This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft File: 5aHlGcnOd1ddifB89xjzsMyG7FU.mft (raw, json) Hash identifier: fx16FTr16YVRSgyI6EuzMkg5IKCn80AiFrDz2SifM60= Subject key identifier: 8A:65:71:21:AA:EA:6C:90:5C:E0:5B:58:8B:B9:FF:84:5D:C7:8C:03 Authority key identifier: E5:A1:E5:19:C9:CE:77:57:5D:89:F0:7C:F7:18:F3:B0:CC:86:EC:55 Certificate issuer: /CN=e5a1e519c9ce77575d89f07cf718f3b0cc86ec55 Certificate serial: 019B5975BDDDA8CF94285833476127AADDF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft Manifest number: 1795 Signing time: Fri 26 Dec 2025 07:00:47 +0000 Manifest this update: Fri 26 Dec 2025 07:00:47 +0000 Manifest next update: Sat 27 Dec 2025 07:00:47 +0000 Files and hashes: 1: 5aHlGcnOd1ddifB89xjzsMyG7FU.crl (hash: 5MV4y8WA5vlC8iMzGk7l3bkp9vaDnkUE1pJWBPg7xjA=) 2: uu25l9W5gSZu_tAy5o8jy6VhkvE.roa (hash: Mo0sHJu2Fpws6Go/Wkd7BWgvp/SCXCkUPd0a54ZzbWU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:bd:dd:a8:cf:94:28:58:33:47:61:27:aa:dd:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5a1e519c9ce77575d89f07cf718f3b0cc86ec55 Validity Not Before: Dec 26 07:00:47 2025 GMT Not After : Dec 27 07:00:47 2025 GMT Subject: CN=8a657121aaea6c905ce05b588bb9ff845dc78c03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:db:f7:21:38:ea:77:4b:f8:e6:76:72:16:f4: 36:50:72:31:5e:9b:b1:73:39:19:0f:62:ce:80:c6: 63:c1:57:2c:a3:6a:17:09:5c:92:04:00:c6:12:1a: c8:f4:77:c1:bc:42:f9:9e:14:e0:0e:fc:ab:91:4d: 1f:df:10:9a:3f:a7:c4:43:d3:cf:80:4c:e1:62:0b: 33:41:3b:cf:1d:7c:55:c1:72:d2:58:0e:41:f4:d9: 23:d9:1b:0d:4d:c1:59:dc:ee:86:42:1e:72:66:c9: f5:d9:d4:a4:9a:5f:85:c5:9f:c0:01:5a:6d:4c:f6: ef:18:4d:a4:fd:33:59:27:ac:05:06:d9:ac:7f:87: 04:35:90:48:0c:52:e4:11:e8:0b:54:d6:a4:b4:b1: 76:86:d2:2b:1b:1e:c1:f1:7b:4c:35:f2:64:36:a9: 68:93:89:af:3c:27:e2:17:e5:d4:5b:58:44:6e:9c: ca:12:be:ee:02:ef:4d:20:ad:cd:a9:71:1d:e4:fa: da:e7:4a:29:e5:d1:c6:12:d5:bc:06:d6:b1:27:3f: 41:46:49:d9:39:7d:23:33:92:44:05:1e:c2:a6:4d: 47:5d:50:45:01:fa:a6:17:7c:a8:b4:02:20:38:e2: b9:f8:78:f5:62:af:c2:53:a2:66:ec:6f:fc:16:18: b8:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:65:71:21:AA:EA:6C:90:5C:E0:5B:58:8B:B9:FF:84:5D:C7:8C:03 X509v3 Authority Key Identifier: keyid:E5:A1:E5:19:C9:CE:77:57:5D:89:F0:7C:F7:18:F3:B0:CC:86:EC:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:cf:9c:83:a7:6a:cf:77:78:6c:51:37:d0:b6:37:92:0e:f6: 