This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft File: 5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft (raw, json) Hash identifier: YqjU6WNvi+7JpCXCchnhTdZ6ECUfJ8jNk/hpjcWh5/8= Subject key identifier: CD:9A:1A:BE:55:B3:7C:CE:AF:CF:AE:7A:8D:AB:E4:30:0C:62:01:1C Authority key identifier: E4:5E:4C:8C:3A:88:50:26:DF:8C:D6:33:79:78:E7:FA:A9:1A:44:6A Certificate issuer: /CN=e45e4c8c3a885026df8cd6337978e7faa91a446a Certificate serial: 019B3E6CA6BA831EE7CF456A8A686942C35B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 01:01:06 +0000 Manifest this update: Sun 21 Dec 2025 01:01:06 +0000 Manifest next update: Mon 22 Dec 2025 01:01:06 +0000 Files and hashes: 1: 5F5MjDqIUCbfjNYzeXjn-qkaRGo.crl (hash: skFDL7vnO4QuSNv9ezR6hGVsP6ggmJvvlEalh0aBrFc=) 2: wRmtKh7_LVqZpnTkWqp_RT-Ok-Q.roa (hash: xFYT+gV/6zuB8l9NaQR5EmwHFpWdWodzHhC57qH0qF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.crl rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:a6:ba:83:1e:e7:cf:45:6a:8a:68:69:42:c3:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e45e4c8c3a885026df8cd6337978e7faa91a446a Validity Not Before: Dec 21 01:01:06 2025 GMT Not After : Dec 22 01:01:06 2025 GMT Subject: CN=cd9a1abe55b37cceafcfae7a8dabe4300c62011c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e0:4f:3a:78:3c:94:4b:db:9c:ff:64:01:59: 6d:6a:90:d1:f4:9c:5d:95:2e:93:86:96:b7:27:98: 17:95:56:76:71:45:05:b8:1d:88:05:da:38:66:f6: 45:47:a3:c9:4f:57:2e:0c:f8:f8:cc:2d:e4:03:50: 4b:ae:bf:de:d1:ff:06:3b:10:64:1f:67:c4:e3:43: 40:58:fc:c2:50:2e:15:9d:04:d5:5e:51:c8:3f:a7: a5:95:34:ca:36:58:5f:13:02:a1:fd:58:32:df:be: 6e:73:c9:e3:af:06:18:cc:38:5a:c0:46:0b:ad:d1: 32:6d:8f:dc:80:3a:96:a7:eb:00:9c:63:31:3e:42: 4b:35:e7:ce:e0:38:85:c5:96:32:2d:6b:b4:3e:b9: 42:60:5c:85:f6:f5:bc:ee:5e:e7:ee:41:2f:b9:77: 5a:12:2a:59:13:8b:2a:c9:e9:25:ea:83:d3:81:79: 22:1d:4e:a1:9b:aa:0c:ba:8b:2c:e2:ca:12:52:79: b0:54:34:ea:bd:74:29:34:de:5c:52:b6:d2:6e:02: c8:2a:36:2c:90:11:75:ba:83:77:b1:90:84:67:5b: 98:88:1a:8b:69:ff:cf:87:b0:5e:7f:d0:b5:a4:3f: d0:17:2c:5e:13:8e:3f:7d:7b:98:d2:93:16:a4:f6: 8c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:9A:1A:BE:55:B3:7C:CE:AF:CF:AE:7A:8D:AB:E4:30:0C:62:01:1C X509v3 Authority Key Identifier: keyid:E4:5E:4C:8C:3A:88:50:26:DF:8C:D6:33:79:78:E7:FA:A9:1A:44:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:b6:a3:ed:98:48:1d:62:34:f9:31:4a:23:76:b7:8d:6f:47: 