This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft File: 5NsDAf4kYcbeP3GNhHy13HwAstI.mft (raw, json) Hash identifier: zjKLY+9MXOEWEZA72IFKJF68nQhd4z3Fa2YkQTG+n4k= Subject key identifier: 7E:43:64:6A:1D:A5:54:BB:C9:82:72:98:D5:53:FA:AA:D6:96:71:C4 Authority key identifier: E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2 Certificate issuer: /CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2 Certificate serial: 019B3757DECBF6D958309E5FFD3BCE56DF70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft Manifest number: 136B Signing time: Fri 19 Dec 2025 16:01:04 +0000 Manifest this update: Fri 19 Dec 2025 16:01:04 +0000 Manifest next update: Sat 20 Dec 2025 16:01:04 +0000 Files and hashes: 1: 5NsDAf4kYcbeP3GNhHy13HwAstI.crl (hash: TQAm3s7bt2EF1FwNK8VW6bleTz5ANPGYigcniovv0/Q=) 2: Hhlf2TMcsBbO8FDcjvrbEjaLNJk.roa (hash: ZLATPH9bmMVI2zAzUVqtDm2hTynFHZLFVRo0ph7khAc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:57:de:cb:f6:d9:58:30:9e:5f:fd:3b:ce:56:df:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2 Validity Not Before: Dec 19 16:01:04 2025 GMT Not After : Dec 20 16:01:04 2025 GMT Subject: CN=7e43646a1da554bbc9827298d553faaad69671c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6b:53:04:7a:cf:1e:cb:7d:f7:c0:0c:47:3c: 8e:c8:84:c8:40:be:7e:55:a1:fa:0a:8c:74:0b:33: 95:7c:c7:6f:da:1c:5d:c9:11:b4:8d:89:bb:58:45: 87:5b:6b:41:bd:c4:d4:40:33:0c:34:b3:20:38:35: c2:9d:a2:ce:9e:73:29:07:9f:82:d6:04:45:7f:cf: f7:4c:2e:2a:4e:6e:cb:7b:d4:fd:8e:2b:0d:da:fe: 22:bb:8e:bb:fb:b5:2f:a8:70:a0:bc:d3:76:56:a4: 84:d3:73:0b:83:1e:1e:81:73:80:b5:56:34:d9:fc: f5:fb:4f:90:aa:e2:89:85:43:59:73:a0:e0:19:8c: 9d:f3:2d:72:16:a7:60:b3:08:cd:fb:26:f0:cc:23: 0d:37:e2:2d:77:d0:39:b0:63:16:42:da:f2:38:11: b0:b0:1d:7b:5d:f5:98:f0:b1:c2:cc:69:d7:52:b3: 0e:29:4f:65:83:d2:66:c1:93:94:90:0b:b8:67:63: fa:13:ae:7f:01:1d:0e:58:be:76:c7:b8:10:7c:6d: 5d:e8:ee:82:21:4a:69:64:6f:aa:f8:cb:7d:06:5c: 69:dc:22:36:55:43:bb:49:c5:bf:2f:c9:70:46:9b: dd:6c:d0:35:1b:54:bf:1b:aa:b4:c2:93:67:a2:17: de:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:43:64:6A:1D:A5:54:BB:C9:82:72:98:D5:53:FA:AA:D6:96:71:C4 X509v3 Authority Key Identifier: keyid:E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:00:5b:96:b5:c8:ce:80:d0:8a:c8:0c:7f:37:d8:95:04:9c: 50:9e:3a:94:e6:7b:59:9b:e4:21:9c:dc:84:f2:32:79:8a:6e: 