This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft File: 5lAiAKbmP3Y5etuU39g0wRaAm58.mft (raw, json) Hash identifier: E92E3pevQUC6/NxrXOCtd2SvvACGP14+G3qe/EDWN8k= Subject key identifier: 55:73:11:46:28:BF:8D:D5:80:AB:A4:35:A0:FE:CF:E2:F6:C9:C4:0B Authority key identifier: E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F Certificate issuer: /CN=e6502200a6e63f76397adb94dfd834c116809b9f Certificate serial: 019B522A0841CE6D97ACDBFB8439881E0B67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft Manifest number: 0E20 Signing time: Wed 24 Dec 2025 21:00:44 +0000 Manifest this update: Wed 24 Dec 2025 21:00:44 +0000 Manifest next update: Thu 25 Dec 2025 21:00:44 +0000 Files and hashes: 1: 5lAiAKbmP3Y5etuU39g0wRaAm58.crl (hash: mHhVCyVOzMWXUtNImKynMS3rviKZ/BiGkb3+3LBciLw=) 2: PPydfwM1qrJ_5LEP2Lu7pEc74lg.roa (hash: pMnth1QdrHrp1n0i0bRqhdBwVaon4su5sBWJ9WYdSts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:2a:08:41:ce:6d:97:ac:db:fb:84:39:88:1e:0b:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6502200a6e63f76397adb94dfd834c116809b9f Validity Not Before: Dec 24 21:00:44 2025 GMT Not After : Dec 25 21:00:44 2025 GMT Subject: CN=5573114628bf8dd580aba435a0fecfe2f6c9c40b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:48:71:01:82:ca:42:cc:27:cf:65:f0:70:bf: 14:3d:03:6e:52:eb:66:25:4a:09:83:07:60:d3:6c: f7:34:08:51:04:f3:56:29:c7:db:ed:58:bf:5a:c9: 2e:24:93:09:f4:ff:6b:d5:c9:47:56:70:38:70:be: 59:10:75:fd:50:c3:ed:f3:57:e9:23:b3:f5:38:14: 78:f6:9b:be:cc:db:8d:3f:6e:05:60:e6:e4:6c:8c: ab:80:7b:d0:7c:78:11:6b:8b:34:6e:4d:9b:9c:3a: e9:9a:0c:e2:94:23:8b:a9:c3:44:08:7d:da:59:01: 5d:af:27:b8:60:e1:30:7e:70:f9:ab:a5:62:cd:1c: 3f:dc:0f:1d:48:80:9d:17:69:5d:8d:95:26:11:6e: f6:f4:16:3d:09:86:f8:4e:dc:c0:e6:65:1e:17:ca: 46:71:0d:8c:06:04:b4:25:a9:70:db:3c:81:ce:24: e2:5e:e8:23:ad:77:38:22:ab:7e:bf:df:23:81:c6: f8:c0:0d:13:2c:75:f5:38:9a:56:d0:df:4c:31:f1: d4:4b:cf:5d:c3:5d:12:69:14:b8:7c:34:f3:5e:3a: 5c:8c:66:f8:58:50:85:97:af:d8:51:8e:5d:28:09: 05:fb:6f:88:ff:7a:10:61:7f:6c:30:99:cc:07:ec: 34:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:73:11:46:28:BF:8D:D5:80:AB:A4:35:A0:FE:CF:E2:F6:C9:C4:0B X509v3 Authority Key Identifier: keyid:E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:07:37:a7:76:14:82:52:30:1f:99:24:15:b0:fc:ee:4d:28: a1:9e:bc:11:8e:da:46:f6:fc:84:ab:9c:3a:a0:38:33:fa:63: 