This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft File: 5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft (raw, json) Hash identifier: wxDcIDEqFFcP6SNCOoMkoJnSB/AYCmKOKfqLb0lhzcU= Subject key identifier: 8B:4F:B4:9C:3C:4B:98:7E:0D:F7:E9:CA:05:AA:D6:0D:92:25:18:5E Authority key identifier: E5:72:9E:E8:96:36:BA:34:FE:56:BD:72:E7:58:F5:82:AD:E7:0E:52 Certificate issuer: /CN=e5729ee89636ba34fe56bd72e758f582ade70e52 Certificate serial: 019B68E9907A2982F8B3F4C71DBDEBBEFC04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft Manifest number: 03B2 Signing time: Mon 29 Dec 2025 07:01:35 +0000 Manifest this update: Mon 29 Dec 2025 07:01:35 +0000 Manifest next update: Tue 30 Dec 2025 07:01:35 +0000 Files and hashes: 1: 5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl (hash: 8gUlixB3XBOdC8s5rfTZHvS0PhvPMgGtdBAqAlf7b40=) 2: GqkvkcQA2bbgQwHJ2b6jWAleiGg.roa (hash: EGM2nICbqAUwB5CP81F3mXlaWH5q4kAR9J7Mx82LHRQ=) 3: U_pf5mr7mVogKbgEVCSPIKt6P1Q.roa (hash: A+REPWck5DlDgbp9k+f3tR4pBhovVcICYPMhumJUrjo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 07:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:e9:90:7a:29:82:f8:b3:f4:c7:1d:bd:eb:be:fc:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5729ee89636ba34fe56bd72e758f582ade70e52 Validity Not Before: Dec 29 07:01:35 2025 GMT Not After : Dec 30 07:01:35 2025 GMT Subject: CN=8b4fb49c3c4b987e0df7e9ca05aad60d9225185e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e6:13:6c:ff:c1:90:71:2c:45:ce:34:96:a8: 4c:67:f1:1a:0a:7e:e2:c2:0e:64:f0:39:5e:3b:d1: 91:b9:06:eb:39:77:4f:d6:70:fb:47:69:1f:ec:e9: 31:f0:46:b1:23:72:eb:8d:6e:67:5e:ca:55:81:36: 63:ec:31:32:2b:fa:7a:62:81:24:35:b5:bb:9d:ba: be:a9:02:58:50:2c:fc:fc:c9:1e:33:2c:24:fa:d1: 3a:3e:45:48:5b:f0:04:16:4f:94:36:fb:2e:c5:bd: ae:32:db:e8:55:46:8b:6d:c1:ed:34:42:94:d1:e6: 23:5a:3f:f1:7e:bf:71:2f:e7:b4:2a:3c:14:18:b2: c7:40:8e:be:15:41:54:94:e7:17:b4:87:fe:d1:d5: f2:d1:b1:4a:83:c0:94:92:12:13:bd:c5:e0:8a:83: 09:13:20:0a:eb:bc:cc:04:90:3d:d4:98:ac:2d:e3: 19:c5:ca:32:2d:f2:83:05:63:e9:30:13:af:29:d1: e7:67:7f:db:ce:ee:04:6c:93:a1:e7:c7:28:df:bc: 2f:0c:e0:3f:b7:bf:81:93:1e:51:d9:0b:d8:9a:90: fa:cf:62:82:b9:e4:33:a4:87:43:96:4d:20:d5:32: 94:63:99:c6:cc:bd:4d:70:bb:1b:db:a8:78:a6:86: e6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:4F:B4:9C:3C:4B:98:7E:0D:F7:E9:CA:05:AA:D6:0D:92:25:18:5E X509v3 Authority Key Identifier: keyid:E5:72:9E:E8:96:36:BA:34:FE:56:BD:72:E7:58:F5:82:AD:E7:0E:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:55:23:95:46:46:fa:f3:4d:01:07:8c:ee:b0:5a:dd:b3:4f: 