This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft File: 5pXPs2_lofOEzHeK4pmsq4HCe_o.mft (raw, json) Hash identifier: OLR/58JG9hziebiHrjhitGR8AoZ7DqlwGbJKcQQsqds= Subject key identifier: 41:9A:58:8C:B4:47:1C:CE:88:11:74:B4:DD:11:68:75:10:C5:0F:74 Authority key identifier: E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA Certificate issuer: /CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa Certificate serial: 019B4091AEA23EADE66DDE7FC923DEE52C96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 11:00:47 +0000 Manifest this update: Sun 21 Dec 2025 11:00:47 +0000 Manifest next update: Mon 22 Dec 2025 11:00:47 +0000 Files and hashes: 1: 5pXPs2_lofOEzHeK4pmsq4HCe_o.crl (hash: qcoyzAnr3uEvN1gKn9n9uNHYl/A82dzVJm4F3ip4peM=) 2: QdF1_Zq92wXCrTWLXFHsTX1fLOE.roa (hash: 3ntgOindNlTLmT1RU6YRq18wFcBPHz2TO/Rc5iQY6kw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.crl rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:ae:a2:3e:ad:e6:6d:de:7f:c9:23:de:e5:2c:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa Validity Not Before: Dec 21 11:00:47 2025 GMT Not After : Dec 22 11:00:47 2025 GMT Subject: CN=419a588cb4471cce881174b4dd11687510c50f74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:76:96:d0:49:cd:14:da:c8:31:ec:e7:1b:9e: 76:b2:bd:08:d1:9c:df:67:6a:f2:90:b0:07:73:d7: be:a5:31:e0:a3:17:24:b0:8d:c4:85:c3:05:32:52: f7:be:28:f9:57:49:17:a4:db:83:58:64:c9:e5:5d: c9:86:35:92:a8:83:07:33:3e:2e:97:f1:dc:86:b4: cb:77:27:17:c6:22:3f:c8:ca:5d:e6:2d:46:bf:77: 7d:b2:66:ce:e1:8a:31:62:d8:ef:db:50:41:9d:60: d5:b4:b0:49:33:d7:d0:49:06:92:14:3e:0f:37:c3: dc:59:6d:28:e4:63:5a:ef:5c:11:e3:a4:d2:d2:ec: 04:61:8f:15:1c:87:bb:ea:7f:e3:d4:9e:2e:8d:52: fe:d8:b0:f4:49:13:68:31:96:75:9a:49:09:15:6a: b6:f4:e9:31:5a:86:4d:29:9e:8c:ba:a9:52:0b:2a: d5:cc:0d:13:0f:53:c2:3c:eb:ed:82:3a:c8:48:82: c8:0b:0d:10:9c:44:e0:b7:6b:20:2a:10:45:21:6a: 54:c9:b3:96:25:5e:9b:e1:b5:4e:49:c8:04:c6:30: b4:c3:00:74:97:34:bf:63:80:15:d7:25:5b:3f:5f: 83:9b:64:bb:0f:8c:36:2b:4b:8c:76:0e:0d:1a:a5: bb:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:9A:58:8C:B4:47:1C:CE:88:11:74:B4:DD:11:68:75:10:C5:0F:74 X509v3 Authority Key Identifier: keyid:E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:fb:a6:3c:15:3b:ed:77:1f:8e:12:af:5f:40:4f:9e:20:3e: 36:89:6e:1c:f7:d0:b3:c4:cc:8a:f9:c5:05:1c:d1:b0:35:77: 