This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft File: 5c949fM57nd9p0khCpbs7Za38uc.mft (raw, json) Hash identifier: h33vEOs44Z71hobvRFSX0S/J0fw6BGPDwT9QHiNBsO4= Subject key identifier: 16:17:DC:31:8E:6D:AE:F1:F9:81:C1:74:49:5D:3F:C9:AA:1C:F8:15 Authority key identifier: E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7 Certificate issuer: /CN=e5cf78f5f339ee777da749210a96eced96b7f2e7 Certificate serial: 019B2EFA1DBD1DBCC1FAE3AE3FE39B8D4C72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 01:01:42 +0000 Manifest this update: Thu 18 Dec 2025 01:01:42 +0000 Manifest next update: Fri 19 Dec 2025 01:01:42 +0000 Files and hashes: 1: 5c949fM57nd9p0khCpbs7Za38uc.crl (hash: sI0nFYFZAw/K9JTpO7qZCbf+I7c/7NJ6IIM5zbbzigw=) 2: DV42p8se3L2zEopyG9pYChd08dA.roa (hash: AMDicnnABT602ZAKhipXKupbfFlgytQMYVTZdMa1H7g=) 3: fX6SqoqQUEoAM6pytW3ukSOt0zg.roa (hash: +rGQFaL4Fu3eymYJPVwzdqTwvlNhHBaV+a1ByGv4FVg=) 4: hvfjiAD64cA7L9D8OrPaqton6c4.roa (hash: HStUaUAHWIe7bU8iFx/jg5xzG2TZ8LFTU818HvhbG2k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:1d:bd:1d:bc:c1:fa:e3:ae:3f:e3:9b:8d:4c:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5cf78f5f339ee777da749210a96eced96b7f2e7 Validity Not Before: Dec 18 01:01:42 2025 GMT Not After : Dec 19 01:01:42 2025 GMT Subject: CN=1617dc318e6daef1f981c174495d3fc9aa1cf815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:27:1b:23:8d:d2:36:28:90:bc:0e:8e:74:89: 65:9a:be:c0:10:5d:2a:82:9a:c3:e9:5b:c7:5e:f9: 38:ea:1b:42:24:64:93:0d:a4:72:30:15:fe:86:ac: 74:05:2b:8d:5f:dd:b4:69:cc:c4:9d:28:ca:7c:69: e1:9b:99:26:4b:ce:1a:e2:c4:b2:22:5d:77:83:50: c7:f3:7e:32:05:eb:cf:da:70:df:ac:91:71:96:8d: b6:91:c3:ef:f3:50:15:88:01:b9:25:5f:b7:af:a8: d6:a8:9e:ea:5b:2f:3e:0e:9f:d4:37:72:a1:a0:03: d0:9b:d1:3c:e1:2c:ee:91:64:e2:ba:bb:ec:f2:db: ee:3e:29:70:a0:5f:db:00:cb:d9:b5:ff:88:61:e9: 07:d0:d0:87:50:cf:15:1a:fd:0b:9e:44:8f:2e:8e: 81:e9:f4:a5:5d:ed:89:30:69:aa:23:e2:ac:e4:ef: 50:45:4f:49:2f:40:c6:8d:89:a6:c0:87:29:ae:20: a5:a5:6d:35:aa:4f:a3:12:90:c3:98:64:b8:3c:95: c1:18:d7:67:f4:d1:3a:34:3a:ca:fc:9f:a9:21:7b: 43:f4:bf:62:8d:82:b3:c7:68:ed:85:50:b0:d3:10: f7:92:64:6a:01:b8:a9:71:57:ce:42:4e:05:7b:f0: 8e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:17:DC:31:8E:6D:AE:F1:F9:81:C1:74:49:5D:3F:C9:AA:1C:F8:15 X509v3 Authority Key Identifier: keyid:E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:39:ff:f4:5d:bc:6a:4c:32:a7:2d:be:2d:e0:56:81:34:ba: 