This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft
File: 5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft (raw, json)
Hash identifier: cHYbGeIOkUasPLwSOqgWEOCazhIoZjijhTNniVACglk=
Subject key identifier: 53:33:55:8F:5D:EB:82:89:30:89:AF:E4:8F:2E:E2:27:C8:CF:AE:E3
Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Certificate serial: 019B5787F2F6C3A8AA183477072096002E2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft
Manifest number: 0C97
Signing time: Thu 25 Dec 2025 22:01:25 +0000
Manifest this update: Thu 25 Dec 2025 22:01:25 +0000
Manifest next update: Fri 26 Dec 2025 22:01:25 +0000
Files and hashes: 1: 2m_CYVmLsPzF7bcN6vIid84YZD8.roa (hash: LBmz6BkcC+hYAgg9NpyTpTiVYvW2FI/a+Z33OiNH3bM=)
2: 4nVbm_9mW8-MAn0I_kGjdBfxhVw.roa (hash: pTL9FLQm2ArdSOx4IvTJl5dYC4wcCTYCswuw3GEGHMQ=)
3: 5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl (hash: 4ylIDZeCNsk/TBqEID+3u3uZBGheMRvOwQO38fpw6Ys=)
4: ASUGNfdEr-zmHuBMKbmczWEEyX0.roa (hash: XbBf6Nfds25faGeda9A9EZrA0jUpRsOTRIO73TfrGdU=)
5: D_RGKNjU3HO1804H_N4lL39f8xU.roa (hash: lQxsMyLpAGFJHo/y+xtaq8v1/ZEVry9ym0LdrZC/Bgk=)
6: Di4BCmfwCebJmpiiwQVl8kD1SGY.roa (hash: YROnCwrXQNQ5Na/T+Qstm6PeSLYo1KpF7+7yHOQYHZY=)
7: IpmNqXNW_slvomPPNDBgUsOEzfM.roa (hash: Pw8rvzKx3ysNgK3+6i7f6vpgrH3WD3WqD3kHoDoxu9U=)
8: IrnZpWugwiVaDWE0Y8y2HTk6myM.roa (hash: hz4dzGEJlp9nAI/PksWqX4be/cNB9cFXoUk0RTppUW4=)
9: UPL7qImi1Ys3kJpNeUneyjua3iE.roa (hash: yEbc7GI9w/HHKG7S49YH0IbZWjyzBWFPN0Ij4so55ao=)
10: Wqi1dLZsHvoMXUpSlZaZNHPgS_4.roa (hash: uMbe0TM0fIuYtnHf63Llp9sJ+CZVXJ/tOzlQU2AOjts=)
11: gqYJ1QlxZp2sfbvxF5yVPiDZ3Dk.roa (hash: +mkHl1F4HLXN9PfWQktZtYiROfsgXfptEmlNuP4F0GM=)
12: hrJ9G8LdPfpuv4HEnlrj0UM1FZI.roa (hash: Ap/wGOk300z33ESWLkwykljx6YcmZDQ+kuaPYGOBuOE=)
13: ip51KpcMdfOcRWLVf2HbT1-y1Tk.roa (hash: w96a29aqdZpAZsW1TalxljppYBFpY8XCQQF21I+O+bg=)
14: qOKY-IzakK8b3r-fGGAM7SuFUFM.roa (hash: 0xmS3lTVgR47MEU89O0ODLmZ+nEhlRcq1hkGVTaLD7U=)
15: u_PvNoZGGKwKo1fIPAvA4pNGOWE.roa (hash: 7nleymXLPmClcPELIrjirAmjx3u5krkfwTmE5v3abBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Dec 2025 19:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:57:87:f2:f6:c3:a8:aa:18:34:77:07:20:96:00:2e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Validity
Not Before: Dec 25 22:01:25 2025 GMT
Not After : Dec 26 22:01:25 2025 GMT
Subject: CN=5333558f5deb82893089afe48f2ee227c8cfaee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:45:f8:dc:8a:e3:c1:41:8f:a3:a2:bf:cb:31:
02:97:4b:3a:ea:0d:9d:83:2e:80:30:19:ba:e6:64:
ec:8c:e3:32:b6:df:61:12:87:4a:17:94:db:89:5d:
40:26:f2:35:d9:34:52:f1:e1:8e:ce:f8:12:75:38:
16:a3:3e:cd:82:ea:f6:e8:ff:6c:a1:c6:88:b6:a8:
01:2c:b4:36:be:b8:f7:80:c0:c3:38:6a:61:24:44:
08:31:6f:69:56:1c:df:08:2c:1b:95:82:a5:13:f1:
b7:57:bb:a0:a4:66:b4:88:b4:26:01:8d:c9:d7:08:
c8:9e:6f:d2:91:b0:b7:d2:55:28:f6:3f:ee:7f:44:
