This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.mft File: 5BeYo-5J1SPojhrRA-Y-Eh2E0bU.mft (raw, json) Hash identifier: iGMqtHRixe7HYB9SXOtlqw+yqNnoC4aISGTaumfaocY= Subject key identifier: DB:86:40:6B:F6:48:BC:23:FE:6A:A5:3C:3C:6E:84:A7:C4:F2:D5:AC Authority key identifier: E4:17:98:A3:EE:49:D5:23:E8:8E:1A:D1:03:E6:3E:12:1D:84:D1:B5 Certificate issuer: /CN=e41798a3ee49d523e88e1ad103e63e121d84d1b5 Certificate serial: 019AF6F7F3F32C64AEC67647388A46F74DAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.mft Manifest number: 0E5B Signing time: Sun 07 Dec 2025 04:00:36 +0000 Manifest this update: Sun 07 Dec 2025 04:00:36 +0000 Manifest next update: Mon 08 Dec 2025 04:00:36 +0000 Files and hashes: 1: 5BeYo-5J1SPojhrRA-Y-Eh2E0bU.crl (hash: /53yx4wg9UDuHlkx3PQ7gUxH6lzsLYb/N6/tsv+sGs4=) 2: ojpo3C_o4XkLEMUun-AN5dsCn0c.roa (hash: KD+YKxAdab+/MSSFUGcDgdX/M8ezVTZqmPoRZBNH630=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.crl rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.mft rsync://rpki.ripe.net/repository/DEFAULT/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f7:f3:f3:2c:64:ae:c6:76:47:38:8a:46:f7:4d:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e41798a3ee49d523e88e1ad103e63e121d84d1b5 Validity Not Before: Dec 7 04:00:36 2025 GMT Not After : Dec 8 04:00:36 2025 GMT Subject: CN=db86406bf648bc23fe6aa53c3c6e84a7c4f2d5ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:19:19:68:a4:70:6f:c8:3f:4b:0f:3d:b2:a2: db:40:0e:bf:ad:43:60:51:7d:73:95:ea:14:75:b6: f9:14:fa:16:d8:b9:a1:a5:3a:0b:68:ab:cd:7c:da: 30:78:49:ce:c5:ab:90:43:bb:1e:d5:4d:fb:5a:16: 45:ed:8a:6e:8c:42:7b:4e:eb:38:00:9b:df:96:1f: 6d:19:6b:7d:69:1a:0a:4d:3b:cb:63:5d:1a:24:f2: bd:9f:67:af:a8:b3:3d:db:d7:b4:a0:e2:4f:57:0d: d4:69:83:85:e8:5e:e3:24:2a:1d:68:f9:61:5b:34: 17:9a:de:61:ec:26:11:6e:67:e9:c8:d8:6a:41:e6: 84:5c:c6:71:be:a1:24:c5:77:26:c1:1f:32:8f:e2: 82:9d:8e:b1:5a:50:eb:d4:b3:f1:2c:78:01:ac:95: d8:66:9e:60:ee:76:e4:82:fc:de:43:93:a4:fb:74: 0c:28:2b:ca:c9:a7:dc:c6:85:b6:9a:96:91:e4:9e: 05:2f:a4:ff:fe:ce:7e:6c:ab:f7:45:14:2a:42:da: 19:21:c4:ca:fd:8d:79:e8:40:70:ba:31:f7:f8:37: 78:11:7e:57:1b:5a:11:ae:7c:1e:c4:82:f4:06:be: c1:06:ac:65:c2:e8:af:44:9d:93:20:67:42:f3:ea: 11:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:86:40:6B:F6:48:BC:23:FE:6A:A5:3C:3C:6E:84:A7:C4:F2:D5:AC X509v3 Authority Key Identifier: keyid:E4:17:98:A3:EE:49:D5:23:E8:8E:1A:D1:03:E6:3E:12:1D:84:D1:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:d7:79:b3:7f:57:2e:f5:d6:d9:10:ff:60:39:3d:70:9c:bb: 