This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.mft File: 5Lqtn19putkQB1-OHYBetB0N98s.mft (raw, json) Hash identifier: uoEwfhQXeGZ6neox009PhVzR/qAJjbZKgPlCWVHxZd0= Subject key identifier: 99:EF:81:8F:9B:E4:96:E9:D7:C3:78:4F:76:C2:6D:BE:C7:2C:12:96 Authority key identifier: E4:BA:AD:9F:5F:69:BA:D9:10:07:5F:8E:1D:80:5E:B4:1D:0D:F7:CB Certificate issuer: /CN=e4baad9f5f69bad910075f8e1d805eb41d0df7cb Certificate serial: 019B5C08D521EBFE5A971692EF3E33170C61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Lqtn19putkQB1-OHYBetB0N98s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.mft Manifest number: 1081 Signing time: Fri 26 Dec 2025 19:00:41 +0000 Manifest this update: Fri 26 Dec 2025 19:00:41 +0000 Manifest next update: Sat 27 Dec 2025 19:00:41 +0000 Files and hashes: 1: 5Lqtn19putkQB1-OHYBetB0N98s.crl (hash: XquRK4ZhHskBMbEqEYtw7doCblV0JFvvQvP6UBOHTsc=) 2: Q49WFQb687C-dROudfCZNH5xgk0.roa (hash: 6gTPlVN38oZH6TKqFrihOGk/Y67bvVr39M4N4cXiKUY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.crl rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.mft rsync://rpki.ripe.net/repository/DEFAULT/5Lqtn19putkQB1-OHYBetB0N98s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 19:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:08:d5:21:eb:fe:5a:97:16:92:ef:3e:33:17:0c:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4baad9f5f69bad910075f8e1d805eb41d0df7cb Validity Not Before: Dec 26 19:00:41 2025 GMT Not After : Dec 27 19:00:41 2025 GMT Subject: CN=99ef818f9be496e9d7c3784f76c26dbec72c1296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d0:95:36:21:79:74:f2:76:e5:d7:3b:7b:fc: 32:9b:d2:09:43:e2:c4:f3:70:21:e2:5d:32:f8:95: e8:0f:37:73:47:a8:50:ae:cd:6d:df:83:75:d2:ba: 5b:09:01:4d:a0:c3:4e:9a:a7:48:5f:a9:dc:33:c2: 6e:a4:69:1f:e0:c3:b0:da:c8:1c:66:93:59:3f:7d: 63:37:40:03:5d:87:9c:d3:37:ee:88:a7:ad:1b:ee: 5c:6c:93:3f:8b:f8:ee:a2:3d:78:10:0c:79:11:9d: d8:6e:8f:f6:01:2c:50:29:43:e8:9d:b9:ed:27:1c: e1:f1:64:c4:2e:ab:b5:f0:7e:99:ad:ce:18:a6:42: 60:8d:66:50:f5:d8:01:ff:4a:ad:d7:6b:22:74:ac: b2:81:51:2c:c5:55:32:8d:ca:1d:48:b0:e4:00:45: 61:36:ca:e9:7f:b6:58:8d:dc:3c:ed:6d:0a:81:da: e0:c1:1b:7f:68:6b:88:11:3b:0c:d4:e0:61:1e:0c: a5:dc:e6:df:de:76:45:19:df:50:c6:5d:97:4c:08: a4:87:23:2a:46:9d:a1:df:82:e8:c7:ad:5c:60:35: dd:f7:c7:1d:a9:c5:76:17:a2:47:fd:ab:22:ac:ef: 0f:00:f5:c7:e5:2e:e0:96:30:82:49:5d:a9:20:ce: c6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:EF:81:8F:9B:E4:96:E9:D7:C3:78:4F:76:C2:6D:BE:C7:2C:12:96 X509v3 Authority Key Identifier: keyid:E4:BA:AD:9F:5F:69:BA:D9:10:07:5F:8E:1D:80:5E:B4:1D:0D:F7:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Lqtn19putkQB1-OHYBetB0N98s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:a1:ba:05:f1:ae:57:a1:8e:8d:e4:fb:1f:49:71:b3:65:c8: 68:8e:a3:6d:32:e7:f9:6c:6e:3e:ae:11:1e:b1:3a:5e:33:52: d2:ab:19:b7:6f:43:92:1f:db:56:3b:31:1d:81:6f:ef:1e:12: a5:b2:2d:fb:42:a1:e7:67:de:4c:66:58:ea:e9:ce:5e:4d:42: 3f:2c:49:93:3b:06:52:17:c9:ed:d0:46:0e:fe:78:9c:2b:64: c9:7a:f1:79:32:76:a0:2e:fc:7e:e9:42:2d:c8:b8:9d:79:ad: e6:55:6e:68:6c:cc:ce:9f:f1:fd:3e:5f:9f:fe:88:34:a2:6b: 8a:e7:59:56:b6:69:ed:14:0f:64:31:d8:3e:1c:dd:ed:8a:ba: 63:90:cb:9e:88:25:1a:df:9e:d4:a6:24:9d:7e:d2:94:12:09: c5:81:3b:18:f0:51:57:05:36:1e:76:6d:c6:33:d6:c6:e1:2c: 79:ad:e1:97:e9:c8:ad:77:16:e2:aa:db:a6:46:a8:c8:cb:98: 55:0c:ba:c3:20:8a:db:98:e5:2e:c9:8c:1f:df:61:74:50:8c: 45:19:f6:d1:8a:a1:fa:67:d1:4c:42:16:a2:58:f3:d7:78:4d: b3:3a:ea:40:27:23:5e:62:38:42:95:bf:b4:ab:b5:2c:ee:8c: 15:b3:07:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcCNUh6/5alxaS7z4zFwxhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YmFhZDlmNWY2OWJhZDkxMDA3NWY4ZTFkODA1ZWI0MWQw ZGY3Y2IwHhcNMjUxMjI2MTkwMDQxWhcNMjUxMjI3MTkwMDQxWjAzMTEwLwYDVQQD Eyg5OWVmODE4ZjliZTQ5NmU5ZDdjMzc4NGY3NmMyNmRiZWM3MmMxMjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNCVNiF5dPJ25dc7e/wym9IJQ+LE 83Ah4l0y+JXoDzdzR6hQrs1t34N10rpbCQFNoMNOmqdIX6ncM8JupGkf4MOw2sgc ZpNZP31jN0ADXYec0zfuiKetG+5cbJM/i/juoj14EAx5EZ3Ybo/2ASxQKUPonbnt Jxzh8WTELqu18H6Zrc4YpkJgjWZQ9dgB/0qt12sidKyygVEsxVUyjcodSLDkAEVh Nsrpf7ZYjdw87W0KgdrgwRt/aGuIETsM1OBhHgyl3Obf3nZFGd9Qxl2XTAikhyMq Rp2h34Lox61cYDXd98cdqcV2F6JH/asirO8PAPXH5S7gljCCSV2pIM7G4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJnvgY+b5Jbp18N4T3bCbb7HLBKWMB8GA1UdIwQY MBaAFOS6rZ9fabrZEAdfjh2AXrQdDffLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUxxdG4xOXB1dGtRQjEtT0hZQmV0QjBOOThzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9lYmRjYTYtMjU4OC00MGEwLWExOWUt NmQwY2JkOGJkNDkyLzEvNUxxdG4xOXB1dGtRQjEtT0hZQmV0QjBOOThzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9lYmRjYTYtMjU4OC00MGEwLWExOWUtNmQwY2JkOGJkNDky LzEvNUxxdG4xOXB1dGtRQjEtT0hZQmV0QjBOOThzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiqG6BfGu V6GOjeT7H0lxs2XIaI6jbTLn+WxuPq4RHrE6XjNS0qsZt29Dkh/bVjsxHYFv7x4S pbIt+0Kh52feTGZY6unOXk1CPyxJkzsGUhfJ7dBGDv54nCtkyXrxeTJ2oC78fulC Lci4nXmt5lVuaGzMzp/x/T5fn/6INKJriudZVrZp7RQPZDHYPhzd7Yq6Y5DLnogl Gt+e1KYknX7SlBIJxYE7GPBRVwU2HnZtxjPWxuEsea3hl+nIrXcW4qrbpkaoyMuY VQy6wyCK25jlLsmMH99hdFCMRRn20Yqh+mfRTEIWoljz13hNszrqQCcjXmI4QpW/ tKu1LO6MFbMHlQ== -----END CERTIFICATE-----Generated at Sat Dec 27 02:36:13 2025 by rpki-client