This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft File: 5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft (raw, json) Hash identifier: uYJ7HTf0j/LfwTTvfLbH1wNOyei2QgVKVWhlaZ9iR30= Subject key identifier: 08:A9:F3:63:00:A3:A4:65:A7:B1:AF:77:14:3F:F2:A2:06:1A:5F:C2 Authority key identifier: E5:4A:B8:9D:33:BD:8A:A9:43:8A:1D:D0:B4:C5:9E:DB:EB:0C:64:EE Certificate issuer: /CN=e54ab89d33bd8aa9438a1dd0b4c59edbeb0c64ee Certificate serial: 019B5298D0A4A16EED79621412279D55B0A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Uq4nTO9iqlDih3QtMWe2-sMZO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft Manifest number: 0781 Signing time: Wed 24 Dec 2025 23:01:45 +0000 Manifest this update: Wed 24 Dec 2025 23:01:45 +0000 Manifest next update: Thu 25 Dec 2025 23:01:45 +0000 Files and hashes: 1: 5Uq4nTO9iqlDih3QtMWe2-sMZO4.crl (hash: 7bULf/OZEjUdr5B+6D0ljjtxE8f7AgN69czVqvNZYoE=) 2: zwhatF5o3yk6nLXIa0yxqzP0ZTc.roa (hash: 9S00G7VwkBsXnXA2C5JQWmhqMbRgsqzBdUuOpwkdR1g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft rsync://rpki.ripe.net/repository/DEFAULT/5Uq4nTO9iqlDih3QtMWe2-sMZO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 23:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:98:d0:a4:a1:6e:ed:79:62:14:12:27:9d:55:b0:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e54ab89d33bd8aa9438a1dd0b4c59edbeb0c64ee Validity Not Before: Dec 24 23:01:45 2025 GMT Not After : Dec 25 23:01:45 2025 GMT Subject: CN=08a9f36300a3a465a7b1af77143ff2a2061a5fc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:00:86:b9:d2:b5:e3:1a:84:f8:3d:ff:1e:56: 75:34:e7:01:c2:e7:2c:77:70:b5:35:c1:06:1b:f6: f4:7f:39:41:dc:64:7e:9e:b9:b8:56:61:39:7f:fd: 51:b2:bd:c3:85:48:fe:49:cf:9b:13:16:31:2b:29: 38:ff:06:9f:33:ad:37:da:fd:ff:bb:b8:98:16:69: 8a:6a:b5:57:f3:9d:c7:01:cd:b8:f7:63:eb:67:15: 62:cf:1c:1c:46:47:44:8c:91:d6:95:f0:82:00:8f: eb:85:7e:39:13:d1:64:f0:dd:3d:8b:9b:51:9c:75: d3:a2:9b:4a:1a:69:a1:26:01:0a:45:fc:1f:81:82: ab:92:20:7b:ff:ec:af:61:df:9b:f9:bf:bf:22:58: 97:03:5b:1e:eb:00:b9:22:2d:9f:4b:7f:92:70:f1: 57:00:4b:0b:7f:c5:61:f9:1f:c8:b2:71:e7:0d:70: 81:bc:29:be:0f:67:f4:0e:79:94:85:a9:bc:f5:5b: 7e:bc:ba:bc:f1:5b:73:2a:0a:97:6e:13:20:59:35: 28:e2:bf:06:67:d5:64:2e:29:15:a5:bc:de:88:2c: 0c:83:87:03:1a:02:92:55:31:8a:2a:e8:6c:b8:cd: c5:05:02:7c:2d:f0:78:95:db:bc:d3:b0:fa:f1:e1: 28:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A9:F3:63:00:A3:A4:65:A7:B1:AF:77:14:3F:F2:A2:06:1A:5F:C2 X509v3 Authority Key Identifier: keyid:E5:4A:B8:9D:33:BD:8A:A9:43:8A:1D:D0:B4:C5:9E:DB:EB:0C:64:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Uq4nTO9iqlDih3QtMWe2-sMZO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:5d:62:48:48:8e:58:51:9f:ac:17:f3:ff:c2:f4:44:0d:73: 7e:ed:09:5e:6d:e3:98:ef:e9:38:bc:fc:fc:42:13:80:77:f1: be:01:df:70:03:61:d0:21:0b:c7:3e:10:41:0d:b9:a9:dd:29: b7:65:aa:3c:15:8a:a4:27:48:70:01:e9:db:cb:4b:cb:b2:98: 09:99:93:27:02:5e:c8:0b:41:80:e4:16:d3:23:fc:91:6f:be: a3:5f:60:07:9b:72:e2:61:3a:2b:a9:c5:70:3f:d9:7a:8f:73: 13:35:53:5a:52:e2:89:c2:0a:75:8c:5e:a8:07:16:c1:33:29: 2f:62:6d:ca:93:2a:54:95:76:77:1a:2f:d2:c2:5a:b5:9a:76: c6:a8:c7:aa:5a:43:1a:9e:ff:3a:9c:ea:f3:67:7b:20:41:e8: c6:a2:33:39:7c:08:77:b5:0f:af:12:f2:d0:f3:d8:a0:66:f6: aa:8b:c9:b8:31:8c:2e:4b:73:12:71:34:3d:e3:e3:99:f6:4c: 1c:d6:d6:5e:22:09:9a:f3:d1:bb:d2:bd:95:2a:5f:99:59:56: 22:dc:3c:36:de:00:ec:91:21:21:94:88:8d:4f:c5:0a:f1:0d: 71:61:05:fd:ce:aa:0e:1a:09:1a:87:8d:58:4b:64:83:9c:ec: 8d:ed:3c:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSmNCkoW7teWIUEiedVbCjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NGFiODlkMzNiZDhhYTk0MzhhMWRkMGI0YzU5ZWRiZWIw YzY0ZWUwHhcNMjUxMjI0MjMwMTQ1WhcNMjUxMjI1MjMwMTQ1WjAzMTEwLwYDVQQD EygwOGE5ZjM2MzAwYTNhNDY1YTdiMWFmNzcxNDNmZjJhMjA2MWE1ZmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQCGudK14xqE+D3/HlZ1NOcBwucs d3C1NcEGG/b0fzlB3GR+nrm4VmE5f/1Rsr3DhUj+Sc+bExYxKyk4/wafM6032v3/ u7iYFmmKarVX853HAc2492PrZxVizxwcRkdEjJHWlfCCAI/rhX45E9Fk8N09i5tR nHXToptKGmmhJgEKRfwfgYKrkiB7/+yvYd+b+b+/IliXA1se6wC5Ii2fS3+ScPFX AEsLf8Vh+R/IsnHnDXCBvCm+D2f0DnmUham89Vt+vLq88VtzKgqXbhMgWTUo4r8G Z9VkLikVpbzeiCwMg4cDGgKSVTGKKuhsuM3FBQJ8LfB4ldu807D68eEoPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAip82MAo6Rlp7GvdxQ/8qIGGl/CMB8GA1UdIwQY MBaAFOVKuJ0zvYqpQ4od0LTFntvrDGTuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVVxNG5UTzlpcWxEaWgzUXRNV2UyLXNNWk80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9jMzE2YjYtNzJlMy00YmNlLWJiZTIt MWI0MzI4NzJiY2ZmLzEvNVVxNG5UTzlpcWxEaWgzUXRNV2UyLXNNWk80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9jMzE2YjYtNzJlMy00YmNlLWJiZTItMWI0MzI4NzJiY2Zm LzEvNVVxNG5UTzlpcWxEaWgzUXRNV2UyLXNNWk80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd11iSEiO WFGfrBfz/8L0RA1zfu0JXm3jmO/pOLz8/EITgHfxvgHfcANh0CELxz4QQQ25qd0p t2WqPBWKpCdIcAHp28tLy7KYCZmTJwJeyAtBgOQW0yP8kW++o19gB5ty4mE6K6nF cD/Zeo9zEzVTWlLiicIKdYxeqAcWwTMpL2JtypMqVJV2dxov0sJatZp2xqjHqlpD Gp7/Opzq82d7IEHoxqIzOXwId7UPrxLy0PPYoGb2qovJuDGMLktzEnE0PePjmfZM HNbWXiIJmvPRu9K9lSpfmVlWItw8Nt4A7JEhIZSIjU/FCvENcWEF/c6qDhoJGoeN WEtkg5zsje08mA== -----END CERTIFICATE-----Generated at Thu Dec 25 04:52:01 2025 by rpki-client