This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.mft File: 5UHTgH6p2K1130eFWJlQnubzKCA.mft (raw, json) Hash identifier: 0PNiIeqQVglNpRvuSCwhHYMAmxpukZGKIEoDEi8oLOI= Subject key identifier: AD:1C:72:D2:10:F3:F2:77:E8:EB:9C:31:0E:B2:A5:56:FB:E4:38:E7 Authority key identifier: E5:41:D3:80:7E:A9:D8:AD:75:DF:47:85:58:99:50:9E:E6:F3:28:20 Certificate issuer: /CN=e541d3807ea9d8ad75df47855899509ee6f32820 Certificate serial: 019B4C5FEC488222AA90BF685869FAE6F9C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UHTgH6p2K1130eFWJlQnubzKCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.mft Manifest number: 02DC Signing time: Tue 23 Dec 2025 18:01:53 +0000 Manifest this update: Tue 23 Dec 2025 18:01:53 +0000 Manifest next update: Wed 24 Dec 2025 18:01:53 +0000 Files and hashes: 1: 5UHTgH6p2K1130eFWJlQnubzKCA.crl (hash: JlrfB2OwANf2BiRliKKkthnanD9Fg5Y/07Obc/RcRHk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.mft rsync://rpki.ripe.net/repository/DEFAULT/5UHTgH6p2K1130eFWJlQnubzKCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:5f:ec:48:82:22:aa:90:bf:68:58:69:fa:e6:f9:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e541d3807ea9d8ad75df47855899509ee6f32820 Validity Not Before: Dec 23 18:01:53 2025 GMT Not After : Dec 24 18:01:53 2025 GMT Subject: CN=ad1c72d210f3f277e8eb9c310eb2a556fbe438e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:db:06:fe:60:de:8a:7e:2c:b4:81:1c:07:c8: 21:4d:75:32:df:26:16:53:1e:88:a8:55:59:0f:d3: 3a:7f:af:d9:88:f2:f2:ea:3f:46:4d:40:73:7f:c6: 75:93:2e:d9:0a:b1:04:d6:25:d4:f5:65:4a:65:7e: 6a:01:f5:3a:a4:4d:06:6f:b1:31:df:7f:da:cd:19: e0:5a:0e:a4:a7:f7:5b:70:00:26:72:61:d3:4c:e4: 49:b2:cc:56:54:5a:5e:c3:6a:b2:af:4b:ed:a7:25: 71:d0:7d:6e:1b:35:c4:0f:8b:0d:70:70:c3:3d:47: c3:b0:51:94:c1:2a:d0:68:54:de:47:e5:7c:94:41: 45:1f:a0:82:2b:bb:b4:03:ad:00:66:73:3a:9c:55: d0:fc:85:8b:96:e6:05:7d:b9:5c:52:ae:f6:e1:d9: af:64:c9:ae:39:36:a0:bd:c2:ad:38:b9:c4:fc:16: c7:9b:72:46:78:c1:0e:66:ba:76:41:49:1a:25:b5: f1:cf:99:e9:55:b7:0c:61:f4:73:d6:66:ce:59:9b: cc:c3:61:49:25:83:d6:21:8c:74:78:77:fe:66:f0: 18:c2:df:cc:53:c3:63:42:47:43:a1:7e:ab:f2:ab: c7:dc:3f:25:4f:e0:10:bc:3f:e0:34:66:af:f8:2e: 44:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:1C:72:D2:10:F3:F2:77:E8:EB:9C:31:0E:B2:A5:56:FB:E4:38:E7 X509v3 Authority Key Identifier: keyid:E5:41:D3:80:7E:A9:D8:AD:75:DF:47:85:58:99:50:9E:E6:F3:28:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UHTgH6p2K1130eFWJlQnubzKCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:0a:2c:2c:8a:21:02:6d:cc:c8:54:51:af:2a:7d:72:57:e6: ce:e3:30:ac:f4:d8:6f:71:6a:05:d3:8a:ae:be:47:73:66:60: e0:48:92:8e:2b:99:f6:e4:10:e8:fc:7b:8a:d9:04:0e:a7:b1: ad:46:48:2f:fa:ee:4c:43:5b:91:e5:ae:d3:b2:f5:5e:4f:d8: 67:82:f3:58:5d:cb:4c:29:ac:a4:2a:5b:27:6d:e2:bc:bb:a7: a6:02:c9:fb:9a:f7:4d:50:76:47:6a:2e:99:1a:ea:b8:01:8d: 3f:8a:db:ad:7b:cd:f7:b0:98:81:e6:0d:9f:d9:11:19:19:d8: 0f:d7:25:8f:75:19:52:3e:96:98:f1:ff:8d:16:df:fb:c0:1a: 27:d7:8f:2f:37:26:c0:82:25:b9:91:6f:16:5f:38:45:96:65: 36:f0:92:a5:d6:67:ca:49:8c:bd:b0:d9:d4:31:3d:6a:57:d1: 51:e9:6f:fa:f4:23:14:d6:63:82:2a:55:32:cc:23:60:26:5b: 96:07:ed:64:ac:aa:a9:c7:70:e3:9e:d8:5d:6c:b4:0c:43:0e: 1a:58:b7:85:af:b2:55:fa:bd:65:a1:48:c5:02:49:10:2f:62: c1:7c:d9:c8:54:36:14:44:22:e2:7e:8c:e1:6f:2b:03:8f:dc: 36:2a:18:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMX+xIgiKqkL9oWGn65vnJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NDFkMzgwN2VhOWQ4YWQ3NWRmNDc4NTU4OTk1MDllZTZm MzI4MjAwHhcNMjUxMjIzMTgwMTUzWhcNMjUxMjI0MTgwMTUzWjAzMTEwLwYDVQQD EyhhZDFjNzJkMjEwZjNmMjc3ZThlYjljMzEwZWIyYTU1NmZiZTQzOGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNsG/mDein4stIEcB8ghTXUy3yYW Ux6IqFVZD9M6f6/ZiPLy6j9GTUBzf8Z1ky7ZCrEE1iXU9WVKZX5qAfU6pE0Gb7Ex 33/azRngWg6kp/dbcAAmcmHTTORJssxWVFpew2qyr0vtpyVx0H1uGzXED4sNcHDD PUfDsFGUwSrQaFTeR+V8lEFFH6CCK7u0A60AZnM6nFXQ/IWLluYFfblcUq724dmv ZMmuOTagvcKtOLnE/BbHm3JGeMEOZrp2QUkaJbXxz5npVbcMYfRz1mbOWZvMw2FJ JYPWIYx0eHf+ZvAYwt/MU8NjQkdDoX6r8qvH3D8lT+AQvD/gNGav+C5ElQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK0cctIQ8/J36OucMQ6ypVb75DjnMB8GA1UdIwQY MBaAFOVB04B+qditdd9HhViZUJ7m8yggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVVIVGdINnAySzExMzBlRldKbFFudWJ6S0NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yYmFlNTAtZmFjYS00ZDRlLWFlMzgt MmQwNzdiNzgyYzcyLzEvNVVIVGdINnAySzExMzBlRldKbFFudWJ6S0NBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC8yYmFlNTAtZmFjYS00ZDRlLWFlMzgtMmQwNzdiNzgyYzcy LzEvNVVIVGdINnAySzExMzBlRldKbFFudWJ6S0NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFwosLIoh Am3MyFRRryp9clfmzuMwrPTYb3FqBdOKrr5Hc2Zg4EiSjiuZ9uQQ6Px7itkEDqex rUZIL/ruTENbkeWu07L1Xk/YZ4LzWF3LTCmspCpbJ23ivLunpgLJ+5r3TVB2R2ou mRrquAGNP4rbrXvN97CYgeYNn9kRGRnYD9clj3UZUj6WmPH/jRbf+8AaJ9ePLzcm wIIluZFvFl84RZZlNvCSpdZnykmMvbDZ1DE9alfRUelv+vQjFNZjgipVMswjYCZb lgftZKyqqcdw457YXWy0DEMOGli3ha+yVfq9ZaFIxQJJEC9iwXzZyFQ2FEQi4n6M 4W8rA4/cNioY/g== -----END CERTIFICATE-----Generated at Tue Dec 23 20:42:45 2025 by rpki-client