This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft File: 5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft (raw, json) Hash identifier: Z48zMokDKpnH8bUbRhTNOOkTGABTbbiWLMVysb0aH7I= Subject key identifier: 1F:80:11:EF:A7:A2:AC:B4:30:2C:AF:05:EE:55:CA:9A:A2:FC:7F:D1 Authority key identifier: E4:95:AC:BA:FE:46:EF:2F:4D:6C:51:FC:F2:3B:D7:2F:63:9C:FD:0B Certificate issuer: /CN=e495acbafe46ef2f4d6c51fcf23bd72f639cfd0b Certificate serial: 019B3344B7E77B57E563DEF5BC84174D0247 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft Manifest number: 0A3D Signing time: Thu 18 Dec 2025 21:01:40 +0000 Manifest this update: Thu 18 Dec 2025 21:01:40 +0000 Manifest next update: Fri 19 Dec 2025 21:01:40 +0000 Files and hashes: 1: 5JWsuv5G7y9NbFH88jvXL2Oc_Qs.crl (hash: sNtvPouNHD9M89MQu5y+8ztwkxMpY5MehnJ4wQOK23E=) 2: xKaI03GURyzSZb-rRcYioTYAybk.roa (hash: HlTvUY61ftuf4HfBCvEW2aFKorP77hcqRc1NgwCXzCM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft rsync://rpki.ripe.net/repository/DEFAULT/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:b7:e7:7b:57:e5:63:de:f5:bc:84:17:4d:02:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e495acbafe46ef2f4d6c51fcf23bd72f639cfd0b Validity Not Before: Dec 18 21:01:40 2025 GMT Not After : Dec 19 21:01:40 2025 GMT Subject: CN=1f8011efa7a2acb4302caf05ee55ca9aa2fc7fd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:aa:be:78:f1:c1:af:91:f0:0e:0c:d1:ca:47: 1f:06:0c:e9:76:b2:c7:57:80:a0:34:22:30:33:8f: 37:51:69:1f:6d:de:ea:f7:11:23:56:9e:35:5b:5e: 9a:25:96:58:04:17:81:a6:ef:55:c1:23:95:30:17: 45:a6:d9:86:15:4e:97:33:58:b6:2b:62:9a:75:f5: cc:ff:31:e6:a1:10:41:5c:f3:43:ca:bc:ef:27:88: 1b:26:fb:49:90:5b:37:75:5e:f3:62:4a:5d:ff:cd: 65:b9:5d:35:dc:22:c1:16:da:39:15:34:e1:c5:93: 34:ee:ac:42:a0:10:bd:5b:ce:d9:31:83:a1:e7:81: 63:ef:84:8f:28:6c:63:3b:57:7e:1d:aa:66:51:f6: 61:34:0c:ee:64:49:a7:9c:ef:3f:58:a6:48:4e:3f: 0b:0a:93:b5:57:96:26:3a:2e:03:cd:b1:67:1f:8d: c2:cc:6b:1e:66:c3:57:bf:7f:fc:58:39:de:22:8f: c9:d0:42:aa:e2:d7:58:b9:df:d6:c6:84:34:6e:40: 60:0d:61:ed:08:18:6a:7c:e8:ef:e6:3d:42:b9:65: 02:7f:24:14:29:eb:61:18:46:8e:a3:61:47:19:17: 58:8f:42:b4:6f:78:d2:4f:a8:e3:e3:82:af:d3:51: eb:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:80:11:EF:A7:A2:AC:B4:30:2C:AF:05:EE:55:CA:9A:A2:FC:7F:D1 X509v3 Authority Key Identifier: keyid:E4:95:AC:BA:FE:46:EF:2F:4D:6C:51:FC:F2:3B:D7:2F:63:9C:FD:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:32:a4:0d:51:89:6e:af:45:b1:3a:16:c0:00:b5:87:75:8c: 