This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.mft File: 5vHe2vTb2mDamQ1oVlDmjIiMYQA.mft (raw, json) Hash identifier: l+QQIGrxxOMJSu6+sJ+etjZ1GgYEgFdiTZpkmmqHpT4= Subject key identifier: 5B:ED:EE:12:94:5D:54:27:E7:3D:FE:6F:7A:91:76:10:7D:62:00:00 Authority key identifier: E6:F1:DE:DA:F4:DB:DA:60:DA:99:0D:68:56:50:E6:8C:88:8C:61:00 Certificate issuer: /CN=e6f1dedaf4dbda60da990d685650e68c888c6100 Certificate serial: 019B424962F8AB81A8FA964A9792AD6913FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.mft Manifest number: 1053 Signing time: Sun 21 Dec 2025 19:01:04 +0000 Manifest this update: Sun 21 Dec 2025 19:01:04 +0000 Manifest next update: Mon 22 Dec 2025 19:01:04 +0000 Files and hashes: 1: 5vHe2vTb2mDamQ1oVlDmjIiMYQA.crl (hash: wYQpu/iHVVL4Y6pJTvr4faVxlGVCkCYdiLvgcZuUoRM=) 2: OW3B1N5hPEzvlqiiwwyRQqXGtGw.roa (hash: BA7rjKrivNOmsfVWQtK8ZoacgDY48HHJ2LHTpwM8by0=) 3: Zc1OpaEScpUAFoK2KIwQ3bNOjEk.roa (hash: Ycn1+SSx44zVA79knmhpwAl0wsmj/W2NDIoNvR4yRPE=) 4: as-zC8jpSJGO4uxCc4_xuMoOOU0.roa (hash: H/3CCPbJG2nng0Pq02AL9scecswnyVINc6vLH8ua4TU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.mft rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:62:f8:ab:81:a8:fa:96:4a:97:92:ad:69:13:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6f1dedaf4dbda60da990d685650e68c888c6100 Validity Not Before: Dec 21 19:01:04 2025 GMT Not After : Dec 22 19:01:04 2025 GMT Subject: CN=5bedee12945d5427e73dfe6f7a9176107d620000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:cc:9a:7c:55:3a:a9:38:75:a7:11:3a:3d:18: c3:21:54:ea:85:79:b3:5a:e1:cb:59:58:5c:50:29: 86:4b:92:b3:83:5c:68:67:29:0a:d3:2f:70:01:8b: d3:f3:9d:c8:04:cf:c2:ea:05:b4:d1:d5:6f:05:a7: e7:ac:2e:6c:86:31:27:5f:64:bf:6e:74:b2:5f:da: ac:43:a1:ae:6d:f6:35:22:28:55:5e:5d:19:dc:15: 7e:56:52:a6:7e:ff:46:6e:6a:f2:13:0a:0a:83:78: f0:b6:54:e6:f8:1c:a7:07:f5:93:b0:67:7e:ed:3d: f5:ab:06:e1:d0:2d:0c:ea:d1:64:17:50:5c:f1:11: 95:f0:18:cb:00:60:81:7a:e7:5d:e4:1a:7c:b3:12: a2:c2:dc:f7:46:3c:54:dc:db:3d:26:64:c9:51:49: 3c:be:04:8c:9c:40:d7:99:c9:c1:9b:33:ab:91:47: fa:84:c1:f7:cc:ce:44:77:52:d6:ed:1c:21:88:49: ea:bf:4a:9a:31:66:4f:db:a2:e5:9e:a1:7e:03:ef: d3:81:12:b2:2c:22:a7:e1:a0:4b:26:f6:26:e5:89: 8b:01:ec:58:e1:66:d5:7a:13:cc:a6:6b:22:eb:a6: 65:38:63:06:75:c3:c8:c2:f7:44:aa:27:a3:2c:b6: eb:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:ED:EE:12:94:5D:54:27:E7:3D:FE:6F:7A:91:76:10:7D:62:00:00 X509v3 Authority Key Identifier: keyid:E6:F1:DE:DA:F4:DB:DA:60:DA:99:0D:68:56:50:E6:8C:88:8C:61:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:80:00:cf:0b:9e:b4:dc:b2:35:bd:5e:02:ea:9f:aa:a4:4f: 7f:e2:0b:9c:cd:87:f5:b6:44:19:c0:4b:cd:3e:be:e5:ec:b2: 94:e4:21:ad:f8:95:6d:2d:9f:ad:04:58:de:06:b3:67:94:4f: 9c:5c:07:54:72:b1:b8:f6:f0:35:9f:51:ba:63:bb:45:3e:23: 64:39:ef:2a:81:c6:04:15:75:7b:d6:0b:b7:08:5c:fa:74:d8: 9b:2e:98:bc:07:af:1c:c0:fa:a1:d9:80:a8:68:06:84:f0:c0: 57:73:25:f6:49:19:61:c1:bc:48:81:ca:5a:3e:62:cf:ae:78: ee:c3:d5:c3:f1:08:a4:64:9e:c6:30:96:76:dd:7f:ea:fa:e7: 7d:34:86:8f:ce:78:b6:af:df:a1:80:78:a7:7d:60:76:88:d0: 95:aa:23:81:97:3d:b8:01:b8:cd:6e:cb:e0:ec:eb:87:8a:f9: b4:a6:cd:cd:96:b0:72:42:cd:98:64:ef:ac:fc:01:06:82:00: 06:14:8c:57:b8:30:3c:cd:a6:a8:73:0b:40:42:20:a0:3e:c5: 9f:24:cc:eb:0a:be:ca:15:1d:7d:cd:4d:e7:bf:61:a4:87:8a: c0:e2:76:31:c2:fb:e8:1b:91:a4:5d:ca:2e:ce:a6:c4:d8:5e: 17:30:ce:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSWL4q4Go+pZKl5KtaRP9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2ZjFkZWRhZjRkYmRhNjBkYTk5MGQ2ODU2NTBlNjhjODg4 YzYxMDAwHhcNMjUxMjIxMTkwMTA0WhcNMjUxMjIyMTkwMTA0WjAzMTEwLwYDVQQD Eyg1YmVkZWUxMjk0NWQ1NDI3ZTczZGZlNmY3YTkxNzYxMDdkNjIwMDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MyafFU6qTh1pxE6PRjDIVTqhXmz WuHLWVhcUCmGS5Kzg1xoZykK0y9wAYvT853IBM/C6gW00dVvBafnrC5shjEnX2S/ bnSyX9qsQ6GubfY1IihVXl0Z3BV+VlKmfv9GbmryEwoKg3jwtlTm+BynB/WTsGd+ 7T31qwbh0C0M6tFkF1Bc8RGV8BjLAGCBeudd5Bp8sxKiwtz3RjxU3Ns9JmTJUUk8 vgSMnEDXmcnBmzOrkUf6hMH3zM5Ed1LW7RwhiEnqv0qaMWZP26LlnqF+A+/TgRKy LCKn4aBLJvYm5YmLAexY4WbVehPMpmsi66ZlOGMGdcPIwvdEqiejLLbrnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFvt7hKUXVQn5z3+b3qRdhB9YgAAMB8GA1UdIwQY MBaAFObx3tr029pg2pkNaFZQ5oyIjGEAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXZIZTJ2VGIybURhbVExb1ZsRG1qSWlNWVFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8yM2JhNDYtZmM3YS00Yjk3LThiNGYt MjMxNjU3ODI5ZWY1LzEvNXZIZTJ2VGIybURhbVExb1ZsRG1qSWlNWVFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS8yM2JhNDYtZmM3YS00Yjk3LThiNGYtMjMxNjU3ODI5ZWY1 LzEvNXZIZTJ2VGIybURhbVExb1ZsRG1qSWlNWVFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcIAAzwue tNyyNb1eAuqfqqRPf+ILnM2H9bZEGcBLzT6+5eyylOQhrfiVbS2frQRY3gazZ5RP nFwHVHKxuPbwNZ9RumO7RT4jZDnvKoHGBBV1e9YLtwhc+nTYmy6YvAevHMD6odmA qGgGhPDAV3Ml9kkZYcG8SIHKWj5iz6547sPVw/EIpGSexjCWdt1/6vrnfTSGj854 tq/foYB4p31gdojQlaojgZc9uAG4zW7L4Ozrh4r5tKbNzZawckLNmGTvrPwBBoIA BhSMV7gwPM2mqHMLQEIgoD7FnyTM6wq+yhUdfc1N579hpIeKwOJ2McL76BuRpF3K Ls6mxNheFzDOGQ== -----END CERTIFICATE-----Generated at Mon Dec 22 03:59:52 2025 by rpki-client