This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft File: 5YBpdIdI6a69e-QFh9gUDv3lW2s.mft (raw, json) Hash identifier: OVOGRY5idAOeqCVMft1DyuNOERbd58Xuoh7NdFtrOis= Subject key identifier: 46:E9:EA:D1:C2:07:35:D2:1B:91:96:C9:3D:83:A6:9C:C1:25:E0:62 Authority key identifier: E5:80:69:74:87:48:E9:AE:BD:7B:E4:05:87:D8:14:0E:FD:E5:5B:6B Certificate issuer: /CN=e58069748748e9aebd7be40587d8140efde55b6b Certificate serial: 019B432515990A9B50B2FEB0C77E8774404E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft Manifest number: 171D Signing time: Sun 21 Dec 2025 23:01:02 +0000 Manifest this update: Sun 21 Dec 2025 23:01:02 +0000 Manifest next update: Mon 22 Dec 2025 23:01:02 +0000 Files and hashes: 1: 5YBpdIdI6a69e-QFh9gUDv3lW2s.crl (hash: 1lfQRZz2gJzwO8jEY8ProH/EA0JazcUMCzBvarupFc0=) 2: vmkVgb9N_5wAEFtAOAjwuSdx1Xs.roa (hash: To73D5BDmwWuULrYV7q3UmXkLh1DadkYNkNoo+AcLqo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:25:15:99:0a:9b:50:b2:fe:b0:c7:7e:87:74:40:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e58069748748e9aebd7be40587d8140efde55b6b Validity Not Before: Dec 21 23:01:02 2025 GMT Not After : Dec 22 23:01:02 2025 GMT Subject: CN=46e9ead1c20735d21b9196c93d83a69cc125e062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:42:f6:fb:9b:6e:6d:c3:9f:8a:0f:32:f5:07: 29:ce:ce:94:d6:ac:33:8c:dd:d7:0e:55:aa:93:b5: 8f:6f:22:68:1a:e9:95:cd:48:5c:dd:e9:e6:29:76: 67:bd:71:5d:fa:66:10:6b:5f:d5:44:21:21:73:2b: 1f:4b:ca:ef:b9:c6:02:25:2e:ff:4d:46:06:88:8f: 72:87:64:d4:c2:95:f8:6d:92:fb:85:13:be:28:e0: bb:7c:44:06:b0:4b:ff:1c:f7:48:3c:eb:cb:65:a8: 9b:ff:d2:9c:ec:3a:d0:5d:55:c4:2b:ea:f1:2c:79: 48:82:a8:b1:b6:69:6a:74:54:66:75:dc:63:57:bc: d7:e2:d7:39:12:b1:28:04:81:5d:84:72:0a:b5:0a: 41:93:3b:aa:9f:10:1c:f9:36:1f:71:4e:0e:ed:bd: f2:c5:b1:cc:db:a7:81:43:30:44:92:91:1b:3d:7b: a4:18:64:37:5d:cd:3c:61:41:79:53:1d:57:5e:af: 9a:54:cb:b2:a7:25:5e:6a:28:0c:97:8e:a5:e7:9d: a5:3c:11:1a:3a:c0:be:1b:10:11:9b:4a:04:4c:03: 3c:62:88:f1:09:7d:05:33:f2:84:7c:a1:f9:72:a1: 4e:8f:b2:3c:cd:2a:1b:e1:cd:88:d3:f8:64:81:1a: 54:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E9:EA:D1:C2:07:35:D2:1B:91:96:C9:3D:83:A6:9C:C1:25:E0:62 X509v3 Authority Key Identifier: keyid:E5:80:69:74:87:48:E9:AE:BD:7B:E4:05:87:D8:14:0E:FD:E5:5B:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:f6:0f:96:90:b8:6c:c5:4c:a5:50:48:bd:81:d6:66:19:e9: 