This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft File: _5JbpaQQRnlkY0z_SvrXelbaRyI.mft (raw, json) Hash identifier: Rh0hDGiXU6Jc59zYdEB4hNdLZ77X23AJI5exHL3lULw= Subject key identifier: 69:8E:40:60:0B:B1:55:A9:1F:13:14:60:CE:23:96:3B:73:D5:B0:63 Authority key identifier: FF:92:5B:A5:A4:10:46:79:64:63:4C:FF:4A:FA:D7:7A:56:DA:47:22 Certificate issuer: /CN=ff925ba5a410467964634cff4afad77a56da4722 Certificate serial: 019B514E653EA2AE97B52BBD5B76237935B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft Manifest number: 0623 Signing time: Wed 24 Dec 2025 17:00:50 +0000 Manifest this update: Wed 24 Dec 2025 17:00:50 +0000 Manifest next update: Thu 25 Dec 2025 17:00:50 +0000 Files and hashes: 1: YCBMVw8lhfTbZWn4cTYVsc3blBQ.roa (hash: DAw8H6oh39jnMGAPAS2Ix82bT3BCrrolFFfmIIaPBT0=) 2: _5JbpaQQRnlkY0z_SvrXelbaRyI.crl (hash: cU3WxRiw6LWbz7DV+Wvu3bjyhnGTLtbyWCO6+rRn52E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:4e:65:3e:a2:ae:97:b5:2b:bd:5b:76:23:79:35:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff925ba5a410467964634cff4afad77a56da4722 Validity Not Before: Dec 24 17:00:50 2025 GMT Not After : Dec 25 17:00:50 2025 GMT Subject: CN=698e40600bb155a91f131460ce23963b73d5b063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:94:dd:af:bd:42:5f:e2:c0:bc:3a:2a:cf:6d: 7c:1e:d1:12:4e:03:c7:ca:f6:a5:ca:55:d9:70:8d: 9d:d3:53:3f:71:b2:40:e8:3c:35:6c:87:8e:ab:3b: d1:3d:0f:7f:65:6d:47:60:8d:6c:47:b4:3b:5a:35: 5e:59:95:de:12:10:ff:91:3e:97:26:8a:88:e9:52: 21:f6:78:ca:5d:9a:a2:e3:7a:56:ae:30:9d:13:8b: 6e:a4:1c:5f:e0:2c:f3:c3:6d:df:b8:52:39:c9:34: b2:5d:86:60:b0:1a:df:47:d2:4e:b3:07:80:c3:96: 6f:bc:b7:66:43:bd:7d:db:cf:99:4f:98:97:a5:ce: e6:77:c5:03:ea:1a:c6:80:51:e6:dd:f3:39:b6:0b: 6d:2a:75:65:7e:71:a8:76:76:ad:ea:e1:d4:a2:de: 0a:96:56:fc:23:14:b4:12:3b:e4:63:40:ba:55:0d: d4:a9:6a:73:67:0e:75:bd:98:c5:63:fb:21:22:8d: af:9b:49:38:16:3d:ee:ab:c3:72:d5:ae:a0:8e:3d: 8b:a0:e6:8e:4a:94:a4:48:90:50:26:87:49:9a:59: ed:86:13:20:f2:1b:f3:86:9e:cb:10:9e:48:73:16: be:96:01:2c:b2:a2:d8:ce:30:7a:72:c7:45:85:b2: ae:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:8E:40:60:0B:B1:55:A9:1F:13:14:60:CE:23:96:3B:73:D5:B0:63 X509v3 Authority Key Identifier: keyid:FF:92:5B:A5:A4:10:46:79:64:63:4C:FF:4A:FA:D7:7A:56:DA:47:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:18:5c:86:6a:0b:a4:0c:97:7d:09:ee:b2:27:67:7b:a7:1c: bc:3d:8e:dd:68:ff:86:c1:7b:fc:a8:ee:6d:2e:4c:c0:8c:1c: cc:ab:3d:23:7a:3d:3a:48:4b:c0:5f:16:8c:b2:0d:b1:45:44: a7:2d:ad:d9:ca:86:39:c7:5d:36:b0:ae:9f:c6:a7:ea:b5:c8: 69:4d:27:e9:7b:2d:06:9d:e1:f1:42:69:f4:19:33:c0:fd:75: 2e:e0:c6:19:68:e4:da:87:f3:51:33:54:95:fe:7c:b1:39:48: 37:16:83:e3:e9:c9:85:42:81:72:60:28:bb:4c:bc:2d:9e:70: 16:b3:68:78:c2:cc:ac:8f:29:47:76:f2:ef:8d:f7:59:8c:ba: d6:ff:bc:75:40:77:24:c4:27:ec:ea:f7:0d:bb:8b:93:d6:b1: 14:96:f9:84:f6:3f:38:30:17:58:ed:03:31:1a:c0:c6:31:6c: 15:66:d2:8b:f1:39:2b:fc:4a:5b:3e:18:21:fc:9c:6d:5a:76: 4c:00:50:33:7a:e7:ef:06:16:be:31:4c:d7:0e:26:20:10:a5: 51:97:73:fc:c9:9d:a6:9c:7f:ac:cf:a9:6f:af:36:be:ac:0f: a5:47:24:7b:5d:9c:19:ae:85:c1:cd:09:5a:d7:9a:95:10:32: 7a:ee:e5:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRTmU+oq6XtSu9W3YjeTWxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmOTI1YmE1YTQxMDQ2Nzk2NDYzNGNmZjRhZmFkNzdhNTZk YTQ3MjIwHhcNMjUxMjI0MTcwMDUwWhcNMjUxMjI1MTcwMDUwWjAzMTEwLwYDVQQD Eyg2OThlNDA2MDBiYjE1NWE5MWYxMzE0NjBjZTIzOTYzYjczZDViMDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5Tdr71CX+LAvDoqz218HtESTgPH yvalylXZcI2d01M/cbJA6Dw1bIeOqzvRPQ9/ZW1HYI1sR7Q7WjVeWZXeEhD/kT6X JoqI6VIh9njKXZqi43pWrjCdE4tupBxf4Czzw23fuFI5yTSyXYZgsBrfR9JOsweA w5ZvvLdmQ71928+ZT5iXpc7md8UD6hrGgFHm3fM5tgttKnVlfnGodnat6uHUot4K llb8IxS0EjvkY0C6VQ3UqWpzZw51vZjFY/shIo2vm0k4Fj3uq8Ny1a6gjj2LoOaO SpSkSJBQJodJmlnthhMg8hvzhp7LEJ5Icxa+lgEssqLYzjB6csdFhbKuOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGmOQGALsVWpHxMUYM4jljtz1bBjMB8GA1UdIwQY MBaAFP+SW6WkEEZ5ZGNM/0r613pW2kciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzVKYnBhUVFSbmxrWTB6X1N2clhlbGJhUnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jNjhlNWYtOGVmYS00M2ZmLTg5MGYt MjcyOTYwYmM0MzIyLzEvXzVKYnBhUVFSbmxrWTB6X1N2clhlbGJhUnlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9jNjhlNWYtOGVmYS00M2ZmLTg5MGYtMjcyOTYwYmM0MzIy LzEvXzVKYnBhUVFSbmxrWTB6X1N2clhlbGJhUnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGRhchmoL pAyXfQnusidne6ccvD2O3Wj/hsF7/KjubS5MwIwczKs9I3o9OkhLwF8WjLINsUVE py2t2cqGOcddNrCun8an6rXIaU0n6XstBp3h8UJp9BkzwP11LuDGGWjk2ofzUTNU lf58sTlINxaD4+nJhUKBcmAou0y8LZ5wFrNoeMLMrI8pR3by7433WYy61v+8dUB3 JMQn7Or3DbuLk9axFJb5hPY/ODAXWO0DMRrAxjFsFWbSi/E5K/xKWz4YIfycbVp2 TABQM3rn7wYWvjFM1w4mIBClUZdz/Mmdppx/rM+pb682vqwPpUcke12cGa6Fwc0J WtealRAyeu7lXg== -----END CERTIFICATE-----Generated at Wed Dec 24 23:26:59 2025 by rpki-client