This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft File: 5D-RsCFSiCv5YF12vqQhqgvU5ig.mft (raw, json) Hash identifier: 74FrSVgSey7IyBkYoeun1QW0gjeJyMil96H87/Hw8tM= Subject key identifier: C6:45:B0:31:3B:A3:97:20:30:32:51:7F:9F:3C:7E:D6:25:4E:76:63 Authority key identifier: E4:3F:91:B0:21:52:88:2B:F9:60:5D:76:BE:A4:21:AA:0B:D4:E6:28 Certificate issuer: /CN=e43f91b02152882bf9605d76bea421aa0bd4e628 Certificate serial: 019B32D6D9FC79B3FBC4A12AAE6E962F67AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D-RsCFSiCv5YF12vqQhqgvU5ig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft Manifest number: 0D71 Signing time: Thu 18 Dec 2025 19:01:39 +0000 Manifest this update: Thu 18 Dec 2025 19:01:39 +0000 Manifest next update: Fri 19 Dec 2025 19:01:39 +0000 Files and hashes: 1: 5D-RsCFSiCv5YF12vqQhqgvU5ig.crl (hash: C/lMU81RYtLXPXrUFmCzK7FhD907zym1rYbBiN+E4HA=) 2: 6nbOuYfu8sbFCAUPUpe64Bd3Rmc.roa (hash: wbgE92t6bLMyfvwqmBJusUZf/7LqDlcOflMgewrcKFc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft rsync://rpki.ripe.net/repository/DEFAULT/5D-RsCFSiCv5YF12vqQhqgvU5ig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:d9:fc:79:b3:fb:c4:a1:2a:ae:6e:96:2f:67:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e43f91b02152882bf9605d76bea421aa0bd4e628 Validity Not Before: Dec 18 19:01:39 2025 GMT Not After : Dec 19 19:01:39 2025 GMT Subject: CN=c645b0313ba397203032517f9f3c7ed6254e7663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d3:38:ef:86:d6:ce:3c:63:3d:fa:21:fc:0b: 20:4d:ca:2f:94:09:c6:80:c6:32:16:87:dc:b1:d1: 4d:57:5b:5c:1d:7d:fe:1b:0b:fe:07:57:75:54:13: e4:1b:be:83:f3:bb:27:a5:ab:e8:95:4b:47:84:31: ca:81:50:9d:17:c2:a4:b5:d3:5e:51:56:04:bd:bf: f4:39:64:0b:8b:92:c3:cc:bf:e4:f6:10:0a:99:38: 34:26:20:75:d3:e5:1f:d6:a5:67:c2:87:ae:54:99: 54:c9:4e:81:50:73:21:67:5e:a9:27:70:bd:db:9f: 50:4a:39:33:a8:a0:bd:42:7b:fd:df:ea:fd:47:fb: 99:b3:bd:83:4a:b6:1a:da:28:e3:53:20:01:33:83: aa:2b:42:bc:35:b0:5c:70:b8:a0:2f:f6:3a:03:0a: bb:28:75:ad:5f:e8:55:1a:fa:81:83:86:37:a5:6e: 5e:79:92:bb:e0:a1:0c:4d:fa:b7:fc:ce:4a:4b:92: e3:7f:d2:ae:cb:6a:59:b1:f2:6f:df:30:3e:65:1c: 2d:cc:5a:c5:61:d9:64:5d:d8:b7:20:9a:95:5e:d8: 50:1a:21:e9:65:a1:2d:ce:f1:73:25:12:ab:ba:c5: 48:50:52:68:2f:fb:ba:76:8d:20:ee:b8:94:23:6d: 55:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:45:B0:31:3B:A3:97:20:30:32:51:7F:9F:3C:7E:D6:25:4E:76:63 X509v3 Authority Key Identifier: keyid:E4:3F:91:B0:21:52:88:2B:F9:60:5D:76:BE:A4:21:AA:0B:D4:E6:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D-RsCFSiCv5YF12vqQhqgvU5ig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:90:b5:6d:05:fb:b6:dd:75:84:4c:df:66:dc:a1:5a:b6:3f: 