This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.mft File: a-5EwhI0JTYYsNeza5Djy1xA3tE.mft (raw, json) Hash identifier: MBlLDbNj6dV0+KsORcyYoljKraYr38gfYl1oz+uIFH0= Subject key identifier: 43:E3:CB:32:B4:F1:55:C4:30:FC:9B:D4:35:77:CE:E4:C6:B5:E2:B8 Authority key identifier: 6B:EE:44:C2:12:34:25:36:18:B0:D7:B3:6B:90:E3:CB:5C:40:DE:D1 Certificate issuer: /CN=6bee44c21234253618b0d7b36b90e3cb5c40ded1 Certificate serial: 019B330CC97635465B8C8C18849DDA140F0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-5EwhI0JTYYsNeza5Djy1xA3tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.mft Manifest number: 1780 Signing time: Thu 18 Dec 2025 20:00:34 +0000 Manifest this update: Thu 18 Dec 2025 20:00:34 +0000 Manifest next update: Fri 19 Dec 2025 20:00:34 +0000 Files and hashes: 1: a-5EwhI0JTYYsNeza5Djy1xA3tE.crl (hash: g0UVvV57g2IjahKDLnJwQK11VAD9Ti+3NPfU7gbsg6o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.mft rsync://rpki.ripe.net/repository/DEFAULT/a-5EwhI0JTYYsNeza5Djy1xA3tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0c:c9:76:35:46:5b:8c:8c:18:84:9d:da:14:0f:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bee44c21234253618b0d7b36b90e3cb5c40ded1 Validity Not Before: Dec 18 20:00:34 2025 GMT Not After : Dec 19 20:00:34 2025 GMT Subject: CN=43e3cb32b4f155c430fc9bd43577cee4c6b5e2b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7e:3b:27:3a:a4:7e:5d:e0:85:98:26:95:3e: 3a:9c:38:d9:ba:c8:4f:0d:27:90:02:98:3a:6a:cb: 41:5f:53:03:77:a3:8d:ee:9d:f5:c5:49:25:46:cb: 61:b8:6f:4b:69:f7:44:be:7a:e6:cf:ba:51:15:cc: c2:06:8a:c4:cd:db:ed:20:17:b9:32:8c:b7:e7:80: ac:ec:58:f3:b1:06:75:d5:5d:22:4b:3d:b2:87:77: 0b:93:d3:c3:f8:43:c3:61:c7:88:16:da:7d:f8:96: a6:6e:46:e9:88:df:82:5b:21:af:54:47:84:7a:3a: c0:3a:2d:90:b1:60:13:27:0f:2c:13:c6:37:6e:70: d2:ba:36:95:1f:bd:99:09:00:7f:8c:2d:98:74:59: e0:74:bc:6e:23:2b:c5:3e:90:95:6c:bd:76:5b:99: 27:8f:10:f3:06:63:cb:b6:f6:e7:92:92:ed:b4:fa: a8:98:31:2b:f4:a8:c2:9a:1e:54:be:67:c6:dd:15: 4b:82:d5:25:62:98:90:c9:e1:38:04:ce:59:56:0c: 6d:83:d1:b6:9f:97:60:42:2f:d4:1c:1c:5f:06:73: 25:b4:04:ef:d3:75:97:ef:6a:9f:c1:bb:be:af:6c: 20:b9:b2:9e:34:8d:51:5c:d2:37:91:fa:3a:97:62: 66:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E3:CB:32:B4:F1:55:C4:30:FC:9B:D4:35:77:CE:E4:C6:B5:E2:B8 X509v3 Authority Key Identifier: keyid:6B:EE:44:C2:12:34:25:36:18:B0:D7:B3:6B:90:E3:CB:5C:40:DE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-5EwhI0JTYYsNeza5Djy1xA3tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:4d:c9:20:e2:1e:6c:ac:85:c5:bd:7f:55:0a:87:e8:c0:7b: 