This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.mft File: 5INFqgzXAm1iHFAIT52du1ucwvA.mft (raw, json) Hash identifier: U4iyNWNCZbdC3WJ1rDoDmGa0JNEmm7SoPcukxzOU5ds= Subject key identifier: 2D:D7:5B:E8:A8:F6:5F:B1:2C:0D:11:E9:EA:41:8F:EB:91:6D:E8:9A Authority key identifier: E4:83:45:AA:0C:D7:02:6D:62:1C:50:08:4F:9D:9D:BB:5B:9C:C2:F0 Certificate issuer: /CN=e48345aa0cd7026d621c50084f9d9dbb5b9cc2f0 Certificate serial: 019B5A5160C6536B717C55965D55F0C86A40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5INFqgzXAm1iHFAIT52du1ucwvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.mft Manifest number: 0EB5 Signing time: Fri 26 Dec 2025 11:00:41 +0000 Manifest this update: Fri 26 Dec 2025 11:00:41 +0000 Manifest next update: Sat 27 Dec 2025 11:00:41 +0000 Files and hashes: 1: 5INFqgzXAm1iHFAIT52du1ucwvA.crl (hash: L2DNJWSnSIjJVlmQKC2yeoSEidOJ61Pk8oOrNVamz08=) 2: kUe56rRopp_KQsUYDln6H32rpVA.roa (hash: Nqm32SYb89EX8JBzdHqkHyeFXZStjUKylm9CZ3PRcrY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.crl rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.mft rsync://rpki.ripe.net/repository/DEFAULT/5INFqgzXAm1iHFAIT52du1ucwvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:60:c6:53:6b:71:7c:55:96:5d:55:f0:c8:6a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e48345aa0cd7026d621c50084f9d9dbb5b9cc2f0 Validity Not Before: Dec 26 11:00:41 2025 GMT Not After : Dec 27 11:00:41 2025 GMT Subject: CN=2dd75be8a8f65fb12c0d11e9ea418feb916de89a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:71:b2:32:c9:c0:c5:5d:5c:65:37:95:02:a9: 82:cc:7d:3d:fa:65:7c:99:7b:56:67:df:b7:3e:93: da:ca:07:79:a2:f5:a4:d8:57:69:68:64:a8:23:3b: ca:2c:99:4e:0f:c4:0f:13:cc:d7:8e:7b:cf:21:90: be:ec:96:31:76:38:7f:50:85:97:25:d7:4f:00:c1: e2:65:87:3b:fc:76:f8:be:4d:3e:a8:41:a4:e1:4b: 94:72:2f:2a:9a:66:a6:d4:2c:fd:4e:0e:cc:c3:7d: ba:09:96:8c:af:d5:16:c1:90:13:17:7f:d4:9d:9d: fa:b8:4c:cd:1b:b1:61:29:f0:2f:60:26:f1:d1:82: 87:14:c1:b9:ec:ec:f0:6f:7a:fd:82:22:11:e0:e8: 9a:b4:4b:22:73:4c:c7:9c:55:a6:3f:c1:ca:11:4d: 1a:6b:62:11:48:de:c1:14:e3:82:09:9d:63:f7:c8: 86:36:83:7d:08:f3:ba:89:c9:25:b8:53:49:f0:47: ca:f2:08:df:c3:6a:ea:0f:45:1b:fe:67:f1:60:69: 44:0d:c5:d5:1c:7c:7c:30:5e:ba:e4:dc:05:2d:b3: 3d:29:d7:9b:77:9f:93:61:d8:74:2a:c1:71:c0:93: 68:21:c6:3d:3b:6b:83:6a:0b:f5:da:49:a6:e2:9b: d3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D7:5B:E8:A8:F6:5F:B1:2C:0D:11:E9:EA:41:8F:EB:91:6D:E8:9A X509v3 Authority Key Identifier: