This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft File: 5wb8lykDS_sEZN1MmF8UuiEOgeM.mft (raw, json) Hash identifier: Nnf05tKNRnvjqGm1xTJ/c4vl1yeunuA3SN5i5v+NbfY= Subject key identifier: FD:65:D3:12:11:9F:92:73:52:26:F1:F1:96:E5:2C:26:F8:D7:56:F2 Authority key identifier: E7:06:FC:97:29:03:4B:FB:04:64:DD:4C:98:5F:14:BA:21:0E:81:E3 Certificate issuer: /CN=e706fc9729034bfb0464dd4c985f14ba210e81e3 Certificate serial: 019B3EA3A031F1EDFB81288BAECF820C3405 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft Manifest number: 1546 Signing time: Sun 21 Dec 2025 02:01:09 +0000 Manifest this update: Sun 21 Dec 2025 02:01:09 +0000 Manifest next update: Mon 22 Dec 2025 02:01:09 +0000 Files and hashes: 1: 5wb8lykDS_sEZN1MmF8UuiEOgeM.crl (hash: kQxNLvhqCNXJ5UX+tXKxKjYRwMbceC8gqrYdA0iq/jo=) 2: b37_mvewRVwCg1bn4EBDzO-L-T4.roa (hash: Se2kErf9iBL4UpQAgg1UiulAV/XRVJ5FdDxPc7oRHW0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.crl rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:a0:31:f1:ed:fb:81:28:8b:ae:cf:82:0c:34:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e706fc9729034bfb0464dd4c985f14ba210e81e3 Validity Not Before: Dec 21 02:01:09 2025 GMT Not After : Dec 22 02:01:09 2025 GMT Subject: CN=fd65d312119f92735226f1f196e52c26f8d756f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a4:02:dc:70:a2:3c:68:11:f1:1a:f3:a0:85: 87:f9:8f:e2:0a:15:9f:85:79:8f:1c:cb:b6:0a:00: b2:c6:f3:dc:48:28:eb:3c:7f:a9:c1:2e:73:47:cd: a3:8e:ca:da:b2:b3:e9:5c:a2:67:f4:84:bd:9d:3a: 00:41:f7:38:f0:19:5d:24:f4:8e:d7:9e:f3:9b:43: 9a:34:8e:da:1b:d3:12:41:2f:79:2f:99:48:53:5f: 34:8b:ec:2d:07:6e:26:57:21:fb:ef:5a:bc:13:91: 96:df:70:a7:ba:1a:3e:36:c4:80:de:35:99:e4:77: 21:57:7b:eb:5f:2a:b5:cf:92:32:c0:16:97:1b:57: d7:3b:42:65:37:73:6f:1b:04:ea:5d:cb:03:cc:0d: d2:fb:40:3b:0d:02:33:49:ec:fa:b3:92:e7:ac:9d: 8f:a9:e9:db:fd:24:24:64:d2:66:a9:5c:e3:ca:02: 93:f8:08:e5:28:00:25:0d:c8:a0:c9:12:a7:11:9b: 09:42:1f:1a:0e:68:5e:81:2d:3d:cc:52:ec:83:6f: 9a:9b:c7:bd:dc:c4:ee:a2:6c:fd:f7:f5:ca:2e:48: 3b:9b:b4:a4:f9:66:dd:88:f9:73:a4:6d:46:46:df: 74:fb:63:06:ee:57:2f:44:29:4b:c0:6e:18:51:1b: d5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:65:D3:12:11:9F:92:73:52:26:F1:F1:96:E5:2C:26:F8:D7:56:F2 X509v3 Authority Key Identifier: keyid:E7:06:FC:97:29:03:4B:FB:04:64:DD:4C:98:5F:14:BA:21:0E:81:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:4f:c7:14:84:52:e8:47:77:f1:e1:97:04:63:98:a8:79:0c: 