This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft File: 5UGkwVK194bWI9hcQUZSmc3aM4k.mft (raw, json) Hash identifier: BKBToJtEjHvxzMSAK/rZlrc/JQpoSg4x1Egen6bHB9U= Subject key identifier: 12:FE:4C:06:9B:8E:6D:E1:C6:84:07:EE:D3:51:C3:65:A3:2C:67:06 Authority key identifier: E5:41:A4:C1:52:B5:F7:86:D6:23:D8:5C:41:46:52:99:CD:DA:33:89 Certificate issuer: /CN=e541a4c152b5f786d623d85c41465299cdda3389 Certificate serial: 019B45819E8B2688FAD83711FCC0143F9F65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UGkwVK194bWI9hcQUZSmc3aM4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft Manifest number: 178F Signing time: Mon 22 Dec 2025 10:01:21 +0000 Manifest this update: Mon 22 Dec 2025 10:01:21 +0000 Manifest next update: Tue 23 Dec 2025 10:01:21 +0000 Files and hashes: 1: 5UGkwVK194bWI9hcQUZSmc3aM4k.crl (hash: EYo2dl5wFmueFktWdQx9kzIeSVMOms65VmIVX5dy/to=) 2: kenow9ooVwL0t4IuHSVvvQIsN8M.roa (hash: tJkXtVd1TBPTWkBnhiKcyLiHlQeoQgvy5+UbWV83vUY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft rsync://rpki.ripe.net/repository/DEFAULT/5UGkwVK194bWI9hcQUZSmc3aM4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:81:9e:8b:26:88:fa:d8:37:11:fc:c0:14:3f:9f:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e541a4c152b5f786d623d85c41465299cdda3389 Validity Not Before: Dec 22 10:01:21 2025 GMT Not After : Dec 23 10:01:21 2025 GMT Subject: CN=12fe4c069b8e6de1c68407eed351c365a32c6706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f7:f6:79:ae:cc:a3:7e:45:d8:40:34:b4:a1: 80:a5:f0:e5:93:76:64:05:e4:fe:27:00:32:0c:1b: 4b:a0:e2:f1:e0:46:e6:cf:62:ac:a1:dc:fc:8b:0d: 18:83:d7:3f:e7:27:fd:77:ac:98:88:e9:f0:ae:9b: a0:b9:f5:b1:e1:d9:a0:76:11:97:ef:30:ce:3d:2e: 54:c1:d1:86:5c:6d:9e:98:10:a0:7f:c9:01:82:a6: 24:dc:a7:ca:07:68:90:79:ca:4b:70:14:c6:8a:76: b0:28:58:90:86:18:50:31:ed:9e:c5:12:dd:04:74: 06:00:65:0e:92:47:2f:f4:6f:96:49:e0:b6:52:18: 8d:34:dd:0d:33:1f:ff:9f:01:5c:43:c5:f2:30:52: f5:3f:7d:31:5e:e1:7f:a9:17:64:2f:ab:c9:32:7b: 53:5b:f8:a4:05:b4:f2:fa:54:34:3a:5e:7c:55:02: ca:ec:83:30:5f:b5:ae:0b:cd:c9:66:89:24:a5:13: 1a:b8:7c:56:5f:b3:5a:9a:d6:f5:3c:41:84:20:24: d8:9a:c5:50:db:27:63:69:50:3b:41:1f:58:6d:89: 49:1e:36:c7:9a:fa:09:e6:ea:d0:46:26:98:d1:30: 8a:51:08:66:da:7c:e0:02:fe:41:70:68:b9:87:82: ea:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:FE:4C:06:9B:8E:6D:E1:C6:84:07:EE:D3:51:C3:65:A3:2C:67:06 X509v3 Authority Key Identifier: keyid:E5:41:A4:C1:52:B5:F7:86:D6:23:D8:5C:41:46:52:99:CD:DA:33:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UGkwVK194bWI9hcQUZSmc3aM4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:f2:19:50:7c:9d:ad:8f:f3:d9:c5:e0:b0:65:a7:4d:d0:55: 3c:39:c1:61:9b:ed:12:08:59:e6:76:18:f2:cd:05:7a:ce:15: 1c:a6:50:84:f5:08:a6:bb:d1:42:db:67:70:cd:34:ec:34:f5: 20:bf:5d:85:25:46:b2:a6:ff:2c:df:35:31:c2:c9:e6:33:55: 7e:6f:95:5c:6f:92:1b:4a:a3:a7:14:75:e5:4e:c5:77:b1:55: 6e:d8:85:94:be:aa:91:68:61:7d:12:05:89:9c:34:ca:c5:ae: cb:31:83:44:58:fa:e9:da:72:3e:6f:09:31:04:2e:b9:9b:a2: 43:4e:86:f9:d0:c3:1d:b1:86:77:c7:05:95:14:10:28:66:ae: 86:7a:ca:62:3b:43:5b:77:7c:d3:2f:d5:43:48:82:36:2e:39: d5:cd:a1:0d:51:94:ed:ce:a6:b0:c5:20:15:60:c4:62:b4:f0: 59:59:48:44:9c:3b:f3:84:4e:53:de:f7:9c:44:c0:db:88:9c: 95:51:65:03:84:09:71:8c:f2:fc:9a:4e:7f:83:10:69:ea:cc: 9e:c3:43:71:0d:ba:e1:95:dc:3e:be:16:b1:68:9e:72:d4:1b: 23:96:ca:32:e0:ed:21:b7:b5:14:eb:25:be:e2:9d:fd:f7:0e: 9b:22:a3:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFgZ6LJoj62DcR/MAUP59lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NDFhNGMxNTJiNWY3ODZkNjIzZDg1YzQxNDY1Mjk5Y2Rk YTMzODkwHhcNMjUxMjIyMTAwMTIxWhcNMjUxMjIzMTAwMTIxWjAzMTEwLwYDVQQD EygxMmZlNGMwNjliOGU2ZGUxYzY4NDA3ZWVkMzUxYzM2NWEzMmM2NzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvf2ea7Mo35F2EA0tKGApfDlk3Zk BeT+JwAyDBtLoOLx4Ebmz2Ksodz8iw0Yg9c/5yf9d6yYiOnwrpugufWx4dmgdhGX 7zDOPS5UwdGGXG2emBCgf8kBgqYk3KfKB2iQecpLcBTGinawKFiQhhhQMe2exRLd BHQGAGUOkkcv9G+WSeC2UhiNNN0NMx//nwFcQ8XyMFL1P30xXuF/qRdkL6vJMntT W/ikBbTy+lQ0Ol58VQLK7IMwX7WuC83JZokkpRMauHxWX7Namtb1PEGEICTYmsVQ 2ydjaVA7QR9YbYlJHjbHmvoJ5urQRiaY0TCKUQhm2nzgAv5BcGi5h4LqXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBL+TAabjm3hxoQH7tNRw2WjLGcGMB8GA1UdIwQY MBaAFOVBpMFStfeG1iPYXEFGUpnN2jOJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVVHa3dWSzE5NGJXSTloY1FVWlNtYzNhTTRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9kNzEyNjktNGI1Ni00NTcyLWE3MTEt ZDg0ZWNiMjUwNWM0LzEvNVVHa3dWSzE5NGJXSTloY1FVWlNtYzNhTTRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9kNzEyNjktNGI1Ni00NTcyLWE3MTEtZDg0ZWNiMjUwNWM0 LzEvNVVHa3dWSzE5NGJXSTloY1FVWlNtYzNhTTRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP/IZUHyd rY/z2cXgsGWnTdBVPDnBYZvtEghZ5nYY8s0Fes4VHKZQhPUIprvRQttncM007DT1 IL9dhSVGsqb/LN81McLJ5jNVfm+VXG+SG0qjpxR15U7Fd7FVbtiFlL6qkWhhfRIF iZw0ysWuyzGDRFj66dpyPm8JMQQuuZuiQ06G+dDDHbGGd8cFlRQQKGauhnrKYjtD W3d80y/VQ0iCNi451c2hDVGU7c6msMUgFWDEYrTwWVlIRJw784ROU973nETA24ic lVFlA4QJcYzy/JpOf4MQaerMnsNDcQ264ZXcPr4WsWiectQbI5bKMuDtIbe1FOsl vuKd/fcOmyKjEQ== -----END CERTIFICATE-----Generated at Mon Dec 22 15:43:50 2025 by rpki-client