This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft File: 5LTFOvZfC4OWuVtNB9TsTnvid-U.mft (raw, json) Hash identifier: 3MDQk4kY2TW57WFfUQbKVxzQckixACA17DCQplE5PWc= Subject key identifier: B5:02:03:0C:16:7F:9F:90:0A:3A:62:F6:0B:CD:FA:C4:0F:23:F9:7D Authority key identifier: E4:B4:C5:3A:F6:5F:0B:83:96:B9:5B:4D:07:D4:EC:4E:7B:E2:77:E5 Certificate issuer: /CN=e4b4c53af65f0b8396b95b4d07d4ec4e7be277e5 Certificate serial: 019B612F4B94694C673218FD1200E1B5B7B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft Manifest number: 179C Signing time: Sat 27 Dec 2025 19:00:47 +0000 Manifest this update: Sat 27 Dec 2025 19:00:47 +0000 Manifest next update: Sun 28 Dec 2025 19:00:47 +0000 Files and hashes: 1: 5LTFOvZfC4OWuVtNB9TsTnvid-U.crl (hash: 7PBJq0DaGGlmlkF+FU1yTEgs4BEjjj5qDYTgrPJK+Mc=) 2: HPP-Y8CcP39de0XZZOWjFIJ96v4.roa (hash: wqE/NVLKIIjuJJuVTQbIHrmfJEIIZJeODzcidgoveO0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 15:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:61:2f:4b:94:69:4c:67:32:18:fd:12:00:e1:b5:b7:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4b4c53af65f0b8396b95b4d07d4ec4e7be277e5 Validity Not Before: Dec 27 19:00:47 2025 GMT Not After : Dec 28 19:00:47 2025 GMT Subject: CN=b502030c167f9f900a3a62f60bcdfac40f23f97d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:f4:72:ce:c5:80:e3:d9:95:a5:3f:51:4a:a5: 39:41:ab:12:12:78:a1:2a:84:0d:ec:f6:ca:2b:11: 9c:7c:1d:c2:96:ba:06:b3:75:32:78:33:0e:15:0c: 6a:ee:50:b4:df:e9:b3:e4:e5:f6:d2:29:e1:b3:51: 27:2b:f5:a3:f0:f2:27:47:7e:c8:5d:fb:df:22:c3: 55:c3:d5:91:a3:57:67:c0:26:67:19:99:89:83:48: db:e0:20:5b:63:20:f6:38:bc:1f:24:67:93:26:fa: 23:17:db:dc:5b:32:9d:e8:86:d2:80:42:78:fb:6f: 5f:bb:d9:4d:a8:c2:7e:80:07:19:e2:10:9a:07:43: c5:ee:89:0b:a2:32:ef:de:47:81:1f:15:7e:9e:ae: e7:32:f3:73:7a:6d:ce:bb:4b:19:d2:a0:93:9f:a2: 0e:8d:29:fc:9d:a4:82:2a:f6:58:b6:25:9f:b9:ce: aa:ca:76:f8:a2:4b:ba:02:56:f0:af:9b:57:c9:79: e9:66:41:bc:b5:5b:b7:f2:70:f1:9d:c5:b3:d4:95: 7b:a1:41:82:9d:25:de:8d:26:49:53:88:91:e5:cd: 6e:19:3b:c5:40:70:2b:b1:5d:26:e1:1e:35:5b:ac: e1:6a:61:14:15:b9:45:67:1d:31:b6:6f:4a:f2:b4: e6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:02:03:0C:16:7F:9F:90:0A:3A:62:F6:0B:CD:FA:C4:0F:23:F9:7D X509v3 Authority Key Identifier: keyid:E4:B4:C5:3A:F6:5F:0B:83:96:B9:5B:4D:07:D4:EC:4E:7B:E2:77:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:9b:90:c1:b7:66:74:cf:0d:eb:92:3c:46:8a:dd:88:3d:19: 