This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft File: C5NMNrdzAIhlucn7D9SGaTlaxzA.mft (raw, json) Hash identifier: es5QkotNaZgY2YILAJlMpl6k0odqILfpZBYCJZBh+ag= Subject key identifier: 21:54:70:84:FF:84:B0:97:88:88:B7:F5:6D:8D:11:B8:8C:C8:2F:05 Authority key identifier: 0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30 Certificate issuer: /CN=0b934c36b773008865b9c9fb0fd48669395ac730 Certificate serial: 019B3A5890303AF58F6E64D2C843DCEBEE28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 06:00:41 +0000 Manifest this update: Sat 20 Dec 2025 06:00:41 +0000 Manifest next update: Sun 21 Dec 2025 06:00:41 +0000 Files and hashes: 1: C5NMNrdzAIhlucn7D9SGaTlaxzA.crl (hash: dF70isspsAEhLvrf/4JAkj6pJRbSh0+fOD1EPRD82lY=) 2: Gx6kPcyxpQCfjzDOqvTPIqfhzSo.roa (hash: cyozRe1tjffBQUtfs/kFeEbNNq7a/YhvaL4ybQ6y3bs=) 3: KDMQDMSKvzkVFCIuQ1vi5IKxFqc.roa (hash: W1z4PN9ehAB8VlW2fAtV3SogXVKZbFhw7EL82DUKuEY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 06:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:58:90:30:3a:f5:8f:6e:64:d2:c8:43:dc:eb:ee:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b934c36b773008865b9c9fb0fd48669395ac730 Validity Not Before: Dec 20 06:00:41 2025 GMT Not After : Dec 21 06:00:41 2025 GMT Subject: CN=21547084ff84b0978888b7f56d8d11b88cc82f05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:08:54:2d:d6:14:c9:2a:5d:88:72:4b:78:e5: 8b:be:e3:02:c5:07:ea:6b:47:ad:63:04:b4:ff:42: 98:8b:b6:f4:8f:d5:f7:88:d6:e4:b1:01:36:45:4c: d3:28:87:a8:a7:95:e7:4f:8c:4d:36:88:8f:52:30: ab:25:ca:25:f6:58:cb:6f:22:22:98:90:67:4f:a0: 6f:f1:31:ce:06:94:a1:9f:07:33:37:e5:0d:55:79: 3a:e8:7e:da:08:47:10:ba:d5:1e:fc:1f:ee:ac:5f: f7:e7:50:54:12:d1:11:d5:df:de:43:af:26:4f:a5: 7e:dc:c1:87:aa:d1:3a:eb:61:76:ca:d9:f5:05:8c: 77:0d:5a:fc:d6:ff:8f:87:5d:b6:6f:15:f9:67:1f: 19:b8:b0:c2:45:43:db:e3:6a:92:50:7e:eb:92:65: 2b:a3:d6:04:07:1e:07:ae:ad:4f:58:e5:9c:71:e4: 82:62:54:76:10:b6:1e:e0:1c:ef:9a:98:eb:8f:e0: 4d:21:8f:48:42:5c:de:94:12:4c:c5:88:5f:23:a7: 21:28:44:3b:b5:4c:6a:05:bc:fc:fb:c1:3f:fc:7d: 02:cb:73:ed:8c:7c:79:78:20:7b:26:ec:02:7a:3e: a1:31:ec:58:cb:f6:ad:2e:76:e5:24:f6:4f:9e:dc: ef:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:54:70:84:FF:84:B0:97:88:88:B7:F5:6D:8D:11:B8:8C:C8:2F:05 X509v3 Authority Key Identifier: keyid:0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:09:f6:43:c0:aa:b1:e2:4f:de:f4:cf:f9:78:b2:91:95:8b: ad:a3:35:f8:4e:c4:f2:4a:1a:4a:dc:03:5e:2f:0f:b6:bc:e1: 4a:29:14:3f:1b:fa:b6:d1:b8:e5:89:5d:ee:d3:64:44:a7:95: 79:60:4c:77:21:17:9e:49:81:f0:ff:d0:6b:b9:de:96:94:ea: e4:a2:c4:2b:12:a8:28:a9:80:92:fe:d2:d8:89:73:30:f7:98: b5:f9:b2:a9:0c:c5:cd:5c:25:dc:33:97:2b:46:fe:03:57:f8: 38:a6:25:5d:93:f2:b2:e4:7a:b6:f7:9e:c4:66:e4:5f:bd:84: e7:27:3b:de:99:b1:75:da:aa:d2:1f:85:a4:c3:26:c5:25:89: d8:9a:68:74:9f:c1:76:fe:6a:dd:45:ea:c8:f4:4a:8b:06:38: b0:4a:11:c5:bc:79:ea:25:57:aa:c0:57:ab:bb:70:8f:ee:71: 13:28:0e:31:5a:f3:70:c7:6b:d0:46:e8:ad:00:bd:59:35:30: 16:1d:c6:fb:0f:4e:f8:2c:f8:82:74:80:33:cd:7e:76:11:4e: ca:be:4d:0b:e4:05:f7:bd:94:18:f2:2a:8d:ee:be:4e:43:d2: 4d:2a:bb:ee:1f:78:78:1d:61:0b:93:92:ca:18:11:74:a5:dc: a4:9c:74:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6WJAwOvWPbmTSyEPc6+4oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiOTM0YzM2Yjc3MzAwODg2NWI5YzlmYjBmZDQ4NjY5Mzk1 YWM3MzAwHhcNMjUxMjIwMDYwMDQxWhcNMjUxMjIxMDYwMDQxWjAzMTEwLwYDVQQD EygyMTU0NzA4NGZmODRiMDk3ODg4OGI3ZjU2ZDhkMTFiODhjYzgyZjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQhULdYUySpdiHJLeOWLvuMCxQfq a0etYwS0/0KYi7b0j9X3iNbksQE2RUzTKIeop5XnT4xNNoiPUjCrJcol9ljLbyIi mJBnT6Bv8THOBpShnwczN+UNVXk66H7aCEcQutUe/B/urF/351BUEtER1d/eQ68m T6V+3MGHqtE662F2ytn1BYx3DVr81v+Ph122bxX5Zx8ZuLDCRUPb42qSUH7rkmUr o9YEBx4Hrq1PWOWcceSCYlR2ELYe4Bzvmpjrj+BNIY9IQlzelBJMxYhfI6chKEQ7 tUxqBbz8+8E//H0Cy3PtjHx5eCB7JuwCej6hMexYy/atLnblJPZPntzvjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCFUcIT/hLCXiIi39W2NEbiMyC8FMB8GA1UdIwQY MBaAFAuTTDa3cwCIZbnJ+w/Uhmk5WscwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzVOTU5yZHpBSWhsdWNuN0Q5U0dhVGxheHpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9kZWNiN2QtMDM4OC00ZTNjLThkYjQt YTMwMmY1MWQzODJjLzEvQzVOTU5yZHpBSWhsdWNuN0Q5U0dhVGxheHpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9kZWNiN2QtMDM4OC00ZTNjLThkYjQtYTMwMmY1MWQzODJj LzEvQzVOTU5yZHpBSWhsdWNuN0Q5U0dhVGxheHpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJgn2Q8Cq seJP3vTP+XiykZWLraM1+E7E8koaStwDXi8PtrzhSikUPxv6ttG45Yld7tNkRKeV eWBMdyEXnkmB8P/Qa7nelpTq5KLEKxKoKKmAkv7S2IlzMPeYtfmyqQzFzVwl3DOX K0b+A1f4OKYlXZPysuR6tveexGbkX72E5yc73pmxddqq0h+FpMMmxSWJ2JpodJ/B dv5q3UXqyPRKiwY4sEoRxbx56iVXqsBXq7twj+5xEygOMVrzcMdr0EborQC9WTUw Fh3G+w9O+Cz4gnSAM81+dhFOyr5NC+QF972UGPIqje6+TkPSTSq77h94eB1hC5OS yhgRdKXcpJx0Wg== -----END CERTIFICATE-----Generated at Sat Dec 20 14:38:24 2025 by rpki-client