This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft File: 5bHedEPq8YzrBoiNfvk6VjWkrh4.mft (raw, json) Hash identifier: EzBFiVYN1Pk4swjDdGg1JEZIDSe6x02IU1Kqz5u5t70= Subject key identifier: B1:71:A8:42:F3:86:FB:09:4E:E4:9C:54:B0:DD:CF:B9:FF:74:8A:D7 Authority key identifier: E5:B1:DE:74:43:EA:F1:8C:EB:06:88:8D:7E:F9:3A:56:35:A4:AE:1E Certificate issuer: /CN=e5b1de7443eaf18ceb06888d7ef93a5635a4ae1e Certificate serial: 019B6D6A14F5E1D98BC951F7A6C88F1A2512 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft Manifest number: 0E60 Signing time: Tue 30 Dec 2025 04:00:27 +0000 Manifest this update: Tue 30 Dec 2025 04:00:27 +0000 Manifest next update: Wed 31 Dec 2025 04:00:27 +0000 Files and hashes: 1: 5bHedEPq8YzrBoiNfvk6VjWkrh4.crl (hash: 65IxcOelEs4BkRcmp7ZK1MJSCqAy5aBv5mPtn9B3dYc=) 2: LPt_zehQ6PKVzp0MjfSZ8bhI3FI.roa (hash: 2Of6PA2/JSgV0uL+6WcJ1JnLHaSmd2yrbwOuprAZdu8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 04:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:6a:14:f5:e1:d9:8b:c9:51:f7:a6:c8:8f:1a:25:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5b1de7443eaf18ceb06888d7ef93a5635a4ae1e Validity Not Before: Dec 30 04:00:27 2025 GMT Not After : Dec 31 04:00:27 2025 GMT Subject: CN=b171a842f386fb094ee49c54b0ddcfb9ff748ad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:41:f9:fe:da:04:b0:65:47:19:02:f0:c2:9d: b3:cc:67:aa:99:e6:dc:1d:95:5a:a8:92:0f:4c:ee: c0:ae:9a:1c:6b:4b:2b:0f:dd:06:57:6d:1a:b6:68: 1b:8b:8e:5b:3a:47:a5:4f:db:f6:f6:ce:ff:54:83: c3:de:73:29:e6:4b:1c:54:ba:0f:31:09:5a:76:d6: bf:b3:1c:8a:d7:31:2a:cc:fc:46:8e:10:72:04:97: a4:b7:ac:7d:93:67:97:fd:46:5a:ef:67:e1:75:eb: 10:44:a1:26:72:ee:f0:b5:0b:57:1b:bc:53:47:f3: 5c:61:c2:7c:36:54:9a:03:31:7b:dd:be:06:15:0c: ef:ed:68:e8:0d:6d:3a:97:b0:b8:93:56:2b:76:af: d3:73:93:f6:61:04:0c:d8:4e:87:4b:c2:73:17:a0: 63:e2:cf:f2:a7:35:44:1c:22:0b:e0:a8:8a:3b:ce: 85:3d:29:79:b1:f0:9c:a0:9a:af:da:6f:49:3b:7b: 2f:c1:08:6d:35:57:84:e1:94:68:f3:19:a3:86:b0: df:63:20:ee:58:37:84:91:b6:b9:e0:23:de:53:45: 73:0a:1f:4c:d3:92:a1:62:5e:92:6b:63:72:77:35: ac:34:85:4d:ea:b4:7c:30:6f:1b:4e:6b:6a:f4:f8: 15:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:71:A8:42:F3:86:FB:09:4E:E4:9C:54:B0:DD:CF:B9:FF:74:8A:D7 X509v3 Authority Key Identifier: keyid:E5:B1:DE:74:43:EA:F1:8C:EB:06:88:8D:7E:F9:3A:56:35:A4:AE:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:15:67:c4:24:cf:b2:03:c9:de:52:61:0a:f4:f4:32:c5:01: 