This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft File: 5WzVePQvjeBnI2dnxs_CusvBbgU.mft (raw, json) Hash identifier: P4NsC6DBH4/9ufLWzScV0KdE2k8MY6UhNDx82EGwno8= Subject key identifier: F1:2C:C2:7E:C6:73:D4:43:24:04:F8:12:E8:28:9F:E6:F6:62:83:25 Authority key identifier: E5:6C:D5:78:F4:2F:8D:E0:67:23:67:67:C6:CF:C2:BA:CB:C1:6E:05 Certificate issuer: /CN=e56cd578f42f8de067236767c6cfc2bacbc16e05 Certificate serial: 019B5A517968D224551AEFC34BF6808176C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft Manifest number: 1715 Signing time: Fri 26 Dec 2025 11:00:47 +0000 Manifest this update: Fri 26 Dec 2025 11:00:47 +0000 Manifest next update: Sat 27 Dec 2025 11:00:47 +0000 Files and hashes: 1: 5WzVePQvjeBnI2dnxs_CusvBbgU.crl (hash: 3rUmQRiA2m46KjZWLkRAe9vYBlllMrhLwtoJ32NafGQ=) 2: QNHfp-QpZNwcvnNXnGl6CZVZ8Tc.roa (hash: 6rWKjyivZLws8Y1JTJaRv4be4dA3ijdzaWgzmRI12KU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.crl rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:79:68:d2:24:55:1a:ef:c3:4b:f6:80:81:76:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e56cd578f42f8de067236767c6cfc2bacbc16e05 Validity Not Before: Dec 26 11:00:47 2025 GMT Not After : Dec 27 11:00:47 2025 GMT Subject: CN=f12cc27ec673d4432404f812e8289fe6f6628325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b7:1b:5c:f6:fe:ce:b9:20:33:18:73:c3:c5: 78:da:ca:24:39:02:47:fd:b6:02:fb:90:1a:ec:c6: 97:93:de:42:85:89:ac:91:18:a1:36:ee:0a:cf:3b: 29:88:43:66:ec:57:1a:fb:e5:19:a2:82:4d:53:39: bf:8f:d1:fd:1f:b3:3e:6f:89:12:35:01:30:cd:a2: 64:48:08:cf:63:9f:91:20:b5:b6:6f:07:97:6f:71: 6c:eb:0d:28:1a:13:12:1a:58:92:a8:38:b4:f4:8d: 3e:0e:a2:8f:cf:76:a7:c6:7f:5d:7d:29:89:a7:5c: e0:c7:c7:50:81:f5:ea:70:22:af:b3:2b:c9:16:2c: 9d:97:f2:cc:28:2a:bd:8a:63:87:76:c4:d7:38:5e: 0c:eb:2d:54:87:0a:4b:58:90:6c:dd:94:ff:28:d5: b4:64:16:ac:88:40:3f:87:5a:37:49:88:a3:15:5c: d7:16:bb:13:9a:c1:af:1e:a0:cf:8a:2a:6d:1a:76: 8d:8a:19:7f:9a:af:af:5b:be:ca:9e:66:cb:6a:0a: 9d:07:b8:a6:49:92:6c:39:42:ac:2f:ae:2b:2e:a6: 77:0e:b5:3a:3d:9b:38:25:71:69:48:d6:f2:1d:09: 17:b9:7b:64:e4:15:c1:4b:8e:0c:70:be:4d:d1:f3: 90:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:2C:C2:7E:C6:73:D4:43:24:04:F8:12:E8:28:9F:E6:F6:62:83:25 X509v3 Authority Key Identifier: keyid:E5:6C:D5:78:F4:2F:8D:E0:67:23:67:67:C6:CF:C2:BA:CB:C1:6E:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:95:a5:8f:2a:b6:e9:16:02:7a:b5:6f:d7:f7:6b:99:28:0e: 