64:99:4f:cc:7c:6c:e0:55:f7:06:ab:f2:29:ef:26:c0:e2:27: ce:b6:d5:a2:fc:55:1d:4e:e6:ef:6c:e1:da:cb:21:5c:79:95: 47:cc:d3:40:71:a2:2f:5e:ef:a5:28:66:e2:56:d2:c5:93:3e: 2f:fa:c6:31:d7:48:fb:59:fc:e4:f6:0a:ca:80:20:c7:a4:47: c4:19:a5:12:bf:78:58:64:c6:d1:fc:61:7b:cd:00:90:64:fa: 0b:23:de:fe:7d:33:ba:e7:21:f2:af:a1:0f:b7:6a:4d:da:c5: 8e:61:10:95:d6:dc:73:a4:a6:57:22:93:41:0c:f6:92:45:c1: 7e:63:96:7a:99:aa:2a:a0:6e:7e:e7:f0:1b:c7:93:20:55:60: d2:ed:d4:48:a8:fc:76:f1:61:2a:33:74:56:9d:35:dd:98:55: 18:d0:29:0b:17:db:d5:12:32:3a:11:0e:06:7c:45:31:13:d8: cf:10:9f:62:55:c4:2f:1d:4c:18:e5:11:ac:76:d8:65:c5:51: 15:42:03:80:cd:d2:a4:f7:69:d9:ce:23:c2:6c:95:d1:c0:65: 22:23:e0:83:28:f3:c3:1e:34:61:cb:d0:9d:48:03:c4:1b:40: 2d:57:4e:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+h29HbzB+uOuP+ObjUxyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1Y2Y3OGY1ZjMzOWVlNzc3ZGE3NDkyMTBhOTZlY2VkOTZi N2YyZTcwHhcNMjUxMjE4MDEwMTQyWhcNMjUxMjE5MDEwMTQyWjAzMTEwLwYDVQQD EygxNjE3ZGMzMThlNmRhZWYxZjk4MWMxNzQ0OTVkM2ZjOWFhMWNmODE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ycbI43SNiiQvA6OdIllmr7AEF0q gprD6VvHXvk46htCJGSTDaRyMBX+hqx0BSuNX920aczEnSjKfGnhm5kmS84a4sSy Il13g1DH834yBevP2nDfrJFxlo22kcPv81AViAG5JV+3r6jWqJ7qWy8+Dp/UN3Kh oAPQm9E84SzukWTiurvs8tvuPilwoF/bAMvZtf+IYekH0NCHUM8VGv0LnkSPLo6B 6fSlXe2JMGmqI+Ks5O9QRU9JL0DGjYmmwIcpriClpW01qk+jEpDDmGS4PJXBGNdn 9NE6NDrK/J+pIXtD9L9ijYKzx2jthVCw0xD3kmRqAbipcVfOQk4Fe/COeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBYX3DGOba7x+YHBdEldP8mqHPgVMB8GA1UdIwQY MBaAFOXPePXzOe53fadJIQqW7O2Wt/LnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWM5NDlmTTU3bmQ5cDBraENwYnM3WmEzOHVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9jNGJkOTUtYzY3MC00OTBkLThjYzAt YjdkYzgzNzA2YTJhLzEvNWM5NDlmTTU3bmQ5cDBraENwYnM3WmEzOHVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9jNGJkOTUtYzY3MC00OTBkLThjYzAtYjdkYzgzNzA2YTJh LzEvNWM5NDlmTTU3bmQ5cDBraENwYnM3WmEzOHVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASjn/9F28 akwypy2+LeBWgTS6ZJlPzHxs4FX3BqvyKe8mwOInzrbVovxVHU7m72zh2sshXHmV R8zTQHGiL17vpShm4lbSxZM+L/rGMddI+1n85PYKyoAgx6RHxBmlEr94WGTG0fxh e80AkGT6CyPe/n0zuuch8q+hD7dqTdrFjmEQldbcc6SmVyKTQQz2kkXBfmOWepmq KqBufufwG8eTIFVg0u3USKj8dvFhKjN0Vp013ZhVGNApCxfb1RIyOhEOBnxFMRPY zxCfYlXELx1MGOURrHbYZcVRFUIDgM3SpPdp2c4jwmyV0cBlIiPggyjzwx40YcvQ nUgDxBtALVdOUA== -----END CERTIFICATE-----Generated at Thu Dec 18 09:51:58 2025 by rpki-client