This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft File: 5XRVuKiwV21vlPfgFPazTVqmxNc.mft (raw, json) Hash identifier: 4O05ukI2cpUZugKfHUVWcixHT2eVLKB6d2ECuvA45JU= Subject key identifier: 83:92:2A:A6:D3:73:88:08:1D:07:E2:39:AC:C6:86:18:D5:CB:1D:3A Authority key identifier: E5:74:55:B8:A8:B0:57:6D:6F:94:F7:E0:14:F6:B3:4D:5A:A6:C4:D7 Certificate issuer: /CN=e57455b8a8b0576d6f94f7e014f6b34d5aa6c4d7 Certificate serial: 019B435C11D154F8554327BDC8639DFC0FE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft Manifest number: 0445 Signing time: Mon 22 Dec 2025 00:01:05 +0000 Manifest this update: Mon 22 Dec 2025 00:01:05 +0000 Manifest next update: Tue 23 Dec 2025 00:01:05 +0000 Files and hashes: 1: 5XRVuKiwV21vlPfgFPazTVqmxNc.crl (hash: DZOWZI3bhhftQteoAp6fn6SB3r4EKZST9RS1c330AhU=) 2: G1CrAOOUPvyOGO4Vql-2-rT1nVU.roa (hash: CDahFDyxeYD+jrtMUR5mOx6DNugSU2LZoNFW5kfO9s4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5c:11:d1:54:f8:55:43:27:bd:c8:63:9d:fc:0f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e57455b8a8b0576d6f94f7e014f6b34d5aa6c4d7 Validity Not Before: Dec 22 00:01:05 2025 GMT Not After : Dec 23 00:01:05 2025 GMT Subject: CN=83922aa6d37388081d07e239acc68618d5cb1d3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e3:36:48:2b:b1:ac:75:c0:97:0f:83:c9:03: a2:e6:74:2d:61:ac:c6:f0:75:db:8c:5f:96:74:e4: 9d:9a:b1:05:1c:bf:ad:56:bd:b2:55:bb:b1:17:40: 0c:63:a9:2d:2c:f1:a7:cb:c7:74:26:75:58:07:84: 4b:e8:0a:15:f5:3b:1b:a3:08:1a:65:12:0b:88:79: 7c:d0:f3:d5:ff:cf:a6:13:7f:d8:b0:3a:47:b2:3a: 71:e0:6b:c3:f1:5b:58:e0:61:f8:71:52:56:ff:cd: e5:b7:e9:7c:10:2e:04:a4:c6:da:e6:9d:21:b3:4b: 02:d8:5f:46:96:8d:cc:07:71:13:10:a9:9b:25:01: f0:58:ac:65:e7:48:95:20:c0:25:3a:a3:11:4f:f5: 9d:22:62:ad:3f:61:2d:98:41:00:2d:5b:23:93:0e: f4:f2:7a:d4:ae:49:6b:23:54:09:89:99:0c:8e:a0: 16:8a:43:0e:42:73:e3:59:8f:d8:39:a3:f7:82:8d: b7:5f:ed:a7:a6:b6:98:f4:21:70:be:8c:08:07:c4: 1b:7e:76:b5:58:7b:27:6f:10:e1:76:66:30:b4:26: c9:14:23:33:45:4c:fc:11:21:12:fb:0a:fc:a9:65: fc:fe:6d:bf:75:b4:57:fa:35:51:d1:4a:14:ba:92: 6a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:92:2A:A6:D3:73:88:08:1D:07:E2:39:AC:C6:86:18:D5:CB:1D:3A X509v3 Authority Key Identifier: keyid:E5:74:55:B8:A8:B0:57:6D:6F:94:F7:E0:14:F6:B3:4D:5A:A6:C4:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:f5:f4:8b:d6:6a:63:02:f9:4f:5c:5d:ad:94:dd:c9:ab:f0: 