This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8c9f19-a700-4832-be21-b0d5e8be853c/1/5EV2NuWtZuHw-7LBDfKQleY-mS8.mft File: 5EV2NuWtZuHw-7LBDfKQleY-mS8.mft (raw, json) Hash identifier: oSzVCxQ/s7UbR772Qdhddz/sruy4vhGEecv52QJohJ4= Subject key identifier: 5B:5A:D8:11:22:AF:AA:0D:3D:9D:10:A0:8E:3B:60:47:1B:D4:FC:3C Authority key identifier: E4:45:76:36:E5:AD:66:E1:F0:FB:B2:C1:0D:F2:90:95:E6:3E:99:2F Certificate issuer: /CN=e4457636e5ad66e1f0fbb2c10df29095e63e992f Certificate serial: 019B43934313C740E59CAAEAEEB8018CFA2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5EV2NuWtZuHw-7LBDfKQleY-mS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8c9f19-a700-4832-be21-b0d5e8be853c/1/5EV2NuWtZuHw-7LBDfKQleY-mS8.mft Manifest number: 1111 Signing time: Mon 22 Dec 2025 01:01:22 +0000 Manifest this update: Mon 22 Dec 2025 01:01:22 +0000 Manifest next update: Tue 23 Dec 2025 01:01:22 +0000 Files and hashes: 1: 5EV2NuWtZuHw-7LBDfKQleY-mS8.crl (hash: 0QRDZoXU9yyqczZ61+flBqN9jvKET3VYH1HZbPNH9a0=) 2: 7dpbzZX7eYfnBG7vQSonxLufldI.roa (hash: MAdnQYRbZ0ATJEdytmIxDRxyJPZ/GK0bSNF0Uiu38tw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8c9f19-a700-4832-be21-b0d5e8be853c/1/5EV2NuWtZuHw-7LBDfKQleY-mS8.crl rsync://rpki.ripe.net/repository/DEFAULT/61/8c9f19-a700-4832-be21-b0d5e8be853c/1/5EV2NuWtZuHw-7LBDfKQleY-mS8.mft rsync://rpki.ripe.net/repository/DEFAULT/5EV2NuWtZuHw-7LBDfKQleY-mS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:93:43:13:c7:40:e5:9c:aa:ea:ee:b8:01:8c:fa:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4457636e5ad66e1f0fbb2c10df29095e63e992f Validity Not Before: Dec 22 01:01:22 2025 GMT Not After : Dec 23 01:01:22 2025 GMT Subject: CN=5b5ad81122afaa0d3d9d10a08e3b60471bd4fc3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9d:a4:19:56:e3:13:cb:4b:aa:f3:e4:53:3e: 82:92:21:2c:98:32:eb:ad:6e:82:a4:ee:3c:76:35: cb:ed:a0:75:f1:4b:e5:d2:ce:62:72:06:27:fe:ce: fb:a7:95:70:63:6b:69:66:0d:ef:7d:37:3a:1f:42: f5:50:1c:55:47:ef:fc:1b:88:87:1e:74:6a:b5:52: fd:54:62:19:3f:29:d6:f9:ca:df:81:b0:ae:11:a1: 11:ea:03:b6:b6:e8:d9:5f:d6:80:1f:8f:99:56:1a: 12:d1:62:f3:f8:1d:c1:4d:84:2e:ee:2b:36:f3:2f: 55:fc:c3:92:e3:02:cd:48:9d:8f:5d:95:b5:1c:6b: b6:dc:9d:d9:eb:cd:34:70:aa:60:a1:03:28:4f:f3: 60:e0:0e:a3:1d:d6:4b:d1:b9:a4:a8:45:6d:e3:18: 30:a3:e6:e3:17:61:96:fe:16:c0:63:75:f3:4f:1b: 23:86:50:77:d9:2b:a3:18:30:65:76:27:20:5b:e9: e5:8f:75:09:ab:44:a2:21:70:64:35:6b:55:de:72: d7:12:e0:ae:6a:b4:61:b4:3c:54:a6:74:04:b1:20: 76:d1:82:6e:c6:74:76:3b:be:3c:a6:1c:7f:6c:50: 04:0f:c2:52:f2:d0:65:ae:87:c5:65:1e:47:43:f9: 6f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:5A:D8:11:22:AF:AA:0D:3D:9D:10:A0:8E:3B:60:47:1B:D4:FC:3C X509v3 Authority Key Identifier: keyid:E4:45:76:36:E5:AD:66:E1:F0:FB:B2:C1:0D:F2:90:95:E6:3E:99:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5EV2NuWtZuHw-7LBDfKQleY-mS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8c9f19-a700-4832-be21-b0d5e8be853c/1/5EV2NuWtZuHw-7LBDfKQleY-mS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8c9f19-a700-4832-be21-b0d5e8be853c/1/5EV2NuWtZuHw-7LBDfKQleY-mS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:f5:f1:59:88:1e:19:85:56:73:fe:a2:56:6b:9a:7e:67:5a: 30:fc:b6:02:53:6b:85:5d:0a:06:5e:b5:06:7b:2d:f4:69:0a: 19:ec:2b:32:b3:cd:f5:cd:f3:a3:16:42:ee:18:e4:d4:67:a9: ae:34:f8:28:c2:32:6c:fc:57:12:79:c7:50:0f:be:33:ef:a1: eb:af:b5:7b:bc:b3:2b:7f:81:f4:1d:a2:b3:32:d9:1c:6e:09: 0c:b7:b3:8e:20:83:27:fc:1b:1e:43:6b:31:a9:0a:55:fc:b2: 14:97:8b:49:dc:37:ac:d3:5b:2d:4f:a2:56:5c:6c:b1:b1:d2: 0d:eb:54:e6:57:51:4e:36:e1:da:29:3b:4a:23:be:8a:b9:e0: 87:4e:97:28:7f:94:5b:7e:d6:30:6e:73:bd:0d:08:7c:3d:10: bd:c6:56:65:be:d3:6e:cf:e4:72:9e:95:23:97:cd:57:b5:70: 61:e1:0e:70:a1:c4:96:67:61:4d:ba:1d:b1:9e:08:33:ff:cd: 16:36:06:39:a6:52:b4:78:08:bf:d6:c3:3f:fe:30:b2:f7:fa: e8:ca:c8:e6:dd:a9:48:a7:3b:e5:cc:10:ad:f9:f2:ca:fb:dd: 44:66:a6:ff:c3:ef:f3:90:23:bd:3c:6c:b9:01:a4:6a:3e:46: de:2c:37:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDk0MTx0DlnKrq7rgBjPosMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0NDU3NjM2ZTVhZDY2ZTFmMGZiYjJjMTBkZjI5MDk1ZTYz ZTk5MmYwHhcNMjUxMjIyMDEwMTIyWhcNMjUxMjIzMDEwMTIyWjAzMTEwLwYDVQQD Eyg1YjVhZDgxMTIyYWZhYTBkM2Q5ZDEwYTA4ZTNiNjA0NzFiZDRmYzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu52kGVbjE8tLqvPkUz6CkiEsmDLr rW6CpO48djXL7aB18Uvl0s5icgYn/s77p5VwY2tpZg3vfTc6H0L1UBxVR+/8G4iH HnRqtVL9VGIZPynW+crfgbCuEaER6gO2tujZX9aAH4+ZVhoS0WLz+B3BTYQu7is2 8y9V/MOS4wLNSJ2PXZW1HGu23J3Z6800cKpgoQMoT/Ng4A6jHdZL0bmkqEVt4xgw o+bjF2GW/hbAY3XzTxsjhlB32SujGDBldicgW+nlj3UJq0SiIXBkNWtV3nLXEuCu arRhtDxUpnQEsSB20YJuxnR2O748phx/bFAED8JS8tBlrofFZR5HQ/lv8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFta2BEir6oNPZ0QoI47YEcb1Pw8MB8GA1UdIwQY MBaAFORFdjblrWbh8PuywQ3ykJXmPpkvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUVWMk51V3RadUh3LTdMQkRmS1FsZVktbVM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS84YzlmMTktYTcwMC00ODMyLWJlMjEt YjBkNWU4YmU4NTNjLzEvNUVWMk51V3RadUh3LTdMQkRmS1FsZVktbVM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS84YzlmMTktYTcwMC00ODMyLWJlMjEtYjBkNWU4YmU4NTNj LzEvNUVWMk51V3RadUh3LTdMQkRmS1FsZVktbVM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlfXxWYge GYVWc/6iVmuafmdaMPy2AlNrhV0KBl61Bnst9GkKGewrMrPN9c3zoxZC7hjk1Gep rjT4KMIybPxXEnnHUA++M++h66+1e7yzK3+B9B2iszLZHG4JDLezjiCDJ/wbHkNr MakKVfyyFJeLSdw3rNNbLU+iVlxssbHSDetU5ldRTjbh2ik7SiO+irngh06XKH+U W37WMG5zvQ0IfD0QvcZWZb7Tbs/kcp6VI5fNV7VwYeEOcKHElmdhTbodsZ4IM//N FjYGOaZStHgIv9bDP/4wsvf66