This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft File: 5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft (raw, json) Hash identifier: DFLWH5FExpsFYuyLh+uxbGGPxsti8W/33qzUdIpkfcU= Subject key identifier: 52:85:F5:04:02:28:4F:58:0E:3F:BC:1A:C4:EB:A2:19:41:DB:01:DE Authority key identifier: E7:1D:70:9D:8B:18:4C:5A:50:C9:43:1D:CC:AF:64:9B:C8:68:47:04 Certificate issuer: /CN=e71d709d8b184c5a50c9431dccaf649bc8684704 Certificate serial: 019B42EE403AA2C8330DB6129F8B1F6CB5CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 22:01:08 +0000 Manifest this update: Sun 21 Dec 2025 22:01:08 +0000 Manifest next update: Mon 22 Dec 2025 22:01:08 +0000 Files and hashes: 1: 5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl (hash: PHCkXWzzLrXQfno43knI5cYH5bQg0U1CnBcV58Ahxe4=) 2: qvfFT1waDERLpkfbuL979IFfQzo.roa (hash: paMjx2cHD10xNMb2RegQEWwQPemRR0QtwqJzV/kovDg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:40:3a:a2:c8:33:0d:b6:12:9f:8b:1f:6c:b5:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e71d709d8b184c5a50c9431dccaf649bc8684704 Validity Not Before: Dec 21 22:01:08 2025 GMT Not After : Dec 22 22:01:08 2025 GMT Subject: CN=5285f50402284f580e3fbc1ac4eba21941db01de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d6:bc:6c:36:70:16:60:5a:44:7d:bf:e4:40: 47:ab:58:5e:7e:b9:38:d1:f0:d1:49:46:ab:c4:a2: 23:2c:5d:81:2f:c0:a0:fe:22:a7:08:24:a2:5b:21: ac:c9:20:22:a8:d0:3e:3d:e5:3e:5b:d0:3e:24:a8: f0:82:35:b3:c5:85:9e:6a:01:00:4d:7a:ae:25:91: 3e:a3:08:de:1b:7b:ef:66:8f:09:73:0c:13:2c:99: aa:ea:10:d5:8f:23:91:7f:1d:27:90:9f:e7:89:3a: eb:23:ad:ca:00:7b:a6:66:af:4b:45:92:bc:82:0e: 42:30:13:dc:62:91:a6:12:c6:2e:b7:15:31:46:a6: 75:63:4e:b1:de:e9:f3:28:13:c3:87:64:9e:17:f7: f5:37:3e:f0:75:64:47:ce:6f:73:9b:27:9a:56:16: 60:69:03:d7:ae:1c:b5:eb:a1:66:3e:4d:bf:a2:ec: df:de:c0:cc:a1:02:c4:f6:38:10:e5:dc:1c:e9:ea: 8a:00:80:92:8a:44:d7:b1:02:7b:7a:02:2d:37:a2: b8:3b:cd:9f:ec:6b:4f:92:74:ad:40:dc:39:c9:84: 0a:a3:a6:42:c9:87:55:e1:72:28:23:94:de:1f:72: f9:c0:d0:72:d2:a9:fa:28:69:c5:f7:d1:c0:de:d8: 17:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:85:F5:04:02:28:4F:58:0E:3F:BC:1A:C4:EB:A2:19:41:DB:01:DE X509v3 Authority Key Identifier: keyid:E7:1D:70:9D:8B:18:4C:5A:50:C9:43:1D:CC:AF:64:9B:C8:68:47:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:0f:a1:91:65:ba:5f:15:61:82:98:72:11:a3:a5:26:c6:d9: 