This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft File: 5NsDAf4kYcbeP3GNhHy13HwAstI.mft (raw, json) Hash identifier: 7CZGIzuIem4y0cptPNS8dfoMXQleIih1aTGG5EbXzXk= Subject key identifier: B1:64:B9:F3:3D:DB:80:63:21:52:BF:25:3F:6C:E1:B1:2B:DD:2B:43 Authority key identifier: E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2 Certificate issuer: /CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2 Certificate serial: 019B44DCB033E15D65FF2B33671D245368FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft Manifest number: 1372 Signing time: Mon 22 Dec 2025 07:01:12 +0000 Manifest this update: Mon 22 Dec 2025 07:01:12 +0000 Manifest next update: Tue 23 Dec 2025 07:01:12 +0000 Files and hashes: 1: 5NsDAf4kYcbeP3GNhHy13HwAstI.crl (hash: SIIW59zgyHFNPv7NacwNaUizWKoBsg1Oq6Kr75q0m6I=) 2: Hhlf2TMcsBbO8FDcjvrbEjaLNJk.roa (hash: ZLATPH9bmMVI2zAzUVqtDm2hTynFHZLFVRo0ph7khAc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:dc:b0:33:e1:5d:65:ff:2b:33:67:1d:24:53:68:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2 Validity Not Before: Dec 22 07:01:12 2025 GMT Not After : Dec 23 07:01:12 2025 GMT Subject: CN=b164b9f33ddb80632152bf253f6ce1b12bdd2b43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bf:ec:d4:be:f0:44:f2:65:e7:f6:97:9f:4e: a4:89:40:54:46:09:e0:f1:e5:5f:bb:71:9c:50:da: b2:db:97:0d:05:ae:0c:a4:d8:e5:dd:d9:9e:a2:db: 7d:81:90:86:d8:7d:d7:c0:6a:bc:2b:25:33:5c:06: 16:75:f8:ca:e5:00:1b:ad:43:2a:7f:58:ff:c2:bb: e7:74:9a:5d:29:bc:18:64:1e:44:5a:00:8d:ca:38: d0:a0:84:0e:21:e8:9a:26:e4:18:42:ed:ab:12:5f: fc:a5:32:18:b2:fc:d3:16:a4:9d:3f:14:2e:2f:0a: 4c:fc:34:ca:35:44:a8:cb:db:0d:b7:e5:1e:b3:7b: 85:9d:6c:6e:9c:81:e0:de:a5:08:04:c4:6c:fe:f1: 4c:b1:4c:b1:f2:1c:02:d1:86:e4:77:de:57:91:da: 6d:0d:68:1a:1f:44:e2:68:88:3b:f1:14:72:c7:4c: a4:c6:8e:29:a3:c9:68:aa:6d:72:8b:87:79:8c:68: 16:07:87:c0:00:36:00:0f:b7:fc:c4:7c:4b:46:71: 7f:6d:d5:5e:71:28:ca:9e:b1:bd:01:d4:8b:c4:2b: 61:d3:f1:a9:eb:c5:80:e4:37:a6:e2:ca:ce:f0:1c: 1d:8a:c8:83:96:b5:67:b5:01:08:ba:af:ae:53:e6: 7a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:64:B9:F3:3D:DB:80:63:21:52:BF:25:3F:6C:E1:B1:2B:DD:2B:43 X509v3 Authority Key Identifier: keyid:E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:8e:6a:3b:b8:e3:96:fa:b3:59:87:a8:59:38:50:10:06:bf: 6f:d7:e1:9f:af:bb:b3:b1:25:04:fa:e2:3b:4c:ac:cd:8b:9e: 