This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft File: 5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft (raw, json) Hash identifier: UJfAsKLd32RAJMfe8gk3lRGHAswQHswHQlvwROWz5KY= Subject key identifier: 8C:53:CC:4F:C6:CE:E4:7C:1B:9D:33:32:60:05:AF:13:38:44:B2:1C Authority key identifier: E4:F5:17:41:DF:13:6F:93:89:25:4E:FD:E4:BA:9A:DC:FB:0D:E6:BF Certificate issuer: /CN=e4f51741df136f9389254efde4ba9adcfb0de6bf Certificate serial: 019B126FFE9C5B5448513E9423986A52BB37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft Manifest number: 07FD Signing time: Fri 12 Dec 2025 12:01:28 +0000 Manifest this update: Fri 12 Dec 2025 12:01:28 +0000 Manifest next update: Sat 13 Dec 2025 12:01:28 +0000 Files and hashes: 1: 00lUHR0HsWF62e0OhdTMmz1D8cI.roa (hash: 7/l5GLFu9biLRhRjYyy3+K05xs5xfnn4gHwWEjQvlNY=) 2: 5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl (hash: HV2mOp14kHCEZCe8StTw850g95//pJ2HAoezDxNx1po=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:6f:fe:9c:5b:54:48:51:3e:94:23:98:6a:52:bb:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4f51741df136f9389254efde4ba9adcfb0de6bf Validity Not Before: Dec 12 12:01:28 2025 GMT Not After : Dec 13 12:01:28 2025 GMT Subject: CN=8c53cc4fc6cee47c1b9d33326005af133844b21c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:22:ad:e4:a1:64:04:cb:1e:2f:21:2a:ff:fc: 82:9c:e4:75:65:dd:72:f1:1d:0b:c6:81:97:f3:4f: 6d:bc:88:df:6f:cf:b1:12:01:3a:f7:1e:2a:3a:09: 9f:4b:c4:21:69:cc:40:27:85:dc:3e:c3:ba:73:3e: 9d:e1:0a:07:e2:50:eb:b9:c9:79:37:e0:fd:75:33: bd:93:24:ae:0e:6c:bd:24:43:6e:4c:94:e5:f2:20: 0d:ab:6b:3c:31:ff:ec:ba:00:df:9e:fa:15:27:fe: 6f:aa:c2:a7:f3:39:02:2d:1d:21:1c:ac:0d:f7:4d: 2d:a7:4d:5d:0a:30:9a:78:6a:61:98:ab:41:8c:8a: 14:c7:a8:d9:8a:49:be:35:02:18:ad:9c:21:79:f6: e6:06:31:e0:cf:48:f2:ad:88:b6:67:06:2a:ab:43: 0c:3f:ea:49:b8:e7:33:93:72:b4:34:cf:f3:d0:11: a6:0e:aa:55:b2:28:45:60:fe:cf:75:3f:00:5d:ba: 44:72:fc:2d:4c:3f:86:75:af:60:55:2e:68:a1:94: 8c:ed:b3:a7:68:79:15:44:b3:1f:f1:10:71:da:dd: 48:9b:dd:e2:4f:a2:68:b6:33:a1:a1:08:8e:52:6d: 3d:b9:e5:bf:26:69:33:49:fa:e6:56:1e:73:10:70: 6b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:53:CC:4F:C6:CE:E4:7C:1B:9D:33:32:60:05:AF:13:38:44:B2:1C X509v3 Authority Key Identifier: keyid:E4:F5:17:41:DF:13:6F:93:89:25:4E:FD:E4:BA:9A:DC:FB:0D:E6:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:57:49:e5:0e:47:86:1a:fc:70:2c:0b:fc:f7:e8:c0:bb:27: 