This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft File: 5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft (raw, json) Hash identifier: b6QOxhG6Idj0HGKUmMwO/BSXd0DH6NWHtCCWlusXzLw= Subject key identifier: DF:BB:6A:2C:FB:55:5A:60:71:8E:18:83:37:85:4D:36:D7:CB:B9:7F Authority key identifier: E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2 Certificate issuer: /CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2 Certificate serial: 019B1A603176B5CF8BC53E83E08C8A2A6800 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft Manifest number: 1781 Signing time: Sun 14 Dec 2025 01:01:10 +0000 Manifest this update: Sun 14 Dec 2025 01:01:10 +0000 Manifest next update: Mon 15 Dec 2025 01:01:10 +0000 Files and hashes: 1: 5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl (hash: fgHOTlLuDFIMgVlf8jZN3FSeqFI4+hra7j3g+HHhxcY=) 2: Q5lprEAu1AjZg8eC8e9vCRTQc5c.roa (hash: 1TVaYcq6pwwmReP0rlqvmkebRDkja4y3qu5GJXEAYFk=) 3: ScDiG1bEMg_iYAnwZ5RqZ9iuBfE.roa (hash: M8oZJ8Uj/JF9chZaxOYRuKYLCgT5+KWo335qmSJiUXs=) 4: _jwv_lcEjeP6obJDvR7tAaQUU-k.roa (hash: 5K6HFH8TXSLWVxpMWf5RIreFCOahhdZCzVwIY3yAflg=) 5: a3iaEBF86wbe5VjQTp-OMfHJc1E.roa (hash: nuf4ev5fGHCC4PXZAB5L19yGP986oYjP7JfQB1/fdXU=) 6: a9_bN0F2h_Kug5sgN-Kpf5AuF0Y.roa (hash: f6TkQWvmEWMglWzfpXp6gmToVC7S2f1cCbDqMTnyBzg=) 7: lihzuQoSb7FSiRKzRwb1us4H1SM.roa (hash: KHb+Gcf8LKwRqmsQV3Dwa1dFj1b8D+2+U6h0xyQG13I=) 8: qi8JXs2yo200PkF0ybkWzT5gLbA.roa (hash: rDwlWPK/DQ56zjNjEs53TpTRvG/Y0OQ9Sl2iycPDuH4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 01:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:60:31:76:b5:cf:8b:c5:3e:83:e0:8c:8a:2a:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2 Validity Not Before: Dec 14 01:01:10 2025 GMT Not After : Dec 15 01:01:10 2025 GMT Subject: CN=dfbb6a2cfb555a60718e188337854d36d7cbb97f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:79:33:66:28:6b:c4:69:6f:37:db:75:d4:2b: 3c:ec:17:98:e2:c3:a9:69:19:5b:dc:8b:f7:06:0d: 17:6b:a5:2a:9d:6f:a2:3a:ae:1f:2c:d5:4d:93:9f: b1:51:11:c5:fa:eb:dd:52:24:7d:1a:54:ae:cf:a4: 0c:9e:a3:17:21:13:68:c8:43:5b:ec:be:60:fb:52: f4:1c:0c:6b:51:07:bc:8d:a1:1e:b1:16:9f:b2:23: 06:e9:85:5f:e6:47:7b:13:12:11:a7:fa:f8:65:a9: 0e:71:fc:85:77:ea:4b:c3:80:41:09:d1:06:e9:7c: 63:b2:a0:38:23:b5:73:96:6c:a7:be:22:5e:ae:49: 6c:46:ea:e8:1d:91:17:5f:d9:76:5c:5a:9b:89:1c: f6:7b:87:8f:d6:89:ff:1f:03:2a:f3:2b:7c:03:3a: 8f:90:a3:d7:08:b0:ac:6e:b2:1c:93:01:22:7a:71: 45:09:d1:b7:93:83:7d:bb:d3:23:41:4e:fc:43:4c: 17:33:df:7e:71:93:24:1a:38:5b:00:ca:3b:37:91: 94:c2:7e:b8:8c:f8:70:eb:8d:17:23:8b:8b:fa:f9: 75:97:d7:3f:10:03:80:2c:99:f3:1d:ae:3e:f1:0d: dd:55:e5:da:42:79:68:4d:32:c1:07:4a:da:75:a3: a4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:BB:6A:2C:FB:55:5A:60:71:8E:18:83:37:85:4D:36:D7:CB:B9:7F X509v3 Authority Key Identifier: keyid:E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:09:e6:b3:2e:8a:91:73:97:a5:2b:60:78:f8:8e:9b:9d:56: 6f:85:04:d3:21:54:8a:2e:bd:d2:28:30:49:c5:4e:4e:d1:39: 48:cf:d9:96:7d:1b:89:27:d9:0e:8d:0d:09:83:f9:fb:66:62: 98:aa:76:ef:05:f8:8b:87:5d:3d:b0:83:d4:06:af:2e:16:af: a8:c2:3f:58:85:00:0d:b5:a0:47:c1:c9:d9:d5:f9:98:df:76: dc:14:38:e9:9e:a4:67:cf:4f:41:3d:d8:8e:a6:58:ec:79:f1: 55:4b:e5:8c:49:b3:d1:a0:07:96:00:bb:b4:01:fa:0a:b4:7d: 93:e0:c0:af:e7:42:e4:16:26:c7:08:23:09:a2:20:36:f0:d1: 58:f3:dc:b9:93:4d:a5:92:2b:4a:23:ba:e6:fe:b3:1e:99:12: 2d:67:81:80:8c:ed:c2:da:3d:e3:1b:1f:c6:66:88:81:38:30: 74:b6:ed:68:bb:f8:1a:df:10:9e:aa:81:a2:fa:59:85:36:88: 64:08:84:27:d0:80:e8:59:92:1e:89:80:b6:c0:d3:f6:7f:23: 34:3b:3a:e5:d1:16:f9:35:a0:e0:3b:14:c6:76:97:d3:7a:d5: b5:b9:71:4c:42:a9:62:66:e3:7b:4a:d0:79:24:a8:2b:00:95: 51:0a:ea:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaYDF2tc+LxT6D4IyKKmgAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YTFiMzY1NTJmOWRhY2NiOTJhYzVjM2I0NGI0MjZkNjQz NzQ5ZTIwHhcNMjUxMjE0MDEwMTEwWhcNMjUxMjE1MDEwMTEwWjAzMTEwLwYDVQQD EyhkZmJiNmEyY2ZiNTU1YTYwNzE4ZTE4ODMzNzg1NGQzNmQ3Y2JiOTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3kzZihrxGlvN9t11Cs87BeY4sOp aRlb3Iv3Bg0Xa6UqnW+iOq4fLNVNk5+xURHF+uvdUiR9GlSuz6QMnqMXIRNoyENb 7L5g+1L0HAxrUQe8jaEesRafsiMG6YVf5kd7ExIRp/r4ZakOcfyFd+pLw4BBCdEG 6XxjsqA4I7VzlmynviJerklsRuroHZEXX9l2XFqbiRz2e4eP1on/HwMq8yt8AzqP kKPXCLCsbrIckwEienFFCdG3k4N9u9MjQU78Q0wXM99+cZMkGjhbAMo7N5GUwn64 jPhw640XI4uL+vl1l9c/EAOALJnzHa4+8Q3dVeXaQnloTTLBB0radaOkswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN+7aiz7VVpgcY4YgzeFTTbXy7l/MB8GA1UdIwQY MBaAFOWhs2VS+drMuSrFw7RLQm1kN0niMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWFHelpWTDUyc3k1S3NYRHRFdENiV1EzU2VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iOGVhNWItM2RkNC00Mzc0LWE3OTMt YzVlNmQyM2Y4YjA5LzEvNWFHelpWTDUyc3k1S3NYRHRFdENiV1EzU2VJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9iOGVhNWItM2RkNC00Mzc0LWE3OTMtYzVlNmQyM2Y4YjA5 LzEvNWFHelpWTDUyc3k1S3NYRHRFdENiV1EzU2VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgQnmsy6K kXOXpStgePiOm51Wb4UE0yFUii690igwScVOTtE5SM/Zln0biSfZDo0NCYP5+2Zi mKp27wX4i4ddPbCD1AavLhavqMI/WIUADbWgR8HJ2dX5mN923BQ46Z6kZ89PQT3Y jqZY7HnxVUvljEmz0aAHlgC7tAH6CrR9k+DAr+dC5BYmxwgjCaIgNvDRWPPcuZNN pZIrSiO65v6zHpkSLWeBgIztwto94xsfxmaIgTgwdLbtaLv4Gt8QnqqBovpZhTaI ZAiEJ9CA6FmSHomAtsDT9n8jNDs65dEW+TWg4DsUxnaX03rVtblxTEKpYmbje0rQ eSSoKwCVUQrq0w== -----END CERTIFICATE-----Generated at Sun Dec 14 08:22:30 2025 by rpki-client