This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft File: 5I2jNbByU21Y5rfN9M2xZEW8vDM.mft (raw, json) Hash identifier: d10MeuCrFcvJNFJaCfuVLgONsOieBV24XVwRQrUpMDg= Subject key identifier: 4C:22:0C:7D:82:F9:C2:84:C9:6B:6D:D0:83:BA:4B:8F:7E:7F:64:3F Authority key identifier: E4:8D:A3:35:B0:72:53:6D:58:E6:B7:CD:F4:CD:B1:64:45:BC:BC:33 Certificate issuer: /CN=e48da335b072536d58e6b7cdf4cdb16445bcbc33 Certificate serial: 019B32315C5A43AF8E2DBA918AE630CDC7AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft Manifest number: 0843 Signing time: Thu 18 Dec 2025 16:00:54 +0000 Manifest this update: Thu 18 Dec 2025 16:00:54 +0000 Manifest next update: Fri 19 Dec 2025 16:00:54 +0000 Files and hashes: 1: 5I2jNbByU21Y5rfN9M2xZEW8vDM.crl (hash: tQjQc1/iA16KHf/voFDT53MV9IvoUPO7yiRfffO31n4=) 2: ysIsaLM09cg2MhKfd83ZPzLp9n4.roa (hash: Bh4BJiariQCaXX5PXErLYBqRPl/Hwd8mcol52yoHkJc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft rsync://rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 16:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:5c:5a:43:af:8e:2d:ba:91:8a:e6:30:cd:c7:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e48da335b072536d58e6b7cdf4cdb16445bcbc33 Validity Not Before: Dec 18 16:00:54 2025 GMT Not After : Dec 19 16:00:54 2025 GMT Subject: CN=4c220c7d82f9c284c96b6dd083ba4b8f7e7f643f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d3:66:c1:40:17:a4:33:22:fb:22:23:0c:c7: 3e:0b:c6:88:ba:83:ca:f9:74:63:dd:d4:0f:cc:c8: fd:ea:bf:03:d7:c3:17:7a:c8:44:c6:89:35:75:9e: ff:47:58:fc:c5:fc:66:ef:0a:ef:eb:f8:64:d8:05: 59:b1:d5:0e:38:1e:3f:4e:76:93:33:86:20:9c:5d: bf:dc:e1:1c:23:f5:0a:14:47:7a:5d:81:89:8b:26: c2:cd:46:88:26:aa:b0:a5:93:5c:07:ec:67:64:98: 03:4b:5c:a8:b8:84:1f:43:c1:e2:5d:22:73:a1:ff: d3:65:7b:71:3b:98:4b:8f:af:6e:76:da:9f:96:a2: 37:85:ad:24:08:cd:a7:7b:6b:36:0e:50:2d:0e:4d: 8a:be:3b:f7:5b:7b:75:a4:30:5f:cf:97:ab:63:41: 70:61:16:56:a2:44:64:91:ca:5e:24:8e:20:6c:4d: cd:f2:17:aa:e3:ed:0e:b1:c5:7a:fc:2d:7e:2c:1b: 7d:8f:d0:31:b0:6d:8a:53:1b:f1:23:5a:9f:34:5b: bc:e9:2f:61:04:ce:a8:e4:8f:59:d3:c3:9f:3e:62: da:fb:47:54:78:37:63:2d:94:2c:70:53:b3:94:04: 6a:ca:91:85:87:64:30:55:6b:b5:cd:2b:e1:16:ab: d1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:22:0C:7D:82:F9:C2:84:C9:6B:6D:D0:83:BA:4B:8F:7E:7F:64:3F X509v3 Authority Key Identifier: keyid:E4:8D:A3:35:B0:72:53:6D:58:E6:B7:CD:F4:CD:B1:64:45:BC:BC:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:cb:22:5c:b5:b7:bb:c9:0e:43:23:78:72:6f:db:a9:dd:09: d4:88:ea:e4:fa:4f:f4:15:f0:a4:0a:d9:30:69:81:56:f3:fc: 6f:fa:8b:7d:ac:1b:6e:c9:12:d3:34:22:d0:57:61:87:56:39: 56:e3:5f:35:80:02:84:b9:d5:09:81:18:1a:c5:89:ab:6a:dc: b6:fc:52:fc:4b:c5:65:c5:d0:6b:a5:ac:a8:ce:65:b5:31:c0: 1f:cc:2c:f3:a1:4a:62:fd:f5:d8:a3:20:4b:e0:cd:ba:06:fb: 34:55:e5:d0:7d:f4:b7:30:7e:ac:c8:c4:3e:aa:f5:d7:8f:b6: 94:56:bc:05:38:c8:27:c9:bd:7d:c7:02:35:7f:02:27:b3:c1: 09:59:a8:d8:d7:10:db:b5:c9:07:b3:49:46:78:83:0c:d5:66: 7b:fc:5c:2b:f5:cb:9a:7e:21:b3:99:33:81:0c:65:df:9c:9e: 72:5a:34:f8:a2:4b:4f:cb:8f:17:3c:c4:aa:f8:04:62:eb:5a: 8d:27:65:60:31:b0:ba:b5:66:57:da:11:29:33:c0:79:5b:1b: 7a:af:f9:ae:50:2e:64:44:e5:f3:72:9b:ec:c7:a4:1b:43:a6: 34:29:ab:0b:f8:ac:9e:e5:2d:ea:c9:f6:2a:d7:82:f8:d0:2f: ca:c5:86:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMVxaQ6+OLbqRiuYwzceqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0OGRhMzM1YjA3MjUzNmQ1OGU2YjdjZGY0Y2RiMTY0NDVi Y2JjMzMwHhcNMjUxMjE4MTYwMDU0WhcNMjUxMjE5MTYwMDU0WjAzMTEwLwYDVQQD Eyg0YzIyMGM3ZDgyZjljMjg0Yzk2YjZkZDA4M2JhNGI4ZjdlN2Y2NDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNNmwUAXpDMi+yIjDMc+C8aIuoPK +XRj3dQPzMj96r8D18MXeshExok1dZ7/R1j8xfxm7wrv6/hk2AVZsdUOOB4/TnaT M4YgnF2/3OEcI/UKFEd6XYGJiybCzUaIJqqwpZNcB+xnZJgDS1youIQfQ8HiXSJz of/TZXtxO5hLj69udtqflqI3ha0kCM2ne2s2DlAtDk2Kvjv3W3t1pDBfz5erY0Fw YRZWokRkkcpeJI4gbE3N8heq4+0OscV6/C1+LBt9j9AxsG2KUxvxI1qfNFu86S9h BM6o5I9Z08OfPmLa+0dUeDdjLZQscFOzlARqypGFh2QwVWu1zSvhFqvRxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEwiDH2C+cKEyWtt0IO6S49+f2Q/MB8GA1UdIwQY MBaAFOSNozWwclNtWOa3zfTNsWRFvLwzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUkyak5iQnlVMjFZNXJmTjlNMnhaRVc4dkRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC83OTUwOTgtYTJmMC00NzMzLTk3MDkt ZTZlYjkxOWQ3YTAyLzEvNUkyak5iQnlVMjFZNXJmTjlNMnhaRVc4dkRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC83OTUwOTgtYTJmMC00NzMzLTk3MDktZTZlYjkxOWQ3YTAy LzEvNUkyak5iQnlVMjFZNXJmTjlNMnhaRVc4dkRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK8siXLW3 u8kOQyN4cm/bqd0J1Ijq5PpP9BXwpArZMGmBVvP8b/qLfawbbskS0zQi0Fdhh1Y5 VuNfNYAChLnVCYEYGsWJq2rctvxS/EvFZcXQa6WsqM5ltTHAH8ws86FKYv312KMg S+DNugb7NFXl0H30tzB+rMjEPqr114+2lFa8BTjIJ8m9fccCNX8CJ7PBCVmo2NcQ 27XJB7NJRniDDNVme/xcK/XLmn4hs5kzgQxl35yeclo0+KJLT8uPFzzEqvgEYuta jSdlYDGwurVmV9oRKTPAeVsbeq/5rlAuZETl83Kb7MekG0OmNCmrC/isnuUt6sn2 KteC+NAvysWG4A== -----END CERTIFICATE-----Generated at Fri Dec 19 01:57:33 2025 by rpki-client