2b:43:95:1b:0c:07:4f:d2:2d:ac:f4:2f:ff:dc:e8:64:1d:0b: e0:95:9d:63:28:67:fc:93:40:b9:5b:a3:88:3a:2b:13:36:ad: 3e:c6:82:f3:81:43:67:9f:33:62:6a:8d:3e:e7:c3:f1:09:c3: 05:10:7a:59:01:5b:67:fa:3f:e2:0c:ae:e1:a1:1a:06:06:cc: db:b8:f5:10:d2:07:51:ad:2e:86:6c:73:04:da:01:c5:fc:f6: 8c:88:d8:15:69:d3:d9:27:93:d3:00:84:ff:9e:57:df:fa:45: 86:f3:92:92:e6:58:f7:59:60:67:a8:fe:d0:4c:db:d5:a3:f5: e6:a5:a6:77:0c:21:5a:71:98:a4:4e:72:8e:6d:a6:83:51:70: 94:9c:ea:b4:1f:33:98:61:6f:9b:80:6a:72:58:23:ee:81:0c: 7a:35:5e:66:a8:6d:0c:36:3b:7d:7c:dd:dd:04:e6:00:f7:97: b0:ee:49:d1:c0:82:49:2a:02:8f:cc:75:e8:68:ee:fa:2f:9e: 67:a6:9d:1c:fc:a5:30:9b:78:53:da:5b:ae:16:0c:fc:34:1c: 88:49:a3:a2:05:cf:c3:76:99:16:30:09:fa:ca:b3:f7:48:5c: 88:04:c1:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZthL0uUaUxnMhj9EgDhtbewMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YjRjNTNhZjY1ZjBiODM5NmI5NWI0ZDA3ZDRlYzRlN2Jl Mjc3ZTUwHhcNMjUxMjI3MTkwMDQ3WhcNMjUxMjI4MTkwMDQ3WjAzMTEwLwYDVQQD EyhiNTAyMDMwYzE2N2Y5ZjkwMGEzYTYyZjYwYmNkZmFjNDBmMjNmOTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6vRyzsWA49mVpT9RSqU5QasSEnih KoQN7PbKKxGcfB3ClroGs3UyeDMOFQxq7lC03+mz5OX20inhs1EnK/Wj8PInR37I XfvfIsNVw9WRo1dnwCZnGZmJg0jb4CBbYyD2OLwfJGeTJvojF9vcWzKd6IbSgEJ4 +29fu9lNqMJ+gAcZ4hCaB0PF7okLojLv3keBHxV+nq7nMvNzem3Ou0sZ0qCTn6IO jSn8naSCKvZYtiWfuc6qynb4oku6Albwr5tXyXnpZkG8tVu38nDxncWz1JV7oUGC nSXejSZJU4iR5c1uGTvFQHArsV0m4R41W6zhamEUFblFZx0xtm9K8rTmSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLUCAwwWf5+QCjpi9gvN+sQPI/l9MB8GA1UdIwQY MBaAFOS0xTr2XwuDlrlbTQfU7E574nflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUxURk92WmZDNE9XdVZ0TkI5VHNUbnZpZC1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi80NmFhYmYtZGFkMC00ZDc2LWE1YjUt ODhkYjAxMjVhNmI4LzEvNUxURk92WmZDNE9XdVZ0TkI5VHNUbnZpZC1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi80NmFhYmYtZGFkMC00ZDc2LWE1YjUtODhkYjAxMjVhNmI4 LzEvNUxURk92WmZDNE9XdVZ0TkI5VHNUbnZpZC1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA5uQwbdm dM8N65I8RordiD0ZK0OVGwwHT9ItrPQv/9zoZB0L4JWdYyhn/JNAuVujiDorEzat PsaC84FDZ58zYmqNPufD8QnDBRB6WQFbZ/o/4gyu4aEaBgbM27j1ENIHUa0uhmxz BNoBxfz2jIjYFWnT2SeT0wCE/55X3/pFhvOSkuZY91lgZ6j+0Ezb1aP15qWmdwwh WnGYpE5yjm2mg1FwlJzqtB8zmGFvm4Bqclgj7oEMejVeZqhtDDY7fXzd3QTmAPeX sO5J0cCCSSoCj8x16Gju+i+eZ6adHPylMJt4U9pbrhYM/DQciEmjogXPw3aZFjAJ +sqz90hciATBJA== -----END CERTIFICATE-----Generated at Sat Dec 27 23:42:46 2025 by rpki-client