This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft File: 5tF7E2U_8ePngi6x5eChf01PeIE.mft (raw, json) Hash identifier: zaenvPQZPXkIA0619qkD5u1QsON8LelCLl/tIPVz8Mw= Subject key identifier: F0:79:91:22:8D:E1:84:5B:D3:E3:4B:83:BE:1F:A6:BF:79:51:B4:D5 Authority key identifier: E6:D1:7B:13:65:3F:F1:E3:E7:82:2E:B1:E5:E0:A1:7F:4D:4F:78:81 Certificate issuer: /CN=e6d17b13653ff1e3e7822eb1e5e0a17f4d4f7881 Certificate serial: 019B281B979ECEC6774BA4A8F51D18F8BBEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft Manifest number: 0D93 Signing time: Tue 16 Dec 2025 17:00:55 +0000 Manifest this update: Tue 16 Dec 2025 17:00:55 +0000 Manifest next update: Wed 17 Dec 2025 17:00:55 +0000 Files and hashes: 1: 5tF7E2U_8ePngi6x5eChf01PeIE.crl (hash: Ko0wFfxWmFRbkRAgvH39s4mApaIBTwP1Rx4P6IF+bzA=) 2: MwlTna0ke4fMkgBxDifihFV6g70.roa (hash: UKWdlo0uXeQ4k7xeAT+wCpraLRrIa922Ee9c18u5sVI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft rsync://rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:1b:97:9e:ce:c6:77:4b:a4:a8:f5:1d:18:f8:bb:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6d17b13653ff1e3e7822eb1e5e0a17f4d4f7881 Validity Not Before: Dec 16 17:00:55 2025 GMT Not After : Dec 17 17:00:55 2025 GMT Subject: CN=f07991228de1845bd3e34b83be1fa6bf7951b4d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1d:72:86:7c:04:94:ed:c1:ef:f9:1a:a0:34: 61:6a:72:2b:a4:80:f3:e5:a6:67:71:77:85:29:0f: 8a:36:0e:e0:d1:7b:b3:da:a0:98:0f:c5:ff:22:06: 99:b2:dc:3a:42:e6:8d:f4:0c:ca:3e:53:b7:8d:1c: 06:a0:6e:be:34:34:92:66:49:18:6e:ac:28:b1:15: f2:c6:81:84:e4:1e:ef:27:f5:72:3b:d9:37:07:a7: 12:98:cd:f6:99:29:d4:d8:53:d2:95:cf:6d:89:80: 9d:34:fa:b5:b5:08:11:30:66:a4:b9:de:8d:8b:cd: aa:ce:b9:11:bc:67:e7:a5:56:24:d7:e7:df:6c:39: 04:22:ca:b6:fa:6d:5f:0f:92:0f:e5:4d:2f:f3:83: 39:18:86:e9:2b:96:a8:2b:74:fc:0f:b2:1a:7c:65: 2d:c2:6c:d9:f7:74:84:ee:7a:35:6b:92:db:d2:c8: f3:84:82:6d:f7:d8:fb:f3:a5:58:b7:6c:f9:32:89: 59:54:0c:16:95:61:ad:af:1c:f4:b1:60:03:e4:c3: 2d:35:e6:1d:ed:dc:f8:ae:0a:7d:9b:cc:1d:64:81: 72:36:5a:5c:87:39:79:d8:37:aa:3f:ac:66:c9:25: 40:17:2a:da:e4:7c:31:3a:0c:8c:a2:3a:ef:53:c9: 5e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:79:91:22:8D:E1:84:5B:D3:E3:4B:83:BE:1F:A6:BF:79:51:B4:D5 X509v3 Authority Key Identifier: keyid:E6:D1:7B:13:65:3F:F1:E3:E7:82:2E:B1:E5:E0:A1:7F:4D:4F:78:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:3e:55:f7:89:be:d1:79:8d:75:67:e2:b0:f7:40:1f:a9:50: e6:47:c9:5d:db:f6:74:26:41:d0:6f:32:07:33:2a:bb:c0:a3: a6:dc:18:dd:47:4d:f2:0d:86:21:14:43:e0:fc:e5:52:f3:02: f8:21:2d:be:d4:2a:0b:b6:84:26:b6:cb:93:c0:c1:b5:39:28: 58:35:13:d8:8d:28:aa:cc:26:72:8c:9f:eb:53:34:2f:8c:9d: 37:09:92:be:f7:c0:3f:3c:e0:8e:da:46:80:7b:55:0a:84:7a: 6b:21:10:37:54:76:51:be:73:33:dc:f0:09:43:e4:f0:d9:14: 4a:bc:57:09:8a:81:a5:ac:8c:5c:45:4d:ba:b2:e2:b0:9f:12: 5a:4a:01:5b:8c:d6:7e:a6:d8:0f:d3:d2:d0:9f:07:c8:49:b5: 7c:ad:41:8c:a0:5c:c7:04:22:51:2b:87:6f:73:44:de:e7:7a: 49:e6:bf:44:09:e0:3b:88:e6:52:bd:bc:f8:91:99:88:49:66: 8c:5f:a8:03:c6:8f:65:27:ef:68:fd:41:26:2c:a3:ff:a9:eb: 52:e5:bd:b7:e3:1d:4b:35:4e:c1:d6:23:3f:d6:24:0c:b5:a6: 93:3a:91:42:e7:13:17:23:5e:1b:7b:2d:22:b6:3f:be:b6:22: b5:54:97:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoG5eezsZ3S6So9R0Y+LvvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2ZDE3YjEzNjUzZmYxZTNlNzgyMmViMWU1ZTBhMTdmNGQ0 Zjc4ODEwHhcNMjUxMjE2MTcwMDU1WhcNMjUxMjE3MTcwMDU1WjAzMTEwLwYDVQQD EyhmMDc5OTEyMjhkZTE4NDViZDNlMzRiODNiZTFmYTZiZjc5NTFiNGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2h1yhnwElO3B7/kaoDRhanIrpIDz 5aZncXeFKQ+KNg7g0Xuz2qCYD8X/IgaZstw6QuaN9AzKPlO3jRwGoG6+NDSSZkkY bqwosRXyxoGE5B7vJ/VyO9k3B6cSmM32mSnU2FPSlc9tiYCdNPq1tQgRMGakud6N i82qzrkRvGfnpVYk1+ffbDkEIsq2+m1fD5IP5U0v84M5GIbpK5aoK3T8D7IafGUt wmzZ93SE7no1a5Lb0sjzhIJt99j786VYt2z5MolZVAwWlWGtrxz0sWAD5MMtNeYd 7dz4rgp9m8wdZIFyNlpchzl52DeqP6xmySVAFyra5HwxOgyMojrvU8leiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPB5kSKN4YRb0+NLg74fpr95UbTVMB8GA1UdIwQY MBaAFObRexNlP/Hj54IuseXgoX9NT3iBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXRGN0UyVV84ZVBuZ2k2eDVlQ2hmMDFQZUlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ODRlM2UtN2I1My00NzVjLTg2MWYt NmFjZDU4MWQ0YjBmLzEvNXRGN0UyVV84ZVBuZ2k2eDVlQ2hmMDFQZUlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84ODRlM2UtN2I1My00NzVjLTg2MWYtNmFjZDU4MWQ0YjBm LzEvNXRGN0UyVV84ZVBuZ2k2eDVlQ2hmMDFQZUlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAez5V94m+ 0XmNdWfisPdAH6lQ5kfJXdv2dCZB0G8yBzMqu8CjptwY3UdN8g2GIRRD4PzlUvMC +CEtvtQqC7aEJrbLk8DBtTkoWDUT2I0oqswmcoyf61M0L4ydNwmSvvfAPzzgjtpG gHtVCoR6ayEQN1R2Ub5zM9zwCUPk8NkUSrxXCYqBpayMXEVNurLisJ8SWkoBW4zW fqbYD9PS0J8HyEm1fK1BjKBcxwQiUSuHb3NE3ud6Sea/RAngO4jmUr28+JGZiElm jF+oA8aPZSfvaP1BJiyj/6nrUuW9t+MdSzVOwdYjP9YkDLWmkzqRQucTFyNeG3st IrY/vrYitVSXXw== -----END CERTIFICATE-----Generated at Tue Dec 16 23:14:07 2025 by rpki-client