This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft File: 5jRhbtvWAVT6Pax36pDb18aKEy0.mft (raw, json) Hash identifier: zO+31ebEJ40HatOVKwaJqhrQ0EN8ZR8vqPPUt0b1rHk= Subject key identifier: 12:34:8C:61:CE:5A:EB:5A:D7:CB:17:AB:74:5A:0D:81:B6:F3:F5:14 Authority key identifier: E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D Certificate issuer: /CN=e634616edbd60154fa3dac77ea90dbd7c68a132d Certificate serial: 019B39EAD16E94DB090AF7D3BFA36B56C94F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft Manifest number: 1515 Signing time: Sat 20 Dec 2025 04:00:48 +0000 Manifest this update: Sat 20 Dec 2025 04:00:48 +0000 Manifest next update: Sun 21 Dec 2025 04:00:48 +0000 Files and hashes: 1: 5jRhbtvWAVT6Pax36pDb18aKEy0.crl (hash: bjYXtjosp8J8ruKL17ZUJc3VFn4qQ7AZDKCFdQO5El0=) 2: VzSRXIJg549082TDLwuDhpZSHdM.roa (hash: A7LBmXbBqDdzugUEkji9OFm2eXNsHo+v5p497CjSCCA=) 3: gHDsE-M7Bds6BODdronU54n9Gb0.roa (hash: wZSAuVITgB+tf10qxZ+G6OSnVz70iDg6RypnL81jrkY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:ea:d1:6e:94:db:09:0a:f7:d3:bf:a3:6b:56:c9:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e634616edbd60154fa3dac77ea90dbd7c68a132d Validity Not Before: Dec 20 04:00:48 2025 GMT Not After : Dec 21 04:00:48 2025 GMT Subject: CN=12348c61ce5aeb5ad7cb17ab745a0d81b6f3f514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a3:7e:ae:eb:b0:ee:ff:59:58:f1:e3:03:e4: 64:51:ff:89:fb:9a:b9:85:a2:82:6b:19:ff:38:0d: f8:11:3a:8c:47:69:86:1a:f8:dc:b9:b8:56:a0:f2: b5:c6:3c:94:9b:99:d6:cc:00:96:d3:ba:28:b8:44: ef:69:08:a2:1e:54:65:79:d6:a3:d7:22:56:97:bb: f7:69:1d:93:6f:02:83:bc:90:7d:12:6f:78:97:17: 43:ab:78:66:59:9c:1b:1e:91:21:36:2d:7a:3c:3a: c3:75:5f:c6:b6:97:5d:2e:67:22:6c:5b:c8:f8:85: 78:c8:40:af:2d:19:ba:af:3d:0c:1c:5c:c4:ec:2a: 25:43:39:41:28:74:f4:45:7c:06:4c:05:1e:a8:e6: d7:65:90:6c:72:9c:fc:70:5f:a0:93:b4:40:e4:8d: 45:e8:85:65:39:ec:98:54:80:52:97:60:24:3e:0c: 08:69:15:a3:95:17:e0:47:1d:52:a4:79:85:c7:85: 81:c5:8d:b1:40:32:e6:32:9d:a9:96:0b:f2:5b:c8: eb:aa:16:1d:55:c4:48:ad:df:b8:66:d5:d9:be:55: aa:4e:14:19:e2:00:e1:63:bb:11:42:c2:3a:4e:5b: f7:b3:50:ce:a9:8f:64:23:2d:be:6c:7d:a9:d5:83: 1d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:34:8C:61:CE:5A:EB:5A:D7:CB:17:AB:74:5A:0D:81:B6:F3:F5:14 X509v3 Authority Key Identifier: keyid:E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:a1:fb:4c:46:01:6f:76:3c:9f:99:90:ab:7c:9d:e5:b7:b6: 