This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft File: 5TrZtDK7g9FBxIDe54vDX_R8tyw.mft (raw, json) Hash identifier: QXfHdKzCKs2omehOslgF8+hdEhEYekxhUdpevaWfO/Y= Subject key identifier: 1F:EC:F2:0A:39:66:C3:2B:FD:C2:7B:47:67:68:35:05:62:38:41:59 Authority key identifier: E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C Certificate issuer: /CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c Certificate serial: 019B3CEC4F57F6205EEBD495D714BEE095F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 18:01:18 +0000 Manifest this update: Sat 20 Dec 2025 18:01:18 +0000 Manifest next update: Sun 21 Dec 2025 18:01:18 +0000 Files and hashes: 1: 5TrZtDK7g9FBxIDe54vDX_R8tyw.crl (hash: 2hMJTAhRyKv1zP0oFVJeqG12fktETlm6d+oO1xxCk2g=) 2: FR3a7fbq59iIo0zAlvy5kzi1iZU.roa (hash: Z35c/JbC3hZCBf85VdNEpndC+c0TUxZMQxPjJSIsAQ0=) 3: suPxSfpNrh7z5_Ta2x6TjwnQ2sY.roa (hash: jrCuL3fpLVTl6VSsAmka/tgQrfuz/laa7SHWrZ9+ExE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:4f:57:f6:20:5e:eb:d4:95:d7:14:be:e0:95:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c Validity Not Before: Dec 20 18:01:18 2025 GMT Not After : Dec 21 18:01:18 2025 GMT Subject: CN=1fecf20a3966c32bfdc27b476768350562384159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:12:17:cb:32:c9:8a:c0:f5:0a:4a:53:14:cb: e3:cf:76:55:56:7d:70:45:1b:8d:8e:6a:53:b4:ef: f6:81:46:31:6b:63:e2:47:eb:81:c3:67:2c:c7:0c: fc:7f:9a:81:7a:3b:da:51:30:6e:ba:85:65:f9:43: 38:76:5c:8d:39:db:c5:37:46:f1:ee:2f:c1:d4:99: 1c:88:e9:dc:b8:58:a8:87:e4:99:ce:dd:a8:f7:e6: 87:de:cc:dd:f7:b6:51:b0:56:0f:ce:99:bb:6c:58: a2:bb:a4:80:98:e4:a6:03:71:ab:08:68:dc:91:b9: f9:99:8f:8e:ea:f9:92:b1:6a:12:ef:f6:76:b3:3c: 03:ea:1b:b0:17:f6:fc:e9:d1:7c:f4:ea:a3:f6:a0: e0:a0:fa:a7:22:54:7e:dd:7e:3e:13:6a:03:12:71: fd:9f:07:f4:be:c9:bc:03:b9:53:e6:cb:11:48:32: d1:be:e9:9a:55:c9:52:7c:94:75:21:6e:f5:7f:21: 6e:49:b6:25:fe:83:bf:02:29:d6:37:77:a9:17:bf: 7c:33:c6:30:9f:7e:80:75:d6:ab:96:c4:ce:0b:68: f7:13:04:05:4f:d1:61:e5:af:df:72:e4:e5:34:e5: d1:32:80:95:a7:43:8a:d5:cc:e5:6a:5b:09:16:f3: f5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:EC:F2:0A:39:66:C3:2B:FD:C2:7B:47:67:68:35:05:62:38:41:59 X509v3 Authority Key Identifier: keyid:E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:31:4b:41:03:14:e2:a0:c6:9e:9a:71:9c:60:46:e1:19:5a: 0b:a2:f0:94:30:a7:e5:46:41:f8:26:a6:76:e7:ad:e2:aa:c2: 