This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft File: 5GZIM5avs3fl43nRYVveD9TZ7Uc.mft (raw, json) Hash identifier: yrqxiPeZ0Sg1+JzZAmZ+Pv/VZoAC5KdUdpeAuEtvN8o= Subject key identifier: DD:DB:04:CC:1B:AD:24:B1:6F:8E:00:48:6C:75:DF:D1:F1:04:67:5F Authority key identifier: E4:66:48:33:96:AF:B3:77:E5:E3:79:D1:61:5B:DE:0F:D4:D9:ED:47 Certificate issuer: /CN=e466483396afb377e5e379d1615bde0fd4d9ed47 Certificate serial: 019B619D9648198D29DF49DD29FB2DA8EE6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft Manifest number: 0E92 Signing time: Sat 27 Dec 2025 21:01:16 +0000 Manifest this update: Sat 27 Dec 2025 21:01:16 +0000 Manifest next update: Sun 28 Dec 2025 21:01:16 +0000 Files and hashes: 1: 5GZIM5avs3fl43nRYVveD9TZ7Uc.crl (hash: /2yTU6/zpXPZrtgr6XKiOS6h7CURda0PNqe5iSYUgq0=) 2: Btqt9dHmfyCgZm5YxFkx4BjR-Dc.roa (hash: O8dRjpLSf+cl4rOTaaTPD9tud0oWl3levwWO3JGp7jw=) 3: TLd_ZXXp2Q2UgInwhLKUEKhwDUc.roa (hash: IaRGq7PGoes/uNGrRRu/Qh4aGHDMpqDn5kGzUSwYnj8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 21:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:61:9d:96:48:19:8d:29:df:49:dd:29:fb:2d:a8:ee:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e466483396afb377e5e379d1615bde0fd4d9ed47 Validity Not Before: Dec 27 21:01:16 2025 GMT Not After : Dec 28 21:01:16 2025 GMT Subject: CN=dddb04cc1bad24b16f8e00486c75dfd1f104675f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bd:77:cb:d6:b5:af:dc:f4:de:36:c5:70:42: cc:63:66:7f:ea:54:ae:6e:e4:9a:1c:c3:3a:30:68: 40:22:8a:d9:2c:8c:02:0b:1c:9b:2a:39:ba:cd:93: 76:44:23:8f:cc:42:be:b5:99:2c:a0:bc:48:1d:56: 47:3d:9c:75:98:5a:51:16:b4:88:ad:fd:e7:3a:ec: be:59:fe:3f:63:5e:ad:47:53:95:a8:1e:7a:26:a6: 53:9c:11:69:52:7b:3b:c8:1b:26:7f:b8:4f:e0:a9: ea:60:d0:06:e1:e9:58:5c:41:f4:a7:f9:29:a1:de: 94:33:41:0a:a7:a5:f1:5f:4a:b3:22:8a:db:0e:28: 21:0c:fd:3b:57:06:47:71:48:20:5c:c9:77:ab:0a: 39:b8:bd:1e:69:4f:f0:1b:43:56:54:d5:80:36:b4: 62:25:14:e3:b4:7a:e5:95:fd:e5:15:fc:38:77:0e: ce:7a:94:06:73:ba:51:ab:74:39:96:18:a9:53:c4: d7:5b:e3:c3:ac:1c:a0:79:c3:ab:49:65:3a:2f:80: c8:7f:b6:d5:ed:84:6a:1a:88:73:bd:ae:16:ca:76: 0d:b2:ff:3e:4c:1b:4c:ba:ff:40:75:f3:61:1d:34: ab:8d:be:20:8f:65:af:26:bf:93:55:3d:46:14:6b: ca:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:DB:04:CC:1B:AD:24:B1:6F:8E:00:48:6C:75:DF:D1:F1:04:67:5F X509v3 Authority Key Identifier: keyid:E4:66:48:33:96:AF:B3:77:E5:E3:79:D1:61:5B:DE:0F:D4:D9:ED:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:5a:e1:28:aa:37:85:8e:87:5e:28:fa:9a:f6:f6:64:4e:2c: 