37:7e:3e:fd:16:09:d7:f8:a1:90:53:36:f6:df:c4:20:08:e1: 4d:55:de:9f:e9:e0:fd:3a:db:8f:e7:88:05:6e:b2:6b:1c:e8: eb:0c:9b:57:84:b2:63:77:e6:3f:f1:87:63:0c:70:0d:d5:72: f0:3d:f8:72:65:31:00:7d:0d:f1:9a:e6:a8:f1:42:e3:5e:e3: 0a:cc:c6:09:41:33:3a:78:e2:e7:48:e9:d5:99:9f:f8:21:97: a8:a5:2e:26:70:72:5a:72:cf:6e:31:85:41:c9:d6:75:6e:b1: ab:d3:37:92:13:6c:84:cf:c4:cc:c7:92:d2:33:3a:fd:e9:63: 6e:ef:19:bf:37:a3:f8:3e:a9:44:e5:80:2f:48:75:d9:82:43: 7f:d5:be:2c:48:e8:3f:db:bc:34:b6:2c:f1:90:1a:e2:55:74: b3:3c:1c:8b:cb:dc:3a:55:7b:e5:19:2e:b2:65:28:09:f5:7b: bf:6c:8a:a0:73:c3:6b:40:71:29:f8:b0:3f:c9:69:58:11:99: bd:7f:8b:5a:8d:ae:bd:60:81:61:28:ee:04:a1:96:93:8b:90: c5:89:1a:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3V97L9tlYMJ5f/TvOVt9wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ZGIwMzAxZmUyNDYxYzZkZTNmNzE4ZDg0N2NiNWRjN2Mw MGIyZDIwHhcNMjUxMjE5MTYwMTA0WhcNMjUxMjIwMTYwMTA0WjAzMTEwLwYDVQQD Eyg3ZTQzNjQ2YTFkYTU1NGJiYzk4MjcyOThkNTUzZmFhYWQ2OTY3MWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2tTBHrPHst998AMRzyOyITIQL5+ VaH6Cox0CzOVfMdv2hxdyRG0jYm7WEWHW2tBvcTUQDMMNLMgODXCnaLOnnMpB5+C 1gRFf8/3TC4qTm7Le9T9jisN2v4iu467+7UvqHCgvNN2VqSE03MLgx4egXOAtVY0 2fz1+0+QquKJhUNZc6DgGYyd8y1yFqdgswjN+ybwzCMNN+Itd9A5sGMWQtryOBGw sB17XfWY8LHCzGnXUrMOKU9lg9JmwZOUkAu4Z2P6E65/AR0OWL52x7gQfG1d6O6C IUppZG+q+Mt9Blxp3CI2VUO7ScW/L8lwRpvdbNA1G1S/G6q0wpNnohfeDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH5DZGodpVS7yYJymNVT+qrWlnHEMB8GA1UdIwQY MBaAFOTbAwH+JGHG3j9xjYR8tdx8ALLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU5zREFmNGtZY2JlUDNHTmhIeTEzSHdBc3RJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC82ZTY0MDUtZGJlNy00MmIyLTg4N2Mt ZmZkZWJlYzhmNTA1LzEvNU5zREFmNGtZY2JlUDNHTmhIeTEzSHdBc3RJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC82ZTY0MDUtZGJlNy00MmIyLTg4N2MtZmZkZWJlYzhmNTA1 LzEvNU5zREFmNGtZY2JlUDNHTmhIeTEzSHdBc3RJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXwBblrXI zoDQisgMfzfYlQScUJ46lOZ7WZvkIZzchPIyeYpuN34+/RYJ1/ihkFM29t/EIAjh TVXen+ng/Trbj+eIBW6yaxzo6wybV4SyY3fmP/GHYwxwDdVy8D34cmUxAH0N8Zrm qPFC417jCszGCUEzOnji50jp1Zmf+CGXqKUuJnByWnLPbjGFQcnWdW6xq9M3khNs hM/EzMeS0jM6/eljbu8Zvzej+D6pROWAL0h12YJDf9W+LEjoP9u8NLYs8ZAa4lV0 szwci8vcOlV75RkusmUoCfV7v2yKoHPDa0BxKfiwP8lpWBGZvX+LWo2uvWCBYSju BKGWk4uQxYkaeA== -----END CERTIFICATE-----Generated at Fri Dec 19 20:11:36 2025 by rpki-client