This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft File: 5gFfHiAENZyudla5aK2ypUpDTx4.mft (raw, json) Hash identifier: hB60oMCDapy0KhbkDnP+Cwx97Lv2sFoCB+gZOmnVPA0= Subject key identifier: 1D:22:EA:BE:5E:1D:E4:DC:1B:CC:86:BA:46:27:B8:B1:4A:E3:8A:66 Authority key identifier: E6:01:5F:1E:20:04:35:9C:AE:76:56:B9:68:AD:B2:A5:4A:43:4F:1E Certificate issuer: /CN=e6015f1e2004359cae7656b968adb2a54a434f1e Certificate serial: 019B66FAEB72AC2E1EFE89AA61987D366D83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft Manifest number: 179D Signing time: Sun 28 Dec 2025 22:01:18 +0000 Manifest this update: Sun 28 Dec 2025 22:01:18 +0000 Manifest next update: Mon 29 Dec 2025 22:01:18 +0000 Files and hashes: 1: 5gFfHiAENZyudla5aK2ypUpDTx4.crl (hash: 5y4RFme6fM/uAlkeYERwkaBqTceSQzEnweUvcai7A3A=) 2: MvZ9UpTU1jkxQ9uFTXHU8G59uDg.roa (hash: kL1zPGLwfZE8020kfHibTnemsjFNFBdHlurHXKEnCxs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 21:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:fa:eb:72:ac:2e:1e:fe:89:aa:61:98:7d:36:6d:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6015f1e2004359cae7656b968adb2a54a434f1e Validity Not Before: Dec 28 22:01:18 2025 GMT Not After : Dec 29 22:01:18 2025 GMT Subject: CN=1d22eabe5e1de4dc1bcc86ba4627b8b14ae38a66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6e:2c:a3:87:ef:3e:25:23:9f:67:1d:e1:cf: 34:2d:86:ec:84:dd:be:c7:56:57:63:43:3c:84:2f: 5f:3d:78:01:f8:5a:3e:c3:b3:7d:9b:1e:ab:9c:04: 03:d3:ed:bb:f4:f3:da:e4:b8:94:84:36:b6:5c:14: 7e:c9:26:f4:17:c3:fe:3e:9e:f4:16:d8:28:b5:35: c7:00:6b:65:88:04:d8:e2:f3:1b:79:4a:72:d3:c7: dc:3b:14:8c:b1:e1:f9:22:fc:0f:eb:30:be:13:53: 9c:01:f4:1c:92:b1:ac:80:08:a2:c9:ff:ff:f2:a1: aa:21:4f:61:fe:f5:39:24:1f:12:da:5b:eb:9b:83: c9:ee:0b:92:2d:ef:69:b1:04:0f:86:b6:9d:bf:18: 0b:14:c4:36:73:9e:51:fa:a8:d0:ae:50:b7:f0:5c: 4a:d8:93:24:56:fa:e8:4b:ff:b0:c5:29:63:09:31: 1b:5b:4d:83:ff:00:46:31:fb:41:e3:78:1c:e1:08: 18:5e:8b:ee:f0:39:7a:55:f5:e5:36:bb:da:47:0e: c4:19:26:82:83:e3:61:ae:87:fe:13:50:23:1e:21: b4:84:96:f5:65:e3:aa:e3:cd:19:cf:6e:e1:24:f7: 8d:c2:60:ab:d7:f4:da:e0:52:7e:82:5b:7f:83:24: ff:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:22:EA:BE:5E:1D:E4:DC:1B:CC:86:BA:46:27:B8:B1:4A:E3:8A:66 X509v3 Authority Key Identifier: keyid:E6:01:5F:1E:20:04:35:9C:AE:76:56:B9:68:AD:B2:A5:4A:43:4F:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:30:84:40:5a:d4:70:0d:4a:fa:90:d7:46:73:16:87:38:6d: 