This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft File: RS59h5IhKd-QxIcNoqdzhARySFg.mft (raw, json) Hash identifier: UKOSpJvjqavsXW7H5LAzkIzGg1wp68eCazS7F15UTt0= Subject key identifier: 79:D5:58:E5:E9:B5:90:F9:9F:50:2D:8C:BD:D8:B5:FF:FF:25:E4:6E Authority key identifier: 45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58 Certificate issuer: /CN=452e7d87922129df90c4870da2a7738404724858 Certificate serial: 019B4A044823DAF4E638605972C982BB6D69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft Manifest number: 05E4 Signing time: Tue 23 Dec 2025 07:02:32 +0000 Manifest this update: Tue 23 Dec 2025 07:02:32 +0000 Manifest next update: Wed 24 Dec 2025 07:02:32 +0000 Files and hashes: 1: 4ZmOjsOwgULv_B_QMvBBmXG9f0w.roa (hash: x7k9BFugEad58s4inzjh5oIEa4SPB8OHd1xRzbFg5n8=) 2: BuhLOhQsyBTsy289mKisTf0E47Q.roa (hash: aKuhf01k9TU7vUcFwfvkZL/qxoA5uBGJCmVJQlfg6tY=) 3: RS59h5IhKd-QxIcNoqdzhARySFg.crl (hash: l9v2F9EGpQDNIK0O9ui4sj+Smu6vLkBti3EOztUbjA4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:04:48:23:da:f4:e6:38:60:59:72:c9:82:bb:6d:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=452e7d87922129df90c4870da2a7738404724858 Validity Not Before: Dec 23 07:02:32 2025 GMT Not After : Dec 24 07:02:32 2025 GMT Subject: CN=79d558e5e9b590f99f502d8cbdd8b5ffff25e46e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:35:4f:40:46:a6:fa:89:3c:26:bb:31:39:e8: 32:31:76:cc:bb:54:5d:78:56:4f:25:ee:4c:ba:5c: 08:0c:aa:38:a5:72:de:25:3c:d9:38:a0:25:ff:9a: c9:7b:58:88:64:a4:4d:22:23:be:e4:a3:52:79:35: 03:e9:a2:37:9d:c8:50:c0:46:04:68:80:6e:9e:0a: 57:40:24:c5:f8:39:9c:ea:3c:b3:07:66:60:0d:99: b6:41:8c:76:ef:ba:a8:09:7a:3a:9e:8e:f3:54:5d: 4a:df:87:a3:05:23:a1:04:a2:8d:1f:02:92:0f:8b: bb:48:45:96:24:1a:01:a7:60:9f:3b:dd:05:0b:4f: 55:7f:c0:41:35:bd:8e:a8:db:87:f9:5e:b5:a5:48: d3:3c:00:92:b7:25:2f:67:53:29:a5:92:d7:8d:35: 29:11:ff:0e:54:a1:87:aa:60:5a:34:24:72:2e:ff: 89:7c:1f:8f:59:51:10:f3:7c:b7:1e:6d:70:56:45: b3:fd:64:56:d2:96:47:26:e1:9d:c1:6e:c5:36:ae: ed:d6:b9:f2:1f:1d:47:c7:5a:ee:1a:ae:cc:9b:9e: 65:d1:e7:cc:bd:0e:c1:22:26:6a:7b:a9:32:75:af: d0:04:81:4c:f0:e6:de:c0:a7:92:e5:f9:b4:4e:3e: 20:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:D5:58:E5:E9:B5:90:F9:9F:50:2D:8C:BD:D8:B5:FF:FF:25:E4:6E X509v3 Authority Key Identifier: keyid:45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:18:d4:ae:76:5a:3d:bc:ed:29:a1:e7:e4:f4:9c:19:b0:cf: 