This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft File: 5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft (raw, json) Hash identifier: OKbFIb999CTG/ajO0mEToxTlvwAqlY9rI2DgW84TVLw= Subject key identifier: 48:F0:4A:F2:05:88:42:31:E0:03:19:76:45:A5:20:83:B7:47:27:40 Authority key identifier: E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94 Certificate issuer: /CN=e5a6794b91b81406412a137870bfde3b170de094 Certificate serial: 019B3BD9469FA1D87AC3EEBBADFDBADC62E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft Manifest number: 126D Signing time: Sat 20 Dec 2025 13:00:53 +0000 Manifest this update: Sat 20 Dec 2025 13:00:53 +0000 Manifest next update: Sun 21 Dec 2025 13:00:53 +0000 Files and hashes: 1: 1n-VVl_FUGuc471oALycpRiqCLk.roa (hash: CyDn40gRMpRIy4CCIQiJsw5qJAYeVVUI59AY9O976Cg=) 2: 5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl (hash: c+cyf0kU05XBS7BBQlD9mzspWa4tJwnEwXsuJf+RtYY=) 3: bvJaB1n4DlwgW-YHgMlWz2d0zE0.roa (hash: Aum897RCErwCFSWkB8MTk4Vue2u5uq3XMcwvd1bOMFQ=) 4: d-c3fV9q29dsWUsutXEO_XUxELA.roa (hash: odfjS8/wqJCuj1kyoe6nkIiHEr+jKawF6ritEznO31s=) 5: sXJREdbwAm9mG_ih-kGMSE4IF1g.roa (hash: Vz5vIbPRAiUHJvwDkitmXzn8yuqUilXU/W786A3ZvJM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:46:9f:a1:d8:7a:c3:ee:bb:ad:fd:ba:dc:62:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5a6794b91b81406412a137870bfde3b170de094 Validity Not Before: Dec 20 13:00:53 2025 GMT Not After : Dec 21 13:00:53 2025 GMT Subject: CN=48f04af205884231e003197645a52083b7472740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fe:dd:3f:ce:48:82:77:10:ae:02:99:be:96: eb:2b:f2:85:ea:fe:bd:d1:90:6b:b0:59:88:65:62: f4:40:e0:0a:b3:01:5d:3f:17:34:65:d8:54:cc:f8: cd:40:ff:d9:e5:95:d4:39:e8:88:75:94:c5:a0:33: 0e:5a:bb:d1:9e:5e:c3:48:93:ff:fb:95:27:a4:b3: de:3f:94:be:cc:9f:da:5c:f0:eb:20:28:3f:70:ed: 58:c2:7e:f7:d5:5a:4c:64:bf:e4:0c:34:89:bc:f6: c0:1c:53:c7:04:dd:ab:c7:be:1f:eb:bd:04:41:b0: 9e:f1:f9:56:81:bf:75:58:05:8b:a0:5d:23:29:af: 5b:bc:3b:d7:3b:3f:1e:de:95:97:e0:25:77:a1:ad: ff:02:75:59:ca:f2:f7:46:1e:bf:2a:4c:d6:00:6c: 6d:8e:3c:fb:17:e4:12:68:ba:97:b5:d4:d4:41:7b: ba:b3:d6:40:8a:22:c6:7f:09:47:fa:df:39:f4:fc: af:11:40:61:f8:12:1f:9f:44:c0:41:00:12:d9:d5: 48:14:ce:96:39:d7:97:4a:54:c2:67:3c:a0:67:7d: 17:0b:ab:7b:34:3a:b8:f2:b1:db:42:06:ea:bc:98: b9:60:9b:ee:e5:c2:18:17:18:17:e3:ed:c8:39:ec: 9a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:F0:4A:F2:05:88:42:31:E0:03:19:76:45:A5:20:83:B7:47:27:40 X509v3 Authority Key Identifier: keyid:E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:cf:82:76:44:35:4d:85:9f:67:b5:37:ba:22:c6:5c:ff:48: b9:f4:b6:1d:65:15:06:57:c7:93:f1:4d:aa:a3:bd:95:42:b4: 04:e9:ad:2e:9c:2c:ac:e2:11:08:34:46:1c:27:9e:42:ac:bd: 8b:0a:8e:ea:ac:aa:af:8d:df:08:f1:92:12:71:ec:c4:9a:a0: 5e:fc:56:91:9e:42:47:d7:c2:59:60:33:dc:a5:fd:33:36:b4: e1:a6:ce:27:e7:2b:21:20:64:c7:74:63:f3:bc:e7:e9:4b:e0: e1:c8:66:7d:72:f3:ab:40:96:30:5f:1a:f0:12:cf:9c:a6:97: 42:28:97:77:dc:34:3b:6d:a5:22:23:9c:bc:9e:12:49:42:b4: 6e:5b:ab:25:95:7d:f9:2c:00:78:f2:42:2b:99:56:9a:99:96: 46:44:41:79:50:41:17:f7:16:fc:5e:f0:a2:a4:97:62:99:36: 6b:f1:99:ff:e6:e3:fb:37:42:ef:e5:2a:35:a7:b0:c6:02:c5: 55:86:35:8d:23:b3:2c:63:71:11:31:fe:e6:18:55:e3:80:3a: bc:10:24:c7:68:6c:c5:d4:6a:8c:97:c1:12:0b:81:b2:0c:f2: b7:ae:e8:12:cb:09:0f:b3:6b:c9:25:65:ea:21:8f:66:61:36: 8e:73:15:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72Uafodh6w+67rf263GLkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YTY3OTRiOTFiODE0MDY0MTJhMTM3ODcwYmZkZTNiMTcw ZGUwOTQwHhcNMjUxMjIwMTMwMDUzWhcNMjUxMjIxMTMwMDUzWjAzMTEwLwYDVQQD Eyg0OGYwNGFmMjA1ODg0MjMxZTAwMzE5NzY0NWE1MjA4M2I3NDcyNzQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxf7dP85IgncQrgKZvpbrK/KF6v69 0ZBrsFmIZWL0QOAKswFdPxc0ZdhUzPjNQP/Z5ZXUOeiIdZTFoDMOWrvRnl7DSJP/ +5UnpLPeP5S+zJ/aXPDrICg/cO1Ywn731VpMZL/kDDSJvPbAHFPHBN2rx74f670E QbCe8flWgb91WAWLoF0jKa9bvDvXOz8e3pWX4CV3oa3/AnVZyvL3Rh6/KkzWAGxt jjz7F+QSaLqXtdTUQXu6s9ZAiiLGfwlH+t859PyvEUBh+BIfn0TAQQAS2dVIFM6W OdeXSlTCZzygZ30XC6t7NDq48rHbQgbqvJi5YJvu5cIYFxgX4+3IOeya5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEjwSvIFiEIx4AMZdkWlIIO3RydAMB8GA1UdIwQY MBaAFOWmeUuRuBQGQSoTeHC/3jsXDeCUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWFaNVM1RzRGQVpCS2hONGNMX2VPeGNONEpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9jYTM0ZWItOGUyMC00YmYxLWIxYjIt NTg3MjEwOWI2N2E4LzEvNWFaNVM1RzRGQVpCS2hONGNMX2VPeGNONEpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9jYTM0ZWItOGUyMC00YmYxLWIxYjItNTg3MjEwOWI2N2E4 LzEvNWFaNVM1RzRGQVpCS2hONGNMX2VPeGNONEpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIM+CdkQ1 TYWfZ7U3uiLGXP9IufS2HWUVBlfHk/FNqqO9lUK0BOmtLpwsrOIRCDRGHCeeQqy9 iwqO6qyqr43fCPGSEnHsxJqgXvxWkZ5CR9fCWWAz3KX9Mza04abOJ+crISBkx3Rj 87zn6Uvg4chmfXLzq0CWMF8a8BLPnKaXQiiXd9w0O22lIiOcvJ4SSUK0blurJZV9 +SwAePJCK5lWmpmWRkRBeVBBF/cW/F7woqSXYpk2a/GZ/+bj+zdC7+UqNaewxgLF VYY1jSOzLGNxETH+5hhV44A6vBAkx2hsxdRqjJfBEguBsgzyt67oEssJD7NrySVl 6iGPZmE2jnMVdw== -----END CERTIFICATE-----Generated at Sat Dec 20 18:42:38 2025 by rpki-client