This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft File: 5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft (raw, json) Hash identifier: jNkHfOPdXDZAuR7sunE0X6zRCfnqq9nHa79wxkVawMg= Subject key identifier: 01:DB:2C:36:94:BE:27:FC:FA:AF:E1:BD:64:D4:57:59:DA:CE:77:0D Authority key identifier: E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29 Certificate issuer: /CN=e4ff5bbf540c65954b9913a68c24d174de97d829 Certificate serial: 019B1E0614FA52C6CC3DC83AA52BD5657D46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft Manifest number: 0EF9 Signing time: Sun 14 Dec 2025 18:01:13 +0000 Manifest this update: Sun 14 Dec 2025 18:01:13 +0000 Manifest next update: Mon 15 Dec 2025 18:01:13 +0000 Files and hashes: 1: 5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl (hash: HG+vT9Rc1o4o6JMzKXdzMwf07BLt3k2NDSflR2UnBao=) 2: vhYKMa2Z6sRh78styyEQC2ay13Y.roa (hash: q6ISR7QoOYSfixxm6mwluVodtW8Dzcm/t68jGp50cGg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 18:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:06:14:fa:52:c6:cc:3d:c8:3a:a5:2b:d5:65:7d:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4ff5bbf540c65954b9913a68c24d174de97d829 Validity Not Before: Dec 14 18:01:13 2025 GMT Not After : Dec 15 18:01:13 2025 GMT Subject: CN=01db2c3694be27fcfaafe1bd64d45759dace770d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8a:22:37:18:cb:d4:0d:89:dd:00:b7:c4:5f: 4e:23:97:11:53:7e:20:91:43:d3:f5:b7:49:98:5b: e8:fe:f6:6a:dd:36:1e:ac:c7:20:5f:83:05:67:78: 5c:2f:ad:8d:1f:b9:bf:ed:19:4c:d3:82:78:b5:76: 92:0a:dc:d7:64:3d:f5:22:aa:33:83:1e:29:e6:81: 35:08:e3:26:96:39:14:20:f8:70:21:3a:28:7b:c1: 8f:95:99:44:de:2c:04:4c:b2:61:57:f7:6b:24:c7: 07:6d:6a:16:4d:ac:56:52:99:f1:1c:7c:78:ec:6a: 9e:97:3c:13:95:c4:3f:d3:80:60:ba:b8:11:7c:2c: 0f:fb:5b:02:46:48:f3:46:5b:3f:13:6d:95:80:74: 52:f4:5c:48:01:2c:dd:88:da:02:90:d1:1a:86:3d: ff:10:d1:af:36:ad:79:58:ba:69:cb:9b:76:03:fd: d0:65:c7:b8:b1:79:5f:db:bf:6e:b8:9f:6c:21:66: 6d:d5:03:5c:9b:9a:c8:c7:35:31:13:6d:95:a2:43: 2e:89:11:00:6e:95:d8:84:b2:54:7a:0a:37:d1:3c: 1e:da:46:1e:e6:f6:08:90:11:38:8e:2c:81:42:96: d8:1e:5e:6d:e9:8d:56:b3:21:bb:84:fe:59:94:44: 90:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:DB:2C:36:94:BE:27:FC:FA:AF:E1:BD:64:D4:57:59:DA:CE:77:0D X509v3 Authority Key Identifier: keyid:E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:d4:3c:d8:7f:ce:7b:a2:13:b0:d9:c6:7f:af:f1:e4:af:1d: c0:3c:80:2c:3e:0b:0c:5c:77:7a:00:54:1a:43:62:c5:3a:ca: 92:d9:c9:ea:73:44:1a:31:40:2d:c2:99:ad:fa:48:32:16:ca: 02:39:8d:bb:af:c0:39:01:ce:69:b8:60:30:9d:f8:20:77:36: 23:d6:64:38:18:eb:c3:8f:8b:46:77:0a:ae:44:fd:cd:04:3a: c9:f0:b6:5d:ee:cd:90:2c:e4:57:82:b2:ec:66:23:fa:b6:45: 99:df:ee:14:91:c8:bb:ad:e9:be:26:40:b6:46:90:0a:b3:02: 9c:8a:2b:1d:60:33:27:44:ea:3b:a4:b9:bd:c3:3c:a6:82:41: bf:32:9b:b4:2e:c9:05:e6:84:c7:0e:ca:9a:49:aa:1d:89:ef: 89:d0:8e:98:79:99:6f:f9:05:43:95:b9:bf:51:43:37:91:36: 9b:66:6d:31:26:e6:45:ac:2d:e2:88:3c:1e:c7:60:75:ab:03: 88:43:6c:41:27:67:47:48:ee:66:0a:51:79:a5:f4:2a:57:1b: 67:78:d5:7f:87:5d:e3:8b:95:5b:27:34:1f:40:fc:ce:2a:9c: bb:1a:0a:de:05:e8:29:a7:f9:59:16:fd:f3:af:f4:d8:e9:d2: 1a:7c:1c:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZseBhT6UsbMPcg6pSvVZX1GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ZmY1YmJmNTQwYzY1OTU0Yjk5MTNhNjhjMjRkMTc0ZGU5 N2Q4MjkwHhcNMjUxMjE0MTgwMTEzWhcNMjUxMjE1MTgwMTEzWjAzMTEwLwYDVQQD EygwMWRiMmMzNjk0YmUyN2ZjZmFhZmUxYmQ2NGQ0NTc1OWRhY2U3NzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYoiNxjL1A2J3QC3xF9OI5cRU34g kUPT9bdJmFvo/vZq3TYerMcgX4MFZ3hcL62NH7m/7RlM04J4tXaSCtzXZD31Iqoz gx4p5oE1COMmljkUIPhwITooe8GPlZlE3iwETLJhV/drJMcHbWoWTaxWUpnxHHx4 7GqelzwTlcQ/04BgurgRfCwP+1sCRkjzRls/E22VgHRS9FxIASzdiNoCkNEahj3/ ENGvNq15WLppy5t2A/3QZce4sXlf279uuJ9sIWZt1QNcm5rIxzUxE22VokMuiREA bpXYhLJUego30Twe2kYe5vYIkBE4jiyBQpbYHl5t6Y1WsyG7hP5ZlESQXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAHbLDaUvif8+q/hvWTUV1nazncNMB8GA1UdIwQY MBaAFOT/W79UDGWVS5kTpowk0XTel9gpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVA5YnYxUU1aWlZMbVJPbWpDVFJkTjZYMkNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC80MzkzZTgtNWY1OS00ZDU3LTgxOTgt NWMwYzQ2ZDA0ZWUxLzEvNVA5YnYxUU1aWlZMbVJPbWpDVFJkTjZYMkNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC80MzkzZTgtNWY1OS00ZDU3LTgxOTgtNWMwYzQ2ZDA0ZWUx LzEvNVA5YnYxUU1aWlZMbVJPbWpDVFJkTjZYMkNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe9Q82H/O e6ITsNnGf6/x5K8dwDyALD4LDFx3egBUGkNixTrKktnJ6nNEGjFALcKZrfpIMhbK AjmNu6/AOQHOabhgMJ34IHc2I9ZkOBjrw4+LRncKrkT9zQQ6yfC2Xe7NkCzkV4Ky 7GYj+rZFmd/uFJHIu63pviZAtkaQCrMCnIorHWAzJ0TqO6S5vcM8poJBvzKbtC7J BeaExw7KmkmqHYnvidCOmHmZb/kFQ5W5v1FDN5E2m2ZtMSbmRawt4og8HsdgdasD iENsQSdnR0juZgpReaX0KlcbZ3jVf4dd44uVWyc0H0D8ziqcuxoK3gXoKaf5WRb9 86/02OnSGnwcZg== -----END CERTIFICATE-----Generated at Mon Dec 15 04:52:21 2025 by rpki-client