This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft File: 5ag7QLP019MfszaNr6yhGZpEmJI.mft (raw, json) Hash identifier: +W1OjSItI6KyNo5z9hFkr1whUmTpgIrcmJGIEiiaHXM= Subject key identifier: 1E:25:4E:B1:B4:F5:09:42:EB:A0:CC:BA:60:2E:12:6E:71:7D:8C:E9 Authority key identifier: E5:A8:3B:40:B3:F4:D7:D3:1F:B3:36:8D:AF:AC:A1:19:9A:44:98:92 Certificate issuer: /CN=e5a83b40b3f4d7d31fb3368dafaca1199a449892 Certificate serial: 019B44A57C79A2834CF6592535479A8158C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft Manifest number: 079F Signing time: Mon 22 Dec 2025 06:00:54 +0000 Manifest this update: Mon 22 Dec 2025 06:00:54 +0000 Manifest next update: Tue 23 Dec 2025 06:00:54 +0000 Files and hashes: 1: 5ag7QLP019MfszaNr6yhGZpEmJI.crl (hash: Rhr0ETZeMCLvXYVYJTqGZXCyUaK4G6qBrsE8vM17J8o=) 2: dFZMO2VP4AqySbEQh3NK_Is5BKQ.roa (hash: ROKbXrppvP4A8pHGDyWRJNx07Y7g4bd+83JBnGx3icI=) 3: g6-XvIXV3Eql3Coxvc-nq6Kly9Y.roa (hash: 2JhAFiPl0wmw6ysVFMQAoRoFcSMoEuXFJFM5vnLJ2+M=) 4: h1oyUSQHfCUnNhv3GPjMusMqBOQ.roa (hash: zVnvi6OzjNH5JWYjXPv16C0I43oqAW042jfOToOeKNM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a5:7c:79:a2:83:4c:f6:59:25:35:47:9a:81:58:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5a83b40b3f4d7d31fb3368dafaca1199a449892 Validity Not Before: Dec 22 06:00:54 2025 GMT Not After : Dec 23 06:00:54 2025 GMT Subject: CN=1e254eb1b4f50942eba0ccba602e126e717d8ce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:57:e0:cc:04:80:f3:07:a4:7e:3c:a1:9d:ae: 7f:63:a5:4a:cd:15:de:7b:bf:41:62:5e:c1:86:3a: f6:64:db:65:3a:d6:aa:4e:d4:ec:26:49:76:80:f9: ad:a2:2e:28:f7:35:d1:65:44:33:0b:fc:c3:a2:0d: e4:52:69:ee:17:c9:6f:1b:56:f1:86:8e:67:e9:9e: d5:9b:c7:a8:e9:28:9b:2a:0d:45:1c:89:ce:77:95: 06:a4:e5:16:20:ba:85:71:d9:69:83:97:6e:63:94: c2:d6:f2:c3:1d:70:1f:6f:78:d2:40:4f:6d:a5:7c: 5d:51:71:80:0e:d0:9b:11:6c:86:55:e6:26:74:df: ad:a6:ec:ab:4f:1f:a5:be:00:2a:6b:75:31:6c:1c: 82:11:25:59:74:d1:19:90:81:c2:43:96:a6:12:b8: 4e:1a:2c:fd:1c:fb:f9:27:b2:bb:00:6f:67:ca:22: 4e:a6:7b:b0:82:82:ad:56:94:37:02:84:85:71:96: 8f:de:4e:2b:2a:fa:51:7a:f4:5a:c0:ae:17:b7:e5: c9:ed:3a:3d:22:9f:56:83:29:d6:37:5a:69:fe:b1: c4:fb:7d:95:a5:23:4a:30:38:2a:58:1d:49:d3:35: 5d:3d:39:8c:2e:43:33:52:97:30:76:cd:86:f8:41: 2b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:25:4E:B1:B4:F5:09:42:EB:A0:CC:BA:60:2E:12:6E:71:7D:8C:E9 X509v3 Authority Key Identifier: keyid:E5:A8:3B:40:B3:F4:D7:D3:1F:B3:36:8D:AF:AC:A1:19:9A:44:98:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:33:37:9b:8f:96:54:36:c7:da:ee:b7:be:c6:4c:25:65:43: 