This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft File: 5WB28n4T0YAOd9FuS2CyO29YyCA.mft (raw, json) Hash identifier: f2Fgd9j5LOMKKo3qvqpmv4K8JOo99KEiFPypNA5iGMU= Subject key identifier: C3:60:C1:17:E1:58:4B:F1:A0:57:6F:E8:9D:B8:3D:7E:BA:9A:2A:F9 Authority key identifier: E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20 Certificate issuer: /CN=e56076f27e13d1800e77d16e4b60b23b6f58c820 Certificate serial: 019B46CA98F95D6C4129C3489A71212DAC3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft Manifest number: 10E5 Signing time: Mon 22 Dec 2025 16:00:41 +0000 Manifest this update: Mon 22 Dec 2025 16:00:41 +0000 Manifest next update: Tue 23 Dec 2025 16:00:41 +0000 Files and hashes: 1: 1-BGofSFZOno9pVnXMBI7UJeHJBg.roa (hash: LL/uaCHo6NuNRF9xktkjKIvVTGv3e4Z41mGfZiStgPc=) 2: 2ml5oRq-VyEb_mJG0C7Ahdjf8IY.roa (hash: ttehz4UlNMi9cbs/FPfy9Lw9uSsUlhxDo7xqWG0gtFA=) 3: 5WB28n4T0YAOd9FuS2CyO29YyCA.crl (hash: 87RRlyu+KMbitlsBzvtumlQwXBCp96ehJXgvtLd7wZg=) 4: 6SdikSl1jU5cpmKfnZzRmSDOHuU.roa (hash: ppHMqODDNYRhgCo6OadvbiBfTSlanNIKDu29ewQ4fxE=) 5: AgBjgI35YWeABs8oCUWHz3K2zWw.roa (hash: 4E8DBT5sfAcPhRkXfwuGn/b4aAai3g0fbeGZYZUWlss=) 6: SQWlc0rZJj-IH4BVVpWf4gkYzTE.roa (hash: pKU0nvpLv8g9iORRQCN0Yo6/Mr7aoPJ/lOVaNu8h5Gk=) 7: Y9YksH2bUiHljz8P5EhHyhB5y9g.roa (hash: T5FIsRO2g9NTZMOXMSlY2kZF7GuiHFYTJEt+zSOsPvQ=) 8: fX0xQGF-aX1OUm6loSYzR_yxa3s.roa (hash: WE6TQcdbZv7KpM5MoM+ZhGHXdH152fsJ6v0eYqFpKnw=) 9: yn6_FC3ZDlreYvdUbTREjMhfyxs.roa (hash: LlX6Tl5H1KTqy6O3g5CWu69Bs/CP9zvonCRnk8+j/fs=) 10: zEHHIdG3vc4H4MQ18ECQEGpabUA.roa (hash: lqID/O1hFyq6iFk/ohsI5EgJyiARLpIUr7bXj4riy1o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:ca:98:f9:5d:6c:41:29:c3:48:9a:71:21:2d:ac:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e56076f27e13d1800e77d16e4b60b23b6f58c820 Validity Not Before: Dec 22 16:00:41 2025 GMT Not After : Dec 23 16:00:41 2025 GMT Subject: CN=c360c117e1584bf1a0576fe89db83d7eba9a2af9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7c:bb:95:48:bd:1c:60:26:08:07:7d:75:d8: 18:51:44:e5:96:ad:0b:6f:04:9e:ba:1b:7c:16:32: d4:bd:34:64:7b:da:a8:6b:59:64:a0:d3:ca:64:a2: 40:4a:34:4c:49:35:39:1c:73:b5:ad:ad:e5:ae:c5: ab:a9:97:19:c8:e4:a7:0b:82:16:8b:63:bd:7f:32: b1:d9:ab:e5:ee:08:a5:10:01:ca:f0:65:1a:b1:0c: 73:1a:62:28:bc:c8:4d:2b:9a:07:bf:31:04:e0:6d: 4f:2e:30:2b:c3:f3:76:cc:8d:76:6f:e5:3b:98:ba: 71:76:a8:55:05:08:f7:7e:e1:cb:ad:0d:67:2a:23: b0:a9:86:39:9e:62:ce:32:c0:55:00:7e:f4:e7:f0: 12:1f:bd:95:2c:d6:f7:99:01:2a:cb:6e:33:01:5f: 6a:01:0d:f8:d7:c4:5f:7c:40:e0:c5:05:60:cb:c6: cf:e4:35:1d:61:d1:f4:88:de:63:c7:37:c8:11:3b: 65:e4:66:47:95:ba:89:c1:00:de:86:a2:ee:fd:aa: dc:19:00:3c:49:45:28:78:57:28:00:1a:20:76:8b: f2:98:30:6f:61:69:61:b7:1a:42:13:6a:01:42:5e: 