93:cd:1e:54:66:a2:8e:a4:6a:ba:16:9a:68:f2:12:7c:d5:2b: bf:63:f3:d6:3e:c4:b0:9e:bd:75:13:93:63:94:d3:5f:d2:b3: f3:f0:8e:24:28:7d:2a:51:96:e6:61:aa:0d:42:75:30:24:d1: 59:f9:c8:af:67:fb:c8:22:51:01:f2:90:46:01:61:89:86:dd: c9:2a:3d:88:34:91:7d:d7:26:c6:68:c5:1a:05:2a:3c:fd:2f: ef:76:57:79:80:1a:db:55:d5:5a:43:52:0b:ae:d1:aa:85:16: db:10:60:31:42:6b:86:15:aa:bb:98:4a:18:70:b6:33:db:f0: a9:82:0e:10:7d:5b:0b:3b:93:08:e5:46:ae:38:0d:8b:ab:36: 46:4e:7b:c8:9e:2e:19:68:64:5f:d0:89:1d:c3:84:87:2c:34: 7a:78:fd:62:01:44:de:7c:ab:34:15:86:4e:e7:66:96:d8:d5: 08:40:6e:c6:ab:ca:61:2b:87:b6:a9:2b:25:3d:54:0b:46:a4: ad:e8:3c:15:eb:7f:2d:dc:f2:a4:54:4d:8a:cd:62:29:1e:84: f9:5f:c2:55:5d:18:3e:23:cf:b1:f9:5b:e5:dc:3f:20:b5:f3: 1b:5d:a9:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdb3dqM+UKFgzR2Enqt34MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YTFlNTE5YzljZTc3NTc1ZDg5ZjA3Y2Y3MThmM2IwY2M4 NmVjNTUwHhcNMjUxMjI2MDcwMDQ3WhcNMjUxMjI3MDcwMDQ3WjAzMTEwLwYDVQQD Eyg4YTY1NzEyMWFhZWE2YzkwNWNlMDViNTg4YmI5ZmY4NDVkYzc4YzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydv3ITjqd0v45nZyFvQ2UHIxXpux czkZD2LOgMZjwVcso2oXCVySBADGEhrI9HfBvEL5nhTgDvyrkU0f3xCaP6fEQ9PP gEzhYgszQTvPHXxVwXLSWA5B9Nkj2RsNTcFZ3O6GQh5yZsn12dSkml+FxZ/AAVpt TPbvGE2k/TNZJ6wFBtmsf4cENZBIDFLkEegLVNaktLF2htIrGx7B8XtMNfJkNqlo k4mvPCfiF+XUW1hEbpzKEr7uAu9NIK3NqXEd5Pra50op5dHGEtW8BtaxJz9BRknZ OX0jM5JEBR7Cpk1HXVBFAfqmF3yotAIgOOK5+Hj1Yq/CU6Jm7G/8Fhi4KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIplcSGq6myQXOBbWIu5/4Rdx4wDMB8GA1UdIwQY MBaAFOWh5RnJzndXXYnwfPcY87DMhuxVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWFIbEdjbk9kMWRkaWZCODl4anpzTXlHN0ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yY2MyMmMtMmQ3MS00NmQ2LTkyMTUt MzhjNWIwYzRmMTUyLzEvNWFIbEdjbk9kMWRkaWZCODl4anpzTXlHN0ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8yY2MyMmMtMmQ3MS00NmQ2LTkyMTUtMzhjNWIwYzRmMTUy LzEvNWFIbEdjbk9kMWRkaWZCODl4anpzTXlHN0ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWs+cg6dq z3d4bFE30LY3kg72k80eVGaijqRquhaaaPISfNUrv2Pz1j7EsJ69dROTY5TTX9Kz 8/COJCh9KlGW5mGqDUJ1MCTRWfnIr2f7yCJRAfKQRgFhiYbdySo9iDSRfdcmxmjF GgUqPP0v73ZXeYAa21XVWkNSC67RqoUW2xBgMUJrhhWqu5hKGHC2M9vwqYIOEH1b CzuTCOVGrjgNi6s2Rk57yJ4uGWhkX9CJHcOEhyw0enj9YgFE3nyrNBWGTudmltjV CEBuxqvKYSuHtqkrJT1UC0akreg8Fet/LdzypFRNis1iKR6E+V/CVV0YPiPPsflb 5dw/ILXzG12pyA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:24 2025 by rpki-client