This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft File: 5NJxw_qQOlkP31SJlEnmmPLpxjI.mft (raw, json) Hash identifier: fVbQPRReXVtBKiWNtDAB4s/4kJgeMA2ZPXcjasJh/Ns= Subject key identifier: 03:0B:E9:7A:89:03:FA:AB:2C:B8:42:A8:80:25:59:22:46:0A:A9:31 Authority key identifier: E4:D2:71:C3:FA:90:3A:59:0F:DF:54:89:94:49:E6:98:F2:E9:C6:32 Certificate issuer: /CN=e4d271c3fa903a590fdf54899449e698f2e9c632 Certificate serial: 019B3343D2F079AE9FA4E35F73495526AC6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 21:00:41 +0000 Manifest this update: Thu 18 Dec 2025 21:00:41 +0000 Manifest next update: Fri 19 Dec 2025 21:00:41 +0000 Files and hashes: 1: 5NJxw_qQOlkP31SJlEnmmPLpxjI.crl (hash: cK8b1l5L+QoHH5oO5NLAIXF27BC4wa4a6+JzM87+CbY=) 2: uY1QhTOWxV4UKC9D82RM9yb0zNE.roa (hash: Bvx8t4Oi0CQUF3Zey6rE/7ccr+hwq753xh5wAVW5P6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:43:d2:f0:79:ae:9f:a4:e3:5f:73:49:55:26:ac:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4d271c3fa903a590fdf54899449e698f2e9c632 Validity Not Before: Dec 18 21:00:41 2025 GMT Not After : Dec 19 21:00:41 2025 GMT Subject: CN=030be97a8903faab2cb842a880255922460aa931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:07:ba:9c:76:66:e0:bc:00:77:61:7b:c5:a1: b6:7b:d6:29:71:8f:89:eb:e3:d3:1e:55:52:46:f7: 74:d0:dd:f8:1b:3e:76:d0:4c:54:c5:a8:fc:71:a1: 56:26:5a:d8:1c:d6:05:9f:54:b2:0d:40:e5:4d:c6: 4b:38:87:14:8c:e3:30:16:c7:28:76:e9:8e:46:e3: 72:4c:af:c7:b0:90:8f:ac:6a:a6:d7:15:f8:ba:52: fe:da:30:a3:f7:65:94:41:8e:96:b8:f6:54:f6:97: fc:8e:b7:b2:09:14:96:fd:bb:4f:4d:c0:1a:e5:52: 77:5b:cd:1a:7c:a6:2c:d3:5a:0a:9e:3a:7a:55:1b: 2c:89:86:f5:17:e7:73:db:b1:8a:9c:38:cc:a0:da: bd:35:bc:e3:d3:6a:7f:f8:92:c5:94:be:19:4f:47: d6:62:2a:30:17:2d:2c:7e:73:b0:de:dd:5e:2f:5a: 55:5a:5e:80:14:24:02:1a:a2:be:4b:0c:dd:dc:33: 6f:86:4d:98:6b:fd:4c:a7:77:95:1c:cb:fe:06:09: ed:5a:0c:ce:00:0d:6c:93:4b:ba:8b:66:c5:d3:09: d2:96:b2:9b:00:36:a3:d3:25:e6:ca:0c:ef:ab:0a: cd:bc:f4:fd:ab:11:76:ce:26:60:39:3e:4c:ae:cd: e4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:0B:E9:7A:89:03:FA:AB:2C:B8:42:A8:80:25:59:22:46:0A:A9:31 X509v3 Authority Key Identifier: keyid:E4:D2:71:C3:FA:90:3A:59:0F:DF:54:89:94:49:E6:98:F2:E9:C6:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:c6:fb:c4:72:6f:cb:57:8f:71:1a:64:6c:cc:8d:fa:eb:de: 9d:be:69:07:2c:06:95:15:a2:cb:62:22:1a:0c:ca:59:fe:1d: 