This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft File: 5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft (raw, json) Hash identifier: QWrT2hhl++xePyEsYGF47wPZ+gF25RdkxZkK/uVQEMI= Subject key identifier: E7:DD:E3:BC:B6:0E:9A:6F:87:BF:16:0D:EC:25:85:25:27:D5:E5:5F Authority key identifier: E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70 Certificate issuer: /CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70 Certificate serial: 019B0F0124BD6CD2200F4DA9CCEE7FE0FE15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft Manifest number: 1770 Signing time: Thu 11 Dec 2025 20:01:31 +0000 Manifest this update: Thu 11 Dec 2025 20:01:31 +0000 Manifest next update: Fri 12 Dec 2025 20:01:31 +0000 Files and hashes: 1: 5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl (hash: MhLsANK+mdOhOoOyhWjIqMCTY2tBU1DN1dafZPyxyBk=) 2: fTo1f8ubRBwfU0xVoHHtzOApYuU.roa (hash: 6qDVE6eG6EbcIMXQ5M9bjDvf2Vx2WIt3k9ZSfVGTUr8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:01:24:bd:6c:d2:20:0f:4d:a9:cc:ee:7f:e0:fe:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70 Validity Not Before: Dec 11 20:01:31 2025 GMT Not After : Dec 12 20:01:31 2025 GMT Subject: CN=e7dde3bcb60e9a6f87bf160dec25852527d5e55f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:53:4e:a7:ff:dd:4e:00:cd:78:b6:d2:9b:44: 7c:bf:8a:6c:06:df:28:f2:30:66:e3:56:c1:93:65: 3f:c4:1f:86:fe:59:42:5a:cd:49:aa:7f:4b:b5:00: 5d:fe:b5:2e:53:c2:d9:74:7b:5f:27:cc:e5:8a:0d: a1:1f:be:05:8e:dc:f6:75:05:99:3e:ce:97:0f:ae: 60:65:43:13:da:bb:0b:c0:59:06:55:a2:0f:8a:32: fd:3e:1c:6e:1b:0e:95:4a:9a:62:26:d2:26:a8:6f: 95:77:8a:f7:c3:4d:18:5b:4d:f9:f1:81:2a:cd:a1: 13:cd:ad:35:cc:02:08:2f:d5:e0:92:f8:2c:f5:a8: 55:12:17:fc:3d:6c:c8:fb:62:4d:0c:d2:cd:60:c9: 58:6d:f7:06:55:ab:24:77:c4:d8:97:60:8f:eb:c9: c2:e4:dc:ca:8f:ac:9c:21:d6:e3:b0:8b:51:b5:2a: b5:ff:d2:e1:d9:56:c1:57:96:36:21:c6:99:8c:f7: a6:94:30:5f:43:19:5a:0f:4a:36:47:cd:27:3f:de: 35:8a:45:f3:d0:ef:82:b1:0c:b5:c1:18:bb:08:e2: 56:c1:75:29:97:ad:9a:5d:bc:45:4d:93:75:da:ed: 26:6e:d4:1c:ca:42:39:e9:f3:1e:1b:a0:1b:78:6d: 49:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:DD:E3:BC:B6:0E:9A:6F:87:BF:16:0D:EC:25:85:25:27:D5:E5:5F X509v3 Authority Key Identifier: keyid:E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:65:54:a0:c4:83:3d:57:5f:ce:1c:8f:5e:db:5d:33:b6:4a: 4c:1a:d0:c3:4a:1e:e5:31:62:d9:35:f8:4e:ee:e6:5b:51:a2: 