This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft File: 5NJxw_qQOlkP31SJlEnmmPLpxjI.mft (raw, json) Hash identifier: XVndQmRMazWiTZRtJGGLncpBTEazf2whOFv5qeLR6F4= Subject key identifier: 5D:43:9D:DB:4D:80:16:C1:8C:39:ED:94:38:B7:7C:09:78:F1:F9:3F Authority key identifier: E4:D2:71:C3:FA:90:3A:59:0F:DF:54:89:94:49:E6:98:F2:E9:C6:32 Certificate issuer: /CN=e4d271c3fa903a590fdf54899449e698f2e9c632 Certificate serial: 019B4A70D5138F40BE8307AC38DCC73DC076 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft Manifest number: 1790 Signing time: Tue 23 Dec 2025 09:01:07 +0000 Manifest this update: Tue 23 Dec 2025 09:01:07 +0000 Manifest next update: Wed 24 Dec 2025 09:01:07 +0000 Files and hashes: 1: 5NJxw_qQOlkP31SJlEnmmPLpxjI.crl (hash: lXQRCbQur/TmT3+YuT1X7TT+bxUKe8NVy/xNs4GTJg4=) 2: uY1QhTOWxV4UKC9D82RM9yb0zNE.roa (hash: Bvx8t4Oi0CQUF3Zey6rE/7ccr+hwq753xh5wAVW5P6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:70:d5:13:8f:40:be:83:07:ac:38:dc:c7:3d:c0:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4d271c3fa903a590fdf54899449e698f2e9c632 Validity Not Before: Dec 23 09:01:07 2025 GMT Not After : Dec 24 09:01:07 2025 GMT Subject: CN=5d439ddb4d8016c18c39ed9438b77c0978f1f93f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:84:da:3b:36:e5:f9:5d:a5:25:c5:76:5f:7d: fb:57:b7:f9:41:c9:42:3f:c0:64:c9:c2:17:f9:e7: c3:0b:8c:9e:ac:ee:d6:d0:8f:ea:9d:b3:5b:4f:06: 0c:e8:0c:9f:e2:00:bf:a4:87:be:c0:2c:7e:21:1c: 30:46:4b:0e:be:41:47:24:21:1e:e4:f5:c2:9e:f8: 82:12:30:ec:d1:8f:89:48:8b:e3:5e:14:84:60:ee: a7:6f:b6:2b:38:56:5e:27:5c:46:2b:48:f1:2a:0d: 7e:c6:b7:4f:72:a2:dc:74:63:b0:07:e3:12:d8:14: b3:81:bd:d9:e4:4e:78:a8:82:c1:71:5f:ce:18:87: f3:a8:a4:45:b1:b7:8e:69:3c:e7:77:f6:83:79:74: dc:7a:95:f5:29:d5:80:2f:c7:8c:fb:85:e9:ab:42: f9:a7:15:aa:44:f6:15:fd:c4:18:3d:7d:c4:fb:56: 43:37:8c:58:2c:f9:e8:46:79:34:cf:a6:b0:e2:ba: 2c:fa:89:63:83:e3:e6:f6:52:ae:28:f2:d6:f6:4f: f1:10:71:02:dc:0d:0a:44:6d:c5:1c:85:3f:73:60: e4:64:5d:76:23:b9:fd:79:53:e2:c1:c3:4c:e7:dd: fa:7d:a7:a6:0e:97:2d:6b:7e:ec:fe:74:b7:d1:cd: 02:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:43:9D:DB:4D:80:16:C1:8C:39:ED:94:38:B7:7C:09:78:F1:F9:3F X509v3 Authority Key Identifier: keyid:E4:D2:71:C3:FA:90:3A:59:0F:DF:54:89:94:49:E6:98:F2:E9:C6:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:a5:4e:33:c2:50:53:24:9e:32:c0:67:c1:2e:fa:1d:82:a8: