This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.mft File: 5iL2U5eBxQvEl8egtvXVBe-IudY.mft (raw, json) Hash identifier: RD2TxF5hcK9uJB3v9txmck8+SuWSD8woUVzs7GqzZfs= Subject key identifier: E9:DC:88:F5:9E:58:5E:EA:BF:67:38:53:BE:50:F9:25:D8:53:0C:DE Authority key identifier: E6:22:F6:53:97:81:C5:0B:C4:97:C7:A0:B6:F5:D5:05:EF:88:B9:D6 Certificate issuer: /CN=e622f6539781c50bc497c7a0b6f5d505ef88b9d6 Certificate serial: 019B3E6C9D4E492C48968D5C1CFBE70C4418 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iL2U5eBxQvEl8egtvXVBe-IudY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.mft Manifest number: 12DA Signing time: Sun 21 Dec 2025 01:01:03 +0000 Manifest this update: Sun 21 Dec 2025 01:01:03 +0000 Manifest next update: Mon 22 Dec 2025 01:01:03 +0000 Files and hashes: 1: 5iL2U5eBxQvEl8egtvXVBe-IudY.crl (hash: X0Q5U9UGbTUZ0JFeBE4JvQwisVFA0kD8YqHyKJpF/WQ=) 2: 75gL-QM6p_WWaZpy6iMBTgopl4A.roa (hash: C70hkA6dezEt2xcdG5Lxg7y2p7KFd6680YSWy+fNqPg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.mft rsync://rpki.ripe.net/repository/DEFAULT/5iL2U5eBxQvEl8egtvXVBe-IudY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:9d:4e:49:2c:48:96:8d:5c:1c:fb:e7:0c:44:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e622f6539781c50bc497c7a0b6f5d505ef88b9d6 Validity Not Before: Dec 21 01:01:03 2025 GMT Not After : Dec 22 01:01:03 2025 GMT Subject: CN=e9dc88f59e585eeabf673853be50f925d8530cde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:73:92:3f:53:03:79:6a:b8:16:ba:66:3c:e9: ec:7b:e8:85:f1:98:28:e2:fc:33:e4:55:d0:e5:48: 60:2d:b9:c2:8b:3a:32:52:d5:e3:5e:b0:5c:60:a1: d7:de:d2:e5:6a:1c:09:e3:a8:93:f2:2d:1f:fe:d2: 91:eb:c7:ee:42:af:5d:68:57:d5:03:87:86:ad:bb: 9f:64:dc:51:bc:f5:ed:2a:3e:17:ef:5a:7d:ee:ba: b2:93:cb:63:35:77:b4:e7:c4:08:6c:d0:ab:ff:10: e1:65:6f:0b:df:24:9a:5d:79:ae:e8:8e:2d:57:89: 49:f1:8f:b8:e1:62:d1:82:e5:39:e0:a5:d8:74:1d: 17:e5:4d:14:cd:d8:a7:68:55:b0:d1:6a:ae:9f:65: c3:48:a1:4c:26:cf:7a:5b:c5:82:10:ba:3c:ab:ed: 75:c4:6a:b3:68:27:3d:84:db:07:6d:a1:b3:61:ba: de:a5:d7:10:c6:24:d9:02:97:ee:62:fc:df:d4:be: ce:05:8a:49:00:1c:47:35:1f:c1:86:c9:a7:b5:7e: 39:08:45:ea:b7:a0:a9:53:3e:1b:61:75:f7:19:86: 4f:22:ee:d2:db:55:51:33:b6:f4:c0:c5:51:ae:7e: e4:f8:01:b8:97:0e:cd:c2:ad:30:d6:d8:6a:89:a1: e0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:DC:88:F5:9E:58:5E:EA:BF:67:38:53:BE:50:F9:25:D8:53:0C:DE X509v3 Authority Key Identifier: keyid:E6:22:F6:53:97:81:C5:0B:C4:97:C7:A0:B6:F5:D5:05:EF:88:B9:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iL2U5eBxQvEl8egtvXVBe-IudY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:bc:f9:ec:9a:f7:b8:aa:34:66:d2:f6:6b:d8:4e:18:a1:93: 1c:df:77:59:4f:21:d1:39:81:33:d0:35:da:5b:9a:5c:d4:8c: db:a3:c3:c9:f8:08:fd:05:5d:2d:1a:18:9b:12:18:13:a5:99: be:17:43:4b:f3:97:9a:fd:af:f6:e2:1a:ac:d2:7f:e4:be:c3: 26:54:d4:7d:9a:c8:34:0b:b5:b3:61:da:71:a3:0e:8d:f7:c0: 23:a9:25:8a:4d:e5:8d:09:c3:2b:b0:8f:92:50:8e:0e:f2:23: e7:c8:c5:c4:0e:38:05:29:99:16:c2:50:01:5c:4a:e5:ea:d2: 13:b8:b3:34:5a:09:d4:82:88:a1:de:d5:da:54:84:b3:bc:f4: e1:ef:1f:28:2e:57:e5:38:6b:a0:03:20:63:a1:e4:df:59:8d: 6c:a6:23:6c:9a:8d:6a:e3:f6:cc:57:ea:df:f7:a6:4f:2c:5d: 33:36:3d:8b:d2:1a:6e:0a:44:be:d7:fa:19:d9:50:f7:ad:2a: 31:b4:08:7d:e4:14:8b:c4:b4:eb:bd:a2:b5:12:b5:4f:86:df: 14:8a:0a:79:b8:31:36:b2:a5:50:09:a5:7b:aa:c6:7b:38:15: fc:c2:0c:b3:7d:70:43:76:9b:c3:ca:d1:ed:95:b1:8f:e3:3c: 3f:10:fe:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bJ1OSSxIlo1cHPvnDEQYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MjJmNjUzOTc4MWM1MGJjNDk3YzdhMGI2ZjVkNTA1ZWY4 OGI5ZDYwHhcNMjUxMjIxMDEwMTAzWhcNMjUxMjIyMDEwMTAzWjAzMTEwLwYDVQQD EyhlOWRjODhmNTllNTg1ZWVhYmY2NzM4NTNiZTUwZjkyNWQ4NTMwY2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXOSP1MDeWq4FrpmPOnse+iF8Zgo 4vwz5FXQ5UhgLbnCizoyUtXjXrBcYKHX3tLlahwJ46iT8i0f/tKR68fuQq9daFfV A4eGrbufZNxRvPXtKj4X71p97rqyk8tjNXe058QIbNCr/xDhZW8L3ySaXXmu6I4t V4lJ8Y+44WLRguU54KXYdB0X5U0UzdinaFWw0Wqun2XDSKFMJs96W8WCELo8q+11 xGqzaCc9hNsHbaGzYbrepdcQxiTZApfuYvzf1L7OBYpJABxHNR/BhsmntX45CEXq t6CpUz4bYXX3GYZPIu7S21VRM7b0wMVRrn7k+AG4lw7Nwq0w1thqiaHgewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOnciPWeWF7qv2c4U75Q+SXYUwzeMB8GA1UdIwQY MBaAFOYi9lOXgcULxJfHoLb11QXviLnWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWlMMlU1ZUJ4UXZFbDhlZ3R2WFZCZS1JdWRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8xMWFhOGMtOTU5MS00Y2M4LWE3NmEt Njk4ZTZhOGU2NzA4LzEvNWlMMlU1ZUJ4UXZFbDhlZ3R2WFZCZS1JdWRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8xMWFhOGMtOTU5MS00Y2M4LWE3NmEtNjk4ZTZhOGU2NzA4 LzEvNWlMMlU1ZUJ4UXZFbDhlZ3R2WFZCZS1JdWRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj7z57Jr3 uKo0ZtL2a9hOGKGTHN93WU8h0TmBM9A12luaXNSM26PDyfgI/QVdLRoYmxIYE6WZ vhdDS/OXmv2v9uIarNJ/5L7DJlTUfZrINAu1s2HacaMOjffAI6klik3ljQnDK7CP klCODvIj58jFxA44BSmZFsJQAVxK5erSE7izNFoJ1IKIod7V2lSEs7z04e8fKC5X 5ThroAMgY6Hk31mNbKYjbJqNauP2zFfq3/emTyxdMzY9i9IabgpEvtf6GdlQ960q MbQIfeQUi8S0672itRK1T4bfFIoKebgxNrKlUAmle6rGezgV/MIMs31wQ3abw8rR 7ZWxj+M8PxD+2g== -----END CERTIFICATE-----Generated at Sun Dec 21 03:24:21 2025 by rpki-client