11:9c:68:af:61:6e:96:f5:f7:63:9a:b9:69:46:13:cd:e6:00: 9e:24:d6:88:b2:f3:84:3b:c2:e3:56:d7:ae:c7:07:6a:2a:1d: 72:29:70:3b:cf:54:46:56:ed:62:c5:ae:16:f2:19:97:00:7b: 50:a0:10:a8:2d:3d:cf:bf:ad:ef:73:bb:20:dc:b9:d0:a1:68: a8:6a:1e:50:be:1e:37:f0:58:e5:76:d6:46:7d:48:be:9c:56: e8:da:e1:df:27:b6:4f:eb:20:18:be:68:7f:19:40:17:c5:40: b2:8d:b0:be:81:64:fb:c1:30:4e:22:d3:6d:29:34:b2:13:d1: a5:57:1a:23:a9:f7:f4:ea:64:69:9c:d0:ae:a9:d3:43:2d:78: b6:f7:6b:62:a4:b1:ed:fe:ef:99:6f:f7:61:68:7e:43:54:6b: 8c:48:53:1f:04:bd:75:6b:5d:11:3b:54:55:6f:6c:3d:47:12: 8a:72:69:a4:68:7e:83:6c:a7:72:b2:09:81:e3:60:e3:7c:cf: eb:bd:ab:9c:56:4c:f5:82:56:e4:b3:2b:45:2a:a6:6f:6a:16: 27:b8:75:91:52:ea:8a:8a:ab:4a:c9:4a:e5:b2:6a:80:1f:5f: f2:8a:f7:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr29/PzLGSuxnZHOIpG902vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0MTc5OGEzZWU0OWQ1MjNlODhlMWFkMTAzZTYzZTEyMWQ4 NGQxYjUwHhcNMjUxMjA3MDQwMDM2WhcNMjUxMjA4MDQwMDM2WjAzMTEwLwYDVQQD EyhkYjg2NDA2YmY2NDhiYzIzZmU2YWE1M2MzYzZlODRhN2M0ZjJkNWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohkZaKRwb8g/Sw89sqLbQA6/rUNg UX1zleoUdbb5FPoW2LmhpToLaKvNfNoweEnOxauQQ7se1U37WhZF7YpujEJ7Tus4 AJvflh9tGWt9aRoKTTvLY10aJPK9n2evqLM929e0oOJPVw3UaYOF6F7jJCodaPlh WzQXmt5h7CYRbmfpyNhqQeaEXMZxvqEkxXcmwR8yj+KCnY6xWlDr1LPxLHgBrJXY Zp5g7nbkgvzeQ5Ok+3QMKCvKyafcxoW2mpaR5J4FL6T//s5+bKv3RRQqQtoZIcTK /Y156EBwujH3+Dd4EX5XG1oRrnwexIL0Br7BBqxlwuivRJ2TIGdC8+oR+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNuGQGv2SLwj/mqlPDxuhKfE8tWsMB8GA1UdIwQY MBaAFOQXmKPuSdUj6I4a0QPmPhIdhNG1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUJlWW8tNUoxU1BvamhyUkEtWS1FaDJFMGJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8xY2E0NjktMjA4Ni00YzRjLWEwYjgt OGQwODU3YTFhNGQ3LzEvNUJlWW8tNUoxU1BvamhyUkEtWS1FaDJFMGJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC8xY2E0NjktMjA4Ni00YzRjLWEwYjgtOGQwODU3YTFhNGQ3 LzEvNUJlWW8tNUoxU1BvamhyUkEtWS1FaDJFMGJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAStd5s39X LvXW2RD/YDk9cJy7EZxor2FulvX3Y5q5aUYTzeYAniTWiLLzhDvC41bXrscHaiod cilwO89URlbtYsWuFvIZlwB7UKAQqC09z7+t73O7INy50KFoqGoeUL4eN/BY5XbW Rn1IvpxW6Nrh3ye2T+sgGL5ofxlAF8VAso2wvoFk+8EwTiLTbSk0shPRpVcaI6n3 9OpkaZzQrqnTQy14tvdrYqSx7f7vmW/3YWh+Q1RrjEhTHwS9dWtdETtUVW9sPUcS inJppGh+g2yncrIJgeNg43zP672rnFZM9YJW5LMrRSqmb2oWJ7h1kVLqioqrSslK 5bJqgB9f8or3oQ== -----END CERTIFICATE-----Generated at Sun Dec 7 07:25:40 2025 by rpki-client