06:be:15:b7:b7:d7:e9:81:31:7e:e9:76:43:2b:78:5e:43:53: 29:26:d0:c3:c3:ab:e7:c1:ef:9b:c3:1e:de:14:ce:d8:40:ea: b1:d2:cd:33:49:e2:14:9b:d1:1b:ce:3a:c4:a5:9e:74:84:ba: db:8c:c7:9a:3d:3e:d0:57:66:0f:fb:bb:d6:c8:30:c9:c8:73: 90:8b:02:5f:7d:e5:23:e6:55:d5:f6:92:e4:bf:da:35:e3:9e: dd:d5:ca:63:86:39:a2:d0:e0:67:e5:88:aa:a8:15:3f:2e:b4: 91:cc:39:6c:bc:8d:b9:e3:13:ba:98:1e:b7:f2:ad:d1:44:1d: c0:ab:da:9c:a6:37:b8:35:db:0c:85:d2:be:a4:27:81:80:4f: 64:07:9b:f7:c9:37:86:c5:b8:8d:0c:82:ec:e6:c3:9d:5a:ab: 6c:c4:fe:ea:e2:fb:b9:17:c7:2b:ce:d5:9d:00:f3:61:e0:e5: 13:45:df:5d:d5:23:f3:6d:a6:ed:28:80:25:b9:46:67:7e:19: 17:c0:79:79:21:67:fd:a8:ad:ed:2c:73:a8:91:a7:61:6c:a0: ae:3e:bb:5c:29:a2:21:a3:20:3a:2f:c3:be:60:a4:de:14:b0: ac:ea:68:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKBEgj2vTmOGBZcsmCu21pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1MmU3ZDg3OTIyMTI5ZGY5MGM0ODcwZGEyYTc3Mzg0MDQ3 MjQ4NTgwHhcNMjUxMjIzMDcwMjMyWhcNMjUxMjI0MDcwMjMyWjAzMTEwLwYDVQQD Eyg3OWQ1NThlNWU5YjU5MGY5OWY1MDJkOGNiZGQ4YjVmZmZmMjVlNDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DVPQEam+ok8JrsxOegyMXbMu1Rd eFZPJe5MulwIDKo4pXLeJTzZOKAl/5rJe1iIZKRNIiO+5KNSeTUD6aI3nchQwEYE aIBungpXQCTF+Dmc6jyzB2ZgDZm2QYx277qoCXo6no7zVF1K34ejBSOhBKKNHwKS D4u7SEWWJBoBp2CfO90FC09Vf8BBNb2OqNuH+V61pUjTPACStyUvZ1MppZLXjTUp Ef8OVKGHqmBaNCRyLv+JfB+PWVEQ83y3Hm1wVkWz/WRW0pZHJuGdwW7FNq7t1rny Hx1Hx1ruGq7Mm55l0efMvQ7BIiZqe6kyda/QBIFM8ObewKeS5fm0Tj4gmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHnVWOXptZD5n1AtjL3Ytf//JeRuMB8GA1UdIwQY MBaAFEUufYeSISnfkMSHDaKnc4QEckhYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlM1OWg1SWhLZC1ReEljTm9xZHpoQVJ5U0ZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80ODc5NjItODU4OC00ZjBhLWJiN2Qt YWFhOGQzYTk0MGFjLzEvUlM1OWg1SWhLZC1ReEljTm9xZHpoQVJ5U0ZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC80ODc5NjItODU4OC00ZjBhLWJiN2QtYWFhOGQzYTk0MGFj LzEvUlM1OWg1SWhLZC1ReEljTm9xZHpoQVJ5U0ZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAxjUrnZa PbztKaHn5PScGbDPBr4Vt7fX6YExful2Qyt4XkNTKSbQw8Or58Hvm8Me3hTO2EDq sdLNM0niFJvRG846xKWedIS624zHmj0+0FdmD/u71sgwychzkIsCX33lI+ZV1faS 5L/aNeOe3dXKY4Y5otDgZ+WIqqgVPy60kcw5bLyNueMTupget/Kt0UQdwKvanKY3 uDXbDIXSvqQngYBPZAeb98k3hsW4jQyC7ObDnVqrbMT+6uL7uRfHK87VnQDzYeDl E0XfXdUj822m7SiAJblGZ34ZF8B5eSFn/ait7SxzqJGnYWygrj67XCmiIaMgOi/D vmCk3hSwrOpovw== -----END CERTIFICATE-----Generated at Tue Dec 23 11:04:43 2025 by rpki-client