This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft File: 5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft (raw, json) Hash identifier: KMqTlMtRSTYcXB6bCNktij7XmwAr1hb8kimTfLDSRhI= Subject key identifier: 19:82:FF:6C:03:AC:82:EC:E8:53:0E:5A:94:5A:2E:67:DB:20:F1:5C Authority key identifier: E4:39:57:DE:BA:81:6C:96:00:CE:0A:4D:07:FC:A7:D3:06:EF:EE:61 Certificate issuer: /CN=e43957deba816c9600ce0a4d07fca7d306efee61 Certificate serial: 019B665590A35F7D8566801CE4ED22874EEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5DlX3rqBbJYAzgpNB_yn0wbv7mE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft Manifest number: 0253 Signing time: Sun 28 Dec 2025 19:00:42 +0000 Manifest this update: Sun 28 Dec 2025 19:00:42 +0000 Manifest next update: Mon 29 Dec 2025 19:00:42 +0000 Files and hashes: 1: 5DlX3rqBbJYAzgpNB_yn0wbv7mE.crl (hash: cnWnGyt2i96omo5V8pCv4m4O2m+lIku5ja0E4lKB3/I=) 2: NM7UvKaTOGBhqz3Waw4Aop_d3I8.roa (hash: CuECrw6IivHOvgLxpf0LZMc5frIWOtpPKmC4FcLgXSc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.crl rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft rsync://rpki.ripe.net/repository/DEFAULT/5DlX3rqBbJYAzgpNB_yn0wbv7mE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 19:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:55:90:a3:5f:7d:85:66:80:1c:e4:ed:22:87:4e:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e43957deba816c9600ce0a4d07fca7d306efee61 Validity Not Before: Dec 28 19:00:42 2025 GMT Not After : Dec 29 19:00:42 2025 GMT Subject: CN=1982ff6c03ac82ece8530e5a945a2e67db20f15c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:61:e7:fd:8b:b9:44:64:2c:08:51:9f:b3:53: 8a:bd:96:bc:d1:e3:59:0a:bb:ac:2b:3b:7a:d1:32: 79:09:23:8c:79:ac:0d:b6:68:81:b8:24:29:13:6a: a8:7b:6c:57:8a:cb:32:bc:70:9f:2c:d3:f0:fa:28: ec:be:7a:39:7f:5e:c2:ba:71:d2:70:99:75:1c:df: 83:73:d8:c7:62:34:c0:44:91:67:09:b2:f7:3b:c6: 9c:50:40:f0:d0:ba:ad:52:41:5e:7a:d8:e4:47:98: 34:10:f6:89:ba:40:be:a7:c2:24:cb:21:76:14:a7: 47:8c:29:53:3d:d0:3d:d4:20:a5:92:4f:96:52:4c: 4f:df:2a:ed:b0:d3:01:ad:2e:9d:56:ec:ca:f7:57: c1:24:87:3c:20:dd:a2:38:30:ca:9c:af:36:18:0f: d5:8d:66:ac:47:8e:6a:07:1d:02:91:48:26:b1:f4: 21:59:ce:c5:d3:4f:50:2d:f3:b9:a9:2f:be:44:04: 33:aa:41:54:36:f8:33:12:0b:77:af:29:ac:60:33: 55:8b:c6:c5:8f:e4:8d:b4:0e:45:17:60:cd:ef:7b: 2c:16:a4:47:cd:3f:9a:d4:41:19:34:2e:ee:8e:4a: a2:70:5b:0a:33:48:c0:7b:3b:d4:6a:59:bf:65:d7: 97:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:82:FF:6C:03:AC:82:EC:E8:53:0E:5A:94:5A:2E:67:DB:20:F1:5C X509v3 Authority Key Identifier: keyid:E4:39:57:DE:BA:81:6C:96:00:CE:0A:4D:07:FC:A7:D3:06:EF:EE:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5DlX3rqBbJYAzgpNB_yn0wbv7mE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:3b:a3:ea:29:70:c2:b7:6c:54:1c:45:a5:2f:8a:f5:3d:eb: f4:b1:3b:b4:7a:08:52:5c:51:b6:f4:7e:3a:13:ae:8b:07:1c: ea:50:6f:41:9a:8d:49:60:ee:3a:29:15:4a:4e:b8:7e:4a:df: d7:cd:7e:12:0b:ef:aa:de:dc:75:a6:15:0d:90:3b:bf:05:ee: 9b:e0:59:fb:2e:62:2a:f7:3e:dd:b6:d2:9b:62:a8:a0:1c:08: e7:1a:cd:67:e0:c4:d2:95:85:34:01:a2:b6:40:6e:16:95:7a: 49:5a:fa:fb:4f:55:e2:24:47:88:cd:d6:10:9d:78:ab:73:f1: 1a:84:36:aa:e7:f9:e2:0c:7c:24:8f:29:a3:d2:27:01:69:00: 57:8d:bc:36:ff:cd:83:c0:ab:c9:55:84:8d:b8:20:bc:af:be: 5a:a0:ee:5e:82:89:25:77:97:0b:fa:9a:e1:8e:5f:ea:23:a1: ab:e8:d9:e4:35:b0:d5:30:05:9c:89:1c:00:59:aa:26:ec:a4: d5:c0:3d:cd:36:1c:e6:a7:33:0c:83:36:56:e4:c2:72:97:31: 2b:fb:a3:af:62:46:7c:97:9c:60:92:39:8f:ef:59:c0:45:a8: df:c3:b9:2e:d9:92:26:dc:27:6d:f0:76:9f:ab:00:55:2c:52: 32:7e:bd:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmVZCjX32FZoAc5O0ih07uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0Mzk1N2RlYmE4MTZjOTYwMGNlMGE0ZDA3ZmNhN2QzMDZl ZmVlNjEwHhcNMjUxMjI4MTkwMDQyWhcNMjUxMjI5MTkwMDQyWjAzMTEwLwYDVQQD EygxOTgyZmY2YzAzYWM4MmVjZTg1MzBlNWE5NDVhMmU2N2RiMjBmMTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGHn/Yu5RGQsCFGfs1OKvZa80eNZ CrusKzt60TJ5CSOMeawNtmiBuCQpE2qoe2xXissyvHCfLNPw+ijsvno5f17CunHS cJl1HN+Dc9jHYjTARJFnCbL3O8acUEDw0LqtUkFeetjkR5g0EPaJukC+p8IkyyF2 FKdHjClTPdA91CClkk+WUkxP3yrtsNMBrS6dVuzK91fBJIc8IN2iODDKnK82GA/V jWasR45qBx0CkUgmsfQhWc7F009QLfO5qS++RAQzqkFUNvgzEgt3rymsYDNVi8bF j+SNtA5FF2DN73ssFqRHzT+a1EEZNC7ujkqicFsKM0jAezvUalm/ZdeXCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBmC/2wDrILs6FMOWpRaLmfbIPFcMB8GA1UdIwQY MBaAFOQ5V966gWyWAM4KTQf8p9MG7+5hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNURsWDNycUJiSllBemdwTkJfeW4wd2J2N21FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9kOGEwMjQtNmMwNi00Zjk4LWE4MzQt ZTYzMzYyMDk4YzcwLzEvNURsWDNycUJiSllBemdwTkJfeW4wd2J2N21FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9kOGEwMjQtNmMwNi00Zjk4LWE4MzQtZTYzMzYyMDk4Yzcw LzEvNURsWDNycUJiSllBemdwTkJfeW4wd2J2N21FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsTuj6ilw wrdsVBxFpS+K9T3r9LE7tHoIUlxRtvR+OhOuiwcc6lBvQZqNSWDuOikVSk64fkrf 181+Egvvqt7cdaYVDZA7vwXum+BZ+y5iKvc+3bbSm2KooBwI5xrNZ+DE0pWFNAGi tkBuFpV6SVr6+09V4iRHiM3WEJ14q3PxGoQ2quf54gx8JI8po9InAWkAV428Nv/N g8CryVWEjbggvK++WqDuXoKJJXeXC/qa4Y5f6iOhq+jZ5DWw1TAFnIkcAFmqJuyk 1cA9zTYc5qczDIM2VuTCcpcxK/ujr2JGfJecYJI5j+9ZwEWo38O5LtmSJtwnbfB2 n6sAVSxSMn69zg== -----END CERTIFICATE-----Generated at Sun Dec 28 23:37:38 2025 by rpki-client