This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft File: 5LEwYQHMnsn86YUoDB2w83wTWjo.mft (raw, json) Hash identifier: vLehMs3Tbryg19lJ5t7jkKVXzQoTYSFOSWTx/d/JOuw= Subject key identifier: 03:03:C4:FD:AD:D1:1D:95:27:0B:C7:C3:AB:81:4D:86:3A:B3:09:AE Authority key identifier: E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A Certificate issuer: /CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a Certificate serial: 019B3FECBE2071DBA69D0435261A1E891BAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft Manifest number: 12CC Signing time: Sun 21 Dec 2025 08:00:38 +0000 Manifest this update: Sun 21 Dec 2025 08:00:38 +0000 Manifest next update: Mon 22 Dec 2025 08:00:38 +0000 Files and hashes: 1: 5LEwYQHMnsn86YUoDB2w83wTWjo.crl (hash: 8e9HyWNPbnv4z2prkgpiBN/2OEXZdbbAS2s9CNtgXXw=) 2: kI0vHB0itKLKV54MYG6cGrVo0eY.roa (hash: C5TgalX0uC/rPE4DDIN7aoT3cFXmNAi4cZYsmZl5eDw=) 3: u8V02AIoZzOPfjpi5j7wtSWVgSg.roa (hash: 9pvkolnrpZjRfbBA2Q8IhG+FM5X8l0p9e5PvDFmhqmQ=) 4: y-M_EBDyqDFIVawFxida8qjR5Co.roa (hash: OVypj78ZSdDN2W9JmlOfV0llyXCESZchLL8yqQ85v9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 08:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ec:be:20:71:db:a6:9d:04:35:26:1a:1e:89:1b:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a Validity Not Before: Dec 21 08:00:38 2025 GMT Not After : Dec 22 08:00:38 2025 GMT Subject: CN=0303c4fdadd11d95270bc7c3ab814d863ab309ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0a:59:97:dc:98:98:cf:81:90:88:a5:c2:3c: a4:44:32:d0:c2:61:50:76:2f:48:64:5c:7b:10:ed: 74:48:26:d0:32:d6:0c:d8:c7:18:15:2a:1a:4b:65: 0f:93:44:ca:ef:a1:af:1b:0e:d5:1c:8c:3b:f6:af: 6c:ea:b9:14:62:26:be:cb:bd:44:2c:78:fd:11:e9: 72:87:0e:b0:c1:58:e1:c7:95:67:89:ab:85:bf:e5: 4f:2c:45:e7:bb:8b:c6:8f:12:e3:77:d6:c4:ac:a5: 77:95:83:5e:30:d4:aa:e7:a6:22:e7:29:60:10:9a: 06:05:42:8e:b7:7c:e1:7e:bf:77:af:4d:ee:a9:da: 02:f7:38:07:db:94:3c:bb:22:59:fd:25:19:4e:da: 26:9e:79:fc:17:bc:ae:1d:11:b3:19:35:67:a2:92: 72:b4:01:5e:53:72:bc:74:33:d8:67:eb:33:35:33: e3:0d:0f:8a:48:51:94:9d:8b:89:7c:89:92:93:2a: e9:8d:8b:f8:ca:06:89:6f:cd:03:c7:9c:d3:a6:eb: 35:85:d9:29:c1:1c:1f:8c:de:6f:f4:41:23:01:42: f0:2c:ad:3e:d1:94:39:2f:52:5c:05:1b:e6:48:5b: 64:d1:50:9d:f9:e5:9e:51:e2:5a:40:4c:9c:6e:36: 1a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:03:C4:FD:AD:D1:1D:95:27:0B:C7:C3:AB:81:4D:86:3A:B3:09:AE X509v3 Authority Key Identifier: keyid:E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:34:37:18:95:51:ed:77:d7:bc:8d:d3:52:47:d5:27:f5:d9: 