This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft File: m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft (raw, json) Hash identifier: cYjkZr4NzFGQE6ftQZ2yOlvQE0oBYtMsrG8TLaTCjHs= Subject key identifier: 1E:26:43:A5:5A:88:0B:E9:E1:FF:03:D4:1B:71:34:A1:F0:EA:BD:16 Authority key identifier: 9B:98:6F:C6:46:FD:A0:CF:14:5E:10:D9:3F:E1:B1:0E:B0:DE:E6:25 Certificate issuer: /CN=9b986fc646fda0cf145e10d93fe1b10eb0dee625 Certificate serial: 019B4A041ED415F02893990001157468DD2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft Manifest number: 1790 Signing time: Tue 23 Dec 2025 07:02:22 +0000 Manifest this update: Tue 23 Dec 2025 07:02:22 +0000 Manifest next update: Wed 24 Dec 2025 07:02:22 +0000 Files and hashes: 1: OiM9JuUPwUTx93F-WTm9SJAc1-E.roa (hash: U1Ux7NpyE3Jd/TFpdNZuyjTyOl5BfpF5UVtjtoD5dLc=) 2: S8dvvAfNFMFvLZJQtmEgT4xz-WM.roa (hash: jr3hzHwhC0clqyZ9qyCXuid3+6HUV82zq4hGikAgUEw=) 3: m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl (hash: /KLugHVKBQgvcyAJMYKt9HyM5Urj/IWXAF0trlUlpOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:04:1e:d4:15:f0:28:93:99:00:01:15:74:68:dd:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b986fc646fda0cf145e10d93fe1b10eb0dee625 Validity Not Before: Dec 23 07:02:22 2025 GMT Not After : Dec 24 07:02:22 2025 GMT Subject: CN=1e2643a55a880be9e1ff03d41b7134a1f0eabd16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:11:53:40:e4:bc:8a:c3:74:0d:84:70:77:ef: a7:af:48:c9:35:81:67:82:15:91:0e:83:6e:3b:a3: 27:03:99:bb:d3:d3:70:43:cc:e4:91:bb:37:0f:88: 4a:73:44:0c:d9:22:23:48:24:42:5f:f0:74:51:d2: 7b:74:5c:2b:ed:ac:2b:f9:48:31:92:56:4e:51:7b: 77:0f:8a:38:de:34:87:c7:f1:7b:5d:c6:aa:bc:d9: 73:b8:29:30:e6:2e:eb:3e:29:b2:eb:38:a8:15:35: 57:3d:56:70:77:65:20:90:1f:22:14:a2:ab:38:a1: 18:44:10:07:35:d1:c9:65:36:88:a6:05:73:07:64: ef:8a:5d:ec:53:4a:db:97:92:37:72:0b:f6:40:39: 18:cf:20:2c:3c:93:1e:9c:bc:e3:75:03:c9:21:f8: d3:7d:3b:54:bd:e1:dc:7d:fa:0a:e2:5b:52:c1:e9: 13:de:5c:d8:eb:0b:72:89:48:81:c7:a6:60:4f:33: 7a:b7:a5:90:c9:ee:87:08:ff:41:3c:3f:e6:8c:3f: 47:e6:4c:f8:01:b1:3e:d0:9e:cd:85:00:87:f8:26: 7e:c5:13:13:0d:3f:ed:52:48:7b:24:74:b7:3e:da: cc:44:2f:4f:d4:2e:4f:a9:0c:5b:a9:9e:12:e8:b3: c0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:26:43:A5:5A:88:0B:E9:E1:FF:03:D4:1B:71:34:A1:F0:EA:BD:16 X509v3 Authority Key Identifier: keyid:9B:98:6F:C6:46:FD:A0:CF:14:5E:10:D9:3F:E1:B1:0E:B0:DE:E6:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:e8:9b:4f:7f:87:f7:0b:3d:1d:c2:91:fc:11:4c:f1:30:75: 