4b:a2:f4:97:67:34:cc:df:2f:b7:ac:e3:51:e4:54:61:b8:b0: f6:92:da:03:bd:a1:74:a6:0d:5c:95:cf:97:13:06:0f:9b:2e: 6d:91:5a:2b:20:eb:ca:b0:f6:e3:cc:a0:7c:92:4d:a9:6d:96: 5b:f9:61:ef:7f:50:d8:43:48:b7:b7:c2:a8:62:1c:bb:c9:44: 22:88:51:29:1b:f7:f4:a8:80:35:32:a6:28:6e:46:08:89:c0: f5:16:34:09:57:a4:92:28:7f:08:d5:34:d3:81:80:60:c9:14: f6:3c:a9:6d:a7:79:84:eb:bd:1c:c8:a8:4e:7a:54:65:43:ab: 26:f1:52:a9:9c:dd:de:e6:0b:50:f1:53:b2:59:62:e2:b0:85: 64:8a:e6:17:d7:1f:57:1d:b8:a8:7f:0d:6e:c7:b7:79:f4:f3: 3f:3d:b9:06:f4:ec:f5:2e:bf:49:b3:3f:bf:48:3c:2b:21:28: 5c:21:3d:12:e6:c4:c0:65:d4:ca:da:c9:35:29:39:43:dc:74: 8e:9f:ea:31:28:ca:d4:af:81:ad:02:f5:5d:70:53:f1:f7:0d: 4e:20:5d:c4:23:76:41:f5:c0:19:4d:d9:db:9c:60:ec:52:a4: 97:b8:d0:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZthnZZIGY0p30ndKfstqO5vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0NjY0ODMzOTZhZmIzNzdlNWUzNzlkMTYxNWJkZTBmZDRk OWVkNDcwHhcNMjUxMjI3MjEwMTE2WhcNMjUxMjI4MjEwMTE2WjAzMTEwLwYDVQQD EyhkZGRiMDRjYzFiYWQyNGIxNmY4ZTAwNDg2Yzc1ZGZkMWYxMDQ2NzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtr13y9a1r9z03jbFcELMY2Z/6lSu buSaHMM6MGhAIorZLIwCCxybKjm6zZN2RCOPzEK+tZksoLxIHVZHPZx1mFpRFrSI rf3nOuy+Wf4/Y16tR1OVqB56JqZTnBFpUns7yBsmf7hP4KnqYNAG4elYXEH0p/kp od6UM0EKp6XxX0qzIorbDighDP07VwZHcUggXMl3qwo5uL0eaU/wG0NWVNWANrRi JRTjtHrllf3lFfw4dw7OepQGc7pRq3Q5lhipU8TXW+PDrBygecOrSWU6L4DIf7bV 7YRqGohzva4WynYNsv8+TBtMuv9AdfNhHTSrjb4gj2WvJr+TVT1GFGvKZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN3bBMwbrSSxb44ASGx139HxBGdfMB8GA1UdIwQY MBaAFORmSDOWr7N35eN50WFb3g/U2e1HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUdaSU01YXZzM2ZsNDNuUllWdmVEOVRaN1VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8xOGI1YmItOGU0MS00ZTg4LWJkYmUt MzQxYzYzNjE0MjgwLzEvNUdaSU01YXZzM2ZsNDNuUllWdmVEOVRaN1VjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8xOGI1YmItOGU0MS00ZTg4LWJkYmUtMzQxYzYzNjE0Mjgw LzEvNUdaSU01YXZzM2ZsNDNuUllWdmVEOVRaN1VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUVrhKKo3 hY6HXij6mvb2ZE4sS6L0l2c0zN8vt6zjUeRUYbiw9pLaA72hdKYNXJXPlxMGD5su bZFaKyDryrD248ygfJJNqW2WW/lh739Q2ENIt7fCqGIcu8lEIohRKRv39KiANTKm KG5GCInA9RY0CVekkih/CNU004GAYMkU9jypbad5hOu9HMioTnpUZUOrJvFSqZzd 3uYLUPFTslli4rCFZIrmF9cfVx24qH8Nbse3efTzPz25BvTs9S6/SbM/v0g8KyEo XCE9EubEwGXUytrJNSk5Q9x0jp/qMSjK1K+BrQL1XXBT8fcNTiBdxCN2QfXAGU3Z 25xg7FKkl7jQwQ== -----END CERTIFICATE-----Generated at Sun Dec 28 05:48:35 2025 by rpki-client