5e:23:fc:4a:3f:38:98:92:93:52:1a:0e:c8:b2:fa:02:49:64: bf:5c:2e:3b:90:60:96:79:3e:e2:75:fc:32:9f:c3:02:ff:5b: d5:4f:08:41:75:ae:7b:d5:8c:9d:a0:44:ca:30:17:12:eb:35: a0:7f:42:45:86:38:55:1b:69:2b:0b:00:72:e2:54:9b:65:c2: dd:06:b1:a2:72:d2:87:96:81:ab:dd:4b:15:74:17:5e:06:6b: db:50:24:bd:2e:b3:a9:f0:32:e0:38:b8:53:d6:04:3a:a9:02: 05:22:7b:d4:f3:90:5c:24:f4:0a:e9:81:c1:09:87:95:f0:a6: cd:79:e5:b9:9e:2f:db:23:49:06:d6:99:5d:f8:fe:df:b4:55: f8:fc:17:0c:bb:3c:8d:46:4a:9d:72:fe:61:a6:39:27:39:51: bb:8a:5c:a3:be:26:a2:8f:aa:79:0b:4f:66:ac:b5:96:d5:08: 2f:45:09:a5:cb:aa:15:01:f9:2b:97:ed:4c:f9:d5:e7:3c:6f: a8:05:f6:4d:04:6c:59:ce:75:ad:9c:f1:74:95:3b:07:1e:e5: 6d:d4:c7:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAka6iPq3mbd5/ySPe5SyWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2OTVjZmIzNmZlNWExZjM4NGNjNzc4YWUyOTlhY2FiODFj MjdiZmEwHhcNMjUxMjIxMTEwMDQ3WhcNMjUxMjIyMTEwMDQ3WjAzMTEwLwYDVQQD Eyg0MTlhNTg4Y2I0NDcxY2NlODgxMTc0YjRkZDExNjg3NTEwYzUwZjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynaW0EnNFNrIMeznG552sr0I0Zzf Z2rykLAHc9e+pTHgoxcksI3EhcMFMlL3vij5V0kXpNuDWGTJ5V3JhjWSqIMHMz4u l/HchrTLdycXxiI/yMpd5i1Gv3d9smbO4YoxYtjv21BBnWDVtLBJM9fQSQaSFD4P N8PcWW0o5GNa71wR46TS0uwEYY8VHIe76n/j1J4ujVL+2LD0SRNoMZZ1mkkJFWq2 9OkxWoZNKZ6MuqlSCyrVzA0TD1PCPOvtgjrISILICw0QnETgt2sgKhBFIWpUybOW JV6b4bVOScgExjC0wwB0lzS/Y4AV1yVbP1+Dm2S7D4w2K0uMdg4NGqW7awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEGaWIy0RxzOiBF0tN0RaHUQxQ90MB8GA1UdIwQY MBaAFOaVz7Nv5aHzhMx3iuKZrKuBwnv6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXBYUHMyX2xvZk9FekhlSzRwbXNxNEhDZV9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80OGE4YmEtZGM2MS00MmJkLTk0M2Et YzMxZmE3MWUyNjM1LzEvNXBYUHMyX2xvZk9FekhlSzRwbXNxNEhDZV9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi80OGE4YmEtZGM2MS00MmJkLTk0M2EtYzMxZmE3MWUyNjM1 LzEvNXBYUHMyX2xvZk9FekhlSzRwbXNxNEhDZV9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsvumPBU7 7XcfjhKvX0BPniA+NoluHPfQs8TMivnFBRzRsDV3XiP8Sj84mJKTUhoOyLL6Aklk v1wuO5Bglnk+4nX8Mp/DAv9b1U8IQXWue9WMnaBEyjAXEus1oH9CRYY4VRtpKwsA cuJUm2XC3QaxonLSh5aBq91LFXQXXgZr21AkvS6zqfAy4Di4U9YEOqkCBSJ71POQ XCT0CumBwQmHlfCmzXnluZ4v2yNJBtaZXfj+37RV+PwXDLs8jUZKnXL+YaY5JzlR u4pco74moo+qeQtPZqy1ltUIL0UJpcuqFQH5K5ftTPnV5zxvqAX2TQRsWc51rZzx dJU7Bx7lbdTHsA== -----END CERTIFICATE-----Generated at Sun Dec 21 13:29:19 2025 by rpki-client