This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft File: 5_X6RuHGsFy_7JdpIQyxUUer4jE.mft (raw, json) Hash identifier: kPtedqUvZfmmQqHJgF1x/ssxsn4yjeH3ru5usH14s6g= Subject key identifier: 19:95:B6:0B:3A:CF:4B:8D:F4:C3:BE:78:62:A1:C9:C7:3D:4C:DF:F6 Authority key identifier: E7:F5:FA:46:E1:C6:B0:5C:BF:EC:97:69:21:0C:B1:51:47:AB:E2:31 Certificate issuer: /CN=e7f5fa46e1c6b05cbfec9769210cb15147abe231 Certificate serial: 019B53AB77CAA16E7E4B4433323F8A7BC9C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_X6RuHGsFy_7JdpIQyxUUer4jE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft Manifest number: 1722 Signing time: Thu 25 Dec 2025 04:01:44 +0000 Manifest this update: Thu 25 Dec 2025 04:01:44 +0000 Manifest next update: Fri 26 Dec 2025 04:01:44 +0000 Files and hashes: 1: 5_X6RuHGsFy_7JdpIQyxUUer4jE.crl (hash: c0SKxmvIu4398aRTEKbm9k6pakpGGllzbzU0gMWu50g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft rsync://rpki.ripe.net/repository/DEFAULT/5_X6RuHGsFy_7JdpIQyxUUer4jE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ab:77:ca:a1:6e:7e:4b:44:33:32:3f:8a:7b:c9:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7f5fa46e1c6b05cbfec9769210cb15147abe231 Validity Not Before: Dec 25 04:01:44 2025 GMT Not After : Dec 26 04:01:44 2025 GMT Subject: CN=1995b60b3acf4b8df4c3be7862a1c9c73d4cdff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ab:43:4c:3c:74:d8:69:a5:18:df:62:0e:ce: 49:64:7a:aa:58:ae:ee:17:97:a2:0d:bd:40:bc:26: 36:04:7a:e7:74:e2:ce:db:2f:0e:13:4f:b3:b3:fa: 42:b5:a9:19:15:2c:a0:09:e3:2a:f5:f4:ed:80:ae: 60:e2:87:37:84:30:e8:d6:2f:d3:d2:93:e2:1d:72: cb:d8:da:e1:47:a1:32:a0:44:3f:7e:f7:93:00:47: 3a:1e:14:bb:a0:b7:16:7e:63:df:39:58:13:05:9c: 46:5d:1e:c0:6c:a5:02:eb:8f:8d:96:95:38:8a:8f: 51:b5:89:3b:e3:42:e9:1c:0a:de:a1:95:0b:0d:cb: 62:ab:2f:72:24:8d:71:ac:db:ac:1c:85:9a:e2:9a: 58:10:3e:83:07:53:ba:93:d0:10:65:7d:22:03:27: 82:69:71:e0:2d:e8:56:66:32:db:ed:ae:be:cd:b6: 2d:13:16:79:00:56:63:25:b0:46:56:d0:f1:ef:81: 68:48:ac:72:21:81:0e:94:a9:24:8a:c0:0a:03:af: 3a:ca:cd:be:a9:65:ee:14:34:a7:7b:9b:59:94:a5: 8e:44:ed:77:f1:01:77:70:7e:56:3e:e7:9b:56:be: a3:20:ae:ba:ba:01:7f:40:35:2b:df:b6:a9:5c:a9: 98:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:95:B6:0B:3A:CF:4B:8D:F4:C3:BE:78:62:A1:C9:C7:3D:4C:DF:F6 X509v3 Authority Key Identifier: keyid:E7:F5:FA:46:E1:C6:B0:5C:BF:EC:97:69:21:0C:B1:51:47:AB:E2:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_X6RuHGsFy_7JdpIQyxUUer4jE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:63:d3:eb:0f:1c:9f:0b:0d:9e:ca:93:5b:44:c4:d5:f3:99: 