This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft File: 5snUihjDwNLk5jp7g4haeWd1WCY.mft (raw, json) Hash identifier: F92bBFCmAvO5PfcTVD6nvG4z4h7xVrkfA2PnZVAJATM= Subject key identifier: A9:33:B8:46:4D:7C:28:90:93:F7:D5:33:3B:33:C5:21:FC:A2:8F:F4 Authority key identifier: E6:C9:D4:8A:18:C3:C0:D2:E4:E6:3A:7B:83:88:5A:79:67:75:58:26 Certificate issuer: /CN=e6c9d48a18c3c0d2e4e63a7b83885a7967755826 Certificate serial: 019B269B6BF1A8854F21862FC62BF88A6CFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft Manifest number: 177D Signing time: Tue 16 Dec 2025 10:01:18 +0000 Manifest this update: Tue 16 Dec 2025 10:01:18 +0000 Manifest next update: Wed 17 Dec 2025 10:01:18 +0000 Files and hashes: 1: 5snUihjDwNLk5jp7g4haeWd1WCY.crl (hash: oUY4w2eqGECYvJTIe026C2QKf4E9VatII7V+2naEC44=) 2: zohWKsAJg1AB7BcLgO5mP203ZJ8.roa (hash: qyr9zS4mbTGjUUiqIIIhploYFAxZHgevrVarc4Vt5k8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.crl rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:9b:6b:f1:a8:85:4f:21:86:2f:c6:2b:f8:8a:6c:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6c9d48a18c3c0d2e4e63a7b83885a7967755826 Validity Not Before: Dec 16 10:01:18 2025 GMT Not After : Dec 17 10:01:18 2025 GMT Subject: CN=a933b8464d7c289093f7d5333b33c521fca28ff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:16:a3:74:35:96:7a:4c:fa:cb:67:43:c4:d5: 3f:19:1b:b4:54:29:db:ad:87:45:28:f0:8b:b0:1c: 63:3e:8b:f6:e7:83:af:8d:92:27:27:d7:79:c7:60: 92:8f:a3:6b:6c:80:b9:64:9a:66:cd:1c:61:d4:64: 7f:c7:56:3e:20:25:70:06:72:46:e6:a5:81:2e:bc: 7b:47:cb:48:4c:af:57:e6:62:26:3a:3d:0a:b8:1c: ee:3e:b5:b9:c7:f3:ab:c3:82:7b:d5:c1:a0:a5:ab: f2:f1:36:40:47:36:ce:cc:e6:d1:24:35:ca:0e:29: 03:7d:f2:b7:dc:b7:6e:3e:80:ff:2b:8f:45:a7:06: d7:bd:6b:e8:d7:03:67:17:37:ce:43:ff:8a:a0:f7: e6:b6:25:dc:e8:c7:d0:f8:30:a0:52:d9:cc:b4:4e: ec:d3:9d:3c:83:66:65:e8:9e:d0:4f:85:4e:9b:c0: 0d:51:a9:4c:0a:ed:79:22:41:57:d9:f2:13:c1:7d: 41:ea:4c:70:4c:6e:24:d0:4b:e0:db:69:8b:03:25: 3b:0f:ca:48:fb:92:43:65:8c:1b:56:7a:ba:25:a3: de:ff:c3:e9:5f:a4:b5:b0:8d:e8:4d:2e:a1:0c:13: 64:fc:4e:26:ed:3e:50:74:69:0d:3d:72:a6:60:bc: f6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:33:B8:46:4D:7C:28:90:93:F7:D5:33:3B:33:C5:21:FC:A2:8F:F4 X509v3 Authority Key Identifier: keyid:E6:C9:D4:8A:18:C3:C0:D2:E4:E6:3A:7B:83:88:5A:79:67:75:58:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:68:66:80:fc:b8:1c:19:52:6f:87:e9:3a:a7:98:57:4c:de: 