84:4d:99:ff:5a:38:69:ab:1a:61:86:35:9e:ae:b1:a4:c2:61: b8:ce:84:46:3e:2e:ea:da:5e:cd:9a:b3:8a:70:f1:55:66:b1: a7:b9:4c:1b:3a:30:b4:ed:26:54:ec:98:2f:7f:07:10:f5:e3: 69:98:75:83:ad:4d:18:4d:b3:30:e0:75:92:11:ff:51:f1:85: d5:81:1b:4f:97:c7:c2:81:3b:e8:4d:54:51:f4:d8:b2:af:61: 64:86:9d:14:06:ee:b1:2b:a7:0e:d2:e0:d8:6d:1e:af:4f:ba: e3:48:e5:3b:f9:83:67:55:7f:dc:13:dc:be:f0:8e:ec:3c:50: d0:10:41:f6:7b:9e:f9:e8:5a:11:2f:f2:a1:57:68:42:80:49: 7a:95:b9:cb:5f:d1:02:b5:7b:97:ac:49:72:f3:da:cb:ee:61: 34:52:5e:14:02:37:a6:8d:b8:be:b3:70:f8:20:92:e4:fe:8f: 2a:ae:26:40:4f:c3:b5:2d:6d:dc:57:8d:9a:c9:46:d2:29:b8: 45:c0:ce:b2:a1:3f:db:ac:9a:ea:fc:2c:1f:74:bb:87:d6:f5: 49:80:e7:19:1a:16:e5:8f:35:e2:a1:47:6d:07:a6:b4:f9:2b: 23:61:78:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7kA6osgzDbYSn4sfbLXOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3MWQ3MDlkOGIxODRjNWE1MGM5NDMxZGNjYWY2NDliYzg2 ODQ3MDQwHhcNMjUxMjIxMjIwMTA4WhcNMjUxMjIyMjIwMTA4WjAzMTEwLwYDVQQD Eyg1Mjg1ZjUwNDAyMjg0ZjU4MGUzZmJjMWFjNGViYTIxOTQxZGIwMWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuda8bDZwFmBaRH2/5EBHq1hefrk4 0fDRSUarxKIjLF2BL8Cg/iKnCCSiWyGsySAiqNA+PeU+W9A+JKjwgjWzxYWeagEA TXquJZE+owjeG3vvZo8JcwwTLJmq6hDVjyORfx0nkJ/niTrrI63KAHumZq9LRZK8 gg5CMBPcYpGmEsYutxUxRqZ1Y06x3unzKBPDh2SeF/f1Nz7wdWRHzm9zmyeaVhZg aQPXrhy166FmPk2/ouzf3sDMoQLE9jgQ5dwc6eqKAICSikTXsQJ7egItN6K4O82f 7GtPknStQNw5yYQKo6ZCyYdV4XIoI5TeH3L5wNBy0qn6KGnF99HA3tgXUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFKF9QQCKE9YDj+8GsTrohlB2wHeMB8GA1UdIwQY MBaAFOcdcJ2LGExaUMlDHcyvZJvIaEcEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXgxd25Zc1lURnBReVVNZHpLOWttOGhvUndRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS80Nzk5ZjYtNzY1Zi00YWQyLThjNDMt MWM1YjEwMTJkMmMzLzEvNXgxd25Zc1lURnBReVVNZHpLOWttOGhvUndRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS80Nzk5ZjYtNzY1Zi00YWQyLThjNDMtMWM1YjEwMTJkMmMz LzEvNXgxd25Zc1lURnBReVVNZHpLOWttOGhvUndRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARg+hkWW6 XxVhgphyEaOlJsbZhE2Z/1o4aasaYYY1nq6xpMJhuM6ERj4u6tpezZqzinDxVWax p7lMGzowtO0mVOyYL38HEPXjaZh1g61NGE2zMOB1khH/UfGF1YEbT5fHwoE76E1U UfTYsq9hZIadFAbusSunDtLg2G0er0+640jlO/mDZ1V/3BPcvvCO7DxQ0BBB9nue +ehaES/yoVdoQoBJepW5y1/RArV7l6xJcvPay+5hNFJeFAI3po24vrNw+CCS5P6P Kq4mQE/DtS1t3FeNmslG0im4RcDOsqE/26ya6vwsH3S7h9b1SYDnGRoW5Y814qFH bQemtPkrI2F4IA== -----END CERTIFICATE-----Generated at Mon Dec 22 07:21:14 2025 by rpki-client