35:f3:d6:81:9c:bb:1b:eb:d2:45:ee:84:d8:84:e7:94:f7:8a: 68:f0:24:bd:64:4f:67:a7:62:a2:31:ad:a9:3d:8d:f5:c1:f8: 7a:23:21:b8:ed:7f:ce:71:db:d1:fb:ae:ac:a5:93:0a:c7:0f: f6:8d:35:0c:28:03:b1:fe:1f:22:c8:b6:9f:d3:97:d2:3e:23: 48:ff:1f:92:6c:03:0c:5a:00:ed:fd:b9:50:44:06:fe:92:70: 35:29:d8:1b:8e:50:a3:5b:aa:66:ea:9e:fa:8b:ae:88:1c:93: 8a:a0:cb:b2:81:cc:b3:de:21:bf:d0:78:b2:57:54:d1:29:62: fd:23:55:d2:f7:54:a3:d7:2a:66:c6:62:19:52:e4:62:f3:08: 66:ac:cd:3a:79:56:a6:ab:4a:6d:44:3e:04:bf:05:be:a9:14: 60:48:ef:59:42:c2:de:b3:50:e3:e4:e7:da:35:d6:89:e1:25: 2c:b8:67:8b:97:89:db:0b:ec:8f:37:7f:3a:d3:81:50:e7:80: 28:5d:49:94:56:d5:37:e6:c0:21:f4:99:5a:3f:ff:5a:e0:e9: d1:4d:4d:5e:81:69:8f:c8:da:b3:09:27:8d:98:1d:ec:6c:aa: 34:67:49:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bKa6gx7nz0VqimhpQsNbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0NWU0YzhjM2E4ODUwMjZkZjhjZDYzMzc5NzhlN2ZhYTkx YTQ0NmEwHhcNMjUxMjIxMDEwMTA2WhcNMjUxMjIyMDEwMTA2WjAzMTEwLwYDVQQD EyhjZDlhMWFiZTU1YjM3Y2NlYWZjZmFlN2E4ZGFiZTQzMDBjNjIwMTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeBPOng8lEvbnP9kAVltapDR9Jxd lS6Thpa3J5gXlVZ2cUUFuB2IBdo4ZvZFR6PJT1cuDPj4zC3kA1BLrr/e0f8GOxBk H2fE40NAWPzCUC4VnQTVXlHIP6ellTTKNlhfEwKh/Vgy375uc8njrwYYzDhawEYL rdEybY/cgDqWp+sAnGMxPkJLNefO4DiFxZYyLWu0PrlCYFyF9vW87l7n7kEvuXda EipZE4sqyekl6oPTgXkiHU6hm6oMuoss4soSUnmwVDTqvXQpNN5cUrbSbgLIKjYs kBF1uoN3sZCEZ1uYiBqLaf/Ph7Bef9C1pD/QFyxeE44/fXuY0pMWpPaMbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM2aGr5Vs3zOr8+ueo2r5DAMYgEcMB8GA1UdIwQY MBaAFOReTIw6iFAm34zWM3l45/qpGkRqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUY1TWpEcUlVQ2Jmak5ZemVYam4tcWthUkdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9iNzhjYzQtNGQ3ZS00ZDI1LTlhNDMt OWIzNjdhYjJjY2QzLzEvNUY1TWpEcUlVQ2Jmak5ZemVYam4tcWthUkdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9iNzhjYzQtNGQ3ZS00ZDI1LTlhNDMtOWIzNjdhYjJjY2Qz LzEvNUY1TWpEcUlVQ2Jmak5ZemVYam4tcWthUkdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACraj7ZhI HWI0+TFKI3a3jW9HNfPWgZy7G+vSRe6E2ITnlPeKaPAkvWRPZ6diojGtqT2N9cH4 eiMhuO1/znHb0fuurKWTCscP9o01DCgDsf4fIsi2n9OX0j4jSP8fkmwDDFoA7f25 UEQG/pJwNSnYG45Qo1uqZuqe+ouuiByTiqDLsoHMs94hv9B4sldU0Sli/SNV0vdU o9cqZsZiGVLkYvMIZqzNOnlWpqtKbUQ+BL8FvqkUYEjvWULC3rNQ4+Tn2jXWieEl LLhni5eJ2wvsjzd/OtOBUOeAKF1JlFbVN+bAIfSZWj//WuDp0U1NXoFpj8jaswkn jZgd7GyqNGdJkA== -----END CERTIFICATE-----Generated at Sun Dec 21 07:21:06 2025 by rpki-client