This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft File: 5PFY7_xrOIKiWQweaQasoQjhjsI.mft (raw, json) Hash identifier: aKOMKe/54wr46g8IMVBtX4p2bBfC3LFN7tN+4vkx6mI= Subject key identifier: 4B:53:35:F9:37:BA:24:75:BB:35:2C:E1:D9:D6:C6:2B:34:E8:6D:17 Authority key identifier: E4:F1:58:EF:FC:6B:38:82:A2:59:0C:1E:69:06:AC:A1:08:E1:8E:C2 Certificate issuer: /CN=e4f158effc6b3882a2590c1e6906aca108e18ec2 Certificate serial: 019B35A0B56F52E9151DE9CD2D6354F3DD92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft Manifest number: 0D8B Signing time: Fri 19 Dec 2025 08:01:23 +0000 Manifest this update: Fri 19 Dec 2025 08:01:23 +0000 Manifest next update: Sat 20 Dec 2025 08:01:23 +0000 Files and hashes: 1: 5JIFCgXWGmsw1HA5JtADF-b1eJ4.roa (hash: kqtxwSPKoLsi1ph5t4VnO3iKewevISmebmIE1RpFWLg=) 2: 5PFY7_xrOIKiWQweaQasoQjhjsI.crl (hash: R4sQ4AhLBglVtki1hVUn/Kf0oSqbcOjL6AEKPxGK9FI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:b5:6f:52:e9:15:1d:e9:cd:2d:63:54:f3:dd:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4f158effc6b3882a2590c1e6906aca108e18ec2 Validity Not Before: Dec 19 08:01:23 2025 GMT Not After : Dec 20 08:01:23 2025 GMT Subject: CN=4b5335f937ba2475bb352ce1d9d6c62b34e86d17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5f:dc:11:fe:43:13:02:62:6c:5d:3c:09:c4: b0:73:f2:4b:d6:e4:1d:74:52:85:ca:ff:39:a1:4d: 4c:f6:f7:35:9a:a0:4f:34:f3:cd:6f:52:64:ba:f9: a6:19:e8:de:0e:1e:7f:51:67:da:fc:ad:8c:91:74: 9e:37:8f:fb:21:6d:3a:27:16:05:32:53:11:e5:07: 4f:ca:f5:4d:dc:68:ba:fd:57:8e:eb:ab:c7:4b:c5: 18:fe:0b:a8:46:a9:b4:a8:e9:ad:09:5d:eb:ec:7f: 84:7e:95:63:9e:d4:10:4f:f6:bb:40:8f:c7:21:9e: 56:2c:10:1c:e1:09:d8:4d:e6:0f:d5:dc:86:c1:77: 00:33:aa:50:02:1c:24:1d:86:0a:cd:ef:3c:5c:b0: ca:f3:a8:be:de:29:67:7a:cf:f0:9c:48:8b:65:9e: 5c:a9:af:09:4b:cd:68:5d:50:f6:cd:8e:ec:9f:84: 3f:90:6e:84:e0:c4:aa:c5:cf:d8:aa:d0:54:38:4d: 1b:ee:9f:1c:94:ac:4d:48:c2:e6:2f:d7:57:9e:ba: 61:94:aa:4f:b7:88:95:da:6c:87:d4:8e:7d:31:fb: f4:dc:5d:f3:36:a5:02:0c:b0:b3:e7:5e:68:62:63: ff:11:84:4c:9b:70:9b:3f:df:cd:67:c5:7a:a2:81: cd:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:53:35:F9:37:BA:24:75:BB:35:2C:E1:D9:D6:C6:2B:34:E8:6D:17 X509v3 Authority Key Identifier: keyid:E4:F1:58:EF:FC:6B:38:82:A2:59:0C:1E:69:06:AC:A1:08:E1:8E:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:80:82:0d:13:61:e3:39:b3:ac:bf:59:31:f8:b9:f7:2f:f1: ff:64:83:52:9b:ca:3a:96:48:80:4b:7a:41:a4:fc:a6:56:9b: 65:29:db:62:af:f2:a5:ce:c5:58:5f:60:ae:84:cc:17:9d:c7: 5d:6e:00:49:56:31:85:82:e2:a4:a0:0c:36:7e:de:45:3c:70: ce:a3:c2:40:15:d3:3f:4d:70:f6:36:90:1f:75:00:14:c5:9e: 3f:1e:2f:3a:52:62:54:72:b1:c9:9c:42:ff:e1:4a:4a:95:bc: 4d:f5:e8:28:9c:1e:39:7c:d2:22:85:64:6a:24:8c:18:5f:f4: 77:c9:96:39:09:40:55:93:a3:85:5c:a5:1f:99:8c:77:ee:17: ea:43:be:a7:0b:6e:d0:b8:d5:e0:2d:ce:27:e6:1e:e3:11:43: 2b:3e:8a:f0:d3:8f:cf:55:33:02:b5:43:97:62:57:61:5d:e4: 88:bb:27:2a:93:a5:0f:79:16:46:0e:37:d1:39:c6:19:d7:52: d9:f5:f5:97:ee:20:59:a5:ed:38:94:f8:f9:68:78:5b:82:e4: cf:8b:3c:f3:03:39:ef:2e:88:6b:af:93:f7:b9:7e:d4:d6:ce: 56:93:2c:04:38:95:98:a6:55:fd:84:93:64:0e:e8:2e:3c:70: ea:8c:9a:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oLVvUukVHenNLWNU892SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ZjE1OGVmZmM2YjM4ODJhMjU5MGMxZTY5MDZhY2ExMDhl MThlYzIwHhcNMjUxMjE5MDgwMTIzWhcNMjUxMjIwMDgwMTIzWjAzMTEwLwYDVQQD Eyg0YjUzMzVmOTM3YmEyNDc1YmIzNTJjZTFkOWQ2YzYyYjM0ZTg2ZDE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmF/cEf5DEwJibF08CcSwc/JL1uQd dFKFyv85oU1M9vc1mqBPNPPNb1JkuvmmGejeDh5/UWfa/K2MkXSeN4/7IW06JxYF MlMR5QdPyvVN3Gi6/VeO66vHS8UY/guoRqm0qOmtCV3r7H+EfpVjntQQT/a7QI/H IZ5WLBAc4QnYTeYP1dyGwXcAM6pQAhwkHYYKze88XLDK86i+3ilnes/wnEiLZZ5c qa8JS81oXVD2zY7sn4Q/kG6E4MSqxc/YqtBUOE0b7p8clKxNSMLmL9dXnrphlKpP t4iV2myH1I59Mfv03F3zNqUCDLCz515oYmP/EYRMm3CbP9/NZ8V6ooHNMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEtTNfk3uiR1uzUs4dnWxis06G0XMB8GA1UdIwQY MBaAFOTxWO/8aziColkMHmkGrKEI4Y7CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVBGWTdfeHJPSUtpV1F3ZWFRYXNvUWpoanNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi84M2MwMGUtZjQxNC00ODlkLTk0NzAt YzY5MzI0OTY1MWQ1LzEvNVBGWTdfeHJPSUtpV1F3ZWFRYXNvUWpoanNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi84M2MwMGUtZjQxNC00ODlkLTk0NzAtYzY5MzI0OTY1MWQ1 LzEvNVBGWTdfeHJPSUtpV1F3ZWFRYXNvUWpoanNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmoCCDRNh 4zmzrL9ZMfi59y/x/2SDUpvKOpZIgEt6QaT8plabZSnbYq/ypc7FWF9groTMF53H XW4ASVYxhYLipKAMNn7eRTxwzqPCQBXTP01w9jaQH3UAFMWePx4vOlJiVHKxyZxC /+FKSpW8TfXoKJweOXzSIoVkaiSMGF/0d8mWOQlAVZOjhVylH5mMd+4X6kO+pwtu 0LjV4C3OJ+Ye4xFDKz6K8NOPz1UzArVDl2JXYV3kiLsnKpOlD3kWRg430TnGGddS 2fX1l+4gWaXtOJT4+Wh4W4Lkz4s88wM57y6Ia6+T97l+1NbOVpMsBDiVmKZV/YST ZA7oLjxw6oya6A== -----END CERTIFICATE-----Generated at Fri Dec 19 13:12:24 2025 by rpki-client