This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft File: 5c949fM57nd9p0khCpbs7Za38uc.mft (raw, json) Hash identifier: QviegWhujFHv4t1gylmvXrcAueu0BLfL6GL8qLO/Ub0= Subject key identifier: F4:F8:26:C7:74:75:51:EC:86:A5:12:59:0C:5E:0B:FB:1B:BF:6D:B1 Authority key identifier: E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7 Certificate issuer: /CN=e5cf78f5f339ee777da749210a96eced96b7f2e7 Certificate serial: 019B2B1C48605F856F83A3D2E229AE78A3B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft Manifest number: 1780 Signing time: Wed 17 Dec 2025 07:00:32 +0000 Manifest this update: Wed 17 Dec 2025 07:00:32 +0000 Manifest next update: Thu 18 Dec 2025 07:00:32 +0000 Files and hashes: 1: 5c949fM57nd9p0khCpbs7Za38uc.crl (hash: ymsSggAvbw/eHpJh87+EI4yixKI46tjgCV6aQFQmZX4=) 2: DV42p8se3L2zEopyG9pYChd08dA.roa (hash: AMDicnnABT602ZAKhipXKupbfFlgytQMYVTZdMa1H7g=) 3: fX6SqoqQUEoAM6pytW3ukSOt0zg.roa (hash: +rGQFaL4Fu3eymYJPVwzdqTwvlNhHBaV+a1ByGv4FVg=) 4: hvfjiAD64cA7L9D8OrPaqton6c4.roa (hash: HStUaUAHWIe7bU8iFx/jg5xzG2TZ8LFTU818HvhbG2k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1c:48:60:5f:85:6f:83:a3:d2:e2:29:ae:78:a3:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5cf78f5f339ee777da749210a96eced96b7f2e7 Validity Not Before: Dec 17 07:00:32 2025 GMT Not After : Dec 18 07:00:32 2025 GMT Subject: CN=f4f826c7747551ec86a512590c5e0bfb1bbf6db1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:06:9a:4c:01:13:70:01:8c:ef:46:e1:4a:83: bc:bf:9c:7b:99:82:5f:8e:06:40:dc:66:80:27:ff: a7:30:88:6e:9c:ef:d7:22:68:19:2d:09:8d:aa:af: 24:31:27:c0:cb:b9:39:2a:c9:71:cd:42:eb:9e:89: 40:1e:52:32:fa:32:78:d8:a1:a4:45:c4:46:84:e1: 5c:ed:08:d6:ab:ff:ce:1a:c8:5d:18:57:8c:68:fe: db:e8:cc:7b:06:10:9e:ea:8d:36:d8:ac:ac:86:66: 82:9e:09:c8:8d:97:57:0b:67:3c:cb:ce:41:70:64: 68:78:16:15:f7:16:30:d1:03:60:d2:6d:3f:5e:d6: 67:e6:67:7a:4c:03:f5:07:38:a0:1d:94:a0:e4:02: 9b:bf:aa:a0:52:96:41:da:3b:9c:68:24:36:56:6d: 59:db:0c:83:2c:56:f1:a4:7c:dc:24:aa:21:6d:57: 88:6b:bd:79:44:0f:b1:71:c7:aa:81:39:d5:14:50: 1e:8d:99:e7:2a:d5:da:df:6a:c8:7c:1a:f6:9c:53: 4a:9d:e9:67:10:8f:ba:11:4f:57:bf:c6:6b:c7:fe: 5c:48:38:4f:42:ce:27:dd:99:8b:a9:13:b1:04:ab: b0:27:dd:8d:44:47:d7:3b:62:9a:85:81:f3:4b:c2: af:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:F8:26:C7:74:75:51:EC:86:A5:12:59:0C:5E:0B:FB:1B:BF:6D:B1 X509v3 Authority Key Identifier: keyid:E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:a3:f8:32:1c:38:53:02:d0:ef:12:11:79:6c:61:8c:b1:15: