This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.mft File: 5S2LXLp8LSuK8EbrfzEBBawMCaw.mft (raw, json) Hash identifier: +8yQXquIP0xJ+BHywOjfX/TfOCC5+WNrbeiI//2sjik= Subject key identifier: 2D:8B:6A:E2:43:A9:DA:DB:BD:26:69:61:70:2D:5B:73:99:F8:DE:A1 Authority key identifier: E5:2D:8B:5C:BA:7C:2D:2B:8A:F0:46:EB:7F:31:01:05:AC:0C:09:AC Certificate issuer: /CN=e52d8b5cba7c2d2b8af046eb7f310105ac0c09ac Certificate serial: 019B3EDAC9D259437B0D67523A7ECC60D3D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5S2LXLp8LSuK8EbrfzEBBawMCaw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.mft Manifest number: 0585 Signing time: Sun 21 Dec 2025 03:01:24 +0000 Manifest this update: Sun 21 Dec 2025 03:01:24 +0000 Manifest next update: Mon 22 Dec 2025 03:01:24 +0000 Files and hashes: 1: 5S2LXLp8LSuK8EbrfzEBBawMCaw.crl (hash: DB3C5o1VVzLQ9+wXnM1lHzIf+4kF6g6UduXhKVSOQ9I=) 2: GuglbdgQwP1s68zPxpBUKeDH1GE.roa (hash: Sf12fpSS/gSIfCrOMCQf0QxlhogqDHOYf+4YlIW4mDA=) 3: bXAo7mVEmX8iLg6GBEHUZO92vHY.roa (hash: VzCJRz8Ej6xsupU4wBQwIcnAcaQ/S8QtaCA4CMwW82M=) 4: xXGe4wyq05lrsF2tc38x8ySFe-g.roa (hash: ILPVEPIY9D2xyNF63XsnQpEMnM3xKobt0LuSW1aSmX4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.mft rsync://rpki.ripe.net/repository/DEFAULT/5S2LXLp8LSuK8EbrfzEBBawMCaw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 03:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:c9:d2:59:43:7b:0d:67:52:3a:7e:cc:60:d3:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e52d8b5cba7c2d2b8af046eb7f310105ac0c09ac Validity Not Before: Dec 21 03:01:24 2025 GMT Not After : Dec 22 03:01:24 2025 GMT Subject: CN=2d8b6ae243a9dadbbd266961702d5b7399f8dea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f2:c1:b1:61:e5:6d:f7:09:ef:f6:0e:04:f4: 78:cb:4e:33:bc:1a:51:c4:19:14:8e:af:6d:82:6a: fc:0e:f9:66:27:9d:cb:95:a0:f6:a3:93:14:a3:46: 03:14:56:74:2d:68:5a:b3:0f:65:af:87:7d:c0:bb: 50:6f:64:d6:6b:bc:9f:0c:e9:e7:06:95:44:d7:7e: 52:68:4d:b5:07:f0:a4:35:78:14:19:bf:9b:b6:13: f2:89:32:2c:bf:24:a2:5e:10:b1:fb:af:37:d6:5f: ef:0a:ab:7e:fd:4a:e3:56:72:c2:05:d7:a0:8c:e1: 29:33:3d:18:2b:88:cc:2f:b7:e4:e7:1d:07:ea:4e: 33:01:81:81:b5:8a:ab:87:4f:b4:82:fd:77:94:f0: aa:32:8b:20:91:09:dc:ab:2b:db:42:13:ca:e9:b0: 5d:e9:47:3e:57:38:06:77:9d:bc:ac:5d:6f:03:80: 98:c6:45:93:94:8e:67:bf:db:f4:32:28:1f:32:fe: 5f:c5:41:52:67:3a:c6:41:5c:c3:58:77:c4:9b:02: 0e:f8:12:f9:30:d8:8f:68:6d:61:ec:07:90:cb:2c: 05:0d:65:fc:40:88:c9:3a:db:c1:a0:9d:75:31:bd: 2f:ff:55:d1:a6:4c:1e:78:da:d3:28:11:82:65:8f: 7d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:8B:6A:E2:43:A9:DA:DB:BD:26:69:61:70:2D:5B:73:99:F8:DE:A1 X509v3 Authority Key Identifier: keyid:E5:2D:8B:5C:BA:7C:2D:2B:8A:F0:46:EB:7F:31:01:05:AC:0C:09:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5S2LXLp8LSuK8EbrfzEBBawMCaw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:7e:e4:0a:39:d0:ea:9e:75:9d:81:3c:a8:0c:e4:ce:5e:00: 88:4e:f6:3e:37:a7:98:9f:75:fa:11:43:c8:9d:e6:5e:51:1a: be:8a:8e:c6:fd:c0:5e:db:2d:62:1c:c0:ad:b9:e3:80:c8:ca: 52:a1:01:de:b9:91:b5:ed:98:96:b3:75:06:2c:e5:82:3c:63: f1:d7:49:52:1b:65:47:88:e8:34:a2:44:25:c0:03:7f:ca:20: c5:c4:00:82:58:da:c8:65:8d:b5:00:c4:37:31:9b:97:5e:25: 1a:11:0a:02:ca:89:46:ff:e1:9b:c2:7c:49:18:62:df:12:f7: cd:99:4f:f9:aa:9f:cb:25:84:b1:27:07:37:e7:bc:17:74:95: c8:bd:26:77:fc:5e:d0:7e:2d:44:8e:df:fe:9f:e8:c8:28:e9: 47:d8:9c:0c:a8:cb:15:a1:65:5b:ec:86:72:03:b0:f7:e0:22: 52:db:60:69:c4:75:ba:c9:97:40:e9:48:e5:f5:19:44:a8:ed: f5:22:d4:42:6b:88:64:89:cc:51:0c:17:73:e7:40:9b:ee:c8: 31:da:92:55:6e:2f:dd:45:f1:94:d0:88:13:af:2b:cb:5f:15: a0:15:2a:03:e2:1a:ec:18:f9:51:39:ff:22:91:b9:11:91:a3: 8c:84:ef:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2snSWUN7DWdSOn7MYNPTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1MmQ4YjVjYmE3YzJkMmI4YWYwNDZlYjdmMzEwMTA1YWMw YzA5YWMwHhcNMjUxMjIxMDMwMTI0WhcNMjUxMjIyMDMwMTI0WjAzMTEwLwYDVQQD EygyZDhiNmFlMjQzYTlkYWRiYmQyNjY5NjE3MDJkNWI3Mzk5ZjhkZWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvLBsWHlbfcJ7/YOBPR4y04zvBpR xBkUjq9tgmr8DvlmJ53LlaD2o5MUo0YDFFZ0LWhasw9lr4d9wLtQb2TWa7yfDOnn BpVE135SaE21B/CkNXgUGb+bthPyiTIsvySiXhCx+6831l/vCqt+/UrjVnLCBdeg jOEpMz0YK4jML7fk5x0H6k4zAYGBtYqrh0+0gv13lPCqMosgkQncqyvbQhPK6bBd 6Uc+VzgGd528rF1vA4CYxkWTlI5nv9v0MigfMv5fxUFSZzrGQVzDWHfEmwIO+BL5 MNiPaG1h7AeQyywFDWX8QIjJOtvBoJ11Mb0v/1XRpkweeNrTKBGCZY99yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC2LauJDqdrbvSZpYXAtW3OZ+N6hMB8GA1UdIwQY MBaAFOUti1y6fC0rivBG638xAQWsDAmsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVMyTFhMcDhMU3VLOEVicmZ6RUJCYXdNQ2F3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kNGY4M2QtZmI1My00MjRmLTg1MWQt YzBkMDYyYTc1MzU0LzEvNVMyTFhMcDhMU3VLOEVicmZ6RUJCYXdNQ2F3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9kNGY4M2QtZmI1My00MjRmLTg1MWQtYzBkMDYyYTc1MzU0 LzEvNVMyTFhMcDhMU3VLOEVicmZ6RUJCYXdNQ2F3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYH7kCjnQ 6p51nYE8qAzkzl4AiE72PjenmJ91+hFDyJ3mXlEavoqOxv3AXtstYhzArbnjgMjK UqEB3rmRte2YlrN1Bizlgjxj8ddJUhtlR4joNKJEJcADf8ogxcQAgljayGWNtQDE NzGbl14lGhEKAsqJRv/hm8J8SRhi3xL3zZlP+aqfyyWEsScHN+e8F3SVyL0md/xe 0H4tRI7f/p/oyCjpR9icDKjLFaFlW+yGcgOw9+AiUttgacR1usmXQOlI5fUZRKjt 9SLUQmuIZInMUQwXc+dAm+7IMdqSVW4v3UXxlNCIE68ry18VoBUqA+Ia7Bj5UTn/ IpG5EZGjjITvVA== -----END CERTIFICATE-----Generated at Sun Dec 21 10:37:58 2025 by rpki-client