This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b0d5a1-5fb2-4d31-904e-7037ef49ac2d/1/5vxHDvW4iHmlId3t94cHhZubDjc.mft File: 5vxHDvW4iHmlId3t94cHhZubDjc.mft (raw, json) Hash identifier: P9VSsqQxMCwfsdxXtcDfMqNlPkxdv4iGclvuD7HzlQc= Subject key identifier: 6A:25:A8:15:5E:E7:D1:FA:BF:53:7D:7C:8B:37:17:BD:09:E9:79:72 Authority key identifier: E6:FC:47:0E:F5:B8:88:79:A5:21:DD:ED:F7:87:07:85:9B:9B:0E:37 Certificate issuer: /CN=e6fc470ef5b88879a521ddedf78707859b9b0e37 Certificate serial: 019B593ED9B707CDEE42DCBE38681E6B1DC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vxHDvW4iHmlId3t94cHhZubDjc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b0d5a1-5fb2-4d31-904e-7037ef49ac2d/1/5vxHDvW4iHmlId3t94cHhZubDjc.mft Manifest number: 010D Signing time: Fri 26 Dec 2025 06:00:49 +0000 Manifest this update: Fri 26 Dec 2025 06:00:49 +0000 Manifest next update: Sat 27 Dec 2025 06:00:49 +0000 Files and hashes: 1: 5vxHDvW4iHmlId3t94cHhZubDjc.crl (hash: UfRjCawhxxGPsf4F2uoWrY0FSfdDa3Hg/CMp3Kv1Lf4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b0d5a1-5fb2-4d31-904e-7037ef49ac2d/1/5vxHDvW4iHmlId3t94cHhZubDjc.crl rsync://rpki.ripe.net/repository/DEFAULT/39/b0d5a1-5fb2-4d31-904e-7037ef49ac2d/1/5vxHDvW4iHmlId3t94cHhZubDjc.mft rsync://rpki.ripe.net/repository/DEFAULT/5vxHDvW4iHmlId3t94cHhZubDjc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:3e:d9:b7:07:cd:ee:42:dc:be:38:68:1e:6b:1d:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6fc470ef5b88879a521ddedf78707859b9b0e37 Validity Not Before: Dec 26 06:00:49 2025 GMT Not After : Dec 27 06:00:49 2025 GMT Subject: CN=6a25a8155ee7d1fabf537d7c8b3717bd09e97972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:05:af:20:dc:70:64:df:78:2e:ec:9b:98:b4: b8:7d:9a:51:ed:3d:b9:10:b3:b9:73:e9:20:5e:29: 3d:81:26:19:1f:8b:d6:86:06:d7:d5:44:fe:6a:d3: eb:86:09:b3:6f:4e:69:da:94:c1:fd:4f:0c:79:6a: 47:d0:d0:ff:f0:86:b9:50:ad:09:a4:e0:94:d3:da: 45:d5:bb:f9:00:c8:a5:85:05:19:0f:cb:fc:8b:8c: 4f:ce:51:dd:b9:0b:6e:32:58:58:88:dd:92:8d:67: cf:11:21:04:dd:4b:51:95:5b:ca:4f:6c:50:5b:58: 56:3f:79:86:d8:ba:ab:88:6a:28:87:58:35:5b:c8: ce:73:be:f0:cb:66:0a:75:77:1e:66:14:26:33:6b: ae:9c:47:9e:7c:4a:23:44:77:aa:d1:a2:96:dd:ef: f5:52:78:4e:f8:21:42:bf:8a:db:e0:91:ee:6a:aa: 7c:a2:c6:52:8b:95:db:28:26:71:3e:b0:56:1d:f6: 2c:3a:26:6f:cd:2c:d8:5f:c0:da:91:d7:0f:bd:77: eb:57:44:21:6b:24:6f:69:b1:98:3b:c0:a7:a7:9a: e9:bd:52:d8:50:c4:35:27:3c:be:18:ea:d6:d8:16: 41:0a:a9:30:37:b4:cb:c4:7a:77:5c:1d:b1:63:8e: 5b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:25:A8:15:5E:E7:D1:FA:BF:53:7D:7C:8B:37:17:BD:09:E9:79:72 X509v3 Authority Key Identifier: keyid:E6:FC:47:0E:F5:B8:88:79:A5:21:DD:ED:F7:87:07:85:9B:9B:0E:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vxHDvW4iHmlId3t94cHhZubDjc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b0d5a1-5fb2-4d31-904e-7037ef49ac2d/1/5vxHDvW4iHmlId3t94cHhZubDjc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b0d5a1-5fb2-4d31-904e-7037ef49ac2d/1/5vxHDvW4iHmlId3t94cHhZubDjc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:55:a3:76:ff:33:44:dc:dd:81:55:b3:31:32:fc:cc:28:2e: 4e:23:57:a5:1f:7c:70:25:b2:26:ee:05:06:fa:15:73:8e:f0: ce:0a:84:53:79:2b:a1:e6:04:3c:f1:92:ea:76:08:e9:ea:09: 08:ac:04:34:fd:08:da:e2:6b:a3:5b:e2:4c:6f:28:90:4c:ad: 5c:3d:23:64:4f:f9:5d:bf:aa:81:c1:cb:09:94:b7:3e:37:e6: d2:64:3d:59:5f:2d:9e:a3:dc:9f:62:a3:9c:e3:67:22:1b:9c: 8c:6d:b6:21:39:1b:7e:c1:fe:05:5e:95:aa:4c:8b:41:2a:56: 85:39:18:99:05:dd:be:2b:4d:01:b4:97:cf:6a:52:c1:0f:ab: 44:f6:c6:ea:9b:4a:28:d0:23:9b:08:52:c4:b6:2d:36:d8:55: 7a:87:4b:62:ed:49:3f:cd:68:88:4a:0a:10:78:f4:e4:37:4d: 00:fc:de:ba:50:49:dc:ee:de:29:c0:69:d6:3d:02:ca:a1:36: 32:47:8d:1d:f9:4b:7a:0f:82:77:b9:fa:e6:f3:fc:48:54:c1: 58:be:94:49:d4:46:cd:de:dc:8a:2b:b0:53:4f:07:3a:d7:c7: 62:b6:f1:2b:b3:51:4e:76:b2:a6:70:f2:6f:60:66:ef:44:5f: 47:ba:90:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZPtm3B83uQty+OGgeax3EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2ZmM0NzBlZjViODg4NzlhNTIxZGRlZGY3ODcwNzg1OWI5 YjBlMzcwHhcNMjUxMjI2MDYwMDQ5WhcNMjUxMjI3MDYwMDQ5WjAzMTEwLwYDVQQD Eyg2YTI1YTgxNTVlZTdkMWZhYmY1MzdkN2M4YjM3MTdiZDA5ZTk3OTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAWvINxwZN94LuybmLS4fZpR7T25 ELO5c+kgXik9gSYZH4vWhgbX1UT+atPrhgmzb05p2pTB/U8MeWpH0ND/8Ia5UK0J pOCU09pF1bv5AMilhQUZD8v8i4xPzlHduQtuMlhYiN2SjWfPESEE3UtRlVvKT2xQ W1hWP3mG2LqriGooh1g1W8jOc77wy2YKdXceZhQmM2uunEeefEojRHeq0aKW3e/1 UnhO+CFCv4rb4JHuaqp8osZSi5XbKCZxPrBWHfYsOiZvzSzYX8DakdcPvXfrV0Qh ayRvabGYO8Cnp5rpvVLYUMQ1Jzy+GOrW2BZBCqkwN7TLxHp3XB2xY45bhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGolqBVe59H6v1N9fIs3F70J6XlyMB8GA1UdIwQY MBaAFOb8Rw71uIh5pSHd7feHB4Wbmw43MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXZ4SER2VzRpSG1sSWQzdDk0Y0hoWnViRGpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9iMGQ1YTEtNWZiMi00ZDMxLTkwNGUt NzAzN2VmNDlhYzJkLzEvNXZ4SER2VzRpSG1sSWQzdDk0Y0hoWnViRGpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9iMGQ1YTEtNWZiMi00ZDMxLTkwNGUtNzAzN2VmNDlhYzJk LzEvNXZ4SER2VzRpSG1sSWQzdDk0Y0hoWnViRGpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAglWjdv8z RNzdgVWzMTL8zCguTiNXpR98cCWyJu4FBvoVc47wzgqEU3kroeYEPPGS6nYI6eoJ CKwENP0I2uJro1viTG8okEytXD0jZE/5Xb+qgcHLCZS3Pjfm0mQ9WV8tnqPcn2Kj nONnIhucjG22ITkbfsH+BV6VqkyLQSpWhTkYmQXdvitNAbSXz2pSwQ+rRPbG6ptK KNAjmwhSxLYtNthVeodLYu1JP81oiEoKEHj05DdNAPzeulBJ3O7eKcBp1j0CyqE2 MkeNHflLeg+Cd7n65vP8SFTBWL6USdRGzd7ciiuwU08HOtfHYrbxK7NRTnaypnDy b2Bm70RfR7qQwg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:27 2025 by rpki-client