This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.mft File: 5uGvN6YKmYaO-7qggXtJgPGaVPs.mft (raw, json) Hash identifier: zZ7gO7eZiDBS0V4FlTaJNc+GeG5uAs4/y396/HcKy4A= Subject key identifier: CF:F1:E3:68:7F:3F:E5:7C:F3:27:B4:94:E9:F5:44:EC:31:C6:EC:7F Authority key identifier: E6:E1:AF:37:A6:0A:99:86:8E:FB:BA:A0:81:7B:49:80:F1:9A:54:FB Certificate issuer: /CN=e6e1af37a60a99868efbbaa0817b4980f19a54fb Certificate serial: 019B21073994360998E241A92287AF313F76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5uGvN6YKmYaO-7qggXtJgPGaVPs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.mft Manifest number: 0B62 Signing time: Mon 15 Dec 2025 08:01:20 +0000 Manifest this update: Mon 15 Dec 2025 08:01:20 +0000 Manifest next update: Tue 16 Dec 2025 08:01:20 +0000 Files and hashes: 1: 04IK808ti0G_mrePZiLfyMd8LPg.roa (hash: KEsbMkessHVdMEPjooQbuvxux4M4IDtjKN92Pi/27Vo=) 2: 5uGvN6YKmYaO-7qggXtJgPGaVPs.crl (hash: Xsiikz8gQMh1pmqwPmsyG5hJgf947f38ESr5YCLdTIU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.mft rsync://rpki.ripe.net/repository/DEFAULT/5uGvN6YKmYaO-7qggXtJgPGaVPs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:07:39:94:36:09:98:e2:41:a9:22:87:af:31:3f:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6e1af37a60a99868efbbaa0817b4980f19a54fb Validity Not Before: Dec 15 08:01:20 2025 GMT Not After : Dec 16 08:01:20 2025 GMT Subject: CN=cff1e3687f3fe57cf327b494e9f544ec31c6ec7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c7:aa:5a:49:c6:61:56:15:d8:f4:d9:22:65: 6f:a9:94:2c:b4:11:6e:f4:6d:ff:71:d6:06:65:f7: 1c:1b:e3:5a:c0:fc:1b:ab:34:5e:52:33:fc:af:43: 1a:64:1b:66:b8:aa:7d:2d:85:84:f7:61:a3:a5:a6: 56:7b:6d:9e:84:6e:94:6b:99:4c:a5:93:8d:41:2c: b8:03:60:9e:47:d4:cd:8f:21:46:89:d3:7f:25:5d: 87:58:99:0e:4b:bf:d8:16:da:d0:1e:12:0f:af:4b: ab:3e:b0:f2:9d:ce:7f:80:8f:cc:8a:bb:52:08:33: 1b:0f:e1:ba:ea:7c:3c:f1:5b:d0:8a:5c:14:e0:d2: b0:17:77:e6:e8:6b:1a:6a:46:f8:82:59:dd:af:db: da:42:7b:84:0d:6f:aa:d3:90:f3:78:6a:8a:66:25: 4d:27:b4:35:11:a8:9a:be:c6:c6:d3:f4:87:ac:db: fe:be:51:48:0a:29:26:7a:1b:46:85:b0:5d:23:b8: a6:8a:a9:d2:6c:56:11:9d:81:a4:a6:d5:c6:ff:e2: e8:a0:1a:08:da:74:42:68:a4:a0:65:1d:a1:fe:ca: bf:43:76:75:d1:c4:96:74:00:60:f1:1a:a9:43:9b: df:44:94:c8:40:d2:52:8e:eb:0b:dc:29:63:64:04: 12:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F1:E3:68:7F:3F:E5:7C:F3:27:B4:94:E9:F5:44:EC:31:C6:EC:7F X509v3 Authority Key Identifier: keyid:E6:E1:AF:37:A6:0A:99:86:8E:FB:BA:A0:81:7B:49:80:F1:9A:54:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uGvN6YKmYaO-7qggXtJgPGaVPs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:ac:91:b9:ab:32:31:bb:98:9e:6f:63:94:4d:e6:b8:74:d7: 2b:6c:e5:fa:a4:d9:1c:ea:36:9a:e6:4e:73:b1:35:b0:88:a0: 71:77:3c:ea:e8:b0:59:55:97:f8:c0:82:c0:bc:47:30:a0:45: b1:e7:77:af:d9:99:bd:a7:35:ea:6e:36:f7:52:56:7d:e0:55: 87:90:05:0d:c9:78:79:59:ea:9a:7a:82:8e:4e:bf:92:c0:f0: ca:43:fb:87:99:ab:47:64:0f:b6:df:46:d7:b9:82:ac:64:90: 0a:7e:d7:f0:70:4f:b3:4b:7e:bd:83:8f:5f:10:b7:c5:6a:a4: aa:76:51:05:91:6b:eb:cf:44:40:e9:87:09:a3:08:32:62:ee: 23:2c:ef:87:46:e4:3b:78:24:2a:1c:69:f9:64:86:fe:bc:de: 1e:9a:c2:e0:0c:83:11:e8:d8:32:b1:aa:ae:72:17:30:a5:8d: ec:83:f9:c5:f7:05:d9:c9:a2:91:08:13:1f:00:89:a7:79:6f: 1f:87:f6:ef:4e:9b:1d:2c:14:b8:62:d9:a2:d8:75:14:5f:82: 0d:ae:94:46:39:e3:7c:0a:e5:5d:78:a1:82:5f:e8:07:1f:5a: 90:58:48:12:3e:25:4c:47:bd:20:17:35:94:e3:1c:09:4e:cc: 4f:b8:47:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshBzmUNgmY4kGpIoevMT92MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2ZTFhZjM3YTYwYTk5ODY4ZWZiYmFhMDgxN2I0OTgwZjE5 YTU0ZmIwHhcNMjUxMjE1MDgwMTIwWhcNMjUxMjE2MDgwMTIwWjAzMTEwLwYDVQQD EyhjZmYxZTM2ODdmM2ZlNTdjZjMyN2I0OTRlOWY1NDRlYzMxYzZlYzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMeqWknGYVYV2PTZImVvqZQstBFu 9G3/cdYGZfccG+NawPwbqzReUjP8r0MaZBtmuKp9LYWE92GjpaZWe22ehG6Ua5lM pZONQSy4A2CeR9TNjyFGidN/JV2HWJkOS7/YFtrQHhIPr0urPrDync5/gI/MirtS CDMbD+G66nw88VvQilwU4NKwF3fm6Gsaakb4glndr9vaQnuEDW+q05DzeGqKZiVN J7Q1EaiavsbG0/SHrNv+vlFICikmehtGhbBdI7imiqnSbFYRnYGkptXG/+LooBoI 2nRCaKSgZR2h/sq/Q3Z10cSWdABg8RqpQ5vfRJTIQNJSjusL3CljZAQSlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM/x42h/P+V88ye0lOn1ROwxxux/MB8GA1UdIwQY MBaAFObhrzemCpmGjvu6oIF7SYDxmlT7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXVHdk42WUttWWFPLTdxZ2dYdEpnUEdhVlBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9lNjU4MGItYmZmNy00MWU4LWIzMTQt MTQwNDViNjRhZTI5LzEvNXVHdk42WUttWWFPLTdxZ2dYdEpnUEdhVlBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9lNjU4MGItYmZmNy00MWU4LWIzMTQtMTQwNDViNjRhZTI5 LzEvNXVHdk42WUttWWFPLTdxZ2dYdEpnUEdhVlBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKayRuasy MbuYnm9jlE3muHTXK2zl+qTZHOo2muZOc7E1sIigcXc86uiwWVWX+MCCwLxHMKBF sed3r9mZvac16m4291JWfeBVh5AFDcl4eVnqmnqCjk6/ksDwykP7h5mrR2QPtt9G 17mCrGSQCn7X8HBPs0t+vYOPXxC3xWqkqnZRBZFr689EQOmHCaMIMmLuIyzvh0bk O3gkKhxp+WSG/rzeHprC4AyDEejYMrGqrnIXMKWN7IP5xfcF2cmikQgTHwCJp3lv H4f2706bHSwUuGLZoth1FF+CDa6URjnjfArlXXihgl/oBx9akFhIEj4lTEe9IBc1 lOMcCU7MT7hHaA== -----END CERTIFICATE-----Generated at Mon Dec 15 16:51:30 2025 by rpki-client