3a:29:93:2e:57:fc:5b:eb:ab:c4:9c:20:32:cc:3a:91:28:5d: f6:b0:4d:4b:55:ea:5d:95:23:25:5e:5c:28:e5:cf:3a:53:5e: fe:82:b2:56:f0:83:cc:0e:09:3a:53:05:21:ba:88:94:39:fe: 03:d7:27:0d:cc:c4:e7:bb:2b:6a:80:6c:c3:62:09:47:61:8e: ab:ba:9b:4f:62:2f:7e:22:44:82:e5:02:e9:5b:ac:4b:59:3c: 2d:5d:ca:e8:c4:89:15:67:1a:e2:42:fb:74:b1:a7:45:21:56: f4:ae:24:a1:a6:57:6c:c2:d8:ac:18:fe:f6:a3:d6:98:35:75: fd:3f:3f:78:9a:9a:2f:f6:cb:6c:a2:ce:7f:e0:5a:21:33:94: df:ce:63:ec:53:6e:a1:80:9e:ff:2a:13:11:67:6b:6f:5d:fa: fd:5e:da:1f:a9:ae:c4:15:48:e6:28:75:b2:ca:0f:9e:e0:c7: 62:c1:ea:ea:22:5b:16:0c:f2:a8:f9:6b:b6:c4:cf:4d:d3:93: 18:4b:ca:c9:c3:2c:e1:aa:7e:88:cb:e9:c4:bb:c1:dc:08:9f: f2:28:63:2c:01:74:d2:38:59:6d:e7:4f:75:2d:7f:3d:1e:e4: 7c:23:7e:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUXlo0iRVGu/DS/aAgXbGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NmNkNTc4ZjQyZjhkZTA2NzIzNjc2N2M2Y2ZjMmJhY2Jj MTZlMDUwHhcNMjUxMjI2MTEwMDQ3WhcNMjUxMjI3MTEwMDQ3WjAzMTEwLwYDVQQD EyhmMTJjYzI3ZWM2NzNkNDQzMjQwNGY4MTJlODI4OWZlNmY2NjI4MzI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbcbXPb+zrkgMxhzw8V42sokOQJH /bYC+5Aa7MaXk95ChYmskRihNu4KzzspiENm7Fca++UZooJNUzm/j9H9H7M+b4kS NQEwzaJkSAjPY5+RILW2bweXb3Fs6w0oGhMSGliSqDi09I0+DqKPz3anxn9dfSmJ p1zgx8dQgfXqcCKvsyvJFiydl/LMKCq9imOHdsTXOF4M6y1UhwpLWJBs3ZT/KNW0 ZBasiEA/h1o3SYijFVzXFrsTmsGvHqDPiiptGnaNihl/mq+vW77KnmbLagqdB7im SZJsOUKsL64rLqZ3DrU6PZs4JXFpSNbyHQkXuXtk5BXBS44McL5N0fOQ9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPEswn7Gc9RDJAT4Eugon+b2YoMlMB8GA1UdIwQY MBaAFOVs1Xj0L43gZyNnZ8bPwrrLwW4FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVd6VmVQUXZqZUJuSTJkbnhzX0N1c3ZCYmdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8yOWRlNDYtYzJlOS00OGZiLTkyZDQt YjdhNTY0YWZiMDRiLzEvNVd6VmVQUXZqZUJuSTJkbnhzX0N1c3ZCYmdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8yOWRlNDYtYzJlOS00OGZiLTkyZDQtYjdhNTY0YWZiMDRi LzEvNVd6VmVQUXZqZUJuSTJkbnhzX0N1c3ZCYmdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALJWljyq2 6RYCerVv1/drmSgOOimTLlf8W+urxJwgMsw6kShd9rBNS1XqXZUjJV5cKOXPOlNe /oKyVvCDzA4JOlMFIbqIlDn+A9cnDczE57sraoBsw2IJR2GOq7qbT2IvfiJEguUC 6VusS1k8LV3K6MSJFWca4kL7dLGnRSFW9K4koaZXbMLYrBj+9qPWmDV1/T8/eJqa L/bLbKLOf+BaITOU385j7FNuoYCe/yoTEWdrb136/V7aH6muxBVI5ih1ssoPnuDH YsHq6iJbFgzyqPlrtsTPTdOTGEvKycMs4ap+iMvpxLvB3Aif8ihjLAF00jhZbedP dS1/PR7kfCN+TQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:23 2025 by rpki-client