5a:8e:80:34:21:bb:4c:29:46:0c:55:94:51:57:79:67:18:3d: 51:d2:f6:fe:63:5a:53:45:a4:35:28:21:00:9d:1f:da:fd:95: 18:b8:1c:96:35:0a:17:39:d6:48:94:0e:55:f8:8d:02:e1:40: 08:c6:78:6f:f3:cd:91:35:fa:ae:55:91:d7:e9:9a:db:15:70: 55:b0:c7:4e:40:84:4c:9d:9c:c7:9c:a5:3d:c7:ff:1c:39:46: a1:b0:19:99:f2:7b:6c:98:c6:f1:4a:a6:12:f0:ca:98:f7:53: af:9a:a4:80:66:3e:2f:17:73:fa:08:7b:be:3c:6b:90:3b:4f: d9:be:08:dd:26:2e:ee:8d:58:ca:49:a9:76:4f:60:21:1b:12: 56:c2:f8:df:aa:fb:db:34:b1:83:ce:64:c1:c9:34:18:f0:7a: e8:97:65:d0:c5:f9:40:51:52:6f:79:bb:3f:3c:a7:e5:22:b3: 80:fc:7c:28:80:34:0d:c6:6a:69:c9:3f:9f:cc:91:96:87:5c: 30:fa:b1:e9:0c:e8:33:5d:fc:3e:4b:52:40:54:6d:73:db:70: 98:20:73:28:ed:7f:88:db:73:52:54:2b:54:bf:9b:82:12:45: 14:2d:bb:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttahT14dmLyVH3psiPGiUSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YjFkZTc0NDNlYWYxOGNlYjA2ODg4ZDdlZjkzYTU2MzVh NGFlMWUwHhcNMjUxMjMwMDQwMDI3WhcNMjUxMjMxMDQwMDI3WjAzMTEwLwYDVQQD EyhiMTcxYTg0MmYzODZmYjA5NGVlNDljNTRiMGRkY2ZiOWZmNzQ4YWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEH5/toEsGVHGQLwwp2zzGeqmebc HZVaqJIPTO7Arpoca0srD90GV20atmgbi45bOkelT9v29s7/VIPD3nMp5kscVLoP MQladta/sxyK1zEqzPxGjhByBJekt6x9k2eX/UZa72fhdesQRKEmcu7wtQtXG7xT R/NcYcJ8NlSaAzF73b4GFQzv7WjoDW06l7C4k1Yrdq/Tc5P2YQQM2E6HS8JzF6Bj 4s/ypzVEHCIL4KiKO86FPSl5sfCcoJqv2m9JO3svwQhtNVeE4ZRo8xmjhrDfYyDu WDeEkba54CPeU0VzCh9M05KhYl6Sa2NydzWsNIVN6rR8MG8bTmtq9PgVtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLFxqELzhvsJTuScVLDdz7n/dIrXMB8GA1UdIwQY MBaAFOWx3nRD6vGM6waIjX75OlY1pK4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWJIZWRFUHE4WXpyQm9pTmZ2azZWaldrcmg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ODQ4MzgtMGUzYi00NmJhLTg1OTUt ZDhmNmFiODNiNTMzLzEvNWJIZWRFUHE4WXpyQm9pTmZ2azZWaldrcmg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS83ODQ4MzgtMGUzYi00NmJhLTg1OTUtZDhmNmFiODNiNTMz LzEvNWJIZWRFUHE4WXpyQm9pTmZ2azZWaldrcmg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADRVnxCTP sgPJ3lJhCvT0MsUBWo6ANCG7TClGDFWUUVd5Zxg9UdL2/mNaU0WkNSghAJ0f2v2V GLgcljUKFznWSJQOVfiNAuFACMZ4b/PNkTX6rlWR1+ma2xVwVbDHTkCETJ2cx5yl Pcf/HDlGobAZmfJ7bJjG8UqmEvDKmPdTr5qkgGY+Lxdz+gh7vjxrkDtP2b4I3SYu 7o1Yykmpdk9gIRsSVsL436r72zSxg85kwck0GPB66Jdl0MX5QFFSb3m7Pzyn5SKz gPx8KIA0DcZqack/n8yRlodcMPqx6QzoM138PktSQFRtc9twmCBzKO1/iNtzUlQr VL+bghJFFC27TA== -----END CERTIFICATE-----Generated at Tue Dec 30 10:57:08 2025 by rpki-client