65:17:02:73:fc:61:2f:19:c1:f4:76:65:5c:01:79:7d:19:af: 26:35:41:82:b6:73:f2:f8:9e:57:72:e3:5b:bb:8b:d0:23:c4: 27:23:61:39:d3:a2:48:74:1e:1a:d7:0c:e3:f2:54:da:6c:d8: 32:64:60:17:ae:d2:51:ef:74:ae:24:f5:e5:51:c1:ef:68:46: 2c:1d:77:5a:07:78:f9:ee:f0:e9:ac:33:74:81:be:2b:50:8b: c1:8e:27:4e:1d:bb:f6:f2:3f:ad:0f:9c:d0:03:4c:b2:fe:85: 24:56:4f:17:31:6c:6d:0a:77:81:32:b4:28:0c:b4:41:7e:d4: 3d:28:86:69:16:da:07:6f:0e:8a:9b:3f:5e:04:26:0d:15:e4: 22:6f:f8:7c:96:ad:21:d7:4c:ee:54:34:a5:4b:35:5b:a2:cc: 42:a6:0b:51:4e:b9:37:e3:cf:52:a0:f0:96:5c:cb:82:72:f3: 6f:73:c3:9c:fc:11:1d:a2:bf:43:d0:e2:e3:5a:dc:99:34:e7: 15:37:43:c0:ae:51:45:6c:5f:32:ce:c3:61:f3:ee:8e:d5:2b: 86:f7:ca:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPASS9bNIgD02pzO5/4P4VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YmE5MWQ2MjY1MDRjY2JjNjRkODk3NDBiNjNjYjJlYjQy MzRmNzAwHhcNMjUxMjExMjAwMTMxWhcNMjUxMjEyMjAwMTMxWjAzMTEwLwYDVQQD EyhlN2RkZTNiY2I2MGU5YTZmODdiZjE2MGRlYzI1ODUyNTI3ZDVlNTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01NOp//dTgDNeLbSm0R8v4psBt8o 8jBm41bBk2U/xB+G/llCWs1Jqn9LtQBd/rUuU8LZdHtfJ8zlig2hH74Fjtz2dQWZ Ps6XD65gZUMT2rsLwFkGVaIPijL9PhxuGw6VSppiJtImqG+Vd4r3w00YW0358YEq zaETza01zAIIL9Xgkvgs9ahVEhf8PWzI+2JNDNLNYMlYbfcGVaskd8TYl2CP68nC 5NzKj6ycIdbjsItRtSq1/9Lh2VbBV5Y2IcaZjPemlDBfQxlaD0o2R80nP941ikXz 0O+CsQy1wRi7COJWwXUpl62aXbxFTZN12u0mbtQcykI56fMeG6AbeG1JUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOfd47y2Dppvh78WDewlhSUn1eVfMB8GA1UdIwQY MBaAFOS6kdYmUEzLxk2JdAtjyy60I09wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUxxUjFpWlFUTXZHVFlsMEMyUExMclFqVDNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy84ODdlOTQtZWI5Ny00MTA5LTlkYTgt Y2JmMThkMmQ2NmMzLzEvNUxxUjFpWlFUTXZHVFlsMEMyUExMclFqVDNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy84ODdlOTQtZWI5Ny00MTA5LTlkYTgtY2JmMThkMmQ2NmMz LzEvNUxxUjFpWlFUTXZHVFlsMEMyUExMclFqVDNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkmVUoMSD PVdfzhyPXttdM7ZKTBrQw0oe5TFi2TX4Tu7mW1GiZRcCc/xhLxnB9HZlXAF5fRmv JjVBgrZz8vieV3LjW7uL0CPEJyNhOdOiSHQeGtcM4/JU2mzYMmRgF67SUe90riT1 5VHB72hGLB13Wgd4+e7w6awzdIG+K1CLwY4nTh279vI/rQ+c0ANMsv6FJFZPFzFs bQp3gTK0KAy0QX7UPSiGaRbaB28Oips/XgQmDRXkIm/4fJatIddM7lQ0pUs1W6LM QqYLUU65N+PPUqDwllzLgnLzb3PDnPwRHaK/Q9Di41rcmTTnFTdDwK5RRWxfMs7D YfPujtUrhvfKGA== -----END CERTIFICATE-----Generated at Fri Dec 12 00:23:26 2025 by rpki-client