This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft File: 5LEwYQHMnsn86YUoDB2w83wTWjo.mft (raw, json) Hash identifier: sx1zEwn260qzHuZFgwojrhSZVvHsdZez7jyEN8LxQSM= Subject key identifier: FF:D4:E4:F3:EB:B1:71:61:C9:C3:BE:AA:15:96:7E:7A:1B:2E:E9:FC Authority key identifier: E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A Certificate issuer: /CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a Certificate serial: 019B3A21FB198730547A9452084B73CE3A0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft Manifest number: 12C9 Signing time: Sat 20 Dec 2025 05:01:03 +0000 Manifest this update: Sat 20 Dec 2025 05:01:03 +0000 Manifest next update: Sun 21 Dec 2025 05:01:03 +0000 Files and hashes: 1: 5LEwYQHMnsn86YUoDB2w83wTWjo.crl (hash: g7JfnTCgwfrx7WyhOvx9FwG85Ni/wdrugJUox6FYNOI=) 2: kI0vHB0itKLKV54MYG6cGrVo0eY.roa (hash: C5TgalX0uC/rPE4DDIN7aoT3cFXmNAi4cZYsmZl5eDw=) 3: u8V02AIoZzOPfjpi5j7wtSWVgSg.roa (hash: 9pvkolnrpZjRfbBA2Q8IhG+FM5X8l0p9e5PvDFmhqmQ=) 4: y-M_EBDyqDFIVawFxida8qjR5Co.roa (hash: OVypj78ZSdDN2W9JmlOfV0llyXCESZchLL8yqQ85v9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:fb:19:87:30:54:7a:94:52:08:4b:73:ce:3a:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a Validity Not Before: Dec 20 05:01:03 2025 GMT Not After : Dec 21 05:01:03 2025 GMT Subject: CN=ffd4e4f3ebb17161c9c3beaa15967e7a1b2ee9fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:1d:d7:05:16:df:a7:89:8f:1f:bb:72:06:05: 8a:02:b8:18:81:6d:df:c0:09:d6:63:e8:60:90:16: 2a:f2:e1:a5:ab:3d:73:53:df:62:3c:72:b7:3b:c4: 6a:fa:76:fa:c1:5c:d5:46:d0:83:07:da:38:01:2a: 13:1b:8d:27:6e:d6:70:11:26:9f:6d:50:23:0c:5c: 81:8f:0f:45:f7:f4:49:d5:db:93:54:ad:d8:54:65: 67:c6:ba:28:74:3c:49:91:24:d3:5c:92:ea:f4:12: c7:2f:0f:83:3e:67:5e:ff:ea:88:6e:84:30:59:91: c6:14:2f:cd:06:7d:a0:4d:b5:8a:a5:34:1a:aa:be: 8e:6d:47:cc:db:e7:29:a6:75:21:03:21:6d:b4:a2: 59:9e:52:17:23:48:9b:c4:a9:c7:9e:08:00:24:08: de:2c:96:fd:da:b2:8c:b0:25:7a:bc:49:1a:d4:c8: ff:c5:80:46:a6:3d:49:17:78:11:a1:11:98:ba:ab: 7a:41:63:df:02:75:ec:24:65:eb:cd:02:8c:62:6a: 62:ca:14:f7:54:0d:6f:57:38:c5:6d:93:37:1e:a2: ae:76:6e:eb:58:01:d2:1c:22:5b:69:aa:5e:a9:71: 27:31:bf:43:3a:2c:db:ff:5f:16:ea:b1:08:9d:04: eb:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D4:E4:F3:EB:B1:71:61:C9:C3:BE:AA:15:96:7E:7A:1B:2E:E9:FC X509v3 Authority Key Identifier: keyid:E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:3b:0b:81:7d:48:d2:63:d1:46:74:da:60:17:38:09:40:c5: 