keyid:E4:83:45:AA:0C:D7:02:6D:62:1C:50:08:4F:9D:9D:BB:5B:9C:C2:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5INFqgzXAm1iHFAIT52du1ucwvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:81:45:77:c4:d9:eb:7a:96:12:9b:f6:b7:77:a1:7a:90:33: 84:82:5e:e7:7e:ad:80:a3:e9:fb:48:cf:24:ca:20:ef:61:59: 51:d0:2e:55:b0:c1:d8:70:8a:94:d8:13:fe:a2:e5:31:2d:7a: d6:eb:40:fd:e1:20:22:d6:57:68:04:bf:c8:a9:d0:05:4b:7c: dd:1d:67:5f:62:33:0a:ec:73:cc:e6:3b:a3:af:49:57:e1:74: 0e:a8:d2:95:8a:c9:23:69:f9:83:51:98:21:90:8d:40:95:1c: 8e:83:0b:b0:e4:40:83:8b:2a:4e:99:01:4b:59:34:ab:b8:fe: 6c:ac:6c:aa:e1:b8:c1:0d:25:7a:1f:3b:48:f7:f2:90:02:7a: 15:81:e0:16:ec:9c:95:93:4e:58:bb:a0:2b:95:cc:a1:c3:94: 5e:74:f9:90:a9:72:23:d5:33:08:e3:07:a5:5a:58:ac:90:6d: 83:fa:a8:a2:c4:e0:da:35:e9:3e:c9:e3:fd:a1:56:c9:00:88: 8a:3f:fe:8e:88:72:6f:73:a1:09:74:4b:55:78:97:2a:1f:5c: d7:41:0f:ce:13:ca:90:96:90:6a:31:28:38:f4:6e:8b:a6:77: d1:28:21:75:f7:f7:9b:b5:0a:7e:f9:4e:77:fd:7f:59:6b:50: e1:a5:52:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUWDGU2txfFWWXVXwyGpAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ODM0NWFhMGNkNzAyNmQ2MjFjNTAwODRmOWQ5ZGJiNWI5 Y2MyZjAwHhcNMjUxMjI2MTEwMDQxWhcNMjUxMjI3MTEwMDQxWjAzMTEwLwYDVQQD EygyZGQ3NWJlOGE4ZjY1ZmIxMmMwZDExZTllYTQxOGZlYjkxNmRlODlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XGyMsnAxV1cZTeVAqmCzH09+mV8 mXtWZ9+3PpPaygd5ovWk2FdpaGSoIzvKLJlOD8QPE8zXjnvPIZC+7JYxdjh/UIWX JddPAMHiZYc7/Hb4vk0+qEGk4UuUci8qmmam1Cz9Tg7Mw326CZaMr9UWwZATF3/U nZ36uEzNG7FhKfAvYCbx0YKHFMG57Ozwb3r9giIR4OiatEsic0zHnFWmP8HKEU0a a2IRSN7BFOOCCZ1j98iGNoN9CPO6ickluFNJ8EfK8gjfw2rqD0Ub/mfxYGlEDcXV HHx8MF665NwFLbM9Kdebd5+TYdh0KsFxwJNoIcY9O2uDagv12kmm4pvTDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC3XW+io9l+xLA0R6epBj+uRbeiaMB8GA1UdIwQY MBaAFOSDRaoM1wJtYhxQCE+dnbtbnMLwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUlORnFnelhBbTFpSEZBSVQ1MmR1MXVjd3ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xNzRmMzItMWFkMS00NGY4LThhN2Yt NWZkYjk1NjMxMTNjLzEvNUlORnFnelhBbTFpSEZBSVQ1MmR1MXVjd3ZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi8xNzRmMzItMWFkMS00NGY4LThhN2YtNWZkYjk1NjMxMTNj LzEvNUlORnFnelhBbTFpSEZBSVQ1MmR1MXVjd3ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGoFFd8TZ 63qWEpv2t3ehepAzhIJe536tgKPp+0jPJMog72FZUdAuVbDB2HCKlNgT/qLlMS16 1utA/eEgItZXaAS/yKnQBUt83R1nX2IzCuxzzOY7o69JV+F0DqjSlYrJI2n5g1GY IZCNQJUcjoMLsORAg4sqTpkBS1k0q7j+bKxsquG4wQ0leh87SPfykAJ6FYHgFuyc lZNOWLugK5XMocOUXnT5kKlyI9UzCOMHpVpYrJBtg/qoosTg2jXpPsnj/aFWyQCI ij/+johyb3OhCXRLVXiXKh9c10EPzhPKkJaQajEoOPRui6Z30Sghdff3m7UKfvlO d/1/WWtQ4aVSJQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:42 2025 by rpki-client