13:1e:40:ab:fd:6b:cf:39:c7:06:9b:22:69:42:b0:7c:ff:b1: dd:b0:51:db:54:b1:bf:22:2d:71:24:33:36:82:26:ff:d7:89: 0c:76:55:20:58:a9:f5:88:4c:f1:9d:03:94:d8:3a:f3:27:5a: 17:75:c7:72:51:0e:1e:50:e2:cd:40:68:94:2b:bc:33:10:0a: 00:e5:12:b8:57:8e:02:58:6d:e6:b9:93:df:bf:b3:7a:93:77: 04:03:c0:7a:8c:49:ef:55:6f:7e:d6:3c:45:89:2b:f4:be:e4: 87:a3:a0:52:f7:5e:f9:db:94:df:5a:9d:18:2d:df:02:c3:9c: e2:fb:92:e4:a5:59:fa:a5:ec:9f:d8:85:e4:ad:36:5f:80:94: 26:62:ec:f1:0b:11:4a:4d:d4:49:c3:9a:05:75:c2:cb:18:af: c2:29:e3:0f:ba:27:2e:72:4f:39:28:8b:21:0e:96:9a:19:f9: 30:95:55:c6:51:96:7b:0c:cf:5d:c2:33:b8:c2:0d:5c:60:5f: 49:4e:47:11:1b:93:f7:7d:05:8a:15:40:8a:a3:95:38:b1:ec: 9e:4d:94:37:b4:d3:d8:10:a9:3b:8d:22:68:dc:3a:1a:2f:85: a8:f6:78:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKBB7UFfAok5kAARV0aN0vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliOTg2ZmM2NDZmZGEwY2YxNDVlMTBkOTNmZTFiMTBlYjBk ZWU2MjUwHhcNMjUxMjIzMDcwMjIyWhcNMjUxMjI0MDcwMjIyWjAzMTEwLwYDVQQD EygxZTI2NDNhNTVhODgwYmU5ZTFmZjAzZDQxYjcxMzRhMWYwZWFiZDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6xFTQOS8isN0DYRwd++nr0jJNYFn ghWRDoNuO6MnA5m709NwQ8zkkbs3D4hKc0QM2SIjSCRCX/B0UdJ7dFwr7awr+Ugx klZOUXt3D4o43jSHx/F7XcaqvNlzuCkw5i7rPimy6zioFTVXPVZwd2UgkB8iFKKr OKEYRBAHNdHJZTaIpgVzB2Tvil3sU0rbl5I3cgv2QDkYzyAsPJMenLzjdQPJIfjT fTtUveHcffoK4ltSwekT3lzY6wtyiUiBx6ZgTzN6t6WQye6HCP9BPD/mjD9H5kz4 AbE+0J7NhQCH+CZ+xRMTDT/tUkh7JHS3PtrMRC9P1C5PqQxbqZ4S6LPAQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB4mQ6VaiAvp4f8D1BtxNKHw6r0WMB8GA1UdIwQY MBaAFJuYb8ZG/aDPFF4Q2T/hsQ6w3uYlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTVodnhrYjlvTThVWGhEWlAtR3hEckRlNWlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8zNGJiNzctYzg0Ny00MTExLTk2ZjMt YmRkNWNjNDQwMzk2LzEvbTVodnhrYjlvTThVWGhEWlAtR3hEckRlNWlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS8zNGJiNzctYzg0Ny00MTExLTk2ZjMtYmRkNWNjNDQwMzk2 LzEvbTVodnhrYjlvTThVWGhEWlAtR3hEckRlNWlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADeibT3+H 9ws9HcKR/BFM8TB1Ex5Aq/1rzznHBpsiaUKwfP+x3bBR21SxvyItcSQzNoIm/9eJ DHZVIFip9YhM8Z0DlNg68ydaF3XHclEOHlDizUBolCu8MxAKAOUSuFeOAlht5rmT 37+zepN3BAPAeoxJ71VvftY8RYkr9L7kh6OgUvde+duU31qdGC3fAsOc4vuS5KVZ +qXsn9iF5K02X4CUJmLs8QsRSk3UScOaBXXCyxivwinjD7onLnJPOSiLIQ6Wmhn5 MJVVxlGWewzPXcIzuMINXGBfSU5HERuT930FihVAiqOVOLHsnk2UN7TT2BCpO40i aNw6Gi+FqPZ4UQ== -----END CERTIFICATE-----Generated at Tue Dec 23 16:43:26 2025 by rpki-client