This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/6bf90c-97d5-44c6-acda-c370ad298ca3/1/5CI8HxzaGbmTW0jH_c8gVcKWICg.mft File: 5CI8HxzaGbmTW0jH_c8gVcKWICg.mft (raw, json) Hash identifier: EZJup3vvNaROsFSXGmIHzEz7zbfQWXhsOCNk9AVWlQ0= Subject key identifier: FA:39:4F:9C:D4:86:EC:B3:A8:7E:73:00:DD:2E:07:7F:33:EC:15:97 Authority key identifier: E4:22:3C:1F:1C:DA:19:B9:93:5B:48:C7:FD:CF:20:55:C2:96:20:28 Certificate issuer: /CN=e4223c1f1cda19b9935b48c7fdcf2055c2962028 Certificate serial: 019B59CAA07B3CE921F47A253D57D55EC3CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5CI8HxzaGbmTW0jH_c8gVcKWICg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/6bf90c-97d5-44c6-acda-c370ad298ca3/1/5CI8HxzaGbmTW0jH_c8gVcKWICg.mft Manifest number: 02 Signing time: Fri 26 Dec 2025 08:33:29 +0000 Manifest this update: Fri 26 Dec 2025 08:33:29 +0000 Manifest next update: Sat 27 Dec 2025 08:33:29 +0000 Files and hashes: 1: 5CI8HxzaGbmTW0jH_c8gVcKWICg.crl (hash: 35H9j28Q70qA+LYgo7/O4XkMwVIBaWn9YVgdsyYijg4=) 2: 9_K_1M1kPXxzBO-W0eFqLhyuHMo.roa (hash: z6ZVltiPzSr8ihIcHUbetLuHuEedi9WbTlBtVwqWbhE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/6bf90c-97d5-44c6-acda-c370ad298ca3/1/5CI8HxzaGbmTW0jH_c8gVcKWICg.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/6bf90c-97d5-44c6-acda-c370ad298ca3/1/5CI8HxzaGbmTW0jH_c8gVcKWICg.mft rsync://rpki.ripe.net/repository/DEFAULT/5CI8HxzaGbmTW0jH_c8gVcKWICg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ca:a0:7b:3c:e9:21:f4:7a:25:3d:57:d5:5e:c3:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4223c1f1cda19b9935b48c7fdcf2055c2962028 Validity Not Before: Dec 26 08:33:29 2025 GMT Not After : Dec 27 08:33:29 2025 GMT Subject: CN=fa394f9cd486ecb3a87e7300dd2e077f33ec1597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c1:8f:16:1d:40:d9:3f:84:df:36:c1:88:2f: 17:5a:6d:c5:1f:eb:65:3c:69:a8:dd:9d:a7:a2:d0: f1:5e:08:f0:94:2e:63:08:a4:9f:fa:b3:0e:f6:ea: 80:4d:25:41:c8:fd:de:06:5e:39:21:cd:2f:dd:53: 2f:d7:34:fd:f7:95:2e:92:02:97:47:54:e7:de:b0: 0a:ff:90:36:ec:df:5c:60:c1:80:9a:7b:69:55:bc: ca:bd:12:a8:b8:04:f2:a3:16:4e:ff:1a:11:6b:e5: 22:a8:b6:49:6a:af:d7:d4:09:4f:55:a8:4b:3f:8b: 07:74:0a:32:6d:02:34:47:49:e2:8d:a2:10:48:15: a0:79:dd:e5:e6:9b:0e:20:71:1a:01:0f:d8:2d:d6: 24:86:79:82:22:b8:c7:53:3d:b8:03:41:34:e8:df: 4e:fe:07:fa:8f:68:0b:be:c2:ed:a2:bf:f8:ce:d5: c7:07:22:f0:b9:76:90:2b:9c:a7:92:57:e7:7f:46: 00:84:07:13:e5:bd:ee:c1:86:85:07:7d:11:64:fd: bf:7f:65:5c:f7:a3:ec:af:c7:4c:26:11:3b:5c:b2: cf:4a:d2:8d:7e:91:7a:5e:41:bb:04:42:c4:98:85: cb:e7:92:be:6f:8d:e1:9e:09:c4:a6:f6:69:e9:b4: 19:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:39:4F:9C:D4:86:EC:B3:A8:7E:73:00:DD:2E:07:7F:33:EC:15:97 X509v3 Authority Key Identifier: keyid:E4:22:3C:1F:1C:DA:19:B9:93:5B:48:C7:FD:CF:20:55:C2:96:20:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5CI8HxzaGbmTW0jH_c8gVcKWICg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6bf90c-97d5-44c6-acda-c370ad298ca3/1/5CI8HxzaGbmTW0jH_c8gVcKWICg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6bf90c-97d5-44c6-acda-c370ad298ca3/1/5CI8HxzaGbmTW0jH_c8gVcKWICg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:f0:d6:01:14:46:3c:14:f8:59:ff:aa:82:a4:1e:12:29:33: d9:7f:08:9e:87:ec:41:4e:f7:69:a9:1e:e3:af:39:e1:4a:85: de:c8:62:ce:55:7b:2a:70:2a:ae:1d:c4:cd:88:85:23:a9:44: 2b:40:b5:76:be:cf:80:09:46:a8:9f:f2:78:61:0f:86:81:b0: 6c:dd:8e:f4:8b:38:a0:01:5d:1c:51:e7:71:99:44:a7:66:8c: 3c:fe:32:36:72:1f:e0:48:4b:c3:b2:0d:ed:f9:4d:86:e0:ca: c9:e4:15:e7:d6:75:f6:b7:c5:6b:3f:1a:a4:1d:7d:12:19:9d: 5b:7c:cc:7b:69:b4:01:9e:1d:1a:c8:75:3b:ba:1c:c7:83:03: 62:12:5a:c1:a1:9c:8a:39:05:65:b1:0a:18:cc:61:f5:ef:99: 76:35:c4:3e:87:32:95:de:c5:88:45:34:68:b8:7e:09:5d:c1: 34:5b:59:65:f5:a9:f8:f8:fc:b2:3c:87:9e:50:7b:b7:35:ef: fe:cb:cc:6d:6e:c5:82:ce:4d:e2:3a:61:c8:6c:f8:fd:e6:ac: 80:ca:23:cc:13:63:76:0c:42:2d:7b:cd:9d:1a:be:7c:36:a2: 33:a6:c7:2c:a8:e0:1f:7c:8d:35:29:b8:61:5d:7a:92:a8:9c: 5a:fe:1f:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZyqB7POkh9HolPVfVXsPPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0MjIzYzFmMWNkYTE5Yjk5MzViNDhjN2ZkY2YyMDU1YzI5 NjIwMjgwHhcNMjUxMjI2MDgzMzI5WhcNMjUxMjI3MDgzMzI5WjAzMTEwLwYDVQQD EyhmYTM5NGY5Y2Q0ODZlY2IzYTg3ZTczMDBkZDJlMDc3ZjMzZWMxNTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsGPFh1A2T+E3zbBiC8XWm3FH+tl PGmo3Z2notDxXgjwlC5jCKSf+rMO9uqATSVByP3eBl45Ic0v3VMv1zT995UukgKX R1Tn3rAK/5A27N9cYMGAmntpVbzKvRKouATyoxZO/xoRa+UiqLZJaq/X1AlPVahL P4sHdAoybQI0R0nijaIQSBWged3l5psOIHEaAQ/YLdYkhnmCIrjHUz24A0E06N9O /gf6j2gLvsLtor/4ztXHByLwuXaQK5ynklfnf0YAhAcT5b3uwYaFB30RZP2/f2Vc 96Psr8dMJhE7XLLPStKNfpF6XkG7BELEmIXL55K+b43hngnEpvZp6bQZfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPo5T5zUhuyzqH5zAN0uB38z7BWXMB8GA1UdIwQY MBaAFOQiPB8c2hm5k1tIx/3PIFXCliAoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUNJOEh4emFHYm1UVzBqSF9jOGdWY0tXSUNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS82YmY5MGMtOTdkNS00NGM2LWFjZGEt YzM3MGFkMjk4Y2EzLzEvNUNJOEh4emFHYm1UVzBqSF9jOGdWY0tXSUNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS82YmY5MGMtOTdkNS00NGM2LWFjZGEtYzM3MGFkMjk4Y2Ez LzEvNUNJOEh4emFHYm1UVzBqSF9jOGdWY0tXSUNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEfDWARRG PBT4Wf+qgqQeEikz2X8InofsQU73aake46854UqF3shizlV7KnAqrh3EzYiFI6lE K0C1dr7PgAlGqJ/yeGEPhoGwbN2O9Is4oAFdHFHncZlEp2aMPP4yNnIf4EhLw7IN 7flNhuDKyeQV59Z19rfFaz8apB19EhmdW3zMe2m0AZ4dGsh1O7ocx4MDYhJawaGc ijkFZbEKGMxh9e+ZdjXEPocyld7FiEU0aLh+CV3BNFtZZfWp+Pj8sjyHnlB7tzXv /svMbW7Fgs5N4jphyGz4/easgMojzBNjdgxCLXvNnRq+fDaiM6bHLKjgH3yNNSm4 YV16kqicWv4fVg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:19 2025 by rpki-client