6a:b8:fa:df:90:c2:1f:c6:5a:89:fc:27:ac:82:4b:d6:30:81: b4:09:13:01:f4:60:d8:3f:cb:ee:e4:37:03:9a:84:a6:d2:5f: a9:de:36:1f:4f:6f:ca:87:75:61:20:6a:8f:a4:52:3e:5c:4f: 4d:9e:ab:d4:30:a4:47:01:ad:d2:06:d4:0b:0f:96:37:78:48: 50:ba:89:5c:a2:ab:9d:0f:dd:9a:f9:95:c3:9b:d6:b4:3a:41: 05:53:52:ae:ec:4b:89:87:21:ae:6c:ef:a1:a7:09:b3:c9:61: cf:e2:e7:28:36:3c:ea:78:db:1b:fe:5c:c7:e1:db:ab:9d:c8: 8e:26:c2:87:b4:f5:49:ed:70:df:d3:9b:b4:0f:fa:5d:49:19: 71:aa:7b:40:d3:64:59:cf:d4:0b:56:06:58:fe:04:0d:83:54: a0:63:05:cd:9a:19:96:10:6d:8f:5d:d7:ff:b0:c7:71:cc:94: 62:c6:c1:0d:ac:26:56:b9:a2:cd:84:1c:0f:66:4a:5d:83:ef: 2b:88:a6:c9:e6:a1:0f:29:99:d6:99:84:8a:1b:54:23:c8:83: a8:f5:7b:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtE3LAz4V1l/yszZx0kU2j9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ZGIwMzAxZmUyNDYxYzZkZTNmNzE4ZDg0N2NiNWRjN2Mw MGIyZDIwHhcNMjUxMjIyMDcwMTEyWhcNMjUxMjIzMDcwMTEyWjAzMTEwLwYDVQQD EyhiMTY0YjlmMzNkZGI4MDYzMjE1MmJmMjUzZjZjZTFiMTJiZGQyYjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7/s1L7wRPJl5/aXn06kiUBURgng 8eVfu3GcUNqy25cNBa4MpNjl3dmeott9gZCG2H3XwGq8KyUzXAYWdfjK5QAbrUMq f1j/wrvndJpdKbwYZB5EWgCNyjjQoIQOIeiaJuQYQu2rEl/8pTIYsvzTFqSdPxQu LwpM/DTKNUSoy9sNt+Ues3uFnWxunIHg3qUIBMRs/vFMsUyx8hwC0Ybkd95Xkdpt DWgaH0TiaIg78RRyx0ykxo4po8loqm1yi4d5jGgWB4fAADYAD7f8xHxLRnF/bdVe cSjKnrG9AdSLxCth0/Gp68WA5Dem4srO8BwdisiDlrVntQEIuq+uU+Z69QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLFkufM924BjIVK/JT9s4bEr3StDMB8GA1UdIwQY MBaAFOTbAwH+JGHG3j9xjYR8tdx8ALLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU5zREFmNGtZY2JlUDNHTmhIeTEzSHdBc3RJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC82ZTY0MDUtZGJlNy00MmIyLTg4N2Mt ZmZkZWJlYzhmNTA1LzEvNU5zREFmNGtZY2JlUDNHTmhIeTEzSHdBc3RJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC82ZTY0MDUtZGJlNy00MmIyLTg4N2MtZmZkZWJlYzhmNTA1 LzEvNU5zREFmNGtZY2JlUDNHTmhIeTEzSHdBc3RJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI45qO7jj lvqzWYeoWThQEAa/b9fhn6+7s7ElBPriO0yszYuearj635DCH8ZaifwnrIJL1jCB tAkTAfRg2D/L7uQ3A5qEptJfqd42H09vyod1YSBqj6RSPlxPTZ6r1DCkRwGt0gbU Cw+WN3hIULqJXKKrnQ/dmvmVw5vWtDpBBVNSruxLiYchrmzvoacJs8lhz+LnKDY8 6njbG/5cx+Hbq53IjibCh7T1Se1w39ObtA/6XUkZcap7QNNkWc/UC1YGWP4EDYNU oGMFzZoZlhBtj13X/7DHccyUYsbBDawmVrmizYQcD2ZKXYPvK4imyeahDymZ1pmE ihtUI8iDqPV7uQ== -----END CERTIFICATE-----Generated at Mon Dec 22 10:37:21 2025 by rpki-client