This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft File: 5ag7QLP019MfszaNr6yhGZpEmJI.mft (raw, json) Hash identifier: sclGor5u0dU5YEreB9ZtTz66U5SXanz+WQ9or6jcPF8= Subject key identifier: 8C:D5:E6:47:BA:29:40:AF:73:CA:D9:39:18:45:96:CD:64:45:E7:C9 Authority key identifier: E5:A8:3B:40:B3:F4:D7:D3:1F:B3:36:8D:AF:AC:A1:19:9A:44:98:92 Certificate issuer: /CN=e5a83b40b3f4d7d31fb3368dafaca1199a449892 Certificate serial: 019B560718DDBB7BD6E37665EFE6B0E9947A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft Manifest number: 07A8 Signing time: Thu 25 Dec 2025 15:01:04 +0000 Manifest this update: Thu 25 Dec 2025 15:01:04 +0000 Manifest next update: Fri 26 Dec 2025 15:01:04 +0000 Files and hashes: 1: 5ag7QLP019MfszaNr6yhGZpEmJI.crl (hash: bGMXbqH2kQbUpvM22D1lnDQthGtVIsCTBx27k5GJ5fA=) 2: dFZMO2VP4AqySbEQh3NK_Is5BKQ.roa (hash: ROKbXrppvP4A8pHGDyWRJNx07Y7g4bd+83JBnGx3icI=) 3: g6-XvIXV3Eql3Coxvc-nq6Kly9Y.roa (hash: 2JhAFiPl0wmw6ysVFMQAoRoFcSMoEuXFJFM5vnLJ2+M=) 4: h1oyUSQHfCUnNhv3GPjMusMqBOQ.roa (hash: zVnvi6OzjNH5JWYjXPv16C0I43oqAW042jfOToOeKNM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:07:18:dd:bb:7b:d6:e3:76:65:ef:e6:b0:e9:94:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5a83b40b3f4d7d31fb3368dafaca1199a449892 Validity Not Before: Dec 25 15:01:04 2025 GMT Not After : Dec 26 15:01:04 2025 GMT Subject: CN=8cd5e647ba2940af73cad939184596cd6445e7c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d4:25:26:01:38:6d:cd:ca:81:e5:e0:4d:59: 02:e0:16:e8:7e:57:ce:5a:ca:36:d9:3c:d0:d1:5f: 25:bf:f9:38:d5:c0:a5:57:ab:7e:3a:0e:2f:90:03: 5f:96:0e:90:eb:66:ad:58:e1:c2:4e:b0:68:f1:05: 79:a3:dc:3a:f0:a1:42:40:30:fa:a1:c2:ba:e0:ca: 7c:26:b8:90:44:ba:65:f0:9f:e1:64:f5:78:68:4e: 54:f7:29:9c:f3:21:6b:40:d3:6d:6c:e8:23:fe:b7: b4:47:c8:6b:49:03:74:14:0f:6e:fb:5c:2b:5a:9c: de:b0:35:89:e0:27:8e:56:d6:74:2f:65:c8:59:67: 5f:1d:3f:dd:65:3f:89:ea:99:b8:92:55:2a:77:77: f1:ed:17:83:b9:c2:5a:32:8e:48:d2:9d:27:eb:eb: f8:41:db:c1:b3:f7:e1:6e:a1:29:e0:88:1e:61:d1: 89:a6:b7:6b:0b:91:d0:1b:ac:02:30:fb:a8:fc:a7: 8b:cb:f4:1b:57:7d:b0:23:04:ce:53:fe:f9:75:4f: d6:e2:f9:9a:ea:51:09:2d:4f:48:03:bf:b0:6d:85: 4f:1a:41:0f:b1:8f:d2:58:6f:c9:b4:fd:e9:9b:ba: 54:26:2e:66:43:3a:c7:fc:0d:98:36:9b:f4:c2:1a: a4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D5:E6:47:BA:29:40:AF:73:CA:D9:39:18:45:96:CD:64:45:E7:C9 X509v3 Authority Key Identifier: keyid:E5:A8:3B:40:B3:F4:D7:D3:1F:B3:36:8D:AF:AC:A1:19:9A:44:98:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:0f:7a:e2:f2:73:79:2a:d4:65:28:cc:76:f1:b5:28:81:50: 