This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft File: 5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft (raw, json) Hash identifier: EYGxEZc+5olKjfS0ciXPzsHHffD+CFr5SYVlLgv60Ng= Subject key identifier: 4A:03:73:64:2C:65:9D:87:09:2E:97:14:B2:78:53:A4:62:E2:BB:79 Authority key identifier: E4:D6:08:E0:F7:A1:08:6C:84:51:DE:5D:63:78:47:B5:22:17:AB:B4 Certificate issuer: /CN=e4d608e0f7a1086c8451de5d637847b52217abb4 Certificate serial: 019B435BE2FD1FBC3FF047DBDD3FCBB05751 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NYI4PehCGyEUd5dY3hHtSIXq7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft Manifest number: 063E Signing time: Mon 22 Dec 2025 00:00:53 +0000 Manifest this update: Mon 22 Dec 2025 00:00:53 +0000 Manifest next update: Tue 23 Dec 2025 00:00:53 +0000 Files and hashes: 1: 5NYI4PehCGyEUd5dY3hHtSIXq7Q.crl (hash: 1Ya+K9HTGj26FjwhKmjcD4TV6I4E6XwbHEW9cugMqno=) 2: GG3QiT3L8y2-6K509vuWf-CfKL0.roa (hash: 0l/LpwFeQpYG65cH+t5aLrBuln2/gPSbbnRKosRRf2s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/5NYI4PehCGyEUd5dY3hHtSIXq7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5b:e2:fd:1f:bc:3f:f0:47:db:dd:3f:cb:b0:57:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4d608e0f7a1086c8451de5d637847b52217abb4 Validity Not Before: Dec 22 00:00:53 2025 GMT Not After : Dec 23 00:00:53 2025 GMT Subject: CN=4a0373642c659d87092e9714b27853a462e2bb79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:d4:49:6e:a2:c6:78:c0:5f:54:34:f1:75:dd: 3c:8e:b3:bc:fd:48:4c:60:b6:98:4e:ec:2e:c2:1b: 44:14:fb:63:81:26:7e:84:63:c4:4f:71:99:b1:a2: 6c:55:eb:dd:5b:11:d7:70:9f:cc:42:60:e6:e9:1a: 45:12:6b:37:6a:83:87:44:1d:6c:d9:a2:87:c7:73: 8f:29:d6:98:1e:11:55:96:90:0a:5a:7d:5a:48:fb: e0:c2:cf:57:78:1a:96:f2:9b:2e:27:e8:f5:50:cc: 0c:17:0d:d8:a3:e0:ee:88:1a:b0:9f:32:85:0e:84: 58:60:97:e8:20:a7:72:29:73:28:9e:f2:0a:68:6a: 7e:42:23:88:ab:98:55:9b:26:30:57:f8:32:c2:93: 9a:6c:ab:c2:80:d8:51:a6:c1:07:bb:29:f3:88:34: d4:16:01:f4:03:f2:73:8f:2d:79:37:6c:84:0e:02: 53:6d:00:4d:7e:40:fb:72:b2:5c:01:a3:ba:55:8f: 80:21:d3:2f:fa:79:d1:0d:b9:82:39:76:0f:f0:0b: 11:21:a2:cb:84:ce:18:e8:cf:f2:06:5e:10:cc:92: 04:4d:ff:11:00:68:81:f7:d4:32:94:0e:68:a8:9e: 4e:0c:19:bb:fc:21:a1:65:2b:4d:a0:d5:9f:16:19: d3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:03:73:64:2C:65:9D:87:09:2E:97:14:B2:78:53:A4:62:E2:BB:79 X509v3 Authority Key Identifier: keyid:E4:D6:08:E0:F7:A1:08:6C:84:51:DE:5D:63:78:47:B5:22:17:AB:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NYI4PehCGyEUd5dY3hHtSIXq7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:a5:e3:67:04:d7:6d:e0:bf:8f:91:a7:9b:9a:df:80:17:83: b1:6d:de:6f:09:6c:7e:8e:d0:40:44:7b:77:08:b7:13:7d:7b: d8:59:53:25:e1:a3:86:aa:f9:df:8b:ec:fd:49:ea:1f:1d:7d: 7e:b3:a4:56:4b:1c:14:a9:ae:17:2b:d6:8d:ae:53:fd:0e:16: 2f:38:12:aa:01:e0:2d:0e:67:63:35:f8:90:b1:bd:4e:be:cf: ec:25:69:17:3a:92:40:60:f7:bf:8f:a7:94:93:4c:97:f3:61: bd:f1:1b:48:95:a0:c5:bb:3f:71:be:b6:b0:ae:e0:f9:76:38: 89:7c:44:3f:2a:97:f5:30:9d:90:6e:98:0f:c0:63:ff:40:01: fb:f7:86:a0:49:5c:05:37:08:14:be:97:0b:e7:87:b2:66:07: c4:a8:37:5d:5b:b0:78:e3:ee:5e:5b:e0:93:37:fc:e8:5c:b5: 57:af:90:8e:db:93:09:c6:58:06:07:04:9b:d4:ea:4e:22:be: 4e:cf:89:69:26:ec:10:a6:0b:12:40:07:da:08:7f:83:02:3f: c4:46:64:43:80:32:d0:94:a1:4e:46:75:25:df:1c:9b:01:36: 95:98:36:56:c6:e3:77:be:b0:06:46:df:92:e9:fb:cb:3f:ec: 0b:1d:0a:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDW+L9H7w/8Efb3T/LsFdRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ZDYwOGUwZjdhMTA4NmM4NDUxZGU1ZDYzNzg0N2I1MjIx N2FiYjQwHhcNMjUxMjIyMDAwMDUzWhcNMjUxMjIzMDAwMDUzWjAzMTEwLwYDVQQD Eyg0YTAzNzM2NDJjNjU5ZDg3MDkyZTk3MTRiMjc4NTNhNDYyZTJiYjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9NRJbqLGeMBfVDTxdd08jrO8/UhM YLaYTuwuwhtEFPtjgSZ+hGPET3GZsaJsVevdWxHXcJ/MQmDm6RpFEms3aoOHRB1s 2aKHx3OPKdaYHhFVlpAKWn1aSPvgws9XeBqW8psuJ+j1UMwMFw3Yo+DuiBqwnzKF DoRYYJfoIKdyKXMonvIKaGp+QiOIq5hVmyYwV/gywpOabKvCgNhRpsEHuynziDTU FgH0A/Jzjy15N2yEDgJTbQBNfkD7crJcAaO6VY+AIdMv+nnRDbmCOXYP8AsRIaLL hM4Y6M/yBl4QzJIETf8RAGiB99QylA5oqJ5ODBm7/CGhZStNoNWfFhnTtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEoDc2QsZZ2HCS6XFLJ4U6Ri4rt5MB8GA1UdIwQY MBaAFOTWCOD3oQhshFHeXWN4R7UiF6u0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU5ZSTRQZWhDR3lFVWQ1ZFkzaEh0U0lYcTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lZWM3MGEtYWE5Zi00MmFlLThhZDYt YjdiYmY1YTFhYzczLzEvNU5ZSTRQZWhDR3lFVWQ1ZFkzaEh0U0lYcTdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lZWM3MGEtYWE5Zi00MmFlLThhZDYtYjdiYmY1YTFhYzcz LzEvNU5ZSTRQZWhDR3lFVWQ1ZFkzaEh0U0lYcTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc6XjZwTX beC/j5Gnm5rfgBeDsW3ebwlsfo7QQER7dwi3E3172FlTJeGjhqr534vs/UnqHx19 frOkVkscFKmuFyvWja5T/Q4WLzgSqgHgLQ5nYzX4kLG9Tr7P7CVpFzqSQGD3v4+n lJNMl/NhvfEbSJWgxbs/cb62sK7g+XY4iXxEPyqX9TCdkG6YD8Bj/0AB+/eGoElc BTcIFL6XC+eHsmYHxKg3XVuweOPuXlvgkzf86Fy1V6+QjtuTCcZYBgcEm9TqTiK+ Ts+JaSbsEKYLEkAH2gh/gwI/xEZkQ4Ay0JShTkZ1Jd8cmwE2lZg2Vsbjd76wBkbf kun7yz/sCx0KBA== -----END CERTIFICATE-----Generated at Mon Dec 22 04:43:58 2025 by rpki-client