46:2a:1e:c5:bd:d2:76:62:cb:34:e5:9f:3d:a0:e1:2d:ff:c3: 85:b2:1f:a3:e3:26:5f:c3:1f:4c:1c:5b:f3:19:3e:c4:ae:ff: 06:03:ef:b1:ad:d0:46:0d:a0:3d:21:56:0b:2c:87:73:32:82: eb:3c:11:05:e4:da:c4:10:f3:48:a4:ea:62:3d:ca:85:60:5a: f5:e3:14:6f:55:78:a8:5b:c2:7f:41:82:cb:39:be:24:0e:c4: aa:08:3b:9f:70:2e:71:aa:51:4c:02:65:5d:30:28:38:e6:27: 18:6d:d2:e3:7e:97:22:fb:c8:f9:99:80:0c:ad:b6:89:93:32: 34:c8:ae:97:14:1c:8d:55:a6:a9:0d:96:53:89:45:7a:24:9b: de:3e:3d:7e:92:b2:0d:a1:1f:f8:43:8a:02:21:1b:83:58:41: 37:48:96:ac:bf:19:9c:4e:ac:73:5e:4d:a9:d2:35:03:df:3d: ed:1b:9b:9d:eb:b7:40:cd:85:e1:ae:33:22:d9:5f:3f:f0:77: 89:35:ff:73:47:c2:3c:ea:61:76:91:f0:58:98:e0:23:d1:b5: a1:c0:6d:74:d5:e4:cc:bc:a2:0f:10:05:e6:a5:a6:99:5d:da: 88:0e:b7:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSb/6cW1RIUT6UI5hqUrs3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ZjUxNzQxZGYxMzZmOTM4OTI1NGVmZGU0YmE5YWRjZmIw ZGU2YmYwHhcNMjUxMjEyMTIwMTI4WhcNMjUxMjEzMTIwMTI4WjAzMTEwLwYDVQQD Eyg4YzUzY2M0ZmM2Y2VlNDdjMWI5ZDMzMzI2MDA1YWYxMzM4NDRiMjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiKt5KFkBMseLyEq//yCnOR1Zd1y 8R0LxoGX809tvIjfb8+xEgE69x4qOgmfS8QhacxAJ4XcPsO6cz6d4QoH4lDrucl5 N+D9dTO9kySuDmy9JENuTJTl8iANq2s8Mf/sugDfnvoVJ/5vqsKn8zkCLR0hHKwN 900tp01dCjCaeGphmKtBjIoUx6jZikm+NQIYrZwhefbmBjHgz0jyrYi2ZwYqq0MM P+pJuOczk3K0NM/z0BGmDqpVsihFYP7PdT8AXbpEcvwtTD+Gda9gVS5ooZSM7bOn aHkVRLMf8RBx2t1Im93iT6JotjOhoQiOUm09ueW/JmkzSfrmVh5zEHBrJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIxTzE/GzuR8G50zMmAFrxM4RLIcMB8GA1UdIwQY MBaAFOT1F0HfE2+TiSVO/eS6mtz7Dea/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVBVWFFkOFRiNU9KSlU3OTVMcWEzUHNONXI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hZjFiOTMtZDZlMy00NTNkLTkxY2Mt NDFkNzM1YmQ4YzAzLzEvNVBVWFFkOFRiNU9KSlU3OTVMcWEzUHNONXI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hZjFiOTMtZDZlMy00NTNkLTkxY2MtNDFkNzM1YmQ4YzAz LzEvNVBVWFFkOFRiNU9KSlU3OTVMcWEzUHNONXI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARFdJ5Q5H hhr8cCwL/PfowLsnRioexb3SdmLLNOWfPaDhLf/DhbIfo+MmX8MfTBxb8xk+xK7/ BgPvsa3QRg2gPSFWCyyHczKC6zwRBeTaxBDzSKTqYj3KhWBa9eMUb1V4qFvCf0GC yzm+JA7Eqgg7n3AucapRTAJlXTAoOOYnGG3S436XIvvI+ZmADK22iZMyNMiulxQc jVWmqQ2WU4lFeiSb3j49fpKyDaEf+EOKAiEbg1hBN0iWrL8ZnE6sc15NqdI1A989 7Rubneu3QM2F4a4zItlfP/B3iTX/c0fCPOphdpHwWJjgI9G1ocBtdNXkzLyiDxAF 5qWmmV3aiA63xg== -----END CERTIFICATE-----Generated at Fri Dec 12 17:51:48 2025 by rpki-client