This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.mft File: 5H48mpUfGxWBE6t8PfGd_DNtnu8.mft (raw, json) Hash identifier: duvN/aPukm4KQckiG36J+wnWLH8r9VODVZOWD6CvoPU= Subject key identifier: 61:E4:CF:74:2A:1B:F6:30:78:76:10:57:92:C6:97:44:D0:5C:32:DB Authority key identifier: E4:7E:3C:9A:95:1F:1B:15:81:13:AB:7C:3D:F1:9D:FC:33:6D:9E:EF Certificate issuer: /CN=e47e3c9a951f1b158113ab7c3df19dfc336d9eef Certificate serial: 019B3CEC4C9617985BDF0AAC5B835E86256F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5H48mpUfGxWBE6t8PfGd_DNtnu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.mft Manifest number: 0287 Signing time: Sat 20 Dec 2025 18:01:17 +0000 Manifest this update: Sat 20 Dec 2025 18:01:17 +0000 Manifest next update: Sun 21 Dec 2025 18:01:17 +0000 Files and hashes: 1: 5H48mpUfGxWBE6t8PfGd_DNtnu8.crl (hash: v920aETQcNVKeFm2btCN64l38RsPFUd1ZvvFlTbUy/A=) 2: Q9CRQZy3s0gtS_tA2FymWdsC4t4.roa (hash: 9hBwRUtzjTqHG1Gie71trio1LQkRxaOtaflWu8/l7K4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.mft rsync://rpki.ripe.net/repository/DEFAULT/5H48mpUfGxWBE6t8PfGd_DNtnu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:4c:96:17:98:5b:df:0a:ac:5b:83:5e:86:25:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e47e3c9a951f1b158113ab7c3df19dfc336d9eef Validity Not Before: Dec 20 18:01:17 2025 GMT Not After : Dec 21 18:01:17 2025 GMT Subject: CN=61e4cf742a1bf6307876105792c69744d05c32db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:10:21:20:50:95:22:99:f0:09:18:8d:0c:3a: da:05:92:f2:bb:10:4b:c7:98:41:48:16:0a:28:48: c0:f7:ee:2d:99:33:0e:45:20:81:3b:01:ca:6a:42: cd:ab:0a:a0:58:60:fb:4b:46:82:74:49:e6:d9:6a: 91:d8:4d:b4:c7:e1:47:60:4c:df:0d:f4:48:46:07: dc:07:26:e5:9e:ea:82:76:a0:68:05:41:87:85:04: 52:d4:9a:67:15:69:eb:e8:2d:2c:5b:d2:46:f4:a8: 40:87:9a:5d:5b:c7:67:76:9d:ae:e1:8c:06:fc:55: 49:be:d0:63:2c:61:a4:e2:9c:fc:ae:92:0a:32:33: 8d:c0:f6:b6:58:52:45:a1:a3:74:c6:fb:b8:3a:fa: f2:bf:f8:25:c3:54:1a:05:56:be:55:6b:d3:05:af: 8e:05:d7:b5:f8:89:03:06:bf:d5:6b:fb:4f:6d:f9: 96:0f:a8:91:58:43:95:6d:87:a6:38:bb:b8:0a:5f: 7a:5b:62:f4:40:3d:52:44:1c:bd:d1:64:48:03:60: c3:0a:a3:19:7a:0f:b9:d7:36:38:44:43:14:82:a6: c7:e0:19:87:44:f6:1e:34:7a:5d:a4:f5:27:31:0d: dd:0c:b7:63:f3:b2:fe:7e:69:a4:7f:31:51:04:93: 45:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:E4:CF:74:2A:1B:F6:30:78:76:10:57:92:C6:97:44:D0:5C:32:DB X509v3 Authority Key Identifier: keyid:E4:7E:3C:9A:95:1F:1B:15:81:13:AB:7C:3D:F1:9D:FC:33:6D:9E:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H48mpUfGxWBE6t8PfGd_DNtnu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:1c:79:89:7e:79:70:bb:17:2e:71:56:93:b2:35:1a:c9:0a: 21:89:55:93:0c:d7:01:fa:a6:e5:01:d2:b1:49:86:6a:89:06: ad:03:59:c8:d8:e3:fc:36:ea:52:0e:a9:e9:2e:c5:1c:c2:cd: 71:4a:60:a4:45:3f:cd:c3:fd:ba:83:74:a0:1a:7e:11:10:f5: 11:f4:9f:a3:ba:4d:42:75:18:1d:50:f1:8b:e7:d4:dd:93:ed: a0:bf:c8:33:e7:5e:78:90:28:1a:3c:52:90:39:16:29:4f:8f: e0:bc:8b:df:f9:c8:68:62:7f:50:bf:62:8e:38:17:76:9e:27: 5e:fb:3e:60:c1:80:65:28:0b:09:ae:a6:5f:b3:39:b3:14:f8: 11:85:75:fe:82:f1:3c:46:38:ef:e4:65:73:98:a6:2e:1d:97: 1c:83:1a:31:09:5a:dd:f5:df:56:94:37:31:4e:7e:d4:b0:a7: 33:9a:46:28:b8:68:cc:ef:c2:4d:6a:3c:9b:94:d6:9c:4f:51: 20:d3:b2:5e:7d:cb:aa:c5:aa:53:72:10:e6:6b:37:81:46:fa: 4a:80:66:49:75:62:fc:e2:d8:f9:c8:e5:9a:92:19:da:76:e7: dd:c2:e1:9f:a8:28:dc:01:0a:b1:7d:ad:58:21:32:41:34:ad: 69:9f:2d:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87EyWF5hb3wqsW4NehiVvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0N2UzYzlhOTUxZjFiMTU4MTEzYWI3YzNkZjE5ZGZjMzM2 ZDllZWYwHhcNMjUxMjIwMTgwMTE3WhcNMjUxMjIxMTgwMTE3WjAzMTEwLwYDVQQD Eyg2MWU0Y2Y3NDJhMWJmNjMwNzg3NjEwNTc5MmM2OTc0NGQwNWMzMmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRAhIFCVIpnwCRiNDDraBZLyuxBL x5hBSBYKKEjA9+4tmTMORSCBOwHKakLNqwqgWGD7S0aCdEnm2WqR2E20x+FHYEzf DfRIRgfcByblnuqCdqBoBUGHhQRS1JpnFWnr6C0sW9JG9KhAh5pdW8dndp2u4YwG /FVJvtBjLGGk4pz8rpIKMjONwPa2WFJFoaN0xvu4Ovryv/glw1QaBVa+VWvTBa+O Bde1+IkDBr/Va/tPbfmWD6iRWEOVbYemOLu4Cl96W2L0QD1SRBy90WRIA2DDCqMZ eg+51zY4REMUgqbH4BmHRPYeNHpdpPUnMQ3dDLdj87L+fmmkfzFRBJNF+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGHkz3QqG/YweHYQV5LGl0TQXDLbMB8GA1UdIwQY MBaAFOR+PJqVHxsVgROrfD3xnfwzbZ7vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUg0OG1wVWZHeFdCRTZ0OFBmR2RfRE50bnU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82MGFlZDEtNmY3NC00M2E5LTk3NmYt N2VkNWUzMWFlNDRmLzEvNUg0OG1wVWZHeFdCRTZ0OFBmR2RfRE50bnU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy82MGFlZDEtNmY3NC00M2E5LTk3NmYtN2VkNWUzMWFlNDRm LzEvNUg0OG1wVWZHeFdCRTZ0OFBmR2RfRE50bnU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJxx5iX55 cLsXLnFWk7I1GskKIYlVkwzXAfqm5QHSsUmGaokGrQNZyNjj/DbqUg6p6S7FHMLN cUpgpEU/zcP9uoN0oBp+ERD1EfSfo7pNQnUYHVDxi+fU3ZPtoL/IM+deeJAoGjxS kDkWKU+P4LyL3/nIaGJ/UL9ijjgXdp4nXvs+YMGAZSgLCa6mX7M5sxT4EYV1/oLx PEY47+Rlc5imLh2XHIMaMQla3fXfVpQ3MU5+1LCnM5pGKLhozO/CTWo8m5TWnE9R INOyXn3LqsWqU3IQ5ms3gUb6SoBmSXVi/OLY+cjlmpIZ2nbn3cLhn6go3AEKsX2t WCEyQTStaZ8tJQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:29:07 2025 by rpki-client