fd:67:6d:46:5a:ce:77:65:26:54:f8:ea:fa:c6:dc:db:21:52: a1:02:b5:52:73:2c:2a:4d:30:4e:6e:eb:24:38:e5:ff:2a:a9: 1f:22:0f:01:7a:f1:10:c9:56:76:94:ae:59:bf:77:51:81:c3: 4a:61:17:d0:de:d5:bf:ef:c7:aa:5f:dd:0b:a1:ce:64:8d:8e: aa:7e:da:8b:0a:25:7b:dc:28:d8:e2:48:b9:4a:85:56:f1:53: 89:2e:fb:4c:0a:f1:87:ef:c6:f0:c7:0e:8f:a7:33:1c:f6:cd: c9:50:cf:8d:ef:97:63:86:b9:76:7a:36:76:da:72:ca:43:6c: be:ec:fc:f2:68:ad:95:ff:60:00:7b:1b:e9:6a:1b:8d:42:89: 37:ab:d2:39:a5:9f:1d:d0:83:ae:b6:c0:c2:75:83:68:0b:1b: 0f:75:5a:47:cb:be:29:14:fe:c7:b1:ea:58:e9:db:05:87:c7: 17:3d:46:5f:86:8d:ca:98:03:0e:c2:32:4d:6d:ef:08:70:d6: c5:5e:df:65:17:b2:c6:27:9f:20:f3:e3:57:bc:76:cf:f6:72: c1:2b:c8:a1:d7:ae:ad:b5:05:9f:85:03:36:f7:d9:d5:96:bb: c7:1e:38:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKcNUTj0C+gwesONzHPcB2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ZDI3MWMzZmE5MDNhNTkwZmRmNTQ4OTk0NDllNjk4ZjJl OWM2MzIwHhcNMjUxMjIzMDkwMTA3WhcNMjUxMjI0MDkwMTA3WjAzMTEwLwYDVQQD Eyg1ZDQzOWRkYjRkODAxNmMxOGMzOWVkOTQzOGI3N2MwOTc4ZjFmOTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtITaOzbl+V2lJcV2X337V7f5QclC P8BkycIX+efDC4yerO7W0I/qnbNbTwYM6Ayf4gC/pIe+wCx+IRwwRksOvkFHJCEe 5PXCnviCEjDs0Y+JSIvjXhSEYO6nb7YrOFZeJ1xGK0jxKg1+xrdPcqLcdGOwB+MS 2BSzgb3Z5E54qILBcV/OGIfzqKRFsbeOaTznd/aDeXTcepX1KdWAL8eM+4Xpq0L5 pxWqRPYV/cQYPX3E+1ZDN4xYLPnoRnk0z6aw4ros+oljg+Pm9lKuKPLW9k/xEHEC 3A0KRG3FHIU/c2DkZF12I7n9eVPiwcNM5936faemDpcta37s/nS30c0CfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF1DndtNgBbBjDntlDi3fAl48fk/MB8GA1UdIwQY MBaAFOTSccP6kDpZD99UiZRJ5pjy6cYyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU5KeHdfcVFPbGtQMzFTSmxFbm1tUExweGpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC84OTcwOTItMDc1MC00ZDk2LWIzMmYt NWYyMDUyMzZkZTFmLzEvNU5KeHdfcVFPbGtQMzFTSmxFbm1tUExweGpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC84OTcwOTItMDc1MC00ZDk2LWIzMmYtNWYyMDUyMzZkZTFm LzEvNU5KeHdfcVFPbGtQMzFTSmxFbm1tUExweGpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApqVOM8JQ UySeMsBnwS76HYKo/WdtRlrOd2UmVPjq+sbc2yFSoQK1UnMsKk0wTm7rJDjl/yqp HyIPAXrxEMlWdpSuWb93UYHDSmEX0N7Vv+/Hql/dC6HOZI2Oqn7aiwole9wo2OJI uUqFVvFTiS77TArxh+/G8McOj6czHPbNyVDPje+XY4a5dno2dtpyykNsvuz88mit lf9gAHsb6WobjUKJN6vSOaWfHdCDrrbAwnWDaAsbD3VaR8u+KRT+x7HqWOnbBYfH Fz1GX4aNypgDDsIyTW3vCHDWxV7fZReyxiefIPPjV7x2z/ZywSvIodeurbUFn4UD NvfZ1Za7xx44Fg== -----END CERTIFICATE-----Generated at Tue Dec 23 17:17:23 2025 by rpki-client