:97:62:99:0d: bf:7c:08:fa:f2:bc:37:09:ad:55:db:1b:94:8d:a9: b9:9f:37:5b:1c:24:f0:64:a5:51:8c:77:78:c1:a4: 9d:4a:4f:fd:fe:1b:e6:be:c1:f7:fb:e8:bf:14:1c: 5a:89:e8:6c:65:b7:78:ef:a7:c7:7d:03:ff:f6:53: a4:43:b6:b5:c0:8e:a6:8f:da:e6:2f:7e:3e:47:34: 77:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:12:24:40:0E:DC:EF:83:C2:0C:56:95:02:48:2E:BF:8A:28:75:7B X509v3 Authority Key Identifier: keyid:E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:b2:d9:48:7a:96:3f:7c:8e:74:60:30:80:7a:a5:23:28:37: da:67:e7:f2:40:35:02:dc:fe:62:26:e9:a5:b7:9b:21:42:31: 6e:1b:25:78:23:ff:3a:df:9a:f2:9c:0c:3c:0c:5e:f9:59:34: 21:0f:b7:3d:66:96:0e:0d:11:5c:7d:b0:9d:20:fc:67:4a:6d: ed:ca:bb:1f:53:19:d4:1c:c4:d1:c7:ce:c5:09:f0:b0:c7:3d: 07:c0:22:32:c4:b6:f9:2a:c2:0b:6f:cf:a5:6d:c4:bf:a2:51: b8:1c:0f:22:41:c1:f8:a9:bc:36:27:88:c6:8f:c0:26:63:27: d7:dd:63:03:ce:2b:c6:07:6c:77:35:ee:05:91:f6:5f:9c:ec: 23:28:07:31:cc:b7:58:50:32:7a:54:bd:aa:cf:2c:aa:20:12: 73:ec:7b:b1:52:57:d5:7c:a8:a5:df:a1:05:da:8b:0b:d2:7c: 85:ee:c7:dc:d2:4a:4c:a8:bd:5e:43:d0:b4:23:ab:e7:83:d7: dd:22:2c:0c:7c:19:d9:e9:1d:63:35:0f:89:9a:c1:ab:aa:81: 85:b0:25:0c:d7:0a:2a:29:e5:7a:79:f4:14:33:54:43:cc:73: 53:f6:c5:fe:ea:06:67:12:3c:2d:ad:c8:88:84:da:61:5b:e3: 9f:fe:1f:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJPkVKh/PQgXrJc7ba17ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2YzY5MjQ3NTgwYTQ4OGJmNDYxYjg0YmY3YjhiMmFjMTM3 NGQ1YzUwHhcNMjUxMjIxMjMwMDU1WhcNMjUxMjIyMjMwMDU1WjAzMTEwLwYDVQQD EygxZDEyMjQ0MDBlZGNlZjgzYzIwYzU2OTUwMjQ4MmViZjhhMjg3NTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8TbKkGeUrRsoD713xZemb6rte16 dyQa6CFao5VJQ4x73DgWHeqojwDTqnlfOoWM6J6kg/xQbdbKuEVoaP9vO1i5X4TC D/rybvryZnPRVPchEp/3LhlKTc+n/7iEhS6EGB+NECPwHUT0b35RnIjrRQ7ThMei WkN9sYDWaHJX7jC9yhcNrfPOKdRPrv5TJFkjK5UpcIfsImy9n75yESW1k68E5jWR KLW8UoMyY5g/NJdimQ2/fAj68rw3Ca1V2xuUjam5nzdbHCTwZKVRjHd4waSdSk/9 /hvmvsH3++i/FBxaiehsZbd476fHfQP/9lOkQ7a1wI6mj9rmL34+RzR3wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB0SJEAO3O+DwgxWlQJILr+KKHV7MB8GA1UdIwQY MBaAFObGkkdYCkiL9GG4S/e4sqwTdNXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXNhU1IxZ0tTSXYwWWJoTDk3aXlyQk4wMWNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zM2JhNmMtYmVmYi00ZGViLTg5OTgt NTI3YTlhNGVlNjI0LzEvNXNhU1IxZ0tTSXYwWWJoTDk3aXlyQk4wMWNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8zM2JhNmMtYmVmYi00ZGViLTg5OTgtNTI3YTlhNGVlNjI0 LzEvNXNhU1IxZ0tTSXYwWWJoTDk3aXlyQk4wMWNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOrLZSHqW P3yOdGAwgHqlIyg32mfn8kA1Atz+YibppbebIUIxbhsleCP/Ot+a8pwMPAxe+Vk0 IQ+3PWaWDg0RXH2wnSD8Z0pt7cq7H1MZ1BzE0cfOxQnwsMc9B8AiMsS2+SrCC2/P pW3Ev6JRuBwPIkHB+Km8NieIxo/AJmMn191jA84rxgdsdzXuBZH2X5zsIygHMcy3 WFAyelS9qs8sqiASc+x7sVJX1Xyopd+hBdqLC9J8he7H3NJKTKi9XkPQtCOr54PX 3SIsDHwZ2ekdYzUPiZrBq6qBhbAlDNcKKinlenn0FDNUQ8xzU/bF/uoGZxI8La3I iITaYVvjn/4fog== -----END CERTIFICATE-----Generated at Mon Dec 22 00:54:28 2025 by rpki-client