This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.mft File: 5M1uYcFOg5EAWoF7JyL3xKgeuZM.mft (raw, json) Hash identifier: H08I4hGTugOCcB9blXOw09BJoPvZq+MCQYidYF0YXk8= Subject key identifier: 1A:E2:09:A0:97:D2:D3:F6:01:3A:5B:11:41:2B:FD:1B:49:30:51:E1 Authority key identifier: E4:CD:6E:61:C1:4E:83:91:00:5A:81:7B:27:22:F7:C4:A8:1E:B9:93 Certificate issuer: /CN=e4cd6e61c14e8391005a817b2722f7c4a81eb993 Certificate serial: 019B25BF4122D9FA553E931E48F75BC8A831 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5M1uYcFOg5EAWoF7JyL3xKgeuZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.mft Manifest number: 0A34 Signing time: Tue 16 Dec 2025 06:00:49 +0000 Manifest this update: Tue 16 Dec 2025 06:00:49 +0000 Manifest next update: Wed 17 Dec 2025 06:00:49 +0000 Files and hashes: 1: 5M1uYcFOg5EAWoF7JyL3xKgeuZM.crl (hash: ESioN5NAvKhbRdnPfKcqR0GsjKxxa/jx8xwziukKdhA=) 2: pLApfkxIdjxoT9Fus2V1e6urFrI.roa (hash: vf/DF5zyaMPjk4SS8zEJvZOPKo0v68Ai1w0hvPkh9bQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.crl rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.mft rsync://rpki.ripe.net/repository/DEFAULT/5M1uYcFOg5EAWoF7JyL3xKgeuZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 06:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:bf:41:22:d9:fa:55:3e:93:1e:48:f7:5b:c8:a8:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4cd6e61c14e8391005a817b2722f7c4a81eb993 Validity Not Before: Dec 16 06:00:49 2025 GMT Not After : Dec 17 06:00:49 2025 GMT Subject: CN=1ae209a097d2d3f6013a5b11412bfd1b493051e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b5:6a:f9:0a:ba:46:dc:2e:1f:07:cc:e7:5d: 54:e4:bd:32:1b:a0:b6:44:f3:91:79:ce:24:5d:b1: e0:fa:1d:20:69:0b:7c:b7:a8:72:50:2b:c0:f8:51: dd:a0:57:ac:6a:ed:7a:fb:c5:f1:47:6e:15:ca:47: a9:6a:e5:a3:91:21:78:6b:55:f7:38:b7:98:29:3a: c2:45:54:64:f1:a7:e2:54:55:c5:96:08:21:fe:89: 4b:85:9a:41:27:39:d3:f0:4b:6b:f6:3b:c7:8f:ae: ba:3c:aa:fd:a4:bd:16:17:5c:0d:34:3b:91:df:d0: d5:1f:9c:78:0e:02:61:86:50:db:f8:8a:0e:c3:e8: fa:d6:a0:6e:a4:2e:bb:6e:68:40:05:13:20:ea:0a: 3b:05:14:27:d3:da:1f:b0:09:40:e5:fb:3b:77:fd: b2:cc:6e:10:2f:a2:6b:0b:50:22:e0:7a:83:43:44: f4:00:20:ea:63:a2:66:5d:f9:56:bb:34:1f:fe:03: 12:82:a5:ce:a0:e3:27:f2:b2:2e:64:37:1c:80:21: 76:96:44:7f:64:cf:f9:4a:82:66:9e:db:be:6d:da: 6c:3a:c4:db:55:8d:47:2c:a7:39:ad:e0:37:37:5c: 35:1a:41:10:23:e5:7a:0d:af:0a:9f:b4:71:11:c0: fc:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E2:09:A0:97:D2:D3:F6:01:3A:5B:11:41:2B:FD:1B:49:30:51:E1 X509v3 Authority Key Identifier: keyid:E4:CD:6E:61:C1:4E:83:91:00:5A:81:7B:27:22:F7:C4:A8:1E:B9:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5M1uYcFOg5EAWoF7JyL3xKgeuZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:38:cd:12:fd:e6:fa:39:d7:65:50:4f:3b:6d:60:2a:2e:5d: 3d:d2:de:fa:35:ce:48:f9:b7:3d:9b:27:32:4c:e2:cf:72:45: 94:3b:62:91:6b:f0:72:1b:03:6a:0a:bf:dc:59:e4:6c:55:54: cf:27:18:08:2f:45:d0:d1:1f:44:9a:79:98:5c:e9:e8:17:f4: f9:39:3c:5b:bd:04:17:ca:fd:73:cd:da:94:dd:fe:dc:72:b1: c4:dc:32:12:b7:17:f3:7e:aa:d5:06:05:a6:b2:cb:7b:da:cf: 23:18:be:2c:04:bf:b5:66:a7:37:1c:fe:d7:0f:c7:fd:18:a4: 21:a8:2d:2d:dd:d5:15:9d:6b:d3:73:49:41:ee:bb:83:57:93: 04:07:9c:07:4b:60:aa:d1:4c:d2:5c:4d:58:2e:59:7c:81:44: 46:a2:ca:70:78:7d:28:44:d7:90:ed:21:42:a1:e8:11:19:dd: 21:1c:d8:9c:4b:17:7a:13:ba:04:39:17:f4:9c:72:a8:44:38: e1:7a:84:82:a1:a3:82:1f:6f:66:6b:4a:31:5c:8a:1f:29:6b: 18:96:dd:c2:3c:23:ae:7c:be:63:7a:6f:d6:45:bd:97:50:35: d6:42:ad:1e:9d:53:51:10:6e:4b:26:35:7f:77:95:c1:1d:ae: 9a:be:6c:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslv0Ei2fpVPpMeSPdbyKgxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0Y2Q2ZTYxYzE0ZTgzOTEwMDVhODE3YjI3MjJmN2M0YTgx ZWI5OTMwHhcNMjUxMjE2MDYwMDQ5WhcNMjUxMjE3MDYwMDQ5WjAzMTEwLwYDVQQD EygxYWUyMDlhMDk3ZDJkM2Y2MDEzYTViMTE0MTJiZmQxYjQ5MzA1MWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLVq+Qq6RtwuHwfM511U5L0yG6C2 RPORec4kXbHg+h0gaQt8t6hyUCvA+FHdoFesau16+8XxR24VykepauWjkSF4a1X3 OLeYKTrCRVRk8afiVFXFlggh/olLhZpBJznT8Etr9jvHj666PKr9pL0WF1wNNDuR 39DVH5x4DgJhhlDb+IoOw+j61qBupC67bmhABRMg6go7BRQn09ofsAlA5fs7d/2y zG4QL6JrC1Ai4HqDQ0T0ACDqY6JmXflWuzQf/gMSgqXOoOMn8rIuZDccgCF2lkR/ ZM/5SoJmntu+bdpsOsTbVY1HLKc5reA3N1w1GkEQI+V6Da8Kn7RxEcD8pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBriCaCX0tP2ATpbEUEr/RtJMFHhMB8GA1UdIwQY MBaAFOTNbmHBToORAFqBeyci98SoHrmTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU0xdVljRk9nNUVBV29GN0p5TDN4S2dldVpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kYTQwY2YtOTgzNi00ODJiLWI3YTYt YzVhZDE2YTU1YzVmLzEvNU0xdVljRk9nNUVBV29GN0p5TDN4S2dldVpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9kYTQwY2YtOTgzNi00ODJiLWI3YTYtYzVhZDE2YTU1YzVm LzEvNU0xdVljRk9nNUVBV29GN0p5TDN4S2dldVpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfjjNEv3m +jnXZVBPO21gKi5dPdLe+jXOSPm3PZsnMkziz3JFlDtikWvwchsDagq/3FnkbFVU zycYCC9F0NEfRJp5mFzp6Bf0+Tk8W70EF8r9c83alN3+3HKxxNwyErcX836q1QYF prLLe9rPIxi+LAS/tWanNxz+1w/H/RikIagtLd3VFZ1r03NJQe67g1eTBAecB0tg qtFM0lxNWC5ZfIFERqLKcHh9KETXkO0hQqHoERndIRzYnEsXehO6BDkX9JxyqEQ4 4XqEgqGjgh9vZmtKMVyKHylrGJbdwjwjrny+Y3pv1kW9l1A11kKtHp1TURBuSyY1 f3eVwR2umr5s1w== -----END CERTIFICATE-----Generated at Tue Dec 16 16:06:25 2025 by rpki-client