27:cc:95:73:5e:47:fa:46:37:bc:97:eb:0b:62:09:2c:c7:3b: 09:31:bb:35:67:46:e5:31:f8:b9:87:7d:ab:8b:72:d7:dc:4f: 1f:9e:2b:99:51:7c:71:a1:f6:20:60:a6:af:6c:00:58:ad:83: d0:8e:12:ad:cb:f1:4d:c1:89:f9:00:ba:4b:3f:ab:60:8d:44: 8d:0d:55:c8:f1:64:c1:e3:f7:97:3a:3d:98:42:52:c4:1a:8e: b6:84:c4:63:11:3c:e4:7b:60:28:5c:0d:59:8d:c2:a7:d7:86: ce:cc:78:b3:c0:ef:3d:90:3c:5b:55:c4:87:89:3e:e3:04:ff: e4:5a:b0:d0:4a:56:6a:da:52:e0:48:34:d4:c9:79:c7:88:8c: 13:c5:f0:8d:b9:e9:18:a5:a6:90:38:3a:4a:81:f7:07:c4:b6: b7:6b:92:3c:27:a9:16:0c:83:d9:55:34:18:fc:c3:54:b1:47: de:17:18:aa:0b:73:dc:ff:2c:5b:81:45:48:8d:7f:b0:a3:8e: 62:57:e5:52:cf:16:69:ab:66:ad:f4:ce:6b:c2:0a:37:a2:75: aa:4b:41:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSKghBzm2XrNv7hDmIHgtnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2NTAyMjAwYTZlNjNmNzYzOTdhZGI5NGRmZDgzNGMxMTY4 MDliOWYwHhcNMjUxMjI0MjEwMDQ0WhcNMjUxMjI1MjEwMDQ0WjAzMTEwLwYDVQQD Eyg1NTczMTE0NjI4YmY4ZGQ1ODBhYmE0MzVhMGZlY2ZlMmY2YzljNDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0hxAYLKQswnz2XwcL8UPQNuUutm JUoJgwdg02z3NAhRBPNWKcfb7Vi/WskuJJMJ9P9r1clHVnA4cL5ZEHX9UMPt81fp I7P1OBR49pu+zNuNP24FYObkbIyrgHvQfHgRa4s0bk2bnDrpmgzilCOLqcNECH3a WQFdrye4YOEwfnD5q6VizRw/3A8dSICdF2ldjZUmEW729BY9CYb4TtzA5mUeF8pG cQ2MBgS0Jalw2zyBziTiXugjrXc4Iqt+v98jgcb4wA0TLHX1OJpW0N9MMfHUS89d w10SaRS4fDTzXjpcjGb4WFCFl6/YUY5dKAkF+2+I/3oQYX9sMJnMB+w0YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFVzEUYov43VgKukNaD+z+L2ycQLMB8GA1UdIwQY MBaAFOZQIgCm5j92OXrblN/YNMEWgJufMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWxBaUFLYm1QM1k1ZXR1VTM5ZzB3UmFBbTU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy85ZmY2MDItYjBiZC00YzNmLWFmOTQt MmZjMzRhZDlkZDQ3LzEvNWxBaUFLYm1QM1k1ZXR1VTM5ZzB3UmFBbTU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy85ZmY2MDItYjBiZC00YzNmLWFmOTQtMmZjMzRhZDlkZDQ3 LzEvNWxBaUFLYm1QM1k1ZXR1VTM5ZzB3UmFBbTU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATQc3p3YU glIwH5kkFbD87k0ooZ68EY7aRvb8hKucOqA4M/pjJ8yVc15H+kY3vJfrC2IJLMc7 CTG7NWdG5TH4uYd9q4ty19xPH54rmVF8caH2IGCmr2wAWK2D0I4SrcvxTcGJ+QC6 Sz+rYI1EjQ1VyPFkweP3lzo9mEJSxBqOtoTEYxE85HtgKFwNWY3Cp9eGzsx4s8Dv PZA8W1XEh4k+4wT/5Fqw0EpWatpS4Eg01Ml5x4iME8XwjbnpGKWmkDg6SoH3B8S2 t2uSPCepFgyD2VU0GPzDVLFH3hcYqgtz3P8sW4FFSI1/sKOOYlflUs8WaatmrfTO a8IKN6J1qktByg== -----END CERTIFICATE-----Generated at Thu Dec 25 03:33:04 2025 by rpki-client