This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft File: 5YBcX-NFAofc3mreDZyVWLphXjI.mft (raw, json) Hash identifier: tpBzI8fD12oYD558xKsZWuIw+E1yFh/r/ew21LVRu3I= Subject key identifier: 0C:52:F0:D9:16:7C:8B:83:B5:B3:02:FF:3D:94:0B:F9:5E:50:34:05 Authority key identifier: E5:80:5C:5F:E3:45:02:87:DC:DE:6A:DE:0D:9C:95:58:BA:61:5E:32 Certificate issuer: /CN=e5805c5fe3450287dcde6ade0d9c9558ba615e32 Certificate serial: 019B44DCAD118FE197545BAD27DFA67BD64D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft Manifest number: 12CD Signing time: Mon 22 Dec 2025 07:01:11 +0000 Manifest this update: Mon 22 Dec 2025 07:01:11 +0000 Manifest next update: Tue 23 Dec 2025 07:01:11 +0000 Files and hashes: 1: 4smvePH69FAYNSdSIOq-IbOCEOY.roa (hash: YP4Y8XIxmd6gqrm+p+MzPpn8EJXfmEHsFE9JRUt3QgM=) 2: 5YBcX-NFAofc3mreDZyVWLphXjI.crl (hash: 9a76O1LE8PVFSf+UAgESedH1IZZud9JGUEgeLFGHHho=) 3: LE09wGjm-4tV478e5hKoYO1ss_4.roa (hash: ZvvOcJV43Cg5jGcdcMkvsbLcwJVugyuR0arAlKHmsbc=) 4: bslnxciGSGjp5x3mv5ejIjp-fOk.roa (hash: aguWPYFuH/8n3kD28WuYVtoo2iM5Q/UCEREfJbZ73y8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:dc:ad:11:8f:e1:97:54:5b:ad:27:df:a6:7b:d6:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5805c5fe3450287dcde6ade0d9c9558ba615e32 Validity Not Before: Dec 22 07:01:11 2025 GMT Not After : Dec 23 07:01:11 2025 GMT Subject: CN=0c52f0d9167c8b83b5b302ff3d940bf95e503405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7a:61:0b:d0:e9:33:4d:10:15:05:62:f3:e8: f8:18:5f:2f:f0:72:ba:bc:8d:ed:58:c2:2a:54:b4: 66:fa:e1:28:f8:b3:4b:63:9f:52:0c:d1:54:d4:dd: 5e:d2:aa:7a:fb:52:55:56:ed:9a:f9:fb:98:79:d1: 16:63:10:b4:e1:ec:a5:4f:13:d0:24:ea:c0:0b:f3: 81:6f:f6:0f:73:50:7c:13:48:ac:8a:df:17:bf:41: 9f:28:c3:06:2d:a6:b2:cb:cf:74:0a:af:dd:92:a8: 61:64:b7:40:18:cd:46:27:d7:9d:81:50:ed:9d:a8: d7:36:a3:cd:4f:b2:f8:84:00:43:54:bc:fa:44:dc: 09:0f:ff:52:45:e0:bd:48:8d:f3:da:03:6b:6d:cf: 6f:7f:8c:ab:26:88:71:0d:34:2c:9c:d7:d1:4e:f9: 98:fc:9b:28:89:2a:ac:4e:e7:67:a6:c2:3d:61:46: 5a:f3:aa:6a:bc:74:72:ef:64:ae:1e:d5:9c:de:e7: 03:16:7f:c5:97:8c:e1:94:f2:2f:75:3a:b1:1f:ef: 62:5f:30:95:0c:a4:a6:97:59:3d:18:6f:1e:2e:bb: 06:e3:7f:b1:08:96:d7:bf:a6:6a:65:3a:ac:26:50: 23:7b:2c:78:f7:33:5d:8a:38:55:04:a7:6d:ee:85: 9e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:52:F0:D9:16:7C:8B:83:B5:B3:02:FF:3D:94:0B:F9:5E:50:34:05 X509v3 Authority Key Identifier: keyid:E5:80:5C:5F:E3:45:02:87:DC:DE:6A:DE:0D:9C:95:58:BA:61:5E:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:25:df:5e:a2:f2:d0:3c:f0:89:fc:f7:d0:61:6c:47:81:4a: bf:0b:76:a5:c3:f2:cd:2e:9a:b1:03:f0:09:44:ae:58:c7:64: 0b:b0:4a:4e:64:a8:0a:7c:8e:bd:ab:12:f3:03:71:a3:6d:18: e3:aa:91:44:7c:4c:2c:7c:85:9f:a9:de:10:59:b3:08:3f:ef: db:f4:36:d1:3f:5e:b8:3c:cd:cc:44:f2:f0:be:e6:48:b7:d8: b6:a0:d6:98:78:4b:cd:3c:a5:a5:f8:5c:ae:92:34:2c:37:58: 3f:e3:fc:c2:9a:6f:00:d0:82:3e:22:34:a7:f3:4a:a2:dc:fe: c0:61:72:fd:cc:f4:ed:2e:50:24:9c:d3:ca:64:46:3b:27:e5: 16:94:56:5c:77:74:70:4a:5f:ad:15:d2:e1:4e:2c:e9:d9:f6: 75:be:9e:09:62:aa:86:65:2e:0e:fc:b6:e8:ae:c7:4b:06:e9: f8:a6:be:4e:d2:a6:4a:05:f7:b5:e2:41:5c:ab:9c:ec:b4:0a: cb:a0:4e:7c:f3:a0:4f:68:3e:f6:2c:da:39:d7:8c:20:d0:21: 91:37:e3:32:c7:41:39:0b:c8:89:34:19:ad:f2:cd:70:bc:a5: 7f:ac:7e:3b:b6:78:3c:1d:01:7d:d3:da:50:36:f6:e7:99:fa: ca:a0:f2:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtE3K0Rj+GXVFutJ9+me9ZNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ODA1YzVmZTM0NTAyODdkY2RlNmFkZTBkOWM5NTU4YmE2 MTVlMzIwHhcNMjUxMjIyMDcwMTExWhcNMjUxMjIzMDcwMTExWjAzMTEwLwYDVQQD EygwYzUyZjBkOTE2N2M4YjgzYjViMzAyZmYzZDk0MGJmOTVlNTAzNDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXphC9DpM00QFQVi8+j4GF8v8HK6 vI3tWMIqVLRm+uEo+LNLY59SDNFU1N1e0qp6+1JVVu2a+fuYedEWYxC04eylTxPQ JOrAC/OBb/YPc1B8E0isit8Xv0GfKMMGLaayy890Cq/dkqhhZLdAGM1GJ9edgVDt najXNqPNT7L4hABDVLz6RNwJD/9SReC9SI3z2gNrbc9vf4yrJohxDTQsnNfRTvmY /JsoiSqsTudnpsI9YUZa86pqvHRy72SuHtWc3ucDFn/Fl4zhlPIvdTqxH+9iXzCV DKSml1k9GG8eLrsG43+xCJbXv6ZqZTqsJlAjeyx49zNdijhVBKdt7oWeFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAxS8NkWfIuDtbMC/z2UC/leUDQFMB8GA1UdIwQY MBaAFOWAXF/jRQKH3N5q3g2clVi6YV4yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVlCY1gtTkZBb2ZjM21yZURaeVZXTHBoWGpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iNGRjM2MtZWNhYi00MzZkLWFjNTIt NTk1MzA3ZjQ3MTEwLzEvNVlCY1gtTkZBb2ZjM21yZURaeVZXTHBoWGpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9iNGRjM2MtZWNhYi00MzZkLWFjNTItNTk1MzA3ZjQ3MTEw LzEvNVlCY1gtTkZBb2ZjM21yZURaeVZXTHBoWGpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAByXfXqLy 0Dzwifz30GFsR4FKvwt2pcPyzS6asQPwCUSuWMdkC7BKTmSoCnyOvasS8wNxo20Y 46qRRHxMLHyFn6neEFmzCD/v2/Q20T9euDzNzETy8L7mSLfYtqDWmHhLzTylpfhc rpI0LDdYP+P8wppvANCCPiI0p/NKotz+wGFy/cz07S5QJJzTymRGOyflFpRWXHd0 cEpfrRXS4U4s6dn2db6eCWKqhmUuDvy26K7HSwbp+Ka+TtKmSgX3teJBXKuc7LQK y6BOfPOgT2g+9izaOdeMINAhkTfjMsdBOQvIiTQZrfLNcLylf6x+O7Z4PB0BfdPa UDb255n6yqDy/g== -----END CERTIFICATE-----Generated at Mon Dec 22 13:58:18 2025 by rpki-client