51:83:22:22:ec:14:f9:31:41:b1:a4:07:b9:b5:fc: ef:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:60:C1:17:E1:58:4B:F1:A0:57:6F:E8:9D:B8:3D:7E:BA:9A:2A:F9 X509v3 Authority Key Identifier: keyid:E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:e5:7c:bd:8a:27:aa:0f:24:aa:c4:94:36:33:9c:18:ea:55: ef:80:c4:12:46:28:8e:f5:38:e4:a3:99:8b:7a:2d:b6:fc:56: a1:2d:6e:b5:28:5a:5d:f9:d7:2a:f8:29:e1:ed:fb:63:c3:e5: 52:a5:16:aa:7c:29:ea:64:72:dd:35:86:a1:99:71:e8:d4:9e: e2:33:fe:16:00:49:49:b7:1e:e7:e5:b0:b6:ca:fd:42:06:f1: 07:2c:7f:a6:03:c5:a8:80:35:9d:80:6d:36:8a:34:68:d5:d8: a1:bc:6e:60:b6:f3:c7:f1:c0:df:08:51:2f:0d:82:2c:0e:e9: 28:a4:d0:38:b6:9a:3d:0d:78:ab:2a:b6:84:86:3e:a6:78:68: bf:ae:95:b1:ea:01:a6:ab:55:72:3d:e3:cb:93:a9:50:93:08: b0:51:c9:e2:91:08:c0:20:71:89:91:a4:86:e2:36:9e:c6:1f: 47:21:67:96:87:70:e9:99:f5:a3:73:e8:e8:d5:4c:b7:51:c9: 47:a0:78:b1:d4:fa:a6:d9:2c:66:b6:f9:f0:e7:88:27:44:04: 3f:71:87:4f:c4:fc:a6:d8:22:1e:03:80:7f:bc:1b:60:04:c3: 30:06:e4:97:b1:08:d0:68:59:6f:57:1c:eb:1d:71:28:40:7c: 36:b1:73:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGypj5XWxBKcNImnEhLaw9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NjA3NmYyN2UxM2QxODAwZTc3ZDE2ZTRiNjBiMjNiNmY1 OGM4MjAwHhcNMjUxMjIyMTYwMDQxWhcNMjUxMjIzMTYwMDQxWjAzMTEwLwYDVQQD EyhjMzYwYzExN2UxNTg0YmYxYTA1NzZmZTg5ZGI4M2Q3ZWJhOWEyYWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuny7lUi9HGAmCAd9ddgYUUTllq0L bwSeuht8FjLUvTRke9qoa1lkoNPKZKJASjRMSTU5HHO1ra3lrsWrqZcZyOSnC4IW i2O9fzKx2avl7gilEAHK8GUasQxzGmIovMhNK5oHvzEE4G1PLjArw/N2zI12b+U7 mLpxdqhVBQj3fuHLrQ1nKiOwqYY5nmLOMsBVAH705/ASH72VLNb3mQEqy24zAV9q AQ3418RffEDgxQVgy8bP5DUdYdH0iN5jxzfIETtl5GZHlbqJwQDehqLu/arcGQA8 SUUoeFcoABogdovymDBvYWlhtxpCE2oBQl5RgyIi7BT5MUGxpAe5tfzvjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMNgwRfhWEvxoFdv6J24PX66mir5MB8GA1UdIwQY MBaAFOVgdvJ+E9GADnfRbktgsjtvWMggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVdCMjhuNFQwWUFPZDlGdVMyQ3lPMjlZeUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8wYWM0NGQtYjNiZS00Mjc3LTgwZjgt NThjZjg5ODg4ZTJhLzEvNVdCMjhuNFQwWUFPZDlGdVMyQ3lPMjlZeUNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8wYWM0NGQtYjNiZS00Mjc3LTgwZjgtNThjZjg5ODg4ZTJh LzEvNVdCMjhuNFQwWUFPZDlGdVMyQ3lPMjlZeUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbOV8vYon qg8kqsSUNjOcGOpV74DEEkYojvU45KOZi3ottvxWoS1utShaXfnXKvgp4e37Y8Pl UqUWqnwp6mRy3TWGoZlx6NSe4jP+FgBJSbce5+Wwtsr9QgbxByx/pgPFqIA1nYBt Noo0aNXYobxuYLbzx/HA3whRLw2CLA7pKKTQOLaaPQ14qyq2hIY+pnhov66VseoB pqtVcj3jy5OpUJMIsFHJ4pEIwCBxiZGkhuI2nsYfRyFnlodw6Zn1o3Po6NVMt1HJ R6B4sdT6ptksZrb58OeIJ0QEP3GHT8T8ptgiHgOAf7wbYATDMAbkl7EI0GhZb1cc 6x1xKEB8NrFzeA== -----END CERTIFICATE-----Generated at Mon Dec 22 22:50:30 2025 by rpki-client