66:3b:b3:42:44:01:97:16:6c:e6:96:95:a3:b1:6e:2b:1a:a5: 7b:df:ad:ff:aa:fe:93:19:bd:f5:6a:3c:f3:ca:a8:55:43:fd: 74:34:d3:c7:c9:c4:12:fd:6c:3e:98:08:fa:bf:c9:ef:bc:52: 67:13:04:95:e2:94:b1:6a:5e:0b:7c:34:7d:c5:fd:42:b9:e2: c7:8a:9a:11:af:92:37:10:f8:68:f3:2e:7a:9d:ab:c7:ae:95: 37:74:7f:a6:de:7c:da:3c:29:dc:1e:44:61:b2:8b:48:46:81: 8b:75:e2:62:eb:20:25:39:a3:75:7c:bf:00:7c:98:9e:65:5e: 58:cb:c8:98:c8:91:df:20:2a:22:6b:ba:11:59:83:e5:45:19: e6:65:46:21:0f:f8:c5:c7:06:fe:ce:3f:73:80:20:29:14:62: 66:d9:b7:d7:9b:d3:ed:f6:08:22:23:5d:9e:20:76:60:9b:19: 97:ee:b8:d7:0d:0e:c8:2e:c0:5c:29:d1:11:b6:da:cf:b9:be: 2e:28:7b:66:da:a6:95:f0:d6:86:a1:d9:b8:10:66:04:c4:b3: 93:a6:1d:47:85:4b:22:0e:3c:97:40:e0:f5:8a:2f:ef:da:cf: d2:9d:d0:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o6Ax8e37gSiLrs+CDDQFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3MDZmYzk3MjkwMzRiZmIwNDY0ZGQ0Yzk4NWYxNGJhMjEw ZTgxZTMwHhcNMjUxMjIxMDIwMTA5WhcNMjUxMjIyMDIwMTA5WjAzMTEwLwYDVQQD EyhmZDY1ZDMxMjExOWY5MjczNTIyNmYxZjE5NmU1MmMyNmY4ZDc1NmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6QC3HCiPGgR8RrzoIWH+Y/iChWf hXmPHMu2CgCyxvPcSCjrPH+pwS5zR82jjsrasrPpXKJn9IS9nToAQfc48BldJPSO 157zm0OaNI7aG9MSQS95L5lIU180i+wtB24mVyH771q8E5GW33Cnuho+NsSA3jWZ 5HchV3vrXyq1z5IywBaXG1fXO0JlN3NvGwTqXcsDzA3S+0A7DQIzSez6s5LnrJ2P qenb/SQkZNJmqVzjygKT+AjlKAAlDcigyRKnEZsJQh8aDmhegS09zFLsg2+am8e9 3MTuomz99/XKLkg7m7Sk+WbdiPlzpG1GRt90+2MG7lcvRClLwG4YURvVBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP1l0xIRn5JzUibx8ZblLCb411byMB8GA1UdIwQY MBaAFOcG/JcpA0v7BGTdTJhfFLohDoHjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXdiOGx5a0RTX3NFWk4xTW1GOFV1aUVPZ2VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80NzYzODMtZjZkYS00ZTBlLThlMTIt ZDJkY2YwNWQzMzc2LzEvNXdiOGx5a0RTX3NFWk4xTW1GOFV1aUVPZ2VNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC80NzYzODMtZjZkYS00ZTBlLThlMTItZDJkY2YwNWQzMzc2 LzEvNXdiOGx5a0RTX3NFWk4xTW1GOFV1aUVPZ2VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiU/HFIRS 6Ed38eGXBGOYqHkMZjuzQkQBlxZs5paVo7FuKxqle9+t/6r+kxm99Wo888qoVUP9 dDTTx8nEEv1sPpgI+r/J77xSZxMEleKUsWpeC3w0fcX9Qrnix4qaEa+SNxD4aPMu ep2rx66VN3R/pt582jwp3B5EYbKLSEaBi3XiYusgJTmjdXy/AHyYnmVeWMvImMiR 3yAqImu6EVmD5UUZ5mVGIQ/4xccG/s4/c4AgKRRiZtm315vT7fYIIiNdniB2YJsZ l+641w0OyC7AXCnREbbaz7m+Lih7ZtqmlfDWhqHZuBBmBMSzk6YdR4VLIg48l0Dg 9Yov79rP0p3QjQ== -----END CERTIFICATE-----Generated at Sun Dec 21 08:37:02 2025 by rpki-client