This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft File: 5wn3YuCC6tPW1-TK4p77tNEvV14.mft (raw, json) Hash identifier: juoUkPenuWhaYkrRRqPBryV6DeR4fk/yx+59mPF0ToA= Subject key identifier: 0B:CF:BF:28:3D:8D:B2:CD:F4:FE:5E:6D:0D:DC:C9:95:6C:4D:CA:86 Authority key identifier: E7:09:F7:62:E0:82:EA:D3:D6:D7:E4:CA:E2:9E:FB:B4:D1:2F:57:5E Certificate issuer: /CN=e709f762e082ead3d6d7e4cae29efbb4d12f575e Certificate serial: 019B3EA343D6855A213433C631A999F3E9D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft Manifest number: 0DE0 Signing time: Sun 21 Dec 2025 02:00:45 +0000 Manifest this update: Sun 21 Dec 2025 02:00:45 +0000 Manifest next update: Mon 22 Dec 2025 02:00:45 +0000 Files and hashes: 1: 0I90jYLDsjsh8A1WdLN05NbEjj4.roa (hash: Kf+mfo5G5myFzzGKcZGygmTNr3GGZjTxsLuEcsJyKBc=) 2: 5wn3YuCC6tPW1-TK4p77tNEvV14.crl (hash: VvwhPHloknUOic+y/Oj6HLaPli/c5/21ddRGQrymR3Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 02:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:43:d6:85:5a:21:34:33:c6:31:a9:99:f3:e9:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e709f762e082ead3d6d7e4cae29efbb4d12f575e Validity Not Before: Dec 21 02:00:45 2025 GMT Not After : Dec 22 02:00:45 2025 GMT Subject: CN=0bcfbf283d8db2cdf4fe5e6d0ddcc9956c4dca86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:af:e7:52:cf:88:ef:a3:b2:bd:a5:5a:a9:9e: e0:88:8c:f4:d7:93:f1:0d:36:5e:75:80:e1:30:61: c0:82:e3:18:59:c5:8e:81:b4:0c:a6:95:1b:8d:bd: 30:ce:ae:33:29:95:92:4a:43:84:cb:76:c4:d1:e1: 21:f4:bc:f0:94:a2:c1:98:23:d2:57:11:c4:fc:48: 40:84:b2:98:48:e0:45:a5:a9:fe:8d:dd:f9:1e:b8: 4a:97:7c:95:39:0b:c5:8c:31:12:52:82:8b:99:2f: 2b:22:90:99:97:e5:d2:3b:ae:d6:18:07:f7:53:3b: d3:b7:fc:b6:d6:fa:d8:57:12:45:73:ee:08:3c:18: f1:28:03:2c:18:21:05:8e:cf:fd:75:c2:41:d1:63: 1a:1d:d7:63:fa:14:da:0c:30:98:db:73:76:27:db: bf:90:57:8e:02:80:e4:0a:68:fa:32:27:84:6a:19: 5e:aa:bf:0c:29:4e:a4:df:f4:a1:85:b6:31:5d:63: 18:fe:ed:86:f1:4b:0b:f3:f8:fd:2f:0d:6b:b7:fe: 23:b7:e1:5f:93:5f:46:f6:63:db:e1:1d:cb:07:64: 33:a0:a6:4a:b4:0b:12:9d:60:6b:4e:fa:9b:6c:b0: 0d:a1:77:ca:16:a9:40:d5:5d:22:55:e8:80:04:1a: 72:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:CF:BF:28:3D:8D:B2:CD:F4:FE:5E:6D:0D:DC:C9:95:6C:4D:CA:86 X509v3 Authority Key Identifier: keyid:E7:09:F7:62:E0:82:EA:D3:D6:D7:E4:CA:E2:9E:FB:B4:D1:2F:57:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:22:af:d8:9c:85:35:fb:2c:53:7c:16:49:8b:9b:7e:83:7b: d9:49:a2:ce:0e:50:d7:ab:a0:f3:89:89:43:37:a3:d1:96:63: 4d:9f:70:2c:25:6c:62:c0:aa:04:59:b5:3b:c0:ce:00:06:b3: c9:07:a2:43:64:26:4e:12:f8:05:df:59:e9:25:fa:0a:24:90: 40:89:b4:ea:55:05:e3:dd:25:22:95:a9:21:05:61:30:8b:71: 48:44:bc:c6:af:4a:1d:42:7c:25:ac:5f:07:20:0f:14:5e:41: b4:f8:8e:d3:f1:ed:49:f9:bf:0e:d7:f4:80:bf:eb:6a:02:58: fd:90:e4:86:d3:b9:e5:7c:c7:c2:64:42:0d:82:76:93:6b:aa: 94:a1:09:42:c8:3d:a6:00:14:97:e2:de:a4:af:89:4f:56:a9: 27:be:da:27:54:a5:d0:fc:77:4a:60:39:21:37:8f:0c:cf:ee: 7a:e9:89:65:64:f0:3b:b2:f7:ed:1f:43:1b:14:db:e6:06:fa: 66:52:28:98:d9:a0:9b:3f:82:7a:c6:85:43:b2:f2:c3:db:5a: 2f:36:47:50:33:02:ed:e9:4d:e0:07:09:d7:84:4e:49:bd:0a: b4:68:e7:53:38:70:1d:01:3e:00:aa:5f:c4:63:e8:da:66:ff: af:45:a2:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o0PWhVohNDPGMamZ8+nXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3MDlmNzYyZTA4MmVhZDNkNmQ3ZTRjYWUyOWVmYmI0ZDEy ZjU3NWUwHhcNMjUxMjIxMDIwMDQ1WhcNMjUxMjIyMDIwMDQ1WjAzMTEwLwYDVQQD EygwYmNmYmYyODNkOGRiMmNkZjRmZTVlNmQwZGRjYzk5NTZjNGRjYTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6/nUs+I76OyvaVaqZ7giIz015Px DTZedYDhMGHAguMYWcWOgbQMppUbjb0wzq4zKZWSSkOEy3bE0eEh9LzwlKLBmCPS VxHE/EhAhLKYSOBFpan+jd35HrhKl3yVOQvFjDESUoKLmS8rIpCZl+XSO67WGAf3 UzvTt/y21vrYVxJFc+4IPBjxKAMsGCEFjs/9dcJB0WMaHddj+hTaDDCY23N2J9u/ kFeOAoDkCmj6MieEahleqr8MKU6k3/ShhbYxXWMY/u2G8UsL8/j9Lw1rt/4jt+Ff k19G9mPb4R3LB2QzoKZKtAsSnWBrTvqbbLANoXfKFqlA1V0iVeiABBpyQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAvPvyg9jbLN9P5ebQ3cyZVsTcqGMB8GA1UdIwQY MBaAFOcJ92LggurT1tfkyuKe+7TRL1deMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXduM1l1Q0M2dFBXMS1USzRwNzd0TkV2VjE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wYmRhNGEtNWMxMC00NGRiLThmNjIt YWU0ZmE3ZjE3ZjljLzEvNXduM1l1Q0M2dFBXMS1USzRwNzd0TkV2VjE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8wYmRhNGEtNWMxMC00NGRiLThmNjItYWU0ZmE3ZjE3Zjlj LzEvNXduM1l1Q0M2dFBXMS1USzRwNzd0TkV2VjE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKCKv2JyF NfssU3wWSYubfoN72Umizg5Q16ug84mJQzej0ZZjTZ9wLCVsYsCqBFm1O8DOAAaz yQeiQ2QmThL4Bd9Z6SX6CiSQQIm06lUF490lIpWpIQVhMItxSES8xq9KHUJ8Jaxf ByAPFF5BtPiO0/HtSfm/Dtf0gL/ragJY/ZDkhtO55XzHwmRCDYJ2k2uqlKEJQsg9 pgAUl+LepK+JT1apJ77aJ1Sl0Px3SmA5ITePDM/ueumJZWTwO7L37R9DGxTb5gb6 ZlIomNmgmz+CesaFQ7Lyw9taLzZHUDMC7elN4AcJ14ROSb0KtGjnUzhwHQE+AKpf xGPo2mb/r0Wixg== -----END CERTIFICATE-----Generated at Sun Dec 21 11:05:15 2025 by rpki-client