97:56:4a:92:77:ce:e3:83:24:a2:74:c0:44:b2:c3:a2:38:e3: 36:eb:dd:f9:89:6f:47:75:81:91:68:f4:ea:ce:63:48:84:80: 71:b1:78:36:95:b1:43:e8:18:03:22:a9:d2:9e:6d:d9:b3:b8: f3:c1:b3:f9:53:b0:c7:71:6a:00:7b:8e:f6:6a:de:5f:c1:28: 80:7a:75:74:2a:52:27:35:67:09:2c:96:6c:1e:e0:72:77:86: b7:50:0d:3e:fa:d3:08:69:be:b5:a1:95:54:8e:e7:46:0e:38: 4d:7b:08:c1:b1:dc:10:3c:ef:81:df:34:01:be:b9:e1:ee:cf: 08:bb:72:74:58:58:8e:29:4e:f1:18:99:a6:83:0c:c7:2d:dc: 1b:a7:53:fa:5d:1b:6e:a3:43:9e:36:f7:ec:fe:f7:6a:35:ef: 62:20:f6:61:5a:8d:f9:44:f3:ff:1a:fc:86:c2:88:a7:fa:8b: ed:2b:2b:53:d8:ca:19:5f:ae:d9:88:bd:c1:d7:a9:f2:2b:20: f5:0e:0b:df:48:58:58:7b:59:23:c8:26:a1:8d:dd:57:d7:ae: ff:2f:28:cf:fa:a1:8e:eb:03:cc:54:49:ec:b0:80:55:e9:32: 3b:3c:aa:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDMl2NUZbjIwYhJ3aFA8MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiZWU0NGMyMTIzNDI1MzYxOGIwZDdiMzZiOTBlM2NiNWM0 MGRlZDEwHhcNMjUxMjE4MjAwMDM0WhcNMjUxMjE5MjAwMDM0WjAzMTEwLwYDVQQD Eyg0M2UzY2IzMmI0ZjE1NWM0MzBmYzliZDQzNTc3Y2VlNGM2YjVlMmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn347Jzqkfl3ghZgmlT46nDjZushP DSeQApg6astBX1MDd6ON7p31xUklRsthuG9LafdEvnrmz7pRFczCBorEzdvtIBe5 Moy354Cs7FjzsQZ11V0iSz2yh3cLk9PD+EPDYceIFtp9+JambkbpiN+CWyGvVEeE ejrAOi2QsWATJw8sE8Y3bnDSujaVH72ZCQB/jC2YdFngdLxuIyvFPpCVbL12W5kn jxDzBmPLtvbnkpLttPqomDEr9KjCmh5UvmfG3RVLgtUlYpiQyeE4BM5ZVgxtg9G2 n5dgQi/UHBxfBnMltATv03WX72qfwbu+r2wgubKeNI1RXNI3kfo6l2JmyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEPjyzK08VXEMPyb1DV3zuTGteK4MB8GA1UdIwQY MBaAFGvuRMISNCU2GLDXs2uQ48tcQN7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYS01RXdoSTBKVFlZc05lemE1RGp5MXhBM3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8wYTcxMGEtYzgwMC00ZWFlLWEzNWIt NzY5YjNmYzI2NjRiLzEvYS01RXdoSTBKVFlZc05lemE1RGp5MXhBM3RFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8wYTcxMGEtYzgwMC00ZWFlLWEzNWItNzY5YjNmYzI2NjRi LzEvYS01RXdoSTBKVFlZc05lemE1RGp5MXhBM3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcE3JIOIe bKyFxb1/VQqH6MB7l1ZKknfO44MkonTARLLDojjjNuvd+YlvR3WBkWj06s5jSISA cbF4NpWxQ+gYAyKp0p5t2bO488Gz+VOwx3FqAHuO9mreX8EogHp1dCpSJzVnCSyW bB7gcneGt1ANPvrTCGm+taGVVI7nRg44TXsIwbHcEDzvgd80Ab654e7PCLtydFhY jilO8RiZpoMMxy3cG6dT+l0bbqNDnjb37P73ajXvYiD2YVqN+UTz/xr8hsKIp/qL 7SsrU9jKGV+u2Yi9wdep8isg9Q4L30hYWHtZI8gmoY3dV9eu/y8oz/qhjusDzFRJ 7LCAVekyOzyqwQ== -----END CERTIFICATE-----Generated at Fri Dec 19 02:31:01 2025 by rpki-client