37:a7:80:1e:6d:d3:55:b6:f6:2b:aa:da:17:96:3a:9d:7f:ae: a7:0c:e4:a6:b1:ec:c0:1a:1d:57:5d:96:d0:88:91:e6:06:87: b9:ec:13:6d:85:23:61:4b:ce:87:5a:00:19:5d:10:dd:3e:b5: a2:5a:27:f9:27:a5:1b:77:af:a7:64:de:e7:7e:12:d5:eb:af: 58:69:8b:b9:a7:03:53:b8:ef:9e:07:a9:9d:2c:38:f9:0f:e2: 8b:48:64:54:94:d8:20:c6:01:42:dc:d7:0a:fc:fc:41:dd:1e: a7:53:64:b3:08:24:22:68:01:ef:de:cc:ba:da:2e:a9:1b:f5: de:c9:9a:4f:c1:ed:d7:6e:8f:36:b0:50:db:4e:f4:62:11:81: 35:40:db:c7:83:5b:f9:f1:dd:ea:20:ad:44:05:0d:11:c1:87: 65:23:6b:39:49:16:94:25:e0:38:06:30:74:c9:83:af:23:19: 73:0d:12:7a:9f:bf:45:60:6f:6e:5e:42:2a:94:90:b1:35:30: d8:2f:96:db:17:ac:e9:90:9f:20:5e:24:5a:ad:33:77:d8:fa: 22:13:7b:4f:89:d5:73:c8:86:07:41:b1:a1:86:4d:6e:d5:83: aa:c0:c9:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56tFulNsJCvfTv6NrVslPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MzQ2MTZlZGJkNjAxNTRmYTNkYWM3N2VhOTBkYmQ3YzY4 YTEzMmQwHhcNMjUxMjIwMDQwMDQ4WhcNMjUxMjIxMDQwMDQ4WjAzMTEwLwYDVQQD EygxMjM0OGM2MWNlNWFlYjVhZDdjYjE3YWI3NDVhMGQ4MWI2ZjNmNTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKN+ruuw7v9ZWPHjA+RkUf+J+5q5 haKCaxn/OA34ETqMR2mGGvjcubhWoPK1xjyUm5nWzACW07oouETvaQiiHlRledaj 1yJWl7v3aR2TbwKDvJB9Em94lxdDq3hmWZwbHpEhNi16PDrDdV/GtpddLmcibFvI +IV4yECvLRm6rz0MHFzE7ColQzlBKHT0RXwGTAUeqObXZZBscpz8cF+gk7RA5I1F 6IVlOeyYVIBSl2AkPgwIaRWjlRfgRx1SpHmFx4WBxY2xQDLmMp2plgvyW8jrqhYd VcRIrd+4ZtXZvlWqThQZ4gDhY7sRQsI6Tlv3s1DOqY9kIy2+bH2p1YMdQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBI0jGHOWuta18sXq3RaDYG28/UUMB8GA1UdIwQY MBaAFOY0YW7b1gFU+j2sd+qQ29fGihMtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWpSaGJ0dldBVlQ2UGF4MzZwRGIxOGFLRXkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9mMjkyNjgtMmM2YS00ZTlkLWFhMmQt ZDk5MjMxZTQ2NDU3LzEvNWpSaGJ0dldBVlQ2UGF4MzZwRGIxOGFLRXkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9mMjkyNjgtMmM2YS00ZTlkLWFhMmQtZDk5MjMxZTQ2NDU3 LzEvNWpSaGJ0dldBVlQ2UGF4MzZwRGIxOGFLRXkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArqH7TEYB b3Y8n5mQq3yd5be2N6eAHm3TVbb2K6raF5Y6nX+upwzkprHswBodV12W0IiR5gaH uewTbYUjYUvOh1oAGV0Q3T61olon+SelG3evp2Te534S1euvWGmLuacDU7jvngep nSw4+Q/ii0hkVJTYIMYBQtzXCvz8Qd0ep1NkswgkImgB797MutouqRv13smaT8Ht 126PNrBQ2070YhGBNUDbx4Nb+fHd6iCtRAUNEcGHZSNrOUkWlCXgOAYwdMmDryMZ cw0Sep+/RWBvbl5CKpSQsTUw2C+W2xes6ZCfIF4kWq0zd9j6IhN7T4nVc8iGB0Gx oYZNbtWDqsDJhQ== -----END CERTIFICATE-----Generated at Sat Dec 20 07:30:54 2025 by rpki-client