75:e9:20:d4:7b:81:ff:ab:e9:6c:27:4d:fb:d1:e0:07:40:7f: 0c:a7:f6:9b:92:0a:1e:de:a5:a0:98:01:59:f4:66:3a:21:84: 5e:e1:c7:2a:43:2a:d8:7f:8d:bf:60:04:e7:49:2b:9f:92:f2: d7:70:24:09:99:d7:76:0b:d4:6f:03:02:5d:24:2a:59:9f:f0: f4:20:36:4c:42:1a:00:3f:19:88:2a:25:4a:52:8d:d6:61:5f: 19:86:7e:de:51:ef:8d:97:3b:3b:51:2e:35:b5:4b:8b:cc:8a: 50:b5:8d:16:e0:d5:3f:d7:1d:fd:35:8a:e4:ca:4b:a2:2c:2f: 08:78:ec:06:aa:cd:a2:9d:39:8d:54:be:c4:2d:3d:40:5c:62: d9:1f:4a:72:22:e8:f5:3f:ed:73:46:8f:e8:7a:d2:86:97:3a: e0:a3:52:0d:15:3e:ef:61:94:b7:1c:47:c6:5e:0d:da:d7:96: 1f:7d:98:e8:51:71:b5:5f:97:8c:7f:98:1b:13:01:87:a0:ca: 8a:5a:84:66:29:1e:36:2a:46:d7:db:e7:7c:0b:7c:65:e0:9c: f2:60:e2:29:54:46:08:ee:0a:45:4f:0c:d2:a9:45:3e:03:d3: 32:bf:46:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZto6ZB6KYL4s/THHb3rvvwEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NzI5ZWU4OTYzNmJhMzRmZTU2YmQ3MmU3NThmNTgyYWRl NzBlNTIwHhcNMjUxMjI5MDcwMTM1WhcNMjUxMjMwMDcwMTM1WjAzMTEwLwYDVQQD Eyg4YjRmYjQ5YzNjNGI5ODdlMGRmN2U5Y2EwNWFhZDYwZDkyMjUxODVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluYTbP/BkHEsRc40lqhMZ/EaCn7i wg5k8DleO9GRuQbrOXdP1nD7R2kf7Okx8EaxI3LrjW5nXspVgTZj7DEyK/p6YoEk NbW7nbq+qQJYUCz8/MkeMywk+tE6PkVIW/AEFk+UNvsuxb2uMtvoVUaLbcHtNEKU 0eYjWj/xfr9xL+e0KjwUGLLHQI6+FUFUlOcXtIf+0dXy0bFKg8CUkhITvcXgioMJ EyAK67zMBJA91JisLeMZxcoyLfKDBWPpMBOvKdHnZ3/bzu4EbJOh58co37wvDOA/ t7+Bkx5R2QvYmpD6z2KCueQzpIdDlk0g1TKUY5nGzL1NcLsb26h4pobmEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFItPtJw8S5h+DffpygWq1g2SJRheMB8GA1UdIwQY MBaAFOVynuiWNro0/la9cudY9YKt5w5SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVhLZTZKWTJ1alQtVnIxeTUxajFncTNuRGxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9hMTdhZTctOGU4Ni00M2ZkLWI4NTAt YzEzOGJkMWMxNzFlLzEvNVhLZTZKWTJ1alQtVnIxeTUxajFncTNuRGxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9hMTdhZTctOGU4Ni00M2ZkLWI4NTAtYzEzOGJkMWMxNzFl LzEvNVhLZTZKWTJ1alQtVnIxeTUxajFncTNuRGxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVFUjlUZG +vNNAQeM7rBa3bNPdekg1HuB/6vpbCdN+9HgB0B/DKf2m5IKHt6loJgBWfRmOiGE XuHHKkMq2H+Nv2AE50krn5Ly13AkCZnXdgvUbwMCXSQqWZ/w9CA2TEIaAD8ZiCol SlKN1mFfGYZ+3lHvjZc7O1EuNbVLi8yKULWNFuDVP9cd/TWK5MpLoiwvCHjsBqrN op05jVS+xC09QFxi2R9KciLo9T/tc0aP6HrShpc64KNSDRU+72GUtxxHxl4N2teW H32Y6FFxtV+XjH+YGxMBh6DKilqEZikeNipG19vnfAt8ZeCc8mDiKVRGCO4KRU8M 0qlFPgPTMr9GPw== -----END CERTIFICATE-----Generated at Mon Dec 29 16:23:27 2025 by rpki-client