9d:cf:ff:6c:68:15:91:ca:a5:57:1e:e0:17:44:9b:90:2d:4d: 7b:9f:64:c2:6f:b2:77:36:a3:21:5a:be:e8:8c:a1:6d:ad:83: 2c:cb:79:77:4b:c5:19:28:6c:8c:c3:3b:1f:ce:7d:ad:16:86: 0b:c7:e1:b4:f0:50:71:a2:65:48:af:f5:2a:d0:e5:df:97:ea: 23:bd:fe:e6:22:18:c3:5d:e9:04:f5:4f:ee:cd:8f:b2:b0:d1: 84:04:0d:02:02:10:bf:58:e5:e2:a2:b2:ef:38:85:00:85:29: 5a:a4:84:1c:49:36:a9:37:cb:47:bc:6f:e7:dc:8c:ff:e8:41: da:f2:e7:2f:35:37:02:6d:6e:ce:3b:2a:46:9d:1a:e7:8b:de: da:34:8f:a3:18:4d:ea:30:b2:f3:77:52:12:d0:62:57:6e:02: 07:d6:bc:f1:01:d6:5e:18:74:00:15:e6:7e:ad:c5:d6:b1:19: da:cf:f3:79:35:f6:3e:13:ee:7a:ec:3f:34:4c:7d:71:2a:06: 15:98:bf:a4:7a:2a:6a:56:d6:22:af:55:0b:e8:e5:cd:10:43: 6a:55:62:89:ed:aa:eb:b8:59:93:ed:80:be:fb:b7:1e:d0:4f: d3:ae:b4:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDXBHRVPhVQye9yGOd/A/gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NzQ1NWI4YThiMDU3NmQ2Zjk0ZjdlMDE0ZjZiMzRkNWFh NmM0ZDcwHhcNMjUxMjIyMDAwMTA1WhcNMjUxMjIzMDAwMTA1WjAzMTEwLwYDVQQD Eyg4MzkyMmFhNmQzNzM4ODA4MWQwN2UyMzlhY2M2ODYxOGQ1Y2IxZDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOM2SCuxrHXAlw+DyQOi5nQtYazG 8HXbjF+WdOSdmrEFHL+tVr2yVbuxF0AMY6ktLPGny8d0JnVYB4RL6AoV9Tsbowga ZRILiHl80PPV/8+mE3/YsDpHsjpx4GvD8VtY4GH4cVJW/83lt+l8EC4EpMba5p0h s0sC2F9Glo3MB3ETEKmbJQHwWKxl50iVIMAlOqMRT/WdImKtP2EtmEEALVsjkw70 8nrUrklrI1QJiZkMjqAWikMOQnPjWY/YOaP3go23X+2npraY9CFwvowIB8Qbfna1 WHsnbxDhdmYwtCbJFCMzRUz8ESES+wr8qWX8/m2/dbRX+jVR0UoUupJqywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIOSKqbTc4gIHQfiOazGhhjVyx06MB8GA1UdIwQY MBaAFOV0VbiosFdtb5T34BT2s01apsTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVhSVnVLaXdWMjF2bFBmZ0ZQYXpUVnFteE5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kNDk4ZTMtMGVhOS00MzE0LTk4NDkt MDAyMzNhZTUwYjUyLzEvNVhSVnVLaXdWMjF2bFBmZ0ZQYXpUVnFteE5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9kNDk4ZTMtMGVhOS00MzE0LTk4NDktMDAyMzNhZTUwYjUy LzEvNVhSVnVLaXdWMjF2bFBmZ0ZQYXpUVnFteE5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAfX0i9Zq YwL5T1xdrZTdyavwnc//bGgVkcqlVx7gF0SbkC1Ne59kwm+ydzajIVq+6Iyhba2D LMt5d0vFGShsjMM7H859rRaGC8fhtPBQcaJlSK/1KtDl35fqI73+5iIYw13pBPVP 7s2PsrDRhAQNAgIQv1jl4qKy7ziFAIUpWqSEHEk2qTfLR7xv59yM/+hB2vLnLzU3 Am1uzjsqRp0a54ve2jSPoxhN6jCy83dSEtBiV24CB9a88QHWXhh0ABXmfq3F1rEZ 2s/zeTX2PhPueuw/NEx9cSoGFZi/pHoqalbWIq9VC+jlzRBDalViie2q67hZk+2A vvu3HtBP0660rw== -----END CERTIFICATE-----Generated at Mon Dec 22 04:20:57 2025 by rpki-client