74:b4:f8:e2:f2:9f:db:e1:cd:86:42:4d:03:23:63:5c:f6:cd: a8:a7:15:c8:aa:92:a9:25:d6:b2:ce:9d:3a:ce:94:99:36:62: 14:a9:e6:1b:82:2b:f4:a6:6e:12:a0:f6:54:f1:62:ca:b0:53: d8:4b:e4:5c:d1:a9:c6:64:97:c3:a1:f4:2d:78:c2:9f:6e:27: 56:9e:1a:65:76:90:13:55:ff:7a:a1:bd:03:f9:77:ed:4e:b3: dc:61:22:ed:a0:fd:41:eb:e3:ed:b7:10:d5:a3:af:34:01:6d: 19:f5:98:76:5f:fd:77:36:5b:95:aa:b5:e8:f1:c4:1b:17:0a: ca:cf:94:3d:e4:a1:85:2c:bc:26:16:67:45:b7:da:e7:ec:c0: 20:3b:a9:f8:a7:55:4d:63:7c:56:32:15:dd:1e:25:c7:cb:dd: 12:bb:47:26:8f:1b:a5:81:14:99:c4:08:6a:b4:61:3f:8c:bb: a4:ed:eb:e1:b2:62:51:af:de:13:8d:1a:ef:ea:a9:a1:01:52: 9c:9c:ae:27:e2:f3:6a:b2:53:69:80:76:e6:30:6d:15:d9:4c: 0d:0b:d2:82:14:e7:09:98:5e:73:7a:34:bf:97:01:eb:19:6c: 4b:6d:46:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRLfne1flY971vIQXTQJHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0OTVhY2JhZmU0NmVmMmY0ZDZjNTFmY2YyM2JkNzJmNjM5 Y2ZkMGIwHhcNMjUxMjE4MjEwMTQwWhcNMjUxMjE5MjEwMTQwWjAzMTEwLwYDVQQD EygxZjgwMTFlZmE3YTJhY2I0MzAyY2FmMDVlZTU1Y2E5YWEyZmM3ZmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Kq+ePHBr5HwDgzRykcfBgzpdrLH V4CgNCIwM483UWkfbd7q9xEjVp41W16aJZZYBBeBpu9VwSOVMBdFptmGFU6XM1i2 K2KadfXM/zHmoRBBXPNDyrzvJ4gbJvtJkFs3dV7zYkpd/81luV013CLBFto5FTTh xZM07qxCoBC9W87ZMYOh54Fj74SPKGxjO1d+HapmUfZhNAzuZEmnnO8/WKZITj8L CpO1V5YmOi4DzbFnH43CzGseZsNXv3/8WDneIo/J0EKq4tdYud/WxoQ0bkBgDWHt CBhqfOjv5j1CuWUCfyQUKethGEaOo2FHGRdYj0K0b3jST6jj44Kv01HrkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+AEe+noqy0MCyvBe5Vypqi/H/RMB8GA1UdIwQY MBaAFOSVrLr+Ru8vTWxR/PI71y9jnP0LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUpXc3V2NUc3eTlOYkZIODhqdlhMMk9jX1FzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy80NDA4NzctMzE5ZC00NjMwLWE2OTEt Nzk5MWI0ZTRiZmEyLzEvNUpXc3V2NUc3eTlOYkZIODhqdlhMMk9jX1FzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy80NDA4NzctMzE5ZC00NjMwLWE2OTEtNzk5MWI0ZTRiZmEy LzEvNUpXc3V2NUc3eTlOYkZIODhqdlhMMk9jX1FzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQjKkDVGJ bq9FsToWwAC1h3WMdLT44vKf2+HNhkJNAyNjXPbNqKcVyKqSqSXWss6dOs6UmTZi FKnmG4Ir9KZuEqD2VPFiyrBT2EvkXNGpxmSXw6H0LXjCn24nVp4aZXaQE1X/eqG9 A/l37U6z3GEi7aD9Qevj7bcQ1aOvNAFtGfWYdl/9dzZblaq16PHEGxcKys+UPeSh hSy8JhZnRbfa5+zAIDup+KdVTWN8VjIV3R4lx8vdErtHJo8bpYEUmcQIarRhP4y7 pO3r4bJiUa/eE40a7+qpoQFSnJyuJ+LzarJTaYB25jBtFdlMDQvSghTnCZhec3o0 v5cB6xlsS21GIw== -----END CERTIFICATE-----Generated at Fri Dec 19 03:09:02 2025 by rpki-client