86:74:de:85:e6:5a:62:93:42:82:28:26:8b:8e:ae:9a:02:1b: 57:ad:c7:02:84:2b:04:26:62:b5:6c:f2:97:0b:70:04:68:68: 5c:5e:2d:10:52:6b:8d:c6:08:e2:a4:9d:aa:dc:4f:2b:78:ec: 5c:36:d4:53:3a:3c:41:9c:cb:f2:0b:4c:fe:5a:5d:ef:61:50: ac:34:14:3e:2b:c7:28:1e:7b:65:46:6d:7f:cf:f5:a3:a9:a9: 22:39:8a:0a:94:ea:08:11:d5:98:f0:19:ea:9d:ae:dc:75:0f: f3:ed:29:9f:fe:02:be:f5:43:ab:cb:c3:25:5a:78:87:6e:ee: fd:60:9b:ad:8c:10:14:d4:c7:04:c9:44:db:b2:dc:ae:48:40: c5:7c:23:87:9d:68:dd:29:3f:61:da:08:20:7c:ec:6b:27:98: 8e:27:23:cf:af:dc:b5:6c:7a:c9:a3:7a:4c:43:4b:f1:e0:06: 62:0b:75:d5:19:c8:4d:4d:5c:5a:c3:7d:42:ef:9f:e1:e8:b4: a4:e7:87:c5:b9:97:59:f6:8d:e5:99:0e:5c:3b:d6:54:3b:d9: 83:c6:95:ca:f6:6f:89:51:00:6b:02:08:2b:55:de:ed:42:de: a8:04:f3:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IfsZhzBUepRSCEtzzjoOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YjEzMDYxMDFjYzllYzlmY2U5ODUyODBjMWRiMGYzN2Mx MzVhM2EwHhcNMjUxMjIwMDUwMTAzWhcNMjUxMjIxMDUwMTAzWjAzMTEwLwYDVQQD EyhmZmQ0ZTRmM2ViYjE3MTYxYzljM2JlYWExNTk2N2U3YTFiMmVlOWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4R3XBRbfp4mPH7tyBgWKArgYgW3f wAnWY+hgkBYq8uGlqz1zU99iPHK3O8Rq+nb6wVzVRtCDB9o4ASoTG40nbtZwESaf bVAjDFyBjw9F9/RJ1duTVK3YVGVnxroodDxJkSTTXJLq9BLHLw+DPmde/+qIboQw WZHGFC/NBn2gTbWKpTQaqr6ObUfM2+cppnUhAyFttKJZnlIXI0ibxKnHnggAJAje LJb92rKMsCV6vEka1Mj/xYBGpj1JF3gRoRGYuqt6QWPfAnXsJGXrzQKMYmpiyhT3 VA1vVzjFbZM3HqKudm7rWAHSHCJbaapeqXEnMb9DOizb/18W6rEInQTrcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/U5PPrsXFhycO+qhWWfnobLun8MB8GA1UdIwQY MBaAFOSxMGEBzJ7J/OmFKAwdsPN8E1o6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUxFd1lRSE1uc244NllVb0RCMnc4M3dUV2pvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS80ZDA4OWUtNWQxYy00ZTM0LTk0NjUt ZmE2MzQ4ZjY5NWI1LzEvNUxFd1lRSE1uc244NllVb0RCMnc4M3dUV2pvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS80ZDA4OWUtNWQxYy00ZTM0LTk0NjUtZmE2MzQ4ZjY5NWI1 LzEvNUxFd1lRSE1uc244NllVb0RCMnc4M3dUV2pvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaTsLgX1I 0mPRRnTaYBc4CUDFhnTeheZaYpNCgigmi46umgIbV63HAoQrBCZitWzylwtwBGho XF4tEFJrjcYI4qSdqtxPK3jsXDbUUzo8QZzL8gtM/lpd72FQrDQUPivHKB57ZUZt f8/1o6mpIjmKCpTqCBHVmPAZ6p2u3HUP8+0pn/4CvvVDq8vDJVp4h27u/WCbrYwQ FNTHBMlE27LcrkhAxXwjh51o3Sk/YdoIIHzsayeYjicjz6/ctWx6yaN6TENL8eAG Ygt11RnITU1cWsN9Qu+f4ei0pOeHxbmXWfaN5ZkOXDvWVDvZg8aVyvZviVEAawII K1Xe7ULeqATzTg== -----END CERTIFICATE-----Generated at Sat Dec 20 10:40:17 2025 by rpki-client