ba:97:70:5d:96:33:68:b9:6a:e7:d9:d6:22:a5:2e:20:2d:cd: c0:e1:63:a8:b0:17:fb:16:48:8f:56:82:b6:91:0f:54:01:b3: 4c:16:68:51:9e:0d:e7:b8:cd:a7:12:b7:f0:e7:fa:cc:61:2f: 74:5f:94:46:29:d1:a0:57:06:06:6d:a8:ba:2d:52:a0:1c:9a: bf:59:b3:b0:a3:e1:83:ea:f2:ae:67:0f:4c:27:16:35:aa:af: 83:52:72:36:3a:be:27:9c:df:67:e1:70:23:49:8c:26:c4:01: 79:df:25:7c:40:86:21:a2:15:b4:aa:5b:5d:f5:ad:36:3b:37: ca:14:3c:1c:1d:bf:aa:af:66:bd:cc:09:90:34:7c:05:29:dc: b2:2b:99:c5:ba:0c:45:92:3a:df:3f:b8:59:b3:d1:58:27:e2: 38:c3:d5:4b:9c:c3:6e:49:28:6d:40:0f:6d:c9:6d:38:05:3c: 94:cc:ce:ce:10:f7:36:de:4b:c3:c3:89:46:2c:86:e2:2f:d2: 41:98:19:62:89:4d:f9:88:c3:e4:66:05:fd:f8:df:e1:f7:6e: 4c:e9:cb:bd:c5:85:36:3a:77:40:62:f1:55:94:01:91:c7:52: c3:d9:25:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHEhgX4Vvg6PS4imueKOyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1Y2Y3OGY1ZjMzOWVlNzc3ZGE3NDkyMTBhOTZlY2VkOTZi N2YyZTcwHhcNMjUxMjE3MDcwMDMyWhcNMjUxMjE4MDcwMDMyWjAzMTEwLwYDVQQD EyhmNGY4MjZjNzc0NzU1MWVjODZhNTEyNTkwYzVlMGJmYjFiYmY2ZGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QaaTAETcAGM70bhSoO8v5x7mYJf jgZA3GaAJ/+nMIhunO/XImgZLQmNqq8kMSfAy7k5KslxzULrnolAHlIy+jJ42KGk RcRGhOFc7QjWq//OGshdGFeMaP7b6Mx7BhCe6o022KyshmaCngnIjZdXC2c8y85B cGRoeBYV9xYw0QNg0m0/XtZn5md6TAP1BzigHZSg5AKbv6qgUpZB2jucaCQ2Vm1Z 2wyDLFbxpHzcJKohbVeIa715RA+xcceqgTnVFFAejZnnKtXa32rIfBr2nFNKneln EI+6EU9Xv8Zrx/5cSDhPQs4n3ZmLqROxBKuwJ92NREfXO2KahYHzS8KvEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPT4Jsd0dVHshqUSWQxeC/sbv22xMB8GA1UdIwQY MBaAFOXPePXzOe53fadJIQqW7O2Wt/LnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWM5NDlmTTU3bmQ5cDBraENwYnM3WmEzOHVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9jNGJkOTUtYzY3MC00OTBkLThjYzAt YjdkYzgzNzA2YTJhLzEvNWM5NDlmTTU3bmQ5cDBraENwYnM3WmEzOHVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9jNGJkOTUtYzY3MC00OTBkLThjYzAtYjdkYzgzNzA2YTJh LzEvNWM5NDlmTTU3bmQ5cDBraENwYnM3WmEzOHVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWKP4Mhw4 UwLQ7xIReWxhjLEVupdwXZYzaLlq59nWIqUuIC3NwOFjqLAX+xZIj1aCtpEPVAGz TBZoUZ4N57jNpxK38Of6zGEvdF+URinRoFcGBm2oui1SoByav1mzsKPhg+ryrmcP TCcWNaqvg1JyNjq+J5zfZ+FwI0mMJsQBed8lfECGIaIVtKpbXfWtNjs3yhQ8HB2/ qq9mvcwJkDR8BSncsiuZxboMRZI63z+4WbPRWCfiOMPVS5zDbkkobUAPbcltOAU8 lMzOzhD3Nt5Lw8OJRiyG4i/SQZgZYolN+YjD5GYF/fjf4fduTOnLvcWFNjp3QGLx VZQBkcdSw9kl3A== -----END CERTIFICATE-----Generated at Wed Dec 17 16:50:44 2025 by rpki-client