31:53:1e:60:78:1d:45:7b:81:61:f8:90:6a:81:32:ce:ae:39: 2e:1f:35:08:06:07:11:99:2a:bc:8a:d6:9e:3b:38:aa:3a:f8: 51:2a:2a:d0:62:c5:6c:94:08:51:30:35:f1:01:f2:8f:f6:d1: a9:8f:c1:c7:f5:71:e1:2e:c1:50:cd:80:03:91:c6:f1:29:b2: d8:e7:e3:e0:40:79:00:fe:0b:91:26:7f:d9:eb:fd:27:52:c6: c7:50:e2:83:6d:82:e6:06:9d:bb:c1:d4:45:c5:02:a8:ac:b9: fa:7c:38:e6:49:8a:88:ce:fb:8e:ff:0a:c3:0d:c1:bb:e7:4e: 1f:c6:d7:20:d0:fc:d1:c0:99:1f:49:0b:25:49:31:59:cc:81: 3e:25:f9:e5:e4:b9:ab:b1:26:8c:c2:49:4e:a2:f9:32:57:8c: ed:a8:7d:60:81:54:5a:67:2b:15:d9:db:83:3b:08:3d:8f:4e: 39:af:ce:ff:11:bb:ea:e3:6d:bd:0d:d2:ff:03:c8:44:a8:6e: c8:15:9c:b2:ca:1e:04:0e:c2:21:94:04:13:77:d0:f1:a3:32: f2:9d:e4:77:e4:9a:52:d3:12:ca:80:3e:7e:a5:6e:bc:b1:74: 43:82:59:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmm2vxqIVPIYYvxiv4imz9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2YzlkNDhhMThjM2MwZDJlNGU2M2E3YjgzODg1YTc5Njc3 NTU4MjYwHhcNMjUxMjE2MTAwMTE4WhcNMjUxMjE3MTAwMTE4WjAzMTEwLwYDVQQD EyhhOTMzYjg0NjRkN2MyODkwOTNmN2Q1MzMzYjMzYzUyMWZjYTI4ZmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBajdDWWekz6y2dDxNU/GRu0VCnb rYdFKPCLsBxjPov254OvjZInJ9d5x2CSj6NrbIC5ZJpmzRxh1GR/x1Y+ICVwBnJG 5qWBLrx7R8tITK9X5mImOj0KuBzuPrW5x/Orw4J71cGgpavy8TZARzbOzObRJDXK DikDffK33LduPoD/K49FpwbXvWvo1wNnFzfOQ/+KoPfmtiXc6MfQ+DCgUtnMtE7s 0508g2Zl6J7QT4VOm8ANUalMCu15IkFX2fITwX1B6kxwTG4k0Evg22mLAyU7D8pI +5JDZYwbVnq6JaPe/8PpX6S1sI3oTS6hDBNk/E4m7T5QdGkNPXKmYLz24QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKkzuEZNfCiQk/fVMzszxSH8oo/0MB8GA1UdIwQY MBaAFObJ1IoYw8DS5OY6e4OIWnlndVgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXNuVWloakR3TkxrNWpwN2c0aGFlV2QxV0NZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9kMjVlMTQtNjI1ZC00N2I1LWEwZWMt ODQ4ZjczZGY4YjIwLzEvNXNuVWloakR3TkxrNWpwN2c0aGFlV2QxV0NZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9kMjVlMTQtNjI1ZC00N2I1LWEwZWMtODQ4ZjczZGY4YjIw LzEvNXNuVWloakR3TkxrNWpwN2c0aGFlV2QxV0NZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp2hmgPy4 HBlSb4fpOqeYV0zeMVMeYHgdRXuBYfiQaoEyzq45Lh81CAYHEZkqvIrWnjs4qjr4 USoq0GLFbJQIUTA18QHyj/bRqY/Bx/Vx4S7BUM2AA5HG8Smy2Ofj4EB5AP4LkSZ/ 2ev9J1LGx1Dig22C5gadu8HURcUCqKy5+nw45kmKiM77jv8Kww3Bu+dOH8bXIND8 0cCZH0kLJUkxWcyBPiX55eS5q7EmjMJJTqL5MleM7ah9YIFUWmcrFdnbgzsIPY9O Oa/O/xG76uNtvQ3S/wPIRKhuyBWcssoeBA7CIZQEE3fQ8aMy8p3kd+SaUtMSyoA+ fqVuvLF0Q4JZ5g== -----END CERTIFICATE-----Generated at Tue Dec 16 13:10:28 2025 by rpki-client