This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft File: 5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft (raw, json) Hash identifier: PL41wYn60R36StuFTQFr88IePle8kd47CmQAlHmJ5nc= Subject key identifier: 10:A0:28:5A:09:FC:55:F5:24:83:85:60:F2:31:14:E0:29:01:31:58 Authority key identifier: E4:39:57:DE:BA:81:6C:96:00:CE:0A:4D:07:FC:A7:D3:06:EF:EE:61 Certificate issuer: /CN=e43957deba816c9600ce0a4d07fca7d306efee61 Certificate serial: 019B5117C957087EB6BEC120A00144421A44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5DlX3rqBbJYAzgpNB_yn0wbv7mE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft Manifest number: 0248 Signing time: Wed 24 Dec 2025 16:01:11 +0000 Manifest this update: Wed 24 Dec 2025 16:01:11 +0000 Manifest next update: Thu 25 Dec 2025 16:01:11 +0000 Files and hashes: 1: 5DlX3rqBbJYAzgpNB_yn0wbv7mE.crl (hash: d9CfoDVdLE5tdxKUcGi+qDDrbo1IJUgjKXlM2Z14BQk=) 2: NM7UvKaTOGBhqz3Waw4Aop_d3I8.roa (hash: CuECrw6IivHOvgLxpf0LZMc5frIWOtpPKmC4FcLgXSc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.crl rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft rsync://rpki.ripe.net/repository/DEFAULT/5DlX3rqBbJYAzgpNB_yn0wbv7mE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:17:c9:57:08:7e:b6:be:c1:20:a0:01:44:42:1a:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e43957deba816c9600ce0a4d07fca7d306efee61 Validity Not Before: Dec 24 16:01:11 2025 GMT Not After : Dec 25 16:01:11 2025 GMT Subject: CN=10a0285a09fc55f524838560f23114e029013158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:32:a1:2f:54:39:20:80:bd:1e:6a:1c:8c:94: e9:62:0d:24:4b:b6:25:ca:88:ce:aa:04:ee:9b:e4: 45:27:48:8c:d9:19:9a:25:f2:90:4e:57:83:c7:64: 62:e5:3c:35:41:4c:f7:e8:3a:96:48:92:56:80:ae: 53:32:37:46:d8:de:90:ba:23:2a:89:7f:79:f1:2b: 72:1a:c9:5d:06:16:5f:cc:02:67:81:7c:44:05:10: 8b:b4:a5:2e:9c:ec:7e:00:12:aa:03:6c:c5:29:bb: cb:9a:6e:54:e7:7b:aa:b6:d3:b6:eb:66:0f:2f:3b: e7:fb:ea:ed:b3:4e:cf:cb:41:36:a1:91:4c:ce:91: fc:c1:14:23:d4:f1:83:6a:52:81:b4:cd:39:84:e4: 2e:22:90:21:7a:d3:d6:da:9f:96:e5:56:ac:01:8d: 5e:d9:4f:cb:7b:7a:4d:0d:e1:81:22:93:63:f9:85: 05:06:e4:0d:2d:0f:6a:d2:22:72:19:35:b3:a5:c3: 00:e8:f5:9a:e6:df:e2:b0:d5:4e:d8:86:e4:03:ac: 9c:cc:41:56:ee:be:31:d1:b2:cf:9c:78:b0:fb:d1: 80:c9:19:2d:b1:ba:40:dc:72:67:9b:7b:fc:04:73: 00:a1:bb:7d:fa:54:6d:2b:da:96:af:94:fd:d3:03: f6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A0:28:5A:09:FC:55:F5:24:83:85:60:F2:31:14:E0:29:01:31:58 X509v3 Authority Key Identifier: keyid:E4:39:57:DE:BA:81:6C:96:00:CE:0A:4D:07:FC:A7:D3:06:EF:EE:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5DlX3rqBbJYAzgpNB_yn0wbv7mE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:82:ab:e5:2e:e6:f1:b1:11:9f:28:8e:9e:5d:cc:59:2a:d9: d9:17:31:75:e0:0c:78:22:b8:19:cd:3f:58:d1:20:f2:40:68: 77:0a:b4:c6:00:e9:e4:bc:83:69:8e:b3:7c:b5:8a:50:c3:b3: eb:24:67:89:13:45:b9:f8:3a:60:51:11:d2:0f:41:54:9e:88: 06:12:b2:47:44:f7:35:03:30:f7:d5:3f:d3:b2:81:95:ac:65: 09:1d:63:05:ba:71:35:50:90:7b:32:c2:40:20:a7:97:d7:f3: ad:9d:42:33:df:a5:47:83:03:f6:f0:4f:4d:d8:d4:97:1c:7e: 6f:25:25:dc:b5:cd:e5:6e:b1:91:ef:04:ed:fd:23:b5:d2:8a: 6e:f7:01:b1:7a:39:e6:73:5a:c4:67:b6:4d:34:24:cb:9b:24: 2f:41:31:d3:3c:f4:81:c6:43:bb:17:49:13:34:65:90:51:16: ff:e7:4f:37:4c:a1:16:f7:45:67:d0:c5:9c:57:81:94:36:76: 36:31:74:76:50:c6:f5:7c:71:e4:89:46:f3:48:f7:cd:2c:f5: b1:90:7e:94:4d:4b:08:f7:a7:36:79:f6:dc:d3:04:a4:ac:5e: 8e:66:dc:74:dc:97:37:61:1a:d4:3d:34:97:0c:46:16:13:dd: b7:ef:b6:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRF8lXCH62vsEgoAFEQhpEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0Mzk1N2RlYmE4MTZjOTYwMGNlMGE0ZDA3ZmNhN2QzMDZl ZmVlNjEwHhcNMjUxMjI0MTYwMTExWhcNMjUxMjI1MTYwMTExWjAzMTEwLwYDVQQD EygxMGEwMjg1YTA5ZmM1NWY1MjQ4Mzg1NjBmMjMxMTRlMDI5MDEzMTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDKhL1Q5IIC9HmocjJTpYg0kS7Yl yojOqgTum+RFJ0iM2RmaJfKQTleDx2Ri5Tw1QUz36DqWSJJWgK5TMjdG2N6QuiMq iX958StyGsldBhZfzAJngXxEBRCLtKUunOx+ABKqA2zFKbvLmm5U53uqttO262YP Lzvn++rts07Py0E2oZFMzpH8wRQj1PGDalKBtM05hOQuIpAhetPW2p+W5VasAY1e 2U/Le3pNDeGBIpNj+YUFBuQNLQ9q0iJyGTWzpcMA6PWa5t/isNVO2IbkA6yczEFW 7r4x0bLPnHiw+9GAyRktsbpA3HJnm3v8BHMAobt9+lRtK9qWr5T90wP2iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBCgKFoJ/FX1JIOFYPIxFOApATFYMB8GA1UdIwQY MBaAFOQ5V966gWyWAM4KTQf8p9MG7+5hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNURsWDNycUJiSllBemdwTkJfeW4wd2J2N21FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9kOGEwMjQtNmMwNi00Zjk4LWE4MzQt ZTYzMzYyMDk4YzcwLzEvNURsWDNycUJiSllBemdwTkJfeW4wd2J2N21FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9kOGEwMjQtNmMwNi00Zjk4LWE4MzQtZTYzMzYyMDk4Yzcw LzEvNURsWDNycUJiSllBemdwTkJfeW4wd2J2N21FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj4Kr5S7m 8bERnyiOnl3MWSrZ2RcxdeAMeCK4Gc0/WNEg8kBodwq0xgDp5LyDaY6zfLWKUMOz 6yRniRNFufg6YFER0g9BVJ6IBhKyR0T3NQMw99U/07KBlaxlCR1jBbpxNVCQezLC QCCnl9fzrZ1CM9+lR4MD9vBPTdjUlxx+byUl3LXN5W6xke8E7f0jtdKKbvcBsXo5 5nNaxGe2TTQky5skL0Ex0zz0gcZDuxdJEzRlkFEW/+dPN0yhFvdFZ9DFnFeBlDZ2 NjF0dlDG9Xxx5IlG80j3zSz1sZB+lE1LCPenNnn23NMEpKxejmbcdNyXN2Ea1D00 lwxGFhPdt++2/w== -----END CERTIFICATE-----Generated at Wed Dec 24 20:31:49 2025 by rpki-client