This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft File: 5_2MB2tTpxIbVBePW2p-KRNbzOw.mft (raw, json) Hash identifier: 5a4LZkJwmWGf+UFg1YlW7WDCu5YMJ/F0ZWGNLrTCZFg= Subject key identifier: 6F:01:EB:CF:F7:D9:BE:43:AA:87:83:C1:E6:BF:78:C3:62:8A:98:09 Authority key identifier: E7:FD:8C:07:6B:53:A7:12:1B:54:17:8F:5B:6A:7E:29:13:5B:CC:EC Certificate issuer: /CN=e7fd8c076b53a7121b54178f5b6a7e29135bccec Certificate serial: 019B1049D30C72960D14EC1BEDEC7778DB4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_2MB2tTpxIbVBePW2p-KRNbzOw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft Manifest number: 0221 Signing time: Fri 12 Dec 2025 02:00:32 +0000 Manifest this update: Fri 12 Dec 2025 02:00:32 +0000 Manifest next update: Sat 13 Dec 2025 02:00:32 +0000 Files and hashes: 1: 5_2MB2tTpxIbVBePW2p-KRNbzOw.crl (hash: EqGry5lYmffVy+A4WeVv+DUDwV4fMTnqzIK4SSW5ySY=) 2: G8yJSDi_qI6C3zmPW3k-kpCis5w.roa (hash: qlE3sGxxzJA/T2NGOl/URoTdfcV9KKmY+S6/Dr5mN74=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.crl rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft rsync://rpki.ripe.net/repository/DEFAULT/5_2MB2tTpxIbVBePW2p-KRNbzOw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:49:d3:0c:72:96:0d:14:ec:1b:ed:ec:77:78:db:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7fd8c076b53a7121b54178f5b6a7e29135bccec Validity Not Before: Dec 12 02:00:32 2025 GMT Not After : Dec 13 02:00:32 2025 GMT Subject: CN=6f01ebcff7d9be43aa8783c1e6bf78c3628a9809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c2:9e:1b:0c:a3:b6:88:a2:3a:1c:de:71:d7: 9d:e8:e5:a3:90:76:9d:e5:c4:ad:f1:41:f4:7d:c3: cb:76:ad:4b:e9:85:8d:aa:65:49:1a:fa:e4:bb:98: 04:4d:2f:e1:06:f7:f1:7a:7e:82:27:57:ec:76:87: 18:14:b3:b3:1c:7e:f7:68:be:c8:ad:99:a8:a6:96: 98:34:92:18:f1:89:b0:93:b3:9a:44:d3:55:00:e0: 6d:c0:1d:c4:e5:1f:ec:81:87:cb:83:c3:b2:f7:71: 60:74:88:7f:fd:5d:7a:ec:65:ce:46:cb:b4:c7:96: 8a:3d:f0:e0:77:f6:d0:b9:c8:a6:1a:16:ed:dc:66: 85:d3:0e:83:1b:2a:92:63:a4:72:f6:e7:3e:82:5e: 4a:67:06:50:00:f4:ab:5d:3f:19:39:b3:bf:38:ab: 4f:4a:cf:62:f7:44:fa:ff:41:5e:7d:3e:d3:ab:c3: fc:e7:37:74:5e:f5:ed:ad:06:d9:6b:fa:30:8a:00: 85:70:ec:69:2e:1a:11:79:7a:42:96:3e:5b:5a:64: c3:2e:11:c4:2a:52:74:c4:8b:c4:f2:d2:1f:a1:35: 25:64:f9:a5:03:9a:06:4a:96:15:78:63:1f:4d:ce: 1f:de:88:89:7d:d2:3d:79:65:d4:88:39:f0:80:d6: fd:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:01:EB:CF:F7:D9:BE:43:AA:87:83:C1:E6:BF:78:C3:62:8A:98:09 X509v3 Authority Key Identifier: keyid:E7:FD:8C:07:6B:53:A7:12:1B:54:17:8F:5B:6A:7E:29:13:5B:CC:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_2MB2tTpxIbVBePW2p-KRNbzOw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:9d:de:0a:0e:00:18:4a:91:a7:d8:aa:06:05:d2:c0:c0:3b: e2:ce:25:f8:63:36:6a:5d:c4:e9:71:a6:e2:90:22:a9:03:15: 20:0f:05:ce:eb:af:9b:2e:a5:5f:9e:9d:93:a3:60:33:ba:95: 35:e2:7a:b9:c0:d4:5e:9a:4c:43:d2:14:34:2e:88:ca:a5:74: be:3d:c0:9e:91:5b:ed:90:50:fb:26:ce:9e:1e:c5:0d:59:f8: c6:9f:21:19:ee:a9:7d:08:65:af:2d:f9:24:f4:92:85:3e:b3: 0e:73:2d:c5:91:78:41:cc:a1:a7:c3:6c:7a:c9:0e:b1:19:22: ab:07:35:49:22:75:a9:b4:79:10:da:68:54:28:ef:1a:af:13: 53:06:2c:58:36:c0:7d:e7:ce:75:da:a6:05:c5:92:05:d6:c0: 79:3a:38:9e:02:13:65:33:f1:a0:1b:f3:97:e0:dc:14:13:d7: d1:d5:26:5d:5c:37:d8:78:ed:b1:ce:12:8f:72:57:d7:ad:8e: b9:60:6b:84:66:25:a7:5e:b1:3b:07:18:9c:6b:27:ac:af:ec: 02:81:09:71:d9:c1:30:d9:3c:d0:b1:8a:12:43:29:48:ec:18: 0b:ea:97:57:dc:39:42:bc:bc:47:ab:46:e8:0b:f9:70:b9:d8: dd:e6:0b:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQSdMMcpYNFOwb7ex3eNtPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3ZmQ4YzA3NmI1M2E3MTIxYjU0MTc4ZjViNmE3ZTI5MTM1 YmNjZWMwHhcNMjUxMjEyMDIwMDMyWhcNMjUxMjEzMDIwMDMyWjAzMTEwLwYDVQQD Eyg2ZjAxZWJjZmY3ZDliZTQzYWE4NzgzYzFlNmJmNzhjMzYyOGE5ODA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMKeGwyjtoiiOhzecded6OWjkHad 5cSt8UH0fcPLdq1L6YWNqmVJGvrku5gETS/hBvfxen6CJ1fsdocYFLOzHH73aL7I rZmoppaYNJIY8Ymwk7OaRNNVAOBtwB3E5R/sgYfLg8Oy93FgdIh//V167GXORsu0 x5aKPfDgd/bQucimGhbt3GaF0w6DGyqSY6Ry9uc+gl5KZwZQAPSrXT8ZObO/OKtP Ss9i90T6/0FefT7Tq8P85zd0XvXtrQbZa/owigCFcOxpLhoReXpClj5bWmTDLhHE KlJ0xIvE8tIfoTUlZPmlA5oGSpYVeGMfTc4f3oiJfdI9eWXUiDnwgNb9VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG8B68/32b5DqoeDwea/eMNiipgJMB8GA1UdIwQY MBaAFOf9jAdrU6cSG1QXj1tqfikTW8zsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNV8yTUIydFRweEliVkJlUFcycC1LUk5iek93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9iNmFiN2ItYjM0OC00NzYzLTk3ZWMt MTZjNjNjNDI2YzMzLzEvNV8yTUIydFRweEliVkJlUFcycC1LUk5iek93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9iNmFiN2ItYjM0OC00NzYzLTk3ZWMtMTZjNjNjNDI2YzMz LzEvNV8yTUIydFRweEliVkJlUFcycC1LUk5iek93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApp3eCg4A GEqRp9iqBgXSwMA74s4l+GM2al3E6XGm4pAiqQMVIA8Fzuuvmy6lX56dk6NgM7qV NeJ6ucDUXppMQ9IUNC6IyqV0vj3AnpFb7ZBQ+ybOnh7FDVn4xp8hGe6pfQhlry35 JPSShT6zDnMtxZF4Qcyhp8NseskOsRkiqwc1SSJ1qbR5ENpoVCjvGq8TUwYsWDbA fefOddqmBcWSBdbAeTo4ngITZTPxoBvzl+DcFBPX0dUmXVw32Hjtsc4Sj3JX162O uWBrhGYlp16xOwcYnGsnrK/sAoEJcdnBMNk80LGKEkMpSOwYC+qXV9w5Qry8R6tG 6Av5cLnY3eYLcA== -----END CERTIFICATE-----Generated at Fri Dec 12 04:03:54 2025 by rpki-client