08:c0:28:db:60:d3:20:20:4b:fd:bf:5f:84:de:cb:54:f0:2c: ad:83:20:aa:ee:66:ce:e1:a4:fc:44:21:5d:c9:d3:67:ed:8e: d1:44:0d:b1:92:49:ee:ae:4e:9f:6f:0b:02:fc:b3:56:cc:fa: 56:1e:5a:89:3f:dd:97:67:f9:66:0e:2c:62:8f:5c:93:42:b4: e9:94:d4:c7:03:33:ba:6c:4b:a7:fe:5d:2b:b3:f5:f2:12:40: 4e:06:af:62:21:8b:b4:2c:5a:b2:75:34:61:6d:9e:f5:8a:02: b3:6e:44:2b:5f:88:27:c8:5c:fd:cd:c3:2d:0e:26:2d:fc:93: 07:66:b4:fd:4d:7a:61:81:88:7f:ba:22:ae:f0:68:01:25:dc: da:9d:71:e3:05:ae:f0:ff:a6:1b:02:72:62:e3:7a:5f:0c:6c: 6a:e5:3f:9c:a4:fa:1a:3f:93:59:8d:e5:79:3f:88:1d:31:ea: 2c:a9:41:6c:c7:77:ae:62:f1:1b:45:5d:2b:9a:6e:ff:36:04: 90:d5:ca:55:91:b6:d0:81:57:6f:86:4a:7c:e6:cd:d4:02:57: 9f:dc:0b:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszQ9Lwea6fpONfc0lVJqxuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ZDI3MWMzZmE5MDNhNTkwZmRmNTQ4OTk0NDllNjk4ZjJl OWM2MzIwHhcNMjUxMjE4MjEwMDQxWhcNMjUxMjE5MjEwMDQxWjAzMTEwLwYDVQQD EygwMzBiZTk3YTg5MDNmYWFiMmNiODQyYTg4MDI1NTkyMjQ2MGFhOTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQe6nHZm4LwAd2F7xaG2e9YpcY+J 6+PTHlVSRvd00N34Gz520ExUxaj8caFWJlrYHNYFn1SyDUDlTcZLOIcUjOMwFsco dumORuNyTK/HsJCPrGqm1xX4ulL+2jCj92WUQY6WuPZU9pf8jreyCRSW/btPTcAa 5VJ3W80afKYs01oKnjp6VRssiYb1F+dz27GKnDjMoNq9Nbzj02p/+JLFlL4ZT0fW YiowFy0sfnOw3t1eL1pVWl6AFCQCGqK+Swzd3DNvhk2Ya/1Mp3eVHMv+BgntWgzO AA1sk0u6i2bF0wnSlrKbADaj0yXmygzvqwrNvPT9qxF2ziZgOT5Mrs3k7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAML6XqJA/qrLLhCqIAlWSJGCqkxMB8GA1UdIwQY MBaAFOTSccP6kDpZD99UiZRJ5pjy6cYyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU5KeHdfcVFPbGtQMzFTSmxFbm1tUExweGpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC84OTcwOTItMDc1MC00ZDk2LWIzMmYt NWYyMDUyMzZkZTFmLzEvNU5KeHdfcVFPbGtQMzFTSmxFbm1tUExweGpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC84OTcwOTItMDc1MC00ZDk2LWIzMmYtNWYyMDUyMzZkZTFm LzEvNU5KeHdfcVFPbGtQMzFTSmxFbm1tUExweGpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApcb7xHJv y1ePcRpkbMyN+uvenb5pBywGlRWiy2IiGgzKWf4dCMAo22DTICBL/b9fhN7LVPAs rYMgqu5mzuGk/EQhXcnTZ+2O0UQNsZJJ7q5On28LAvyzVsz6Vh5aiT/dl2f5Zg4s Yo9ck0K06ZTUxwMzumxLp/5dK7P18hJATgavYiGLtCxasnU0YW2e9YoCs25EK1+I J8hc/c3DLQ4mLfyTB2a0/U16YYGIf7oirvBoASXc2p1x4wWu8P+mGwJyYuN6Xwxs auU/nKT6Gj+TWY3leT+IHTHqLKlBbMd3rmLxG0VdK5pu/zYEkNXKVZG20IFXb4ZK fObN1AJXn9wLhg== -----END CERTIFICATE-----Generated at Fri Dec 19 01:26:49 2025 by rpki-client