This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft File: 5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft (raw, json) Hash identifier: faFKtXVCfZpvvLHPX6GRWtDHntqMuD8tEQ+n+KcL3Fw= Subject key identifier: C4:8A:75:A9:FC:F4:69:09:9F:DF:12:C2:58:DA:15:86:16:03:50:0A Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Certificate serial: 019B3C7FB7EEBE325113824E4FA1CB9FB524 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft Manifest number: 0C89 Signing time: Sat 20 Dec 2025 16:02:41 +0000 Manifest this update: Sat 20 Dec 2025 16:02:41 +0000 Manifest next update: Sun 21 Dec 2025 16:02:41 +0000 Files and hashes: 1: 2m_CYVmLsPzF7bcN6vIid84YZD8.roa (hash: LBmz6BkcC+hYAgg9NpyTpTiVYvW2FI/a+Z33OiNH3bM=) 2: 4nVbm_9mW8-MAn0I_kGjdBfxhVw.roa (hash: pTL9FLQm2ArdSOx4IvTJl5dYC4wcCTYCswuw3GEGHMQ=) 3: 5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl (hash: 5xi9bukGwYfQ792f65NduZjpiANHse/eYChhsyfSlTY=) 4: ASUGNfdEr-zmHuBMKbmczWEEyX0.roa (hash: XbBf6Nfds25faGeda9A9EZrA0jUpRsOTRIO73TfrGdU=) 5: D_RGKNjU3HO1804H_N4lL39f8xU.roa (hash: lQxsMyLpAGFJHo/y+xtaq8v1/ZEVry9ym0LdrZC/Bgk=) 6: Di4BCmfwCebJmpiiwQVl8kD1SGY.roa (hash: YROnCwrXQNQ5Na/T+Qstm6PeSLYo1KpF7+7yHOQYHZY=) 7: IpmNqXNW_slvomPPNDBgUsOEzfM.roa (hash: Pw8rvzKx3ysNgK3+6i7f6vpgrH3WD3WqD3kHoDoxu9U=) 8: IrnZpWugwiVaDWE0Y8y2HTk6myM.roa (hash: hz4dzGEJlp9nAI/PksWqX4be/cNB9cFXoUk0RTppUW4=) 9: UPL7qImi1Ys3kJpNeUneyjua3iE.roa (hash: yEbc7GI9w/HHKG7S49YH0IbZWjyzBWFPN0Ij4so55ao=) 10: Wqi1dLZsHvoMXUpSlZaZNHPgS_4.roa (hash: uMbe0TM0fIuYtnHf63Llp9sJ+CZVXJ/tOzlQU2AOjts=) 11: gqYJ1QlxZp2sfbvxF5yVPiDZ3Dk.roa (hash: +mkHl1F4HLXN9PfWQktZtYiROfsgXfptEmlNuP4F0GM=) 12: hrJ9G8LdPfpuv4HEnlrj0UM1FZI.roa (hash: Ap/wGOk300z33ESWLkwykljx6YcmZDQ+kuaPYGOBuOE=) 13: ip51KpcMdfOcRWLVf2HbT1-y1Tk.roa (hash: w96a29aqdZpAZsW1TalxljppYBFpY8XCQQF21I+O+bg=) 14: qOKY-IzakK8b3r-fGGAM7SuFUFM.roa (hash: 0xmS3lTVgR47MEU89O0ODLmZ+nEhlRcq1hkGVTaLD7U=) 15: u_PvNoZGGKwKo1fIPAvA4pNGOWE.roa (hash: 7nleymXLPmClcPELIrjirAmjx3u5krkfwTmE5v3abBQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:b7:ee:be:32:51:13:82:4e:4f:a1:cb:9f:b5:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Validity Not Before: Dec 20 16:02:41 2025 GMT Not After : Dec 21 16:02:41 2025 GMT Subject: CN=c48a75a9fcf469099fdf12c258da15861603500a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3a:8b:78:82:b5:90:60:5c:18:65:b0:82:65: 81:a5:3b:6b:a4:b7:ee:05:ca:b2:22:22:f1:4c:4d: d2:7f:44:38:b4:3a:32:52:75:05:86:50:38:16:56: d6:16:6d:b7:25:56:09:7e:dc:53:b9:c6:33:5b:91: 85:34:b1:5c:9f:07:07:2f:62:4f:76:80:30:30:48: 0e:1c:53:1e:c5:79:2e:a2:55:6c:33:f0:ce:5c:b0: 16:a4:0a:28:d2:8a:89:98:12:34:ef:27:a9:d0:72: 21:8e:43:40:c9:66:26:a4:10:c7:61:60:f9:c4:c4: e7:a5:b7:2e:b0:e4:d7:e9:9e:e0:e1:ad:fa:30:c6: d7:63:35:57:ad:2e:b8:48:b8:c3:6b:f0:80:59:bd: c6:53:9d:e1:ed:d6:a9:2d:d5:13:45:88:95:4b:e9: 68:3b:f5:b4:bf:50:d1:55:43:48:cb:5f:17:45:56: 1b:f7:fb:b2:52:13:40:dc:52:05:3c:d7:81:36:1d: 1c:02:72:60:bf:ba:76:51:4d:e4:31:44:0e:a1:bd: 6f:bf:05:f6:94:db:57:53:86:0f:4b:d7:75:2c:a4: d2:d5:a9:45:3a:97:a1:e3:85:73:02:15:13:87:ea: b7:dc:6d:f8:5d:5d:a0:cf:26:85:4f:5e:9c:f3:85: 83:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:8A:75:A9:FC:F4:69:09:9F:DF:12:C2:58:DA:15:86:16:03:50:0A X509v3 Authority Key Identifier: keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:ff:f2:cb:3e:0a:15:20:84:f5:28:d9:9e:30:19:a4:54:6f: 07:d7:7f:4a:8f:0d:67:0e:02:7b:9a:4c:71:42:f0:41:54:7b: 6c:de:40:24:85:78:f9:e7:82:fa:aa:43:86:36:d4:4b:4b:f0: 91:24:ba:f1:9f:0a:a6:33:90:e5:fb:17:22:2a:b1:94:d7:76: d4:0c:e5:68:55:9f:d2:cb:46:ec:7d:7e:22:b0:72:ba:51:a5: b8:a8:7c:8b:f6:78:f5:86:35:1a:09:b6:96:5a:94:f0:c8:24: 6b:c1:23:3b:af:3b:85:75:5c:1b:8b:c6:c7:70:ca:5d:5e:85: 6d:13:ea:70:cd:9d:01:37:2b:7a:5c:95:8a:56:f3:56:df:3c: 73:d5:03:fb:06:cf:3f:92:c4:8b:ad:9c:35:5a:78:e3:fd:c0: 3e:04:45:92:77:63:8f:a6:71:d2:b1:8d:b6:e1:7b:1d:1b:c1: 6a:53:21:0a:d0:7c:e0:af:43:b4:f3:ff:05:26:00:ab:17:82: 2c:4f:27:7a:f6:da:c7:81:6f:1b:c8:76:d3:21:69:cc:21:56: 01:fc:33:d6:3c:38:e2:6d:bf:d4:85:ea:84:c1:4f:ac:49:d1: 42:60:10:42:81:bf:e2:ce:40:bf:81:4f:31:da:6e:76:8c:40: e2:26:4e:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f7fuvjJRE4JOT6HLn7UkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YmU4ZWZlYzFmYjAzZDhhZjk3OWFmMWNiYTEzYTA4NDVh N2IwYmEwHhcNMjUxMjIwMTYwMjQxWhcNMjUxMjIxMTYwMjQxWjAzMTEwLwYDVQQD EyhjNDhhNzVhOWZjZjQ2OTA5OWZkZjEyYzI1OGRhMTU4NjE2MDM1MDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTqLeIK1kGBcGGWwgmWBpTtrpLfu BcqyIiLxTE3Sf0Q4tDoyUnUFhlA4FlbWFm23JVYJftxTucYzW5GFNLFcnwcHL2JP doAwMEgOHFMexXkuolVsM/DOXLAWpAoo0oqJmBI07yep0HIhjkNAyWYmpBDHYWD5 xMTnpbcusOTX6Z7g4a36MMbXYzVXrS64SLjDa/CAWb3GU53h7dapLdUTRYiVS+lo O/W0v1DRVUNIy18XRVYb9/uyUhNA3FIFPNeBNh0cAnJgv7p2UU3kMUQOob1vvwX2 lNtXU4YPS9d1LKTS1alFOpeh44VzAhUTh+q33G34XV2gzyaFT16c84WDeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMSKdan89GkJn98SwljaFYYWA1AKMB8GA1UdIwQY MBaAFOS+jv7B+wPYr5ea8cuhOghFp7C6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUt ZGZiZmEzZmNmMDIxLzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUtZGZiZmEzZmNmMDIx LzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxv/yyz4K FSCE9SjZnjAZpFRvB9d/So8NZw4Ce5pMcULwQVR7bN5AJIV4+eeC+qpDhjbUS0vw kSS68Z8KpjOQ5fsXIiqxlNd21AzlaFWf0stG7H1+IrByulGluKh8i/Z49YY1Ggm2 llqU8Mgka8EjO687hXVcG4vGx3DKXV6FbRPqcM2dATcrelyVilbzVt88c9UD+wbP P5LEi62cNVp44/3APgRFkndjj6Zx0rGNtuF7HRvBalMhCtB84K9DtPP/BSYAqxeC LE8nevbax4FvG8h20yFpzCFWAfwz1jw44m2/1IXqhMFPrEnRQmAQQoG/4s5Av4FP MdpudoxA4iZO/w== -----END CERTIFICATE-----Generated at Sat Dec 20 21:18:03 2025 by rpki-client