This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.mft File: 5YW66mL41gYmJIc4xF370iFzf0w.mft (raw, json) Hash identifier: QaZVJImJyXAuWTJBUGYFJf3QHeg/EOlx7qgE7j1Qlm8= Subject key identifier: FF:FA:41:AE:87:C9:EC:1B:5A:DA:C6:20:56:DA:CA:7F:72:37:0D:F7 Authority key identifier: E5:85:BA:EA:62:F8:D6:06:26:24:87:38:C4:5D:FB:D2:21:73:7F:4C Certificate issuer: /CN=e585baea62f8d60626248738c45dfbd221737f4c Certificate serial: 019B2D42474336073414371BADB6F958AD74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YW66mL41gYmJIc4xF370iFzf0w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.mft Manifest number: 1710 Signing time: Wed 17 Dec 2025 17:01:16 +0000 Manifest this update: Wed 17 Dec 2025 17:01:16 +0000 Manifest next update: Thu 18 Dec 2025 17:01:16 +0000 Files and hashes: 1: 5YW66mL41gYmJIc4xF370iFzf0w.crl (hash: Y9WWkFmRkMMTNPLuF7EFgMTwFPk7xh06RonDQdOWWcQ=) 2: 8aYlnDZg4v75vC6LNHm5OghRmm0.roa (hash: ST2fwGD3DZOiSeI3vgn+uSP6XW7Dy6QYeIzwYCfP/n0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.mft rsync://rpki.ripe.net/repository/DEFAULT/5YW66mL41gYmJIc4xF370iFzf0w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 17:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:42:47:43:36:07:34:14:37:1b:ad:b6:f9:58:ad:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e585baea62f8d60626248738c45dfbd221737f4c Validity Not Before: Dec 17 17:01:16 2025 GMT Not After : Dec 18 17:01:16 2025 GMT Subject: CN=fffa41ae87c9ec1b5adac62056daca7f72370df7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2c:b2:d2:fa:d9:49:91:60:8e:39:7f:5f:c4: af:86:16:75:de:56:b0:5b:8f:b6:41:f6:4f:1b:b4: 31:46:cb:80:34:4e:2b:80:b8:79:f7:2c:4d:4f:49: 31:ef:a2:2b:4d:1b:de:63:2d:dc:89:4e:74:fc:f1: 4d:16:d8:c7:90:fd:00:02:f4:70:f6:17:1a:fb:92: c9:a6:7c:56:86:84:4b:79:61:f3:29:53:a2:91:07: 71:8f:d6:7b:56:9d:34:c3:c3:cf:d1:7f:cf:eb:25: 3c:12:cd:79:d3:eb:6b:dc:27:8d:d8:da:63:88:99: 84:b0:53:31:a7:42:1b:40:61:35:04:9e:53:f3:25: 19:2c:38:2f:2a:e5:01:aa:3e:57:c2:82:a0:73:b6: c9:9c:cc:f5:cc:58:1d:fb:2a:c5:56:d7:4d:94:27: f6:d5:ae:69:90:e0:dd:ed:10:16:37:23:e7:81:67: 2e:60:38:2d:15:b3:7a:4e:62:3d:51:50:1f:5c:43: 46:a4:55:dc:74:b2:b0:35:34:62:1b:14:17:7c:fa: 35:26:c9:b6:74:6b:fe:c3:49:33:46:5b:50:a4:2f: 5f:85:3d:a5:97:78:fb:aa:fc:58:fc:18:19:1d:c3: 97:e9:00:40:b3:64:4a:a8:df:f7:45:79:aa:46:49: 53:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:FA:41:AE:87:C9:EC:1B:5A:DA:C6:20:56:DA:CA:7F:72:37:0D:F7 X509v3 Authority Key Identifier: keyid:E5:85:BA:EA:62:F8:D6:06:26:24:87:38:C4:5D:FB:D2:21:73:7F:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YW66mL41gYmJIc4xF370iFzf0w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:ca:03:e9:e5:e2:c6:5c:c1:64:6b:6c:46:de:6d:5f:b6:30: bb:9e:03:9a:2e:66:68:32:a3:32:fa:02:aa:cf:80:67:f8:88: d3:73:d2:6e:63:b8:5d:8d:8a:53:0f:7d:7a:a4:17:dc:5b:a6: 14:39:bd:9b:bd:a8:80:62:38:88:44:91:e2:10:0c:f9:1f:7f: 29:92:3f:9a:a5:21:de:af:1e:45:91:30:da:bf:73:1e:0b:cd: f7:d7:04:e6:b4:8a:55:e2:13:01:e1:97:10:f7:35:33:0f:de: 4d:60:66:6b:d4:cb:98:26:8b:24:06:e8:85:f5:80:f7:45:7c: 93:68:18:d9:c3:c6:88:51:2f:1f:71:32:ad:3b:c9:4d:4c:f3: 0f:64:20:b0:e5:84:a5:2f:c8:7b:43:71:7f:ec:72:19:7e:14: b7:6f:35:f6:85:49:04:40:58:fa:4a:45:4e:08:a2:48:74:a7: f1:d2:41:bf:3d:12:e0:05:68:dd:ab:0c:24:d4:d0:cb:5e:71: 40:ca:59:3c:04:76:8e:28:5e:e7:87:1e:7d:56:c7:3e:c5:0b: 30:ab:f5:9b:ba:35:12:50:1e:17:e2:18:cb:17:82:ff:0d:f5: 52:a2:d2:2d:9a:77:97:54:52:b8:36:c3:ce:e5:51:50:78:ad: 1d:8c:c6:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstQkdDNgc0FDcbrbb5WK10MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ODViYWVhNjJmOGQ2MDYyNjI0ODczOGM0NWRmYmQyMjE3 MzdmNGMwHhcNMjUxMjE3MTcwMTE2WhcNMjUxMjE4MTcwMTE2WjAzMTEwLwYDVQQD EyhmZmZhNDFhZTg3YzllYzFiNWFkYWM2MjA1NmRhY2E3ZjcyMzcwZGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCyy0vrZSZFgjjl/X8SvhhZ13law W4+2QfZPG7QxRsuANE4rgLh59yxNT0kx76IrTRveYy3ciU50/PFNFtjHkP0AAvRw 9hca+5LJpnxWhoRLeWHzKVOikQdxj9Z7Vp00w8PP0X/P6yU8Es150+tr3CeN2Npj iJmEsFMxp0IbQGE1BJ5T8yUZLDgvKuUBqj5XwoKgc7bJnMz1zFgd+yrFVtdNlCf2 1a5pkODd7RAWNyPngWcuYDgtFbN6TmI9UVAfXENGpFXcdLKwNTRiGxQXfPo1Jsm2 dGv+w0kzRltQpC9fhT2ll3j7qvxY/BgZHcOX6QBAs2RKqN/3RXmqRklTAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/6Qa6HyewbWtrGIFbayn9yNw33MB8GA1UdIwQY MBaAFOWFuupi+NYGJiSHOMRd+9Ihc39MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVlXNjZtTDQxZ1ltSkljNHhGMzcwaUZ6ZjB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9iZGEzZWYtNGEyZi00Y2NjLWIyOTUt YjIyZWI5NDg1MTVjLzEvNVlXNjZtTDQxZ1ltSkljNHhGMzcwaUZ6ZjB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9iZGEzZWYtNGEyZi00Y2NjLWIyOTUtYjIyZWI5NDg1MTVj LzEvNVlXNjZtTDQxZ1ltSkljNHhGMzcwaUZ6ZjB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcsoD6eXi xlzBZGtsRt5tX7Ywu54Dmi5maDKjMvoCqs+AZ/iI03PSbmO4XY2KUw99eqQX3Fum FDm9m72ogGI4iESR4hAM+R9/KZI/mqUh3q8eRZEw2r9zHgvN99cE5rSKVeITAeGX EPc1Mw/eTWBma9TLmCaLJAbohfWA90V8k2gY2cPGiFEvH3EyrTvJTUzzD2QgsOWE pS/Ie0Nxf+xyGX4Ut2819oVJBEBY+kpFTgiiSHSn8dJBvz0S4AVo3asMJNTQy15x QMpZPAR2jihe54cefVbHPsULMKv1m7o1ElAeF+IYyxeC/w31UqLSLZp3l1RSuDbD zuVRUHitHYzG4w== -----END CERTIFICATE-----Generated at Wed Dec 17 21:55:18 2025 by rpki-client