This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft File: 5MzXNQiptZmF1Vl4aOOl1ex0X14.mft (raw, json) Hash identifier: hTN7XFjiKR0T+0MezlxkUS8YSELS/IxqsBdeYGK+Amo= Subject key identifier: 64:6D:67:71:11:33:2A:64:73:53:06:B8:46:29:3C:4A:ED:73:A9:57 Authority key identifier: E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E Certificate issuer: /CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e Certificate serial: 019B10B87566EAD1C86F7012E5179F528C32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft Manifest number: 0F42 Signing time: Fri 12 Dec 2025 04:01:22 +0000 Manifest this update: Fri 12 Dec 2025 04:01:22 +0000 Manifest next update: Sat 13 Dec 2025 04:01:22 +0000 Files and hashes: 1: 5MzXNQiptZmF1Vl4aOOl1ex0X14.crl (hash: ueWYunjuj1I3ryPTrVBDeTJz0c9sDZSSB+R7QbtOxrA=) 2: 9cidng2JNpciqXWnAOhVR-xci3k.roa (hash: KdGn77knG5L66v7NxGPd44OS8+DeTlDe5QBcInKG3Yk=) 3: olWcwiaAoq2wbYuXrz1GVqOmILU.roa (hash: Elg7s5AYrUxQTxV0rajyo3IZzGiW80+xg0M4V3aItiA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 04:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:b8:75:66:ea:d1:c8:6f:70:12:e5:17:9f:52:8c:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e Validity Not Before: Dec 12 04:01:22 2025 GMT Not After : Dec 13 04:01:22 2025 GMT Subject: CN=646d677111332a64735306b846293c4aed73a957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:83:44:a9:f2:51:93:95:f9:ac:93:52:19:1e: b8:8e:a0:84:6c:b6:e5:a4:e5:83:69:f6:ab:1d:d4: 50:67:a5:45:df:0b:68:ba:a4:a8:4d:42:5d:8e:cf: 7a:7a:ab:63:60:7f:81:66:55:ea:df:9a:b1:01:36: 3b:6a:1d:5c:f0:f3:17:c1:f9:c1:d6:a5:b2:74:0e: f6:00:ad:2a:37:ff:c2:80:b4:58:a6:2b:b0:a8:d4: c6:3f:12:52:53:d6:d7:17:3f:11:df:c5:c6:bc:f8: 3e:e3:b0:ea:4a:46:4c:32:27:20:3e:b2:9f:d4:87: 11:78:08:0a:57:9b:12:97:58:bf:b6:1c:4e:5d:28: 7f:cb:5f:61:ec:59:6e:5f:b8:44:05:98:ea:e4:45: 0e:af:90:d5:70:ad:b3:1a:48:56:35:02:ff:a6:aa: 32:2e:ec:83:83:8b:c0:ec:bf:d5:0c:fa:6b:97:5c: 2e:cd:b8:ac:1c:e7:48:29:08:cf:fd:0b:4d:98:4d: 0c:d2:b3:b6:03:f0:cf:2b:93:f9:f3:23:1f:14:73: ab:0d:30:8f:1b:14:ad:ba:d7:06:c8:73:38:dc:e2: f0:17:98:36:96:c3:20:90:34:d1:da:1f:9a:0d:eb: c1:bc:5f:6e:d3:d1:00:4b:44:d9:01:52:e8:b0:bc: 8e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:6D:67:71:11:33:2A:64:73:53:06:B8:46:29:3C:4A:ED:73:A9:57 X509v3 Authority Key Identifier: keyid:E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:82:4d:43:bb:c4:38:50:fd:6b:40:a7:71:ab:af:9a:04:df: b3:b4:77:ec:37:23:22:0c:14:35:ea:4f:40:e4:3e:da:6b:02: 82:3d:9d:cc:ef:45:49:9a:fb:33:bb:3c:f0:69:2d:fc:52:c6: 3b:fc:ef:52:41:2e:75:6b:5b:98:df:92:c9:c5:f1:af:5a:1d: 3f:54:ff:7c:42:4c:8a:00:1d:8b:46:78:ef:61:a4:8f:c7:ea: 0a:53:8a:9a:af:7a:3b:d8:45:d4:6b:d0:d4:5e:c1:13:0e:a9: 21:4d:48:00:2a:56:20:4c:24:47:53:1d:81:24:da:8d:8d:6b: 60:b3:5c:08:5e:ec:30:a3:33:6d:cb:43:0b:fe:0d:4f:65:e0: 26:a3:9b:d2:23:76:20:36:02:f7:aa:34:52:db:23:8e:b2:f4: a0:65:df:5c:1c:d7:fb:ee:1f:6d:07:5c:53:c3:d0:b5:9c:f9: 13:39:58:42:62:9d:ec:92:53:b0:39:08:f5:58:15:aa:b5:98: 66:14:42:4d:9e:90:20:59:9e:19:42:b0:5f:55:73:18:fd:9f: cc:80:fb:7c:a7:95:a5:ea:ff:dc:62:d9:ee:7d:a4:4e:4d:67: 66:14:71:5d:11:fb:fd:17:7d:06:7b:54:2e:5a:4a:9f:6d:be: 94:02:3c:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQuHVm6tHIb3AS5RefUowyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0Y2NkNzM1MDhhOWI1OTk4NWQ1NTk3ODY4ZTNhNWQ1ZWM3 NDVmNWUwHhcNMjUxMjEyMDQwMTIyWhcNMjUxMjEzMDQwMTIyWjAzMTEwLwYDVQQD Eyg2NDZkNjc3MTExMzMyYTY0NzM1MzA2Yjg0NjI5M2M0YWVkNzNhOTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14NEqfJRk5X5rJNSGR64jqCEbLbl pOWDafarHdRQZ6VF3wtouqSoTUJdjs96eqtjYH+BZlXq35qxATY7ah1c8PMXwfnB 1qWydA72AK0qN//CgLRYpiuwqNTGPxJSU9bXFz8R38XGvPg+47DqSkZMMicgPrKf 1IcReAgKV5sSl1i/thxOXSh/y19h7FluX7hEBZjq5EUOr5DVcK2zGkhWNQL/pqoy LuyDg4vA7L/VDPprl1wuzbisHOdIKQjP/QtNmE0M0rO2A/DPK5P58yMfFHOrDTCP GxStutcGyHM43OLwF5g2lsMgkDTR2h+aDevBvF9u09EAS0TZAVLosLyOJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGRtZ3ERMypkc1MGuEYpPErtc6lXMB8GA1UdIwQY MBaAFOTM1zUIqbWZhdVZeGjjpdXsdF9eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU16WE5RaXB0Wm1GMVZsNGFPT2wxZXgwWDE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC80NTNhZWQtNzY0NS00NTlkLTg1ZDgt ODVkODBhNTQ0YmViLzEvNU16WE5RaXB0Wm1GMVZsNGFPT2wxZXgwWDE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC80NTNhZWQtNzY0NS00NTlkLTg1ZDgtODVkODBhNTQ0YmVi LzEvNU16WE5RaXB0Wm1GMVZsNGFPT2wxZXgwWDE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYIJNQ7vE OFD9a0CncauvmgTfs7R37DcjIgwUNepPQOQ+2msCgj2dzO9FSZr7M7s88Gkt/FLG O/zvUkEudWtbmN+SycXxr1odP1T/fEJMigAdi0Z472Gkj8fqClOKmq96O9hF1GvQ 1F7BEw6pIU1IACpWIEwkR1MdgSTajY1rYLNcCF7sMKMzbctDC/4NT2XgJqOb0iN2 IDYC96o0UtsjjrL0oGXfXBzX++4fbQdcU8PQtZz5EzlYQmKd7JJTsDkI9VgVqrWY ZhRCTZ6QIFmeGUKwX1VzGP2fzID7fKeVper/3GLZ7n2kTk1nZhRxXRH7/Rd9BntU LlpKn22+lAI8FQ== -----END CERTIFICATE-----Generated at Fri Dec 12 13:52:49 2025 by rpki-client