This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft File: 5GWsyQgJ77RczaJQoQV2GElLhus.mft (raw, json) Hash identifier: sN3Oei0/TPs1WPUtnrekV0tfNiy5WP+eTPs56pQqbxU= Subject key identifier: 9C:C3:CB:8C:AE:CA:3B:5E:9B:E0:40:5D:FB:2F:0C:DA:FC:42:5C:AD Authority key identifier: E4:65:AC:C9:08:09:EF:B4:5C:CD:A2:50:A1:05:76:18:49:4B:86:EB Certificate issuer: /CN=e465acc90809efb45ccda250a1057618494b86eb Certificate serial: 019B45B8511AE0AE2C765A66579936F4F27C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 11:01:05 +0000 Manifest this update: Mon 22 Dec 2025 11:01:05 +0000 Manifest next update: Tue 23 Dec 2025 11:01:05 +0000 Files and hashes: 1: 5GWsyQgJ77RczaJQoQV2GElLhus.crl (hash: TA/reBlUYzArxxwCzkFWAlgwHXFg5J57usTSl4ZHlGg=) 2: HXkMZsrBmT3pdly4pNHClnxxiAs.roa (hash: uINrlSFHfmPOAUFp+GFnrxpC6bCJm76Z7RhHxB80xWI=) 3: g56Uh-QZpNYvH0QrLNbigssPnrQ.roa (hash: wrpYwLhb1No98RIDJLncVQMkGDqMDtvmrpGIa2b7nWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:b8:51:1a:e0:ae:2c:76:5a:66:57:99:36:f4:f2:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e465acc90809efb45ccda250a1057618494b86eb Validity Not Before: Dec 22 11:01:05 2025 GMT Not After : Dec 23 11:01:05 2025 GMT Subject: CN=9cc3cb8caeca3b5e9be0405dfb2f0cdafc425cad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:05:87:a9:e5:f4:74:fa:fa:1c:e6:e7:23:cd: d1:2b:78:0b:76:35:4f:a4:6a:54:1c:1c:03:3d:c8: b3:3e:16:24:84:d1:a3:f2:e9:5a:1b:07:70:c5:4f: 26:56:77:91:ea:a7:d7:93:85:bc:80:0b:7b:7e:7f: 93:5c:61:16:29:4d:c6:51:a9:ac:5a:58:35:8d:9e: 75:9c:9e:d1:15:6b:05:ff:38:ed:7b:41:8c:75:6f: 02:50:2c:ab:a6:e4:9f:01:bb:b9:eb:48:98:67:e1: 12:59:bd:98:24:b7:0f:75:76:69:ec:35:d6:1c:cf: 51:47:fa:60:ec:f9:56:cd:40:c2:70:56:15:f6:2e: 51:09:7e:41:dc:2b:30:7d:42:28:c7:05:5c:19:d2: b5:95:9d:65:94:3d:9a:a7:1e:2a:39:89:d3:c6:f5: 5b:43:b6:25:c3:bd:11:00:ff:f0:56:d6:54:c2:b5: 4f:95:d2:ca:04:1b:01:43:68:ba:e3:c6:55:05:71: 1f:39:df:17:4f:8f:9b:ae:47:39:e3:94:25:70:c2: d9:40:27:7f:fc:39:ab:c1:9f:48:a2:4c:b2:56:08: 29:51:da:19:8a:c4:92:f5:2c:85:97:b2:8d:2d:30: ab:69:ab:fa:37:22:2c:47:3d:c1:ce:9d:09:ad:54: 6d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C3:CB:8C:AE:CA:3B:5E:9B:E0:40:5D:FB:2F:0C:DA:FC:42:5C:AD X509v3 Authority Key Identifier: keyid:E4:65:AC:C9:08:09:EF:B4:5C:CD:A2:50:A1:05:76:18:49:4B:86:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:45:34:41:0d:97:b8:35:b2:11:1b:04:ce:b1:9c:7c:ee:b3: b9:88:fb:28:e3:70:5c:07:4a:c8:67:1c:f4:fc:2a:23:f0:51: 14:b8:01:e0:b5:5c:88:d9:47:07:12:24:54:67:63:ea:4a:20: 0f:25:6d:72:c2:4d:8a:a0:9e:cb:cc:28:1d:83:99:c9:cf:14: be:04:48:07:7a:f4:36:e3:2c:f6:f4:11:27:13:44:2b:24:6e: 08:63:07:7e:c3:30:22:14:d4:84:a9:e2:15:60:4a:87:b3:6d: 37:a6:5f:41:70:ae:aa:da:3b:8e:62:f8:85:d3:38:4f:1e:9e: 6e:d9:8b:4c:24:9d:d0:88:89:22:83:95:60:5b:2f:e4:e9:36: 93:ce:a1:1d:d6:27:09:1c:1a:0c:92:a5:47:ba:5c:92:0d:9d: 11:07:55:2e:b9:c5:76:7a:22:e6:88:90:bc:d1:6f:b3:7e:ec: ef:f2:8f:06:19:a5:46:bf:83:58:6f:34:fb:f8:62:5a:f7:e8: f7:67:d9:f1:9a:38:44:40:df:07:5b:45:0d:02:b0:ea:03:6a: 4a:99:25:45:8b:29:c6:05:67:d5:e8:b2:e5:6d:de:d4:0e:ca: 0e:a1:63:16:fc:4e:da:f8:af:0e:cd:9d:2e:6c:88:d2:ae:dc: 6e:df:a5:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFuFEa4K4sdlpmV5k29PJ8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0NjVhY2M5MDgwOWVmYjQ1Y2NkYTI1MGExMDU3NjE4NDk0 Yjg2ZWIwHhcNMjUxMjIyMTEwMTA1WhcNMjUxMjIzMTEwMTA1WjAzMTEwLwYDVQQD Eyg5Y2MzY2I4Y2FlY2EzYjVlOWJlMDQwNWRmYjJmMGNkYWZjNDI1Y2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwWHqeX0dPr6HObnI83RK3gLdjVP pGpUHBwDPcizPhYkhNGj8ulaGwdwxU8mVneR6qfXk4W8gAt7fn+TXGEWKU3GUams Wlg1jZ51nJ7RFWsF/zjte0GMdW8CUCyrpuSfAbu560iYZ+ESWb2YJLcPdXZp7DXW HM9RR/pg7PlWzUDCcFYV9i5RCX5B3CswfUIoxwVcGdK1lZ1llD2apx4qOYnTxvVb Q7Ylw70RAP/wVtZUwrVPldLKBBsBQ2i648ZVBXEfOd8XT4+brkc545QlcMLZQCd/ /DmrwZ9IokyyVggpUdoZisSS9SyFl7KNLTCraav6NyIsRz3Bzp0JrVRtKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJzDy4yuyjtem+BAXfsvDNr8QlytMB8GA1UdIwQY MBaAFORlrMkICe+0XM2iUKEFdhhJS4brMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUdXc3lRZ0o3N1JjemFKUW9RVjJHRWxMaHVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi85ZWY2MGEtNzNlZS00MGUxLTkwMDYt YzBiM2IwZjU0YmViLzEvNUdXc3lRZ0o3N1JjemFKUW9RVjJHRWxMaHVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi85ZWY2MGEtNzNlZS00MGUxLTkwMDYtYzBiM2IwZjU0YmVi LzEvNUdXc3lRZ0o3N1JjemFKUW9RVjJHRWxMaHVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoUU0QQ2X uDWyERsEzrGcfO6zuYj7KONwXAdKyGcc9PwqI/BRFLgB4LVciNlHBxIkVGdj6kog DyVtcsJNiqCey8woHYOZyc8UvgRIB3r0NuMs9vQRJxNEKyRuCGMHfsMwIhTUhKni FWBKh7NtN6ZfQXCuqto7jmL4hdM4Tx6ebtmLTCSd0IiJIoOVYFsv5Ok2k86hHdYn CRwaDJKlR7pckg2dEQdVLrnFdnoi5oiQvNFvs37s7/KPBhmlRr+DWG80+/hiWvfo 92fZ8Zo4REDfB1tFDQKw6gNqSpklRYspxgVn1eiy5W3e1A7KDqFjFvxO2vivDs2d LmyI0q7cbt+lOQ== -----END CERTIFICATE-----Generated at Mon Dec 22 14:04:08 2025 by rpki-client