This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft File: 5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft (raw, json) Hash identifier: dxNMznr7QT7XGyQ3x9Qk6+digW78tqh7Umll/z8kfwU= Subject key identifier: B1:E1:64:EC:5A:EA:1F:BA:EC:3B:88:9D:DC:65:09:81:69:00:75:C6 Authority key identifier: E6:6E:77:26:FF:53:A1:3C:80:CC:BC:A4:D5:D3:94:E4:E8:AE:F5:42 Certificate issuer: /CN=e66e7726ff53a13c80ccbca4d5d394e4e8aef542 Certificate serial: 019B7591B29F4C0C5F0AC921268AAFA9D906 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft Manifest number: 1216 Signing time: Wed 31 Dec 2025 18:00:41 +0000 Manifest this update: Wed 31 Dec 2025 18:00:41 +0000 Manifest next update: Thu 01 Jan 2026 18:00:41 +0000 Files and hashes: 1: 5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl (hash: 7dmIYwdZYcepO4aQOwSilq59ny0m3tQ2KHp67CPO6os=) 2: H6bhT27iuFLhHVqQgSnkWJ-ZJeU.roa (hash: i2LnQkjhZAFSNChfBlCEm3RTe0uFLiWtEs5W37IjKHk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:75:91:b2:9f:4c:0c:5f:0a:c9:21:26:8a:af:a9:d9:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e66e7726ff53a13c80ccbca4d5d394e4e8aef542 Validity Not Before: Dec 31 18:00:41 2025 GMT Not After : Jan 1 18:00:41 2026 GMT Subject: CN=b1e164ec5aea1fbaec3b889ddc650981690075c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:00:68:3c:93:35:1e:51:7e:19:33:70:49:a5: 8e:9e:61:61:cb:cc:a8:64:93:0a:02:0d:36:e5:80: 08:f8:d5:21:d6:d2:65:56:93:cc:79:b4:74:1c:61: ed:0a:e5:73:1d:32:5e:33:0b:b8:ba:35:f1:08:60: 21:ac:26:36:20:31:dc:d5:c9:93:3f:b6:38:64:91: 10:1d:48:d6:12:18:c0:39:52:ae:c2:b7:f5:c8:fe: 46:3f:b8:ad:a4:71:db:40:e2:5f:b8:02:2e:db:78: 3d:a4:68:8c:4f:c4:9e:cc:24:5b:90:8f:43:16:84: 88:fd:df:de:1e:cf:8d:a7:01:73:a1:ce:ca:a4:b2: 9b:2a:c8:a1:01:33:91:01:91:8c:c6:64:56:ba:a1: e9:5f:4a:35:0f:41:2b:59:a7:a0:21:22:c9:2e:b7: 9f:e4:97:be:ea:ee:65:27:e9:fa:66:df:dc:87:9e: 23:46:86:11:eb:d6:81:6a:d0:73:2f:44:dc:92:53: 45:1b:09:09:f1:f9:7a:01:7d:2a:6f:61:ac:b0:3c: 77:21:7e:0e:a2:00:24:97:af:54:af:08:37:0e:31: 4c:ae:2e:5f:43:9f:de:b3:99:98:f7:91:db:cd:f8: 33:fa:57:89:2f:e0:75:2b:4f:84:d2:16:2b:f5:42: d9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E1:64:EC:5A:EA:1F:BA:EC:3B:88:9D:DC:65:09:81:69:00:75:C6 X509v3 Authority Key Identifier: keyid:E6:6E:77:26:FF:53:A1:3C:80:CC:BC:A4:D5:D3:94:E4:E8:AE:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:8b:69:50:fd:f8:36:29:e2:9b:18:03:e0:06:73:33:41:7a: d7:2c:b8:59:95:f2:77:d6:17:9e:6a:2d:58:52:ec:72:d1:01: cf:df:ad:19:72:27:c2:1b:44:81:19:02:fd:e6:8e:8f:4d:3d: c0:bd:1c:b2:e7:1f:e5:54:14:3d:e4:69:ae:39:21:a1:56:2f: 56:20:e4:fb:ca:e6:f6:d8:f8:2c:09:4f:b7:6d:3a:b8:ce:57: 51:03:5b:05:3e:95:15:bd:61:52:10:83:20:63:91:49:72:0a: 77:21:d3:20:0f:17:3f:89:65:11:97:fb:25:07:15:22:f4:da: 66:10:20:32:e9:51:68:1a:43:5a:05:a3:f2:72:42:19:bd:b7: 3d:e0:84:c2:41:33:7f:0e:1a:19:6a:86:11:b9:60:5e:5d:64: 7e:50:55:6d:23:66:a7:b6:e7:75:26:db:d8:42:ef:00:4e:3c: fd:93:08:8a:08:5f:b1:a2:8d:a4:76:9a:e6:f0:b8:6c:df:47: c8:a8:10:fb:c7:a6:e3:c8:e6:e0:73:c2:a5:f9:49:fa:15:6b: c5:f7:f5:b5:b8:d2:e8:d5:5d:7a:88:5b:0e:82:91:28:79:ef: 6f:19:9e:a1:c1:94:90:5e:7a:16:92:ef:02:e1:ef:47:93:ca: aa:d7:bc:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt1kbKfTAxfCskhJoqvqdkGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2NmU3NzI2ZmY1M2ExM2M4MGNjYmNhNGQ1ZDM5NGU0ZThh ZWY1NDIwHhcNMjUxMjMxMTgwMDQxWhcNMjYwMTAxMTgwMDQxWjAzMTEwLwYDVQQD EyhiMWUxNjRlYzVhZWExZmJhZWMzYjg4OWRkYzY1MDk4MTY5MDA3NWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgBoPJM1HlF+GTNwSaWOnmFhy8yo ZJMKAg025YAI+NUh1tJlVpPMebR0HGHtCuVzHTJeMwu4ujXxCGAhrCY2IDHc1cmT P7Y4ZJEQHUjWEhjAOVKuwrf1yP5GP7itpHHbQOJfuAIu23g9pGiMT8SezCRbkI9D FoSI/d/eHs+NpwFzoc7KpLKbKsihATORAZGMxmRWuqHpX0o1D0ErWaegISLJLref 5Je+6u5lJ+n6Zt/ch54jRoYR69aBatBzL0TcklNFGwkJ8fl6AX0qb2GssDx3IX4O ogAkl69Urwg3DjFMri5fQ5/es5mY95Hbzfgz+leJL+B1K0+E0hYr9ULZ0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLHhZOxa6h+67DuIndxlCYFpAHXGMB8GA1UdIwQY MBaAFOZudyb/U6E8gMy8pNXTlOTorvVCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNW01M0p2OVRvVHlBekx5azFkT1U1T2l1OVVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8zMWIxMWYtMmI2Yi00MjUyLTk5MGIt NTE2Y2E4NGZlNWZlLzEvNW01M0p2OVRvVHlBekx5azFkT1U1T2l1OVVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8zMWIxMWYtMmI2Yi00MjUyLTk5MGItNTE2Y2E4NGZlNWZl LzEvNW01M0p2OVRvVHlBekx5azFkT1U1T2l1OVVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmotpUP34 NinimxgD4AZzM0F61yy4WZXyd9YXnmotWFLsctEBz9+tGXInwhtEgRkC/eaOj009 wL0csucf5VQUPeRprjkhoVYvViDk+8rm9tj4LAlPt206uM5XUQNbBT6VFb1hUhCD IGORSXIKdyHTIA8XP4llEZf7JQcVIvTaZhAgMulRaBpDWgWj8nJCGb23PeCEwkEz fw4aGWqGEblgXl1kflBVbSNmp7bndSbb2ELvAE48/ZMIighfsaKNpHaa5vC4bN9H yKgQ+8em48jm4HPCpflJ+hVrxff1tbjS6NVdeohbDoKRKHnvbxmeocGUkF56FpLv AuHvR5PKqte8ug== -----END CERTIFICATE-----Generated at Thu Jan 1 00:46:32 2026 by rpki-client