This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.mft File: 5YW66mL41gYmJIc4xF370iFzf0w.mft (raw, json) Hash identifier: mMLEzOL7sI063S4qI4F7myyLXfeVn6gcrjew6VRhEDk= Subject key identifier: 34:FC:F0:96:6B:67:07:A4:C5:80:36:65:CF:BF:5C:D5:72:43:48:FB Authority key identifier: E5:85:BA:EA:62:F8:D6:06:26:24:87:38:C4:5D:FB:D2:21:73:7F:4C Certificate issuer: /CN=e585baea62f8d60626248738c45dfbd221737f4c Certificate serial: 019B2F309A85F3F4E548883B6E16E17B349F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YW66mL41gYmJIc4xF370iFzf0w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.mft Manifest number: 1711 Signing time: Thu 18 Dec 2025 02:01:13 +0000 Manifest this update: Thu 18 Dec 2025 02:01:13 +0000 Manifest next update: Fri 19 Dec 2025 02:01:13 +0000 Files and hashes: 1: 5YW66mL41gYmJIc4xF370iFzf0w.crl (hash: F3YJluEsfq6uGKL/Ixll2NsLxHtCUcCdmw5ka8WxfmY=) 2: 8aYlnDZg4v75vC6LNHm5OghRmm0.roa (hash: ST2fwGD3DZOiSeI3vgn+uSP6XW7Dy6QYeIzwYCfP/n0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.mft rsync://rpki.ripe.net/repository/DEFAULT/5YW66mL41gYmJIc4xF370iFzf0w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 02:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:30:9a:85:f3:f4:e5:48:88:3b:6e:16:e1:7b:34:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e585baea62f8d60626248738c45dfbd221737f4c Validity Not Before: Dec 18 02:01:13 2025 GMT Not After : Dec 19 02:01:13 2025 GMT Subject: CN=34fcf0966b6707a4c5803665cfbf5cd5724348fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c2:88:d1:78:9b:aa:1c:92:d0:f8:c8:fd:18: 66:2a:b1:bd:ce:d9:52:8d:a9:6e:e1:b1:1c:fa:5a: 90:1d:e3:36:ce:54:27:a0:93:28:de:23:1e:ac:5b: 5c:e6:1f:84:6d:c2:b2:2d:b2:47:36:df:8a:f5:18: aa:dd:2b:3d:aa:e9:81:67:ef:93:08:43:85:36:f3: 97:f6:e6:9a:6c:de:ac:ac:4a:22:43:16:73:21:43: 8e:6a:f0:0c:38:57:3a:47:ed:65:9f:67:88:ef:17: ad:8a:82:81:f4:bb:2a:9e:ec:0c:a3:fc:1f:1b:1e: 17:b9:1a:10:28:fc:df:55:8b:36:d4:2d:2a:a3:5a: e4:17:95:91:fe:5e:2f:55:65:16:db:36:9d:d9:20: 22:b3:dc:0a:bc:5a:71:cb:a2:8b:5b:9b:b8:98:00: bf:3f:1a:d4:40:d6:86:6e:ee:7c:8d:47:80:b6:23: c2:a4:7a:7c:4d:bc:3b:16:4c:d0:2a:c2:97:02:39: d9:20:1a:a9:0e:07:b0:0d:12:a1:23:a3:57:c5:3d: 7d:ff:e1:06:db:5a:2d:ad:77:fe:4c:78:34:93:7d: 45:52:ed:41:40:b9:1c:b7:57:c0:b5:3b:24:5b:36: 30:b5:a3:0e:7f:03:3f:16:8d:aa:dc:df:8b:27:c5: b4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:FC:F0:96:6B:67:07:A4:C5:80:36:65:CF:BF:5C:D5:72:43:48:FB X509v3 Authority Key Identifier: keyid:E5:85:BA:EA:62:F8:D6:06:26:24:87:38:C4:5D:FB:D2:21:73:7F:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YW66mL41gYmJIc4xF370iFzf0w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:74:03:0d:b9:e3:0b:3e:09:59:84:93:91:c0:65:f6:79:e1: 86:45:f0:fd:04:e8:3f:9b:3a:26:e4:38:9f:fa:22:0d:69:11: 24:70:1d:ae:d8:2b:04:a2:99:2a:a2:69:0b:15:de:e0:3f:95: 42:69:f7:00:51:bb:f2:6f:8b:5f:68:0e:e4:17:29:0e:ee:cb: 45:1e:08:f2:4b:41:c9:bb:c3:f8:c7:d3:a8:8c:6a:ea:87:b6: 42:23:7e:a4:8d:55:64:1b:9b:cf:d5:2b:67:3f:3a:e7:6f:23: 9f:f6:58:f6:f0:4e:92:fa:f3:fe:8c:50:df:4b:0a:bb:45:14: 86:6f:40:22:64:da:28:18:04:23:8c:09:b0:31:a3:63:e6:6b: 4f:f2:03:12:07:eb:dd:93:b5:7e:41:2e:f5:48:67:43:f6:31: de:13:ab:f6:19:a8:da:b6:ec:0e:f2:72:c0:4f:ed:3c:9e:89: a6:6e:a2:47:5d:30:34:82:fc:23:87:22:4f:ca:3d:43:b5:aa: b6:8c:4b:a7:5d:b7:1b:cf:20:06:c0:71:80:49:03:f7:72:42: 48:a6:99:2c:55:93:05:69:df:9d:a5:c1:dd:f5:d9:df:da:e8: 25:83:50:87:27:66:77:dc:48:41:cb:ad:55:6d:b9:cc:77:ce: b9:a7:bf:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvMJqF8/TlSIg7bhbhezSfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ODViYWVhNjJmOGQ2MDYyNjI0ODczOGM0NWRmYmQyMjE3 MzdmNGMwHhcNMjUxMjE4MDIwMTEzWhcNMjUxMjE5MDIwMTEzWjAzMTEwLwYDVQQD EygzNGZjZjA5NjZiNjcwN2E0YzU4MDM2NjVjZmJmNWNkNTcyNDM0OGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscKI0XibqhyS0PjI/RhmKrG9ztlS jalu4bEc+lqQHeM2zlQnoJMo3iMerFtc5h+EbcKyLbJHNt+K9Riq3Ss9qumBZ++T CEOFNvOX9uaabN6srEoiQxZzIUOOavAMOFc6R+1ln2eI7xetioKB9LsqnuwMo/wf Gx4XuRoQKPzfVYs21C0qo1rkF5WR/l4vVWUW2zad2SAis9wKvFpxy6KLW5u4mAC/ PxrUQNaGbu58jUeAtiPCpHp8Tbw7FkzQKsKXAjnZIBqpDgewDRKhI6NXxT19/+EG 21otrXf+THg0k31FUu1BQLkct1fAtTskWzYwtaMOfwM/Fo2q3N+LJ8W0+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDT88JZrZwekxYA2Zc+/XNVyQ0j7MB8GA1UdIwQY MBaAFOWFuupi+NYGJiSHOMRd+9Ihc39MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVlXNjZtTDQxZ1ltSkljNHhGMzcwaUZ6ZjB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9iZGEzZWYtNGEyZi00Y2NjLWIyOTUt YjIyZWI5NDg1MTVjLzEvNVlXNjZtTDQxZ1ltSkljNHhGMzcwaUZ6ZjB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9iZGEzZWYtNGEyZi00Y2NjLWIyOTUtYjIyZWI5NDg1MTVj LzEvNVlXNjZtTDQxZ1ltSkljNHhGMzcwaUZ6ZjB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZXQDDbnj Cz4JWYSTkcBl9nnhhkXw/QToP5s6JuQ4n/oiDWkRJHAdrtgrBKKZKqJpCxXe4D+V Qmn3AFG78m+LX2gO5BcpDu7LRR4I8ktBybvD+MfTqIxq6oe2QiN+pI1VZBubz9Ur Zz86528jn/ZY9vBOkvrz/oxQ30sKu0UUhm9AImTaKBgEI4wJsDGjY+ZrT/IDEgfr 3ZO1fkEu9UhnQ/Yx3hOr9hmo2rbsDvJywE/tPJ6Jpm6iR10wNIL8I4ciT8o9Q7Wq toxLp123G88gBsBxgEkD93JCSKaZLFWTBWnfnaXB3fXZ39roJYNQhydmd9xIQcut VW25zHfOuae/lQ== -----END CERTIFICATE-----Generated at Thu Dec 18 11:13:45 2025 by rpki-client