28:04:b2:e1:c6:74:25:36:43:de:28:c9:1d:87:82:53:13:00: cf:8c:a5:ab:f5:5d:47:86:e7:a6:0d:fb:84:5c:6e:ab:19:2b: aa:0d:fa:e9:c6:e7:cf:62:e5:b5:f5:67:77:c3:00:28:bc:96: 5b:e2:b2:67:e8:86:06:70:21:ca:20:c2:50:81:23:08:fe:af: 87:9b:d9:d6:14:9f:1b:34:40:ae:40:c7:d4:8c:d4:69:76:95: 2f:5a:25:e4:80:d8:54:82:98:70:81:9e:bb:5d:03:9a:b4:5c: da:75:79:11:ad:9a:0e:3c:c2:22:a9:d7:70:8e:f6:6a:f8:bf: 6f:68:2f:66:a2:32:0d:4b:e1:5f:86:1d:eb:b8:d8:b1:f7:82: 74:52:0d:b6:b6:a4:1b:76:b3:67:2c:3c:20:a5:e2:bc:c3:db: ec:3e:e1:f7:b1:e5:b5:b1:fc:a6:b1:d4:67:4d:5e:fd:5e:86: 8f:5f:a3:e6:82:7a:b7:38:0e:42:5e:e5:9e:20:fe:01:5b:01: eb:8f:a3:cd:f5:45:61:b0:b1:06:ed:8a:2d:61:80:b3:82:01: 96:1e:cf:75:32:9e:30:21:d4:77:ad:5b:7a:02:05:1d:0b:b7: 0d:6a:f9:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEpXx5ooNM9lklNUeagVjHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YTgzYjQwYjNmNGQ3ZDMxZmIzMzY4ZGFmYWNhMTE5OWE0 NDk4OTIwHhcNMjUxMjIyMDYwMDU0WhcNMjUxMjIzMDYwMDU0WjAzMTEwLwYDVQQD EygxZTI1NGViMWI0ZjUwOTQyZWJhMGNjYmE2MDJlMTI2ZTcxN2Q4Y2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlfgzASA8wekfjyhna5/Y6VKzRXe e79BYl7Bhjr2ZNtlOtaqTtTsJkl2gPmtoi4o9zXRZUQzC/zDog3kUmnuF8lvG1bx ho5n6Z7Vm8eo6SibKg1FHInOd5UGpOUWILqFcdlpg5duY5TC1vLDHXAfb3jSQE9t pXxdUXGADtCbEWyGVeYmdN+tpuyrTx+lvgAqa3UxbByCESVZdNEZkIHCQ5amErhO Giz9HPv5J7K7AG9nyiJOpnuwgoKtVpQ3AoSFcZaP3k4rKvpRevRawK4Xt+XJ7To9 Ip9WgynWN1pp/rHE+32VpSNKMDgqWB1J0zVdPTmMLkMzUpcwds2G+EErSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB4lTrG09QlC66DMumAuEm5xfYzpMB8GA1UdIwQY MBaAFOWoO0Cz9NfTH7M2ja+soRmaRJiSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWFnN1FMUDAxOU1mc3phTnI2eWhHWnBFbUpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8yNGNhYjQtMDEyNS00MzgzLTg1ZmEt M2QzODg2MDZkYTEyLzEvNWFnN1FMUDAxOU1mc3phTnI2eWhHWnBFbUpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8yNGNhYjQtMDEyNS00MzgzLTg1ZmEtM2QzODg2MDZkYTEy LzEvNWFnN1FMUDAxOU1mc3phTnI2eWhHWnBFbUpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAizM3m4+W VDbH2u63vsZMJWVDKASy4cZ0JTZD3ijJHYeCUxMAz4ylq/VdR4bnpg37hFxuqxkr qg366cbnz2LltfVnd8MAKLyWW+KyZ+iGBnAhyiDCUIEjCP6vh5vZ1hSfGzRArkDH 1IzUaXaVL1ol5IDYVIKYcIGeu10DmrRc2nV5Ea2aDjzCIqnXcI72avi/b2gvZqIy DUvhX4Yd67jYsfeCdFINtrakG3azZyw8IKXivMPb7D7h97HltbH8prHUZ01e/V6G j1+j5oJ6tzgOQl7lniD+AVsB64+jzfVFYbCxBu2KLWGAs4IBlh7PdTKeMCHUd61b egIFHQu3DWr50Q== -----END CERTIFICATE-----Generated at Mon Dec 22 11:31:05 2025 by rpki-client