8e:60:d2:09:f4:85:d1:59:3a:35:66:51:4f:12:dd:05:c6:04: 15:8f:c3:f2:1f:fe:6c:a9:3e:97:93:fd:22:30:c0:88:93:35: c1:83:b5:8f:19:98:17:3d:6c:b0:67:d1:3b:72:7d:0c:f2:c5: 95:18:90:70:48:38:86:69:ad:dd:cf:88:0b:e4:e1:25:38:d9: f6:8f:7f:e4:07:27:d8:fd:15:b8:b8:3b:a7:16:2d:16:13:91: c4:b2:cd:65:80:bf:1d:b4:e0:a0:22:4c:c1:e9:7b:18:73:bc: 3a:f8:d9:70:79:32:af:7b:78:5c:b1:b3:fc:74:9e:16:01:42: f5:81:2e:ef:4b:10:58:f9:3f:4a:00:0b:24:6d:69:dd:5b:49: a9:d9:43:8a:5f:92:12:79:de:0b:10:a9:c5:e4:86:47:3a:e6: 5e:db:e2:89:a8:19:f1:05:80:fa:a8:ed:8f:7d:27:c7:62:32: bf:ca:d5:c2:6a:14:f6:55:4b:2d:91:a0:8a:37:80:43:4a:7d: 52:b8:4e:f1:10:cf:36:66:5c:40:18:90:70:a2:07:dc:b0:c8: db:f6:f7:0d:ad:ef:64:d8:89:44:ef:62:5e:35:60:8e:15:5a: ac:70:39:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJRWZCptQsv6wx36HdEBOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ODA2OTc0ODc0OGU5YWViZDdiZTQwNTg3ZDgxNDBlZmRl NTViNmIwHhcNMjUxMjIxMjMwMTAyWhcNMjUxMjIyMjMwMTAyWjAzMTEwLwYDVQQD Eyg0NmU5ZWFkMWMyMDczNWQyMWI5MTk2YzkzZDgzYTY5Y2MxMjVlMDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkL2+5tubcOfig8y9Qcpzs6U1qwz jN3XDlWqk7WPbyJoGumVzUhc3enmKXZnvXFd+mYQa1/VRCEhcysfS8rvucYCJS7/ TUYGiI9yh2TUwpX4bZL7hRO+KOC7fEQGsEv/HPdIPOvLZaib/9Kc7DrQXVXEK+rx LHlIgqixtmlqdFRmddxjV7zX4tc5ErEoBIFdhHIKtQpBkzuqnxAc+TYfcU4O7b3y xbHM26eBQzBEkpEbPXukGGQ3Xc08YUF5Ux1XXq+aVMuypyVeaigMl46l552lPBEa OsC+GxARm0oETAM8YojxCX0FM/KEfKH5cqFOj7I8zSob4c2I0/hkgRpUWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEbp6tHCBzXSG5GWyT2DppzBJeBiMB8GA1UdIwQY MBaAFOWAaXSHSOmuvXvkBYfYFA795VtrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVlCcGRJZEk2YTY5ZS1RRmg5Z1VEdjNsVzJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84ZWZkODAtN2RiMy00ZTUyLWFkNzYt MGY4OTZlYmNhNGY4LzEvNVlCcGRJZEk2YTY5ZS1RRmg5Z1VEdjNsVzJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS84ZWZkODAtN2RiMy00ZTUyLWFkNzYtMGY4OTZlYmNhNGY4 LzEvNVlCcGRJZEk2YTY5ZS1RRmg5Z1VEdjNsVzJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY/YPlpC4 bMVMpVBIvYHWZhnpjmDSCfSF0Vk6NWZRTxLdBcYEFY/D8h/+bKk+l5P9IjDAiJM1 wYO1jxmYFz1ssGfRO3J9DPLFlRiQcEg4hmmt3c+IC+ThJTjZ9o9/5Acn2P0VuLg7 pxYtFhORxLLNZYC/HbTgoCJMwel7GHO8OvjZcHkyr3t4XLGz/HSeFgFC9YEu70sQ WPk/SgALJG1p3VtJqdlDil+SEnneCxCpxeSGRzrmXtviiagZ8QWA+qjtj30nx2Iy v8rVwmoU9lVLLZGgijeAQ0p9UrhO8RDPNmZcQBiQcKIH3LDI2/b3Da3vZNiJRO9i XjVgjhVarHA5xA== -----END CERTIFICATE-----Generated at Mon Dec 22 06:33:02 2025 by rpki-client