7b:01:20:6f:54:bf:af:1e:ec:83:3b:0a:6b:7c:72:a4:11:93: 41:31:3e:9b:ab:46:14:d9:d4:a0:bf:92:20:a1:86:48:89:d5: 83:0e:3d:de:68:b3:0b:84:cb:af:a3:13:77:94:c6:58:0e:33: 06:34:24:62:5b:bc:48:b0:3d:c5:f9:48:7d:d0:c0:1c:13:e3: 95:8a:b7:e4:b1:84:52:61:e3:2c:05:17:50:9e:08:2c:6f:bb: 58:54:cd:b3:1b:66:66:6c:80:bf:95:d4:93:02:8f:91:e3:78: ca:19:a5:44:59:0f:bb:96:32:7f:10:68:2d:8d:01:bf:18:a3: b3:91:2a:28:17:d5:51:cd:df:ad:9a:c6:5f:ae:cf:1c:d5:3e: 06:77:e6:04:85:b4:2a:ee:6f:81:ad:55:1e:a0:3a:a0:0b:3e: 44:0b:11:23:46:37:69:65:50:cf:2e:a3:81:11:5a:e0:ae:89: 4a:51:6c:b8:58:33:c8:4b:0a:05:ec:5a:18:eb:f1:fd:df:71: 1f:e9:79:06:f7:a4:5f:24:87:e7:a1:81:73:aa:e0:0c:8c:f9: 00:71:07:08:5b:c2:8f:e2:77:f5:e6:17:a5:b8:cc:c4:35:1a: de:5b:1f:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1tn8ebP7xKEqrm6WL2esMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0M2Y5MWIwMjE1Mjg4MmJmOTYwNWQ3NmJlYTQyMWFhMGJk NGU2MjgwHhcNMjUxMjE4MTkwMTM5WhcNMjUxMjE5MTkwMTM5WjAzMTEwLwYDVQQD EyhjNjQ1YjAzMTNiYTM5NzIwMzAzMjUxN2Y5ZjNjN2VkNjI1NGU3NjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9M474bWzjxjPfoh/AsgTcovlAnG gMYyFofcsdFNV1tcHX3+Gwv+B1d1VBPkG76D87snpavolUtHhDHKgVCdF8KktdNe UVYEvb/0OWQLi5LDzL/k9hAKmTg0JiB10+Uf1qVnwoeuVJlUyU6BUHMhZ16pJ3C9 259QSjkzqKC9Qnv93+r9R/uZs72DSrYa2ijjUyABM4OqK0K8NbBccLigL/Y6Awq7 KHWtX+hVGvqBg4Y3pW5eeZK74KEMTfq3/M5KS5Ljf9Kuy2pZsfJv3zA+ZRwtzFrF YdlkXdi3IJqVXthQGiHpZaEtzvFzJRKrusVIUFJoL/u6do0g7riUI21VlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMZFsDE7o5cgMDJRf588ftYlTnZjMB8GA1UdIwQY MBaAFOQ/kbAhUogr+WBddr6kIaoL1OYoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUQtUnNDRlNpQ3Y1WUYxMnZxUWhxZ3ZVNWlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8zMzRjNTYtMmU2OS00ZGEyLWIwMWQt MDMwODAyNjQxYzY3LzEvNUQtUnNDRlNpQ3Y1WUYxMnZxUWhxZ3ZVNWlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8zMzRjNTYtMmU2OS00ZGEyLWIwMWQtMDMwODAyNjQxYzY3 LzEvNUQtUnNDRlNpQ3Y1WUYxMnZxUWhxZ3ZVNWlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgZC1bQX7 tt11hEzfZtyhWrY/ewEgb1S/rx7sgzsKa3xypBGTQTE+m6tGFNnUoL+SIKGGSInV gw493mizC4TLr6MTd5TGWA4zBjQkYlu8SLA9xflIfdDAHBPjlYq35LGEUmHjLAUX UJ4ILG+7WFTNsxtmZmyAv5XUkwKPkeN4yhmlRFkPu5YyfxBoLY0Bvxijs5EqKBfV Uc3frZrGX67PHNU+BnfmBIW0Ku5vga1VHqA6oAs+RAsRI0Y3aWVQzy6jgRFa4K6J SlFsuFgzyEsKBexaGOvx/d9xH+l5BvekXySH56GBc6rgDIz5AHEHCFvCj+J39eYX pbjMxDUa3lsf2A== -----END CERTIFICATE-----Generated at Fri Dec 19 02:28:16 2025 by rpki-client