54:15:96:63:70:95:f0:8e:4c:4b:09:9a:d9:cc:65:6b:a3:5b: a2:65:76:0c:ea:c8:de:79:2f:2f:a1:c5:35:09:95:bf:27:3a: 6f:a8:52:1f:38:8a:a3:9c:df:bd:52:e4:90:8a:9f:ac:f2:2a: de:3a:87:e4:05:07:03:a8:eb:d1:35:b8:92:1a:19:c5:10:0c: 46:b0:07:8f:e9:d9:8a:c8:3f:e5:14:2e:6b:59:7a:91:d4:18: d9:ad:14:c7:f9:f1:c2:d0:b0:84:8a:30:39:3f:70:52:81:e4: 19:73:42:e9:28:85:44:70:15:a7:b3:23:76:f8:66:e5:b2:2e: 32:90:64:1f:bb:47:7e:6e:6b:6e:5d:3a:a7:10:0d:61:cf:79: 91:a3:a9:07:98:8d:be:43:d6:89:fa:61:0f:63:c2:f9:76:24: a5:62:3b:e4:2f:5e:ae:32:bd:68:f1:69:47:10:e0:72:ae:88: 2e:97:57:55:5e:a3:0a:17:74:3e:8a:93:1d:ee:90:e6:5d:80: a3:e6:95:7e:9e:95:1d:41:b8:f6:57:93:70:06:d1:df:46:5e: a3:62:0a:32:5a:04:14:b1:dc:15:84:a2:f5:55:7d:4a:6b:0e: bf:50:b5:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTq3fKoW5+S0QzMj+Ke8nEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3ZjVmYTQ2ZTFjNmIwNWNiZmVjOTc2OTIxMGNiMTUxNDdh YmUyMzEwHhcNMjUxMjI1MDQwMTQ0WhcNMjUxMjI2MDQwMTQ0WjAzMTEwLwYDVQQD EygxOTk1YjYwYjNhY2Y0YjhkZjRjM2JlNzg2MmExYzljNzNkNGNkZmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1atDTDx02GmlGN9iDs5JZHqqWK7u F5eiDb1AvCY2BHrndOLO2y8OE0+zs/pCtakZFSygCeMq9fTtgK5g4oc3hDDo1i/T 0pPiHXLL2NrhR6EyoEQ/fveTAEc6HhS7oLcWfmPfOVgTBZxGXR7AbKUC64+NlpU4 io9RtYk740LpHAreoZULDctiqy9yJI1xrNusHIWa4ppYED6DB1O6k9AQZX0iAyeC aXHgLehWZjLb7a6+zbYtExZ5AFZjJbBGVtDx74FoSKxyIYEOlKkkisAKA686ys2+ qWXuFDSne5tZlKWORO138QF3cH5WPuebVr6jIK66ugF/QDUr37apXKmYawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBmVtgs6z0uN9MO+eGKhycc9TN/2MB8GA1UdIwQY MBaAFOf1+kbhxrBcv+yXaSEMsVFHq+IxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNV9YNlJ1SEdzRnlfN0pkcElReXhVVWVyNGpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi84MDQzMjItNmY4YS00NGJiLTg5MmMt MGM0MTdlZmY0NzIwLzEvNV9YNlJ1SEdzRnlfN0pkcElReXhVVWVyNGpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi84MDQzMjItNmY4YS00NGJiLTg5MmMtMGM0MTdlZmY0NzIw LzEvNV9YNlJ1SEdzRnlfN0pkcElReXhVVWVyNGpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM2PT6w8c nwsNnsqTW0TE1fOZVBWWY3CV8I5MSwma2cxla6NbomV2DOrI3nkvL6HFNQmVvyc6 b6hSHziKo5zfvVLkkIqfrPIq3jqH5AUHA6jr0TW4khoZxRAMRrAHj+nZisg/5RQu a1l6kdQY2a0Ux/nxwtCwhIowOT9wUoHkGXNC6SiFRHAVp7Mjdvhm5bIuMpBkH7tH fm5rbl06pxANYc95kaOpB5iNvkPWifphD2PC+XYkpWI75C9erjK9aPFpRxDgcq6I LpdXVV6jChd0PoqTHe6Q5l2Ao+aVfp6VHUG49leTcAbR30Zeo2IKMloEFLHcFYSi 9VV9SmsOv1C1tw== -----END CERTIFICATE-----Generated at Thu Dec 25 13:04:05 2025 by rpki-client