This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/150355-c11a-4d37-a182-23762aa09717/1/5O8X9MtP6SrQU-7yXznWOuEgfdM.mft File: 5O8X9MtP6SrQU-7yXznWOuEgfdM.mft (raw, json) Hash identifier: MvI8ET3H0NLR4QplnFZfc9ay5jw03YZ8ujFYacZmGlY= Subject key identifier: 10:A1:22:F0:FE:65:D2:F4:24:99:90:37:B5:B3:00:8C:3D:DF:7D:ED Authority key identifier: E4:EF:17:F4:CB:4F:E9:2A:D0:53:EE:F2:5F:39:D6:3A:E1:20:7D:D3 Certificate issuer: /CN=e4ef17f4cb4fe92ad053eef25f39d63ae1207dd3 Certificate serial: 019B34C43CBD1649717EE3C87ED398F459A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5O8X9MtP6SrQU-7yXznWOuEgfdM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/150355-c11a-4d37-a182-23762aa09717/1/5O8X9MtP6SrQU-7yXznWOuEgfdM.mft Manifest number: 03BA Signing time: Fri 19 Dec 2025 04:00:34 +0000 Manifest this update: Fri 19 Dec 2025 04:00:34 +0000 Manifest next update: Sat 20 Dec 2025 04:00:34 +0000 Files and hashes: 1: 5O8X9MtP6SrQU-7yXznWOuEgfdM.crl (hash: jSHO9j6WKTLiqKDGwJ3xPe2hV0KfQt5oPmwTuZ2tCe8=) 2: hkqw3W9-pdwewEMPwrQBPExOldQ.roa (hash: GNMEaQG7JI+6R+GxCRi11C7wb2KrqYyAM0elThFtbVY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/150355-c11a-4d37-a182-23762aa09717/1/5O8X9MtP6SrQU-7yXznWOuEgfdM.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/150355-c11a-4d37-a182-23762aa09717/1/5O8X9MtP6SrQU-7yXznWOuEgfdM.mft rsync://rpki.ripe.net/repository/DEFAULT/5O8X9MtP6SrQU-7yXznWOuEgfdM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:3c:bd:16:49:71:7e:e3:c8:7e:d3:98:f4:59:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4ef17f4cb4fe92ad053eef25f39d63ae1207dd3 Validity Not Before: Dec 19 04:00:34 2025 GMT Not After : Dec 20 04:00:34 2025 GMT Subject: CN=10a122f0fe65d2f424999037b5b3008c3ddf7ded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:22:f8:02:08:82:af:09:4d:0b:8b:46:a2:cb: e2:60:cd:33:c8:09:6d:2c:dc:b3:d0:de:81:04:4f: 92:e8:e9:21:30:3c:59:4a:c2:27:cf:7f:df:7c:c2: 73:00:13:cc:5a:5f:46:1b:ae:9a:f4:12:83:77:2a: a7:1e:0f:9b:3c:93:7c:44:d8:26:38:72:01:5f:29: 17:af:d0:87:57:05:9c:66:1e:ce:85:25:79:54:bb: b1:3c:9a:e3:ff:4a:40:f8:7c:bd:e8:da:3e:38:98: 46:c2:fb:dc:3f:79:02:1e:1d:3d:ae:ce:65:ee:c4: b7:e2:71:cc:97:ee:4e:2e:e3:2e:81:ae:a5:70:12: c6:2d:c0:58:ca:38:ed:06:4e:ed:c2:c0:f9:0d:46: c4:fc:87:fc:40:58:67:8b:f0:76:56:33:c1:ec:87: f3:2d:b2:c8:20:eb:b9:87:04:fa:e7:08:6c:2f:75: 0d:2a:d9:00:01:28:7e:fb:f5:f9:22:fe:ff:b9:1d: 04:d0:be:5a:65:dc:ab:df:9c:ba:6c:e7:6f:98:1c: 3d:04:0d:78:66:9c:10:8c:27:61:92:df:2f:1d:56: 2d:ea:4f:6d:ee:87:15:17:49:24:2d:3f:dc:30:05: a5:c7:5e:d1:48:27:19:92:d0:fa:be:96:fc:60:56: 73:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A1:22:F0:FE:65:D2:F4:24:99:90:37:B5:B3:00:8C:3D:DF:7D:ED X509v3 Authority Key Identifier: keyid:E4:EF:17:F4:CB:4F:E9:2A:D0:53:EE:F2:5F:39:D6:3A:E1:20:7D:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5O8X9MtP6SrQU-7yXznWOuEgfdM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/150355-c11a-4d37-a182-23762aa09717/1/5O8X9MtP6SrQU-7yXznWOuEgfdM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/150355-c11a-4d37-a182-23762aa09717/1/5O8X9MtP6SrQU-7yXznWOuEgfdM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:16:c7:20:00:f8:b0:00:3d:4c:af:71:ec:57:f2:04:81:99: d6:ac:8b:92:48:53:41:fc:af:b5:be:99:d5:fe:5b:09:25:86: 01:97:86:4e:47:6b:9a:7d:0f:c4:c4:30:cf:2a:e7:cb:37:a9: 03:81:cb:1f:9d:96:76:b4:22:19:33:56:53:4d:17:9d:3e:eb: 3a:23:8c:60:80:8c:00:e5:60:af:5e:59:58:f8:aa:1c:85:48: 86:28:a9:2e:7d:e2:8b:05:5b:37:63:17:e7:75:d9:fc:87:55: af:12:42:fc:52:b7:4f:22:cb:0a:18:5a:e1:f3:36:56:b0:4f: b0:77:e7:de:72:4d:ba:bb:05:a4:dc:14:08:d1:45:7e:8e:c3: 56:ee:73:4c:6e:82:1d:66:cd:4e:8b:82:79:a0:f6:75:d7:8d: 63:53:41:79:e2:ec:4a:6d:e5:7a:e5:82:56:8a:0e:14:d4:4a: e9:ab:e9:72:90:39:f2:41:3b:67:51:f2:f0:33:44:06:bb:a3: 87:70:39:b9:e6:6a:78:76:23:ef:ae:93:85:79:1b:d3:b1:4e: 9f:ee:32:95:af:1c:85:7f:bb:a2:02:3f:6a:f8:c4:db:83:5a: 84:4d:6f:d5:a5:5b:31:ac:60:88:68:e8:95:a3:44:e5:e8:bf: 09:e1:ab:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xDy9FklxfuPIftOY9FmhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ZWYxN2Y0Y2I0ZmU5MmFkMDUzZWVmMjVmMzlkNjNhZTEy MDdkZDMwHhcNMjUxMjE5MDQwMDM0WhcNMjUxMjIwMDQwMDM0WjAzMTEwLwYDVQQD EygxMGExMjJmMGZlNjVkMmY0MjQ5OTkwMzdiNWIzMDA4YzNkZGY3ZGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8SL4AgiCrwlNC4tGosviYM0zyAlt LNyz0N6BBE+S6OkhMDxZSsInz3/ffMJzABPMWl9GG66a9BKDdyqnHg+bPJN8RNgm OHIBXykXr9CHVwWcZh7OhSV5VLuxPJrj/0pA+Hy96No+OJhGwvvcP3kCHh09rs5l 7sS34nHMl+5OLuMuga6lcBLGLcBYyjjtBk7twsD5DUbE/If8QFhni/B2VjPB7Ifz LbLIIOu5hwT65whsL3UNKtkAASh++/X5Iv7/uR0E0L5aZdyr35y6bOdvmBw9BA14 ZpwQjCdhkt8vHVYt6k9t7ocVF0kkLT/cMAWlx17RSCcZktD6vpb8YFZz2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBChIvD+ZdL0JJmQN7WzAIw9333tMB8GA1UdIwQY MBaAFOTvF/TLT+kq0FPu8l851jrhIH3TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU84WDlNdFA2U3JRVS03eVh6bldPdUVnZmRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8xNTAzNTUtYzExYS00ZDM3LWExODIt MjM3NjJhYTA5NzE3LzEvNU84WDlNdFA2U3JRVS03eVh6bldPdUVnZmRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8xNTAzNTUtYzExYS00ZDM3LWExODItMjM3NjJhYTA5NzE3 LzEvNU84WDlNdFA2U3JRVS03eVh6bldPdUVnZmRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKRbHIAD4 sAA9TK9x7FfyBIGZ1qyLkkhTQfyvtb6Z1f5bCSWGAZeGTkdrmn0PxMQwzyrnyzep A4HLH52WdrQiGTNWU00XnT7rOiOMYICMAOVgr15ZWPiqHIVIhiipLn3iiwVbN2MX 53XZ/IdVrxJC/FK3TyLLChha4fM2VrBPsHfn3nJNursFpNwUCNFFfo7DVu5zTG6C HWbNTouCeaD2ddeNY1NBeeLsSm3leuWCVooOFNRK6avpcpA58kE7Z1Hy8DNEBruj h3A5ueZqeHYj766ThXkb07FOn+4yla8chX+7ogI/avjE24NahE1v1aVbMaxgiGjo laNE5ei/CeGrBA== -----END CERTIFICATE-----Generated at Fri Dec 19 11:38:10 2025 by rpki-client