1a:00:67:7b:b6:e8:5d:c6:87:32:d1:b1:f1:12:f7:e1:af:5d: 5d:2f:6f:c5:0b:28:88:87:7a:da:33:9b:cb:b1:4c:06:84:5b: 38:04:9b:b0:5f:ae:70:0e:7f:05:ef:29:7d:c6:d1:7a:b2:30: 7b:0d:6f:2f:bb:c4:45:50:68:47:49:61:70:92:04:9a:79:56: 7e:3a:8f:f1:61:ee:d9:4f:7b:d9:dc:50:f2:03:38:11:c0:2a: 82:30:1e:d2:be:42:38:8c:f4:56:e6:96:ef:f2:11:4f:fb:c6: 54:a7:54:5d:4f:38:76:fb:4a:c4:60:c9:8f:f9:64:5a:f2:ae: 12:42:70:6d:ae:b5:05:13:e8:75:99:83:26:9f:fc:a2:ea:62: 08:40:cf:e9:d8:c9:11:29:50:8e:66:45:61:b1:82:a0:15:37: 46:51:f8:18:88:70:06:50:1e:2b:25:39:bf:ae:4b:18:db:03: 16:0a:56:14:95:67:a9:ca:da:fd:c7:2b:78:e7:9a:81:3f:f0: b4:f1:b5:77:17:fc:ac:8e:fe:64:f7:b3:38:9f:66:46:cf:a4: 33:f6:df:db:af:67:f1:92:e6:25:2b:b8:c6:d9:ad:f5:e6:04: 7f:45:5f:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWBxjdu3vW43Zl7+aw6ZR6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YTgzYjQwYjNmNGQ3ZDMxZmIzMzY4ZGFmYWNhMTE5OWE0 NDk4OTIwHhcNMjUxMjI1MTUwMTA0WhcNMjUxMjI2MTUwMTA0WjAzMTEwLwYDVQQD Eyg4Y2Q1ZTY0N2JhMjk0MGFmNzNjYWQ5MzkxODQ1OTZjZDY0NDVlN2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudQlJgE4bc3KgeXgTVkC4BboflfO Wso22TzQ0V8lv/k41cClV6t+Og4vkANflg6Q62atWOHCTrBo8QV5o9w68KFCQDD6 ocK64Mp8JriQRLpl8J/hZPV4aE5U9ymc8yFrQNNtbOgj/re0R8hrSQN0FA9u+1wr WpzesDWJ4CeOVtZ0L2XIWWdfHT/dZT+J6pm4klUqd3fx7ReDucJaMo5I0p0n6+v4 QdvBs/fhbqEp4IgeYdGJprdrC5HQG6wCMPuo/KeLy/QbV32wIwTOU/75dU/W4vma 6lEJLU9IA7+wbYVPGkEPsY/SWG/JtP3pm7pUJi5mQzrH/A2YNpv0whqkWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIzV5ke6KUCvc8rZORhFls1kRefJMB8GA1UdIwQY MBaAFOWoO0Cz9NfTH7M2ja+soRmaRJiSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWFnN1FMUDAxOU1mc3phTnI2eWhHWnBFbUpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8yNGNhYjQtMDEyNS00MzgzLTg1ZmEt M2QzODg2MDZkYTEyLzEvNWFnN1FMUDAxOU1mc3phTnI2eWhHWnBFbUpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8yNGNhYjQtMDEyNS00MzgzLTg1ZmEtM2QzODg2MDZkYTEy LzEvNWFnN1FMUDAxOU1mc3phTnI2eWhHWnBFbUpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEw964vJz eSrUZSjMdvG1KIFQGgBne7boXcaHMtGx8RL34a9dXS9vxQsoiId62jOby7FMBoRb OASbsF+ucA5/Be8pfcbRerIwew1vL7vERVBoR0lhcJIEmnlWfjqP8WHu2U972dxQ 8gM4EcAqgjAe0r5COIz0VuaW7/IRT/vGVKdUXU84dvtKxGDJj/lkWvKuEkJwba61 BRPodZmDJp/8oupiCEDP6djJESlQjmZFYbGCoBU3RlH4GIhwBlAeKyU5v65LGNsD FgpWFJVnqcra/ccreOeagT/wtPG1dxf8rI7+ZPezOJ9mRs+kM/bf269n8ZLmJSu4 xtmt9eYEf0Vf9Q== -----END CERTIFICATE-----Generated at Thu Dec 25 19:40:22 2025 by rpki-client