This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.mft File: 5oaWVQmmScUIq4q3L3JXvvNfeTA.mft (raw, json) Hash identifier: HgQV30RjstV1ElB9ICf4e1dxEiGiF9o2twLAtv5Kl7E= Subject key identifier: A2:FE:5D:79:97:06:2F:B1:38:C9:BC:15:75:C9:20:0B:22:2C:1E:AC Authority key identifier: E6:86:96:55:09:A6:49:C5:08:AB:8A:B7:2F:72:57:BE:F3:5F:79:30 Certificate issuer: /CN=e686965509a649c508ab8ab72f7257bef35f7930 Certificate serial: 019B3C46F0DF7EBBC05C3719FEB704821D1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oaWVQmmScUIq4q3L3JXvvNfeTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.mft Manifest number: 0E Signing time: Sat 20 Dec 2025 15:00:40 +0000 Manifest this update: Sat 20 Dec 2025 15:00:40 +0000 Manifest next update: Sun 21 Dec 2025 15:00:40 +0000 Files and hashes: 1: 5O9Cs84ALzQYWShlYpzbuaAEl0U.roa (hash: LQFehHDdF2EYE3Sk0E8gsAQFha6C352cj9Bb1p47hLI=) 2: 5oaWVQmmScUIq4q3L3JXvvNfeTA.crl (hash: LsQuaHO0gvAIPY7b1ebKl7Ulz0T+A+G8EYxfgtOcQeU=) 3: YT7TxtjN2dRtXnT4-WJTTfp5eIQ.roa (hash: mFJordH00PdHOWT1Y4dRq5PrI120PAxfDwm/akkRQ/k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.mft rsync://rpki.ripe.net/repository/DEFAULT/5oaWVQmmScUIq4q3L3JXvvNfeTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:46:f0:df:7e:bb:c0:5c:37:19:fe:b7:04:82:1d:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e686965509a649c508ab8ab72f7257bef35f7930 Validity Not Before: Dec 20 15:00:40 2025 GMT Not After : Dec 21 15:00:40 2025 GMT Subject: CN=a2fe5d7997062fb138c9bc1575c9200b222c1eac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f3:16:bb:0c:f8:4f:b3:c3:79:ca:6d:0e:69: 95:ff:59:35:8e:f1:48:ae:e7:1d:e2:1b:1d:ae:4e: dc:a4:fe:62:39:59:df:84:45:31:3e:02:eb:e4:e7: 31:13:70:51:7a:8c:e6:03:9a:2f:b0:a4:8e:29:9e: 62:09:fd:e1:45:53:be:1a:d9:0c:29:f2:72:c7:c2: 66:b9:02:f1:21:37:ed:c4:cd:75:e0:5c:2e:0c:17: a3:fe:eb:0f:13:f4:17:2d:3c:25:5d:b7:62:04:ce: d7:95:1e:60:11:b0:11:17:a4:51:56:c8:4c:19:a8: 38:39:09:15:d1:88:27:c1:be:b6:a3:04:97:a3:14: e0:f2:bf:f5:66:a2:9c:ca:54:38:9c:42:d8:c9:46: 97:b6:70:09:b2:2f:bf:54:7c:b3:1d:67:c7:f1:c2: 3d:8c:1d:7e:db:53:7a:ce:5f:61:47:3a:61:5d:4a: 06:58:82:05:74:0d:fa:b9:79:45:19:86:09:78:b9: 1c:5d:cf:cf:ff:a9:70:c1:5c:e0:0e:d2:bc:53:ce: ff:21:e8:eb:85:06:f9:76:19:07:a8:5e:12:e5:44: 86:98:c0:a1:c0:a4:33:68:96:c8:1e:9f:5e:b7:f0: b6:90:30:9f:80:4f:3e:52:2f:07:3c:ed:e0:fe:1a: db:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:FE:5D:79:97:06:2F:B1:38:C9:BC:15:75:C9:20:0B:22:2C:1E:AC X509v3 Authority Key Identifier: keyid:E6:86:96:55:09:A6:49:C5:08:AB:8A:B7:2F:72:57:BE:F3:5F:79:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oaWVQmmScUIq4q3L3JXvvNfeTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:25:aa:7d:db:eb:81:eb:45:4d:da:e1:da:f5:8f:4d:ef:4a: 22:90:37:9e:1a:b5:8a:62:b1:3a:4a:3e:da:0f:e4:c5:2b:d5: 96:29:37:ba:42:c6:61:34:7a:20:d0:33:bf:34:31:b4:25:c4: f0:8a:01:b1:75:5f:4e:f5:93:af:f7:49:6d:be:ff:32:a0:36: 44:91:de:14:36:57:0f:d9:b5:ed:26:6c:75:7b:73:91:dd:43: 6e:2d:66:14:54:99:e0:21:ed:98:a9:d3:70:5b:a2:f2:4d:ab: f0:66:6c:db:9d:95:5e:99:0d:a1:29:be:17:76:b7:a6:f3:7b: d3:ed:f0:b7:ed:b4:22:f8:c4:b1:c7:20:b8:87:8a:12:f0:78: 2c:8e:2f:5a:08:1d:de:4c:2c:cd:74:ba:ae:73:c9:e5:f0:68: 60:f2:54:b4:73:d2:e6:3e:47:db:26:08:3d:1f:45:b5:08:35: f4:d0:61:87:dd:95:a1:89:54:cc:e6:b4:00:ca:e0:8e:5b:6d: 51:32:a1:dd:22:75:f8:7e:3a:58:be:84:7c:cd:17:7d:d3:0f: 46:d9:ea:ac:3a:fc:42:c8:f4:9a:9f:1d:9b:a5:04:02:cb:9e: 5d:5d:2c:df:17:48:cf:db:17:c8:bf:da:1e:b4:85:e6:70:7c: 35:0c:44:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8RvDffrvAXDcZ/rcEgh0eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2ODY5NjU1MDlhNjQ5YzUwOGFiOGFiNzJmNzI1N2JlZjM1 Zjc5MzAwHhcNMjUxMjIwMTUwMDQwWhcNMjUxMjIxMTUwMDQwWjAzMTEwLwYDVQQD EyhhMmZlNWQ3OTk3MDYyZmIxMzhjOWJjMTU3NWM5MjAwYjIyMmMxZWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovMWuwz4T7PDecptDmmV/1k1jvFI rucd4hsdrk7cpP5iOVnfhEUxPgLr5OcxE3BReozmA5ovsKSOKZ5iCf3hRVO+GtkM KfJyx8JmuQLxITftxM114FwuDBej/usPE/QXLTwlXbdiBM7XlR5gEbARF6RRVshM Gag4OQkV0Ygnwb62owSXoxTg8r/1ZqKcylQ4nELYyUaXtnAJsi+/VHyzHWfH8cI9 jB1+21N6zl9hRzphXUoGWIIFdA36uXlFGYYJeLkcXc/P/6lwwVzgDtK8U87/Iejr hQb5dhkHqF4S5USGmMChwKQzaJbIHp9et/C2kDCfgE8+Ui8HPO3g/hrbDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKL+XXmXBi+xOMm8FXXJIAsiLB6sMB8GA1UdIwQY MBaAFOaGllUJpknFCKuKty9yV77zX3kwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNW9hV1ZRbW1TY1VJcTRxM0wzSlh2dk5mZVRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS82OGJmZjYtN2IyYy00ZWNmLTgwMDYt ZWQxNGFmNmRiODg4LzEvNW9hV1ZRbW1TY1VJcTRxM0wzSlh2dk5mZVRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS82OGJmZjYtN2IyYy00ZWNmLTgwMDYtZWQxNGFmNmRiODg4 LzEvNW9hV1ZRbW1TY1VJcTRxM0wzSlh2dk5mZVRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWiWqfdvr getFTdrh2vWPTe9KIpA3nhq1imKxOko+2g/kxSvVlik3ukLGYTR6INAzvzQxtCXE 8IoBsXVfTvWTr/dJbb7/MqA2RJHeFDZXD9m17SZsdXtzkd1Dbi1mFFSZ4CHtmKnT cFui8k2r8GZs252VXpkNoSm+F3a3pvN70+3wt+20IvjEsccguIeKEvB4LI4vWggd 3kwszXS6rnPJ5fBoYPJUtHPS5j5H2yYIPR9FtQg19NBhh92VoYlUzOa0AMrgjltt UTKh3SJ1+H46WL6EfM0XfdMPRtnqrDr8Qsj0mp8dm6UEAsueXV0s3xdIz9sXyL/a HrSF5nB8NQxEtQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:26:42 2025 by rpki-client