93:89:73:ef:cc:b5:45:cd:f6:ea:0b:3f:65:9e:5f:85:4f:53: 5f:34:9d:ee:c4:cb:38:4a:68:5f:f2:7a:f3:b1:39:5e:05:39: e9:d9:35:97:f6:09:75:b5:69:47:d5:30:af:49:90:4f:21:e7: 44:f8:d7:b2:77:64:f7:65:61:47:22:97:40:e8:5d:e9:28:46: 64:b2:e3:d4:8f:9a:3b:04:e4:5e:52:a4:04:4e:76:aa:33:29: d1:98:d8:aa:6f:ec:98:59:c6:f5:df:1f:80:da:93:cf:d8:34: 17:da:06:f1:41:1f:cc:d7:fa:c7:1d:53:b1:87:5a:9d:88:cf: cf:85:f2:d0:ef:da:10:b5:fd:d5:b6:5c:f7:7a:3e:fb:de:ef: 2c:28:19:3c:6d:1a:2e:91:6f:3f:4f:11:a1:75:40:bc:dd:ad: 55:b9:ab:a1:ca:1b:8c:a7:3a:8b:24:06:c3:cc:da:d8:6f:db: 15:fd:d6:61:6f:d7:08:99:46:74:9b:a6:cb:e7:3b:93:ec:af: 12:11:34:46:6a:1d:19:97:6f:76:d1:b2:2b:12:bf:38:23:78: 10:c6:ed:d7:70:39:eb:6e:05:86:e0:95:8e:37:c5:4e:77:ed: 36:ce:40:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7L4gcdumnQQ1JhoeiRuuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YjEzMDYxMDFjYzllYzlmY2U5ODUyODBjMWRiMGYzN2Mx MzVhM2EwHhcNMjUxMjIxMDgwMDM4WhcNMjUxMjIyMDgwMDM4WjAzMTEwLwYDVQQD EygwMzAzYzRmZGFkZDExZDk1MjcwYmM3YzNhYjgxNGQ4NjNhYjMwOWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoApZl9yYmM+BkIilwjykRDLQwmFQ di9IZFx7EO10SCbQMtYM2McYFSoaS2UPk0TK76GvGw7VHIw79q9s6rkUYia+y71E LHj9Eelyhw6wwVjhx5VniauFv+VPLEXnu4vGjxLjd9bErKV3lYNeMNSq56Yi5ylg EJoGBUKOt3zhfr93r03uqdoC9zgH25Q8uyJZ/SUZTtomnnn8F7yuHRGzGTVnopJy tAFeU3K8dDPYZ+szNTPjDQ+KSFGUnYuJfImSkyrpjYv4ygaJb80Dx5zTpus1hdkp wRwfjN5v9EEjAULwLK0+0ZQ5L1JcBRvmSFtk0VCd+eWeUeJaQEycbjYanQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAMDxP2t0R2VJwvHw6uBTYY6swmuMB8GA1UdIwQY MBaAFOSxMGEBzJ7J/OmFKAwdsPN8E1o6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUxFd1lRSE1uc244NllVb0RCMnc4M3dUV2pvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS80ZDA4OWUtNWQxYy00ZTM0LTk0NjUt ZmE2MzQ4ZjY5NWI1LzEvNUxFd1lRSE1uc244NllVb0RCMnc4M3dUV2pvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS80ZDA4OWUtNWQxYy00ZTM0LTk0NjUtZmE2MzQ4ZjY5NWI1 LzEvNUxFd1lRSE1uc244NllVb0RCMnc4M3dUV2pvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAODQ3GJVR 7XfXvI3TUkfVJ/XZk4lz78y1Rc326gs/ZZ5fhU9TXzSd7sTLOEpoX/J687E5XgU5 6dk1l/YJdbVpR9Uwr0mQTyHnRPjXsndk92VhRyKXQOhd6ShGZLLj1I+aOwTkXlKk BE52qjMp0ZjYqm/smFnG9d8fgNqTz9g0F9oG8UEfzNf6xx1TsYdanYjPz4Xy0O/a ELX91bZc93o++97vLCgZPG0aLpFvP08RoXVAvN2tVbmrocobjKc6iyQGw8za2G/b Ff3WYW/XCJlGdJumy+c7k+yvEhE0RmodGZdvdtGyKxK/OCN4EMbt13A5624FhuCV jjfFTnftNs5AGA== -----END CERTIFICATE-----Generated at Sun Dec 21 15:39:01 2025 by rpki-client