35:3e:5c:c0:bb:5e:47:1d:5f:61:25:8d:9c:93:75:33:c4:73: b3:a7:9a:12:ac:16:84:ff:93:70:11:a6:be:eb:04:a8:1e:98: ef:ca:0c:0a:0c:f1:d1:77:e0:99:4d:b3:31:69:96:8b:23:fd: 7b:4d:dd:5a:c2:b9:dc:65:c7:a5:82:13:7d:eb:44:3e:bf:b8: 59:16:84:e1:44:49:52:94:4a:7b:28:61:e7:bc:7e:55:0d:f3: 0d:be:4a:4d:28:8e:69:fe:1a:26:8a:ba:ae:19:8d:b8:49:44: 60:e6:53:37:fd:df:42:c4:38:de:39:9a:97:66:e2:29:c4:30: 20:8c:36:5c:c8:75:0f:75:66:89:18:8c:6f:3c:22:d9:a2:43: a4:f5:99:c0:08:fa:ff:1b:d9:ce:3b:93:52:61:e8:ef:9b:3d: a5:ae:8e:dc:f2:ea:ed:83:99:59:00:ee:04:0b:1b:bf:f1:22: 86:77:24:13:c5:16:62:59:34:37:34:01:79:aa:86:07:d4:12: 3c:e1:74:b7:99:ba:6b:52:7e:21:c4:84:72:a4:bc:24:98:a4: b6:a2:39:75:0b:7f:78:c4:46:80:b2:92:62:c7:fd:43:48:3c: c1:ff:41:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtm+utyrC4e/omqYZh9Nm2DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MDE1ZjFlMjAwNDM1OWNhZTc2NTZiOTY4YWRiMmE1NGE0 MzRmMWUwHhcNMjUxMjI4MjIwMTE4WhcNMjUxMjI5MjIwMTE4WjAzMTEwLwYDVQQD EygxZDIyZWFiZTVlMWRlNGRjMWJjYzg2YmE0NjI3YjhiMTRhZTM4YTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs24so4fvPiUjn2cd4c80LYbshN2+ x1ZXY0M8hC9fPXgB+Fo+w7N9mx6rnAQD0+279PPa5LiUhDa2XBR+ySb0F8P+Pp70 FtgotTXHAGtliATY4vMbeUpy08fcOxSMseH5IvwP6zC+E1OcAfQckrGsgAiiyf// 8qGqIU9h/vU5JB8S2lvrm4PJ7guSLe9psQQPhradvxgLFMQ2c55R+qjQrlC38FxK 2JMkVvroS/+wxSljCTEbW02D/wBGMftB43gc4QgYXovu8Dl6VfXlNrvaRw7EGSaC g+Nhrof+E1AjHiG0hJb1ZeOq480Zz27hJPeNwmCr1/Ta4FJ+glt/gyT/7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB0i6r5eHeTcG8yGukYnuLFK44pmMB8GA1UdIwQY MBaAFOYBXx4gBDWcrnZWuWitsqVKQ08eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWdGZkhpQUVOWnl1ZGxhNWFLMnlwVXBEVHg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS81MDgzMjEtMmRmYS00MjUzLWEzY2It MmY5MjY1MTBmZmJmLzEvNWdGZkhpQUVOWnl1ZGxhNWFLMnlwVXBEVHg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS81MDgzMjEtMmRmYS00MjUzLWEzY2ItMmY5MjY1MTBmZmJm LzEvNWdGZkhpQUVOWnl1ZGxhNWFLMnlwVXBEVHg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwjCEQFrU cA1K+pDXRnMWhzhtNT5cwLteRx1fYSWNnJN1M8Rzs6eaEqwWhP+TcBGmvusEqB6Y 78oMCgzx0XfgmU2zMWmWiyP9e03dWsK53GXHpYITfetEPr+4WRaE4URJUpRKeyhh 57x+VQ3zDb5KTSiOaf4aJoq6rhmNuElEYOZTN/3fQsQ43jmal2biKcQwIIw2XMh1 D3VmiRiMbzwi2aJDpPWZwAj6/xvZzjuTUmHo75s9pa6O3PLq7YOZWQDuBAsbv/Ei hnckE8UWYlk0NzQBeaqGB9QSPOF0t5m6a1J+IcSEcqS8JJiktqI5dQt/eMRGgLKS Ysf9Q0g8wf9BIA== -----END CERTIFICATE-----Generated at Mon Dec 29 07:06:51 2025 by rpki-client