This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft File: 5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft (raw, json) Hash identifier: Iy7JZFR7Wx5lT7ZfeO3N3O3JXYCpsM9Yth45jkqYX/E= Subject key identifier: AE:7D:91:5C:02:AD:7A:87:C0:1D:A7:7F:9A:82:FF:C0:90:2E:5F:A7 Authority key identifier: E6:23:29:9E:E4:7B:4F:61:2D:B9:0A:14:F9:5E:40:76:7A:E0:66:57 Certificate issuer: /CN=e623299ee47b4f612db90a14f95e40767ae06657 Certificate serial: 019B4BF205A82AFC2C1C9F4AE5DF05E5324A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft Manifest number: 1421 Signing time: Tue 23 Dec 2025 16:01:50 +0000 Manifest this update: Tue 23 Dec 2025 16:01:50 +0000 Manifest next update: Wed 24 Dec 2025 16:01:50 +0000 Files and hashes: 1: 25SW2pj3F9sQQZMDR2RMcEngkMc.roa (hash: sf46s/kdJrtglYzmsHfLJakYVODfs50Q1cZVZ793qWE=) 2: 5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl (hash: T8xyYXYmCpH+1Khc0I3SmQO2FxwVIWtr9P0wbSENPDk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f2:05:a8:2a:fc:2c:1c:9f:4a:e5:df:05:e5:32:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e623299ee47b4f612db90a14f95e40767ae06657 Validity Not Before: Dec 23 16:01:50 2025 GMT Not After : Dec 24 16:01:50 2025 GMT Subject: CN=ae7d915c02ad7a87c01da77f9a82ffc0902e5fa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:25:a7:91:bc:cf:77:0b:40:ad:74:cb:8c:4e: 1c:51:e6:8f:63:a7:58:82:ee:9b:df:26:33:ab:26: 61:4e:3d:06:18:91:7e:2d:da:5c:68:50:ab:6b:2b: fc:50:8e:3c:12:94:13:ef:55:55:ad:07:91:e4:80: 88:a9:db:72:fe:9e:d5:e9:e5:8a:46:c5:76:de:73: f4:ce:0f:aa:a4:04:dd:91:28:12:12:c2:8a:5a:aa: 85:c7:ce:3f:75:e2:68:3c:8b:55:e9:7c:ba:95:00: 63:cd:a4:2f:15:e1:01:64:31:d5:78:f5:dd:ff:20: 5e:19:66:f5:fb:f2:0f:5d:d0:63:48:93:e3:03:16: 4a:11:8e:00:d3:02:e6:7d:53:93:1a:e1:d1:55:f0: f3:b8:33:1a:bf:ac:0d:be:82:5e:4d:c1:20:b3:e4: 33:45:a7:fc:50:3b:55:f2:c0:dc:2e:16:4a:00:26: 35:d7:4c:ae:4a:5a:b6:a3:53:fb:52:33:b8:5f:a6: 58:3f:f6:7e:7c:c0:3d:87:b8:09:73:63:10:9a:75: c4:59:fc:37:48:b1:3f:d0:94:05:e7:78:d1:0e:71: e6:ed:f9:b2:a2:39:f4:a9:26:01:73:09:8d:f1:21: 24:4f:94:45:72:01:00:2b:7c:9e:0d:c1:87:da:55: ef:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:7D:91:5C:02:AD:7A:87:C0:1D:A7:7F:9A:82:FF:C0:90:2E:5F:A7 X509v3 Authority Key Identifier: keyid:E6:23:29:9E:E4:7B:4F:61:2D:B9:0A:14:F9:5E:40:76:7A:E0:66:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:89:2c:2b:05:91:ac:dd:81:a3:0d:4f:9e:60:f1:6a:07:04: f9:02:a1:1a:c3:5e:f0:e9:6c:3d:ae:1b:52:9c:1e:eb:7e:fa: 9b:88:f4:90:9f:ec:49:c2:8f:94:e7:74:c9:87:f7:d9:0c:9d: e2:bb:f0:d7:0e:4f:3a:a6:1e:8b:80:a9:66:14:a0:9b:71:89: d9:ac:6a:2f:2b:29:98:a9:02:10:88:cf:60:38:fa:8a:1a:7c: 5b:4c:b0:7b:e6:12:0c:5b:43:33:33:b6:ee:98:d3:a8:51:02: b9:4d:55:e4:41:04:96:5d:7c:37:b6:6c:aa:d8:fc:10:85:bd: 56:74:0c:6c:e7:a0:61:c6:45:ed:db:a3:12:8b:6d:d9:0b:ec: 3b:2d:1d:b6:be:f1:8b:39:bc:5d:db:c3:96:3c:29:99:c1:2d: 45:b7:43:cb:17:20:91:f2:7a:75:20:96:92:cc:ed:a9:de:23: 3f:27:e1:f3:59:79:cd:e4:4d:df:29:ef:16:4d:c0:e6:f2:f8: 4f:6b:e9:9e:be:4c:51:1c:62:32:0a:fe:74:81:4e:b9:b5:03: 7b:7f:7c:f3:6d:ef:fb:de:b6:14:16:3b:77:f0:0c:48:d3:da: a4:9e:bf:d5:07:db:48:a0:e7:da:38:63:3e:d2:aa:21:8c:cd: 0f:8d:d9:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8gWoKvwsHJ9K5d8F5TJKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MjMyOTllZTQ3YjRmNjEyZGI5MGExNGY5NWU0MDc2N2Fl MDY2NTcwHhcNMjUxMjIzMTYwMTUwWhcNMjUxMjI0MTYwMTUwWjAzMTEwLwYDVQQD EyhhZTdkOTE1YzAyYWQ3YTg3YzAxZGE3N2Y5YTgyZmZjMDkwMmU1ZmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyWnkbzPdwtArXTLjE4cUeaPY6dY gu6b3yYzqyZhTj0GGJF+LdpcaFCrayv8UI48EpQT71VVrQeR5ICIqdty/p7V6eWK RsV23nP0zg+qpATdkSgSEsKKWqqFx84/deJoPItV6Xy6lQBjzaQvFeEBZDHVePXd /yBeGWb1+/IPXdBjSJPjAxZKEY4A0wLmfVOTGuHRVfDzuDMav6wNvoJeTcEgs+Qz Raf8UDtV8sDcLhZKACY110yuSlq2o1P7UjO4X6ZYP/Z+fMA9h7gJc2MQmnXEWfw3 SLE/0JQF53jRDnHm7fmyojn0qSYBcwmN8SEkT5RFcgEAK3yeDcGH2lXv1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK59kVwCrXqHwB2nf5qC/8CQLl+nMB8GA1UdIwQY MBaAFOYjKZ7ke09hLbkKFPleQHZ64GZXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWlNcG51UjdUMkV0dVFvVS1WNUFkbnJnWmxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9mMzcyMDMtZjE3Mi00NTlmLTgzMTUt ODJmMjVhYzY4ODdmLzEvNWlNcG51UjdUMkV0dVFvVS1WNUFkbnJnWmxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9mMzcyMDMtZjE3Mi00NTlmLTgzMTUtODJmMjVhYzY4ODdm LzEvNWlNcG51UjdUMkV0dVFvVS1WNUFkbnJnWmxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlIksKwWR rN2Bow1PnmDxagcE+QKhGsNe8OlsPa4bUpwe6376m4j0kJ/sScKPlOd0yYf32Qyd 4rvw1w5POqYei4CpZhSgm3GJ2axqLyspmKkCEIjPYDj6ihp8W0ywe+YSDFtDMzO2 7pjTqFECuU1V5EEEll18N7Zsqtj8EIW9VnQMbOegYcZF7dujEott2QvsOy0dtr7x izm8XdvDljwpmcEtRbdDyxcgkfJ6dSCWksztqd4jPyfh81l5zeRN3ynvFk3A5vL4 T2vpnr5MURxiMgr+dIFOubUDe398823v+962FBY7d/AMSNPapJ6/1QfbSKDn2jhj PtKqIYzND43ZbQ== -----END CERTIFICATE-----Generated at Wed Dec 24 00:14:52 2025 by rpki-client