79:5f:b5:88:5f:23:47:1f:23:b8:e1:da:ef:05:e8:1b:4a:c5: 08:59:52:a3:47:3d:6f:4b:0d:95:58:06:de:f8:86:66:a4:40: 1e:ed:e6:44:12:0d:c2:7b:58:a9:98:fe:ba:f1:6e:03:a4:f4: 98:8c:c1:69:5a:21:4d:3a:a6:f3:11:5f:c7:c9:4e:21:be:01: 34:a7:38:ac:d8:f1:2a:4d:a4:12:c7:52:7a:7a:c0:db:f8:76: 1f:1d:6f:32:c6:46:17:d6:86:44:1e:2d:b3:2b:ec:5a:0a:5c: ea:6b:97:77:ea:86:51:d8:a9:67:61:f5:13:f0:6d:13:dc:1b: f5:3e:4a:f8:c2:b7:ac:bb:5c:e0:1f:d0:b5:0a:08:3c:21:71: 1f:08:8e:7b:b6:5e:6f:5f:fe:fa:72:e9:89:4d:b4:f3:86:c4: 46:ea:f5:56:d9:42:c1:6a:8f:52:31:e9:c2:e3:1d:86:e2:34: 30:2e:a7:eb:69:df:1b:22:0e:93:3b:36:8b:53:3d:69:e5:52: b2:63:f3:5d:c3:41:6a:d4:4f:1c:63:b8:cb:4f:01:69:53:45: 2c:39:b9:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87E9X9iBe69SV1xS+4JX4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1M2FkOWI0MzJiYjgzZDE0MWM0ODBkZWU3OGJjMzVmZjQ3 Y2I3MmMwHhcNMjUxMjIwMTgwMTE4WhcNMjUxMjIxMTgwMTE4WjAzMTEwLwYDVQQD EygxZmVjZjIwYTM5NjZjMzJiZmRjMjdiNDc2NzY4MzUwNTYyMzg0MTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBIXyzLJisD1CkpTFMvjz3ZVVn1w RRuNjmpTtO/2gUYxa2PiR+uBw2csxwz8f5qBejvaUTBuuoVl+UM4dlyNOdvFN0bx 7i/B1JkciOncuFioh+SZzt2o9+aH3szd97ZRsFYPzpm7bFiiu6SAmOSmA3GrCGjc kbn5mY+O6vmSsWoS7/Z2szwD6huwF/b86dF89Oqj9qDgoPqnIlR+3X4+E2oDEnH9 nwf0vsm8A7lT5ssRSDLRvumaVclSfJR1IW71fyFuSbYl/oO/AinWN3epF798M8Yw n36AddarlsTOC2j3EwQFT9Fh5a/fcuTlNOXRMoCVp0OK1czlalsJFvP1kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB/s8go5ZsMr/cJ7R2doNQViOEFZMB8GA1UdIwQY MBaAFOU62bQyu4PRQcSA3ueLw1/0fLcsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVRyWnRESzdnOUZCeElEZTU0dkRYX1I4dHl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9lOGJkMGItZjM2ZC00NWY1LWI5ODUt MDliYjUyODc1MzFiLzEvNVRyWnRESzdnOUZCeElEZTU0dkRYX1I4dHl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9lOGJkMGItZjM2ZC00NWY1LWI5ODUtMDliYjUyODc1MzFi LzEvNVRyWnRESzdnOUZCeElEZTU0dkRYX1I4dHl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADTFLQQMU 4qDGnppxnGBG4RlaC6LwlDCn5UZB+Camduet4qrCeV+1iF8jRx8juOHa7wXoG0rF CFlSo0c9b0sNlVgG3viGZqRAHu3mRBINwntYqZj+uvFuA6T0mIzBaVohTTqm8xFf x8lOIb4BNKc4rNjxKk2kEsdSenrA2/h2Hx1vMsZGF9aGRB4tsyvsWgpc6muXd+qG UdipZ2H1E/BtE9wb9T5K+MK3rLtc4B/QtQoIPCFxHwiOe7Zeb1/++nLpiU2084bE Rur1VtlCwWqPUjHpwuMdhuI0MC6n62nfGyIOkzs2i1M9aeVSsmPzXcNBatRPHGO4 y08BaVNFLDm5wA== -----END CERTIFICATE-----Generated at Sat Dec 20 21:32:32 2025 by rpki-client