This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft File: 5I2jNbByU21Y5rfN9M2xZEW8vDM.mft (raw, json) Hash identifier: X5qbWAlg0eAsAoarXvftG00jC1FyWRj1Jj0T9Lqn/E4= Subject key identifier: 26:32:CE:0E:6D:FB:DB:09:DB:3E:E9:40:B5:07:5F:BF:86:28:44:AE Authority key identifier: E4:8D:A3:35:B0:72:53:6D:58:E6:B7:CD:F4:CD:B1:64:45:BC:BC:33 Certificate issuer: /CN=e48da335b072536d58e6b7cdf4cdb16445bcbc33 Certificate serial: 019B4D3A8DBAEEA507F739F4216FCD603EE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft Manifest number: 0851 Signing time: Tue 23 Dec 2025 22:00:41 +0000 Manifest this update: Tue 23 Dec 2025 22:00:41 +0000 Manifest next update: Wed 24 Dec 2025 22:00:41 +0000 Files and hashes: 1: 5I2jNbByU21Y5rfN9M2xZEW8vDM.crl (hash: kaFmYf8ANTuYXiz6wPGP/kzsdehfmE3AMlBQXIzf8BQ=) 2: ysIsaLM09cg2MhKfd83ZPzLp9n4.roa (hash: Bh4BJiariQCaXX5PXErLYBqRPl/Hwd8mcol52yoHkJc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft rsync://rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:3a:8d:ba:ee:a5:07:f7:39:f4:21:6f:cd:60:3e:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e48da335b072536d58e6b7cdf4cdb16445bcbc33 Validity Not Before: Dec 23 22:00:41 2025 GMT Not After : Dec 24 22:00:41 2025 GMT Subject: CN=2632ce0e6dfbdb09db3ee940b5075fbf862844ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:23:0c:10:fe:43:37:d0:ec:24:57:a2:c5:7a: a5:de:36:f6:0b:74:c9:6d:bd:ff:9a:ad:e7:1e:0d: 16:b4:ec:3c:ee:3c:e2:71:c2:b3:5c:53:80:ab:92: d4:a5:d9:f2:c2:28:4c:bb:bc:6a:3f:a9:37:2b:bf: f5:33:60:12:40:8a:29:e9:52:7e:a8:1d:2c:e1:58: a1:d3:28:e8:5d:04:d9:10:f6:cc:1b:8f:8a:d4:a1: 58:ed:b9:38:9b:5c:bb:41:39:4c:ca:90:0c:c8:e2: 68:d4:f7:7a:b5:fd:f4:5c:34:a0:34:dc:6a:9e:65: 7f:1c:89:21:9e:05:c2:35:04:ce:3f:c1:00:be:90: 29:29:39:87:2a:6d:e1:35:6b:2f:2c:a3:52:54:10: 8e:25:e6:de:e0:ab:4a:f6:7e:a6:16:3e:4b:35:dc: 42:68:2f:2b:c0:60:79:cc:34:d7:7a:bc:f9:dc:fe: f1:ce:23:7c:c0:58:50:63:a9:6f:39:37:81:a4:2b: 99:58:6c:cd:b7:f9:3f:08:15:8f:81:89:a8:30:0f: ee:47:9c:8b:f8:bf:5c:e3:39:c3:3b:47:df:3e:78: 4f:a8:c0:7d:34:8a:4f:28:76:62:ec:b7:97:70:d5: f0:b4:13:d5:2b:67:e9:58:29:7e:9c:b1:8a:54:c3: 8b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:32:CE:0E:6D:FB:DB:09:DB:3E:E9:40:B5:07:5F:BF:86:28:44:AE X509v3 Authority Key Identifier: keyid:E4:8D:A3:35:B0:72:53:6D:58:E6:B7:CD:F4:CD:B1:64:45:BC:BC:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:1d:63:cb:a1:09:7f:1e:85:3c:21:5c:a3:74:b4:d0:b3:03: 