23:1b:5d:d5:a5:49:98:30:e0:9f:51:82:7e:51:c2:
de:a5:e6:3b:1e:84:71:7b:3c:bf:b9:a5:5f:65:ad:
d5:b8:2c:1c:a7:9d:59:d9:f1:38:d1:1c:aa:5c:1e:
5d:3b:44:bb:a5:29:93:9e:28:08:f4:29:38:b4:b6:
f8:6d:f6:c1:73:20:e7:a1:25:18:39:aa:a6:25:05:
a5:57:35:63:c8:72:58:28:3a:d2:c2:50:05:1e:e3:
94:9f:e3:c0:df:6a:e5:c2:3c:e9:4a:72:80:73:0e:
cd:75:a1:cd:07:09:7e:04:39:0c:17:f5:aa:6f:e0:
9c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:33:55:8F:5D:EB:82:89:30:89:AF:E4:8F:2E:E2:27:C8:CF:AE:E3
X509v3 Authority Key Identifier:
keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:2b:87:a7:d1:6b:2f:bd:87:37:b6:72:48:2b:2b:3d:bb:8f:
d6:c9:e9:4d:61:20:da:36:24:a5:c0:10:60:d9:e3:dd:9e:0a:
15:b5:bc:44:ba:59:13:b3:45:f3:b0:72:2f:dc:ec:2e:30:50:
64:84:b7:ba:d2:f6:1c:77:a9:58:a7:15:57:11:2d:15:3b:98:
ae:e2:f1:26:37:57:c2:56:3b:6f:4f:40:21:9a:53:05:7f:eb:
c4:c1:98:71:8a:7b:64:4e:b8:73:71:59:9b:19:fb:26:4d:12:
8f:1d:64:3b:7b:bf:99:33:71:68:cc:90:46:3b:db:b2:7c:8b:
ca:8a:4c:73:6c:b5:81:72:2b:56:f4:c0:bb:58:51:f1:5a:4e:
22:b0:a5:ef:57:ee:94:4f:68:b2:23:04:41:d5:a8:a6:6e:b0:
5b:c6:ec:d8:30:e5:12:df:1e:0a:d9:2c:2d:94:3a:8b:21:88:
34:8a:3f:5c:66:5f:0f:9e:55:93:a1:a1:b7:da:f7:b8:f5:ec:
a0:0d:09:18:1f:6c:be:a8:51:f0:54:b5:df:26:3e:08:a9:fd:
7e:6f:1b:2d:8d:bc:fa:13:92:4b:23:5b:c4:69:34:1b:0a:62:
8a:91:1d:94:eb:2f:22:50:48:2d:75:f7:f3:2e:d8:9e:79:31:
b4:a7:0e:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtXh/L2w6iqGDR3ByCWAC4rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YmU4ZWZlYzFmYjAzZDhhZjk3OWFmMWNiYTEzYTA4NDVh
N2IwYmEwHhcNMjUxMjI1MjIwMTI1WhcNMjUxMjI2MjIwMTI1WjAzMTEwLwYDVQQD
Eyg1MzMzNTU4ZjVkZWI4Mjg5MzA4OWFmZTQ4ZjJlZTIyN2M4Y2ZhZWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0X43IrjwUGPo6K/yzECl0s66g2d
gy6AMBm65mTsjOMytt9hEodKF5TbiV1AJvI12TRS8eGOzvgSdTgWoz7Ngur26P9s
ocaItqgBLLQ2vrj3gMDDOGphJEQIMW9pVhzfCCwblYKlE/G3V7ugpGa0iLQmAY3J
1wjInm/SkbC30lUo9j/uf0QjG13VpUmYMOCfUYJ+UcLepeY7HoRxezy/uaVfZa3V
uCwcp51Z2fE40RyqXB5dO0S7pSmTnigI9Ck4tLb4bfbBcyDnoSUYOaqmJQWlVzVj
yHJYKDrSwlAFHuOUn+PA32rlwjzpSnKAcw7NdaHNBwl+BDkMF/Wqb+CckwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFMzVY9d64KJMImv5I8u4ifIz67jMB8GA1UdIwQY
MBaAFOS+jv7B+wPYr5ea8cuhOghFp7C6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUt
ZGZiZmEzZmNmMDIxLzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUtZGZiZmEzZmNmMDIx
LzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIyuHp9Fr
L72HN7ZySCsrPbuP1snpTWEg2jYkpcAQYNnj3Z4KFbW8RLpZE7NF87ByL9zsLjBQ
ZIS3utL2HHepWKcVVxEtFTuYruLxJjdXwlY7b09AIZpTBX/rxMGYcYp7ZE64c3FZ
mxn7Jk0Sjx1kO3u/mTNxaMyQRjvbsnyLyopMc2y1gXIrVvTAu1hR8VpOIrCl71fu
lE9osiMEQdWopm6wW8bs2DDlEt8eCtksLZQ6iyGINIo/XGZfD55Vk6Ght9r3uPXs
oA0JGB9svqhR8FS13yY+CKn9fm8bLY28+hOSSyNbxGk0GwpiipEdlOsvIlBILXX3
8y7YnnkxtKcOrg==
-----END CERTIFICATE-----
Generated at Fri Dec 26 01:29:03 2025 by rpki-client