This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft File: 5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft (raw, json) Hash identifier: joeFbIyFLZgFRHu2CZoGiN+Kmw5HIba4D3CQm0DYVCI= Subject key identifier: E6:1A:94:B2:1C:D1:99:D5:88:4B:B8:45:43:A7:2C:50:A0:42:33:94 Authority key identifier: E5:77:31:EA:85:7B:90:3A:A4:0A:8E:5F:D8:D8:84:46:50:5B:52:33 Certificate issuer: /CN=e57731ea857b903aa40a8e5fd8d88446505b5233 Certificate serial: 019B2E54AAA1EBC474492A4CA7219CC65E6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Xcx6oV7kDqkCo5f2NiERlBbUjM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft Manifest number: 1781 Signing time: Wed 17 Dec 2025 22:00:59 +0000 Manifest this update: Wed 17 Dec 2025 22:00:59 +0000 Manifest next update: Thu 18 Dec 2025 22:00:59 +0000 Files and hashes: 1: 5Xcx6oV7kDqkCo5f2NiERlBbUjM.crl (hash: uZew1QKh5wCUs/5UVeaqUoL/yAdNx997HIax/kzR4AA=) 2: orFnLXI1TH7Jt_MUuyCNlezlJcQ.roa (hash: hsQhpxV8CsTitmZs0YwImGnMA+twiLDEhUnDv5rariM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft rsync://rpki.ripe.net/repository/DEFAULT/5Xcx6oV7kDqkCo5f2NiERlBbUjM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:54:aa:a1:eb:c4:74:49:2a:4c:a7:21:9c:c6:5e:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e57731ea857b903aa40a8e5fd8d88446505b5233 Validity Not Before: Dec 17 22:00:59 2025 GMT Not After : Dec 18 22:00:59 2025 GMT Subject: CN=e61a94b21cd199d5884bb84543a72c50a0423394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0e:74:74:40:2e:73:5d:f3:2b:a2:02:8f:9f: 0b:42:08:77:7e:bc:db:95:1f:c6:0f:98:59:3a:45: b3:0a:47:d7:c8:8d:7e:f8:e3:f7:a1:3c:21:75:a2: fd:be:5e:3e:86:a6:14:fe:f6:6b:81:0d:9a:6e:16: 45:db:4b:0b:73:e6:41:47:d6:07:12:c0:1c:9a:a4: f7:19:33:49:8b:86:9e:a5:2b:d8:18:c3:94:0f:e8: 73:ef:40:f8:a3:8b:79:be:2a:71:a7:9e:93:71:fa: ce:f9:73:21:2c:fb:22:b4:dc:f5:8f:d6:d0:15:55: 9d:19:b8:b8:7a:1b:d1:a5:78:a3:31:8d:e0:85:13: 52:db:df:37:c0:35:3f:81:72:8f:98:29:25:5e:ab: ea:62:94:81:18:fa:a8:8b:c7:46:21:6e:b8:52:41: f2:14:ea:02:ff:d4:17:fd:f3:b8:8d:76:a1:6f:cd: e5:ca:a0:64:04:a4:dd:e3:30:b7:bd:5c:28:86:0e: ee:98:3f:ca:cd:f6:f7:c0:9f:4e:8a:5e:47:ff:89: ba:27:73:fe:e3:82:2c:9f:df:82:91:00:58:62:94: ee:5b:69:75:20:30:2c:7a:36:93:fe:76:bf:5d:5f: 4e:94:49:2b:93:4a:e9:8a:3b:8f:df:fd:aa:77:1a: 5c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:1A:94:B2:1C:D1:99:D5:88:4B:B8:45:43:A7:2C:50:A0:42:33:94 X509v3 Authority Key Identifier: keyid:E5:77:31:EA:85:7B:90:3A:A4:0A:8E:5F:D8:D8:84:46:50:5B:52:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Xcx6oV7kDqkCo5f2NiERlBbUjM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:52:3e:2b:cc:06:57:ad:72:a2:06:8f:42:ff:d9:ef:1b:f9: f4:cc:88:b3:e9:10:7a:49:d7:7b:b5:75:75:81:82:d2:51:f0: fb:e8:92:f2:4c:b7:aa:5d:b6:7b:5d:94:0d:55:94:7a:b1:5c: 13:36:6a:9c:79:77:f2:ef:03:91:ff:b6:f1:08:0b:92:8f:6a: f2:1a:d6:50:d7:c8:22:fb:9d:ea:47:af:79:0c:93:23:3c:3f: 29:d5:ba:d0:54:6a:b3:9a:db:00:37:06:e0:b3:34:1a:ef:1a: 08:7c:e6:f2:e4:00:65:a0:66:62:f1:ff:46:51:54:c8:14:ae: 16:57:fa:f8:09:ff:ac:04:33:6c:7d:61:86:5a:c7:42:70:90: 8b:07:c5:86:ae:30:66:a7:51:a2:a1:26:5d:f4:eb:c2:12:27: c6:a4:08:26:fd:58:0a:1a:71:51:10:12:1a:47:8a:4d:ee:5b: 23:81:d7:61:28:33:fa:31:37:a2:24:46:6b:7e:96:b2:7c:ca: 7b:fc:37:96:14:25:ee:c4:1f:1b:0e:c3:b7:d3:9c:50:8c:a7: 75:c0:e0:02:ef:f7:d9:43:00:19:fb:1c:8a:d3:9c:c9:3f:27: 5b:7b:dd:fd:95:d5:af:42:49:6d:84:11:8a:a9:11:7b:6c:bd: 24:13:0e:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuVKqh68R0SSpMpyGcxl5rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NzczMWVhODU3YjkwM2FhNDBhOGU1ZmQ4ZDg4NDQ2NTA1 YjUyMzMwHhcNMjUxMjE3MjIwMDU5WhcNMjUxMjE4MjIwMDU5WjAzMTEwLwYDVQQD EyhlNjFhOTRiMjFjZDE5OWQ1ODg0YmI4NDU0M2E3MmM1MGEwNDIzMzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvg50dEAuc13zK6ICj58LQgh3frzb lR/GD5hZOkWzCkfXyI1++OP3oTwhdaL9vl4+hqYU/vZrgQ2abhZF20sLc+ZBR9YH EsAcmqT3GTNJi4aepSvYGMOUD+hz70D4o4t5vipxp56TcfrO+XMhLPsitNz1j9bQ FVWdGbi4ehvRpXijMY3ghRNS2983wDU/gXKPmCklXqvqYpSBGPqoi8dGIW64UkHy FOoC/9QX/fO4jXahb83lyqBkBKTd4zC3vVwohg7umD/Kzfb3wJ9Oil5H/4m6J3P+ 44Isn9+CkQBYYpTuW2l1IDAsejaT/na/XV9OlEkrk0rpijuP3/2qdxpcQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOYalLIc0ZnViEu4RUOnLFCgQjOUMB8GA1UdIwQY MBaAFOV3MeqFe5A6pAqOX9jYhEZQW1IzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVhjeDZvVjdrRHFrQ281ZjJOaUVSbEJiVWpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hZmJiNjItMDA5OC00MmIzLTgxYWUt ZjBiYjJlMTVmNmQwLzEvNVhjeDZvVjdrRHFrQ281ZjJOaUVSbEJiVWpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9hZmJiNjItMDA5OC00MmIzLTgxYWUtZjBiYjJlMTVmNmQw LzEvNVhjeDZvVjdrRHFrQ281ZjJOaUVSbEJiVWpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmVI+K8wG V61yogaPQv/Z7xv59MyIs+kQeknXe7V1dYGC0lHw++iS8ky3ql22e12UDVWUerFc EzZqnHl38u8Dkf+28QgLko9q8hrWUNfIIvud6keveQyTIzw/KdW60FRqs5rbADcG 4LM0Gu8aCHzm8uQAZaBmYvH/RlFUyBSuFlf6+An/rAQzbH1hhlrHQnCQiwfFhq4w ZqdRoqEmXfTrwhInxqQIJv1YChpxURASGkeKTe5bI4HXYSgz+jE3oiRGa36WsnzK e/w3lhQl7sQfGw7Dt9OcUIyndcDgAu/32UMAGfscitOcyT8nW3vd/ZXVr0JJbYQR iqkRe2y9JBMO2g== -----END CERTIFICATE-----Generated at Thu Dec 18 02:36:07 2025 by rpki-client