3e:88:33:9e:82:ca:cb:3e:56:38:0d:b9:4a:15:eb:44:a1:f4: 8c:00:f7:65:ac:77:b7:d2:c9:d5:34:de:41:da:67:4d:6a:a1: cc:88:b4:d4:6b:25:6f:9f:4d:88:a5:a8:cc:1b:fc:2d:bd:14: 70:a1:04:cc:74:1f:76:ab:46:f0:79:dc:28:37:4d:3d:f6:9f: e7:cd:4a:12:45:39:b0:dd:65:ac:5f:0e:24:b2:59:85:06:d8: 16:73:4b:04:49:73:2d:ba:4c:e6:1a:9c:fe:37:59:6e:68:b6: 33:24:07:31:f7:50:f5:8e:ea:9b:e2:5b:d4:0b:48:6f:cc:24: 57:92:0f:64:9a:84:eb:90:da:c9:45:1b:14:09:b0:29:1b:78: 24:9d:68:8f:79:86:45:7b:ae:44:9b:5a:01:4e:c6:e5:ac:77: e8:0a:13:ba:cb:c3:79:0a:d7:ba:ef:0a:46:a2:76:6e:6c:84: 70:54:a2:b6:00:2d:ab:5f:33:b1:30:9c:69:c4:6d:33:76:de: d6:e9:58:fe:9d:cb:d2:fb:a7:fd:41:c8:c1:a8:0e:c6:c5:5e: a1:f8:dc:84:29:dc:74:e6:6d:61:d2:09:8b:d7:33:f9:ec:08: a7:13:a5:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtNOo267qUH9zn0IW/NYD7iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0OGRhMzM1YjA3MjUzNmQ1OGU2YjdjZGY0Y2RiMTY0NDVi Y2JjMzMwHhcNMjUxMjIzMjIwMDQxWhcNMjUxMjI0MjIwMDQxWjAzMTEwLwYDVQQD EygyNjMyY2UwZTZkZmJkYjA5ZGIzZWU5NDBiNTA3NWZiZjg2Mjg0NGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyMMEP5DN9DsJFeixXql3jb2C3TJ bb3/mq3nHg0WtOw87jziccKzXFOAq5LUpdnywihMu7xqP6k3K7/1M2ASQIop6VJ+ qB0s4Vih0yjoXQTZEPbMG4+K1KFY7bk4m1y7QTlMypAMyOJo1Pd6tf30XDSgNNxq nmV/HIkhngXCNQTOP8EAvpApKTmHKm3hNWsvLKNSVBCOJebe4KtK9n6mFj5LNdxC aC8rwGB5zDTXerz53P7xziN8wFhQY6lvOTeBpCuZWGzNt/k/CBWPgYmoMA/uR5yL +L9c4znDO0ffPnhPqMB9NIpPKHZi7LeXcNXwtBPVK2fpWCl+nLGKVMOLpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCYyzg5t+9sJ2z7pQLUHX7+GKESuMB8GA1UdIwQY MBaAFOSNozWwclNtWOa3zfTNsWRFvLwzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUkyak5iQnlVMjFZNXJmTjlNMnhaRVc4dkRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC83OTUwOTgtYTJmMC00NzMzLTk3MDkt ZTZlYjkxOWQ3YTAyLzEvNUkyak5iQnlVMjFZNXJmTjlNMnhaRVc4dkRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC83OTUwOTgtYTJmMC00NzMzLTk3MDktZTZlYjkxOWQ3YTAy LzEvNUkyak5iQnlVMjFZNXJmTjlNMnhaRVc4dkRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJB1jy6EJ fx6FPCFco3S00LMDPogznoLKyz5WOA25ShXrRKH0jAD3Zax3t9LJ1TTeQdpnTWqh zIi01Gslb59NiKWozBv8Lb0UcKEEzHQfdqtG8HncKDdNPfaf581KEkU5sN1lrF8O JLJZhQbYFnNLBElzLbpM5hqc/jdZbmi2MyQHMfdQ9Y7qm+Jb1AtIb8wkV5IPZJqE 65DayUUbFAmwKRt4JJ1oj3mGRXuuRJtaAU7G5ax36AoTusvDeQrXuu8KRqJ2bmyE cFSitgAtq18zsTCcacRtM3be1ulY/p3L0vun/UHIwagOxsVeofjchCncdOZtYdIJ i9cz+ewIpxOlew== -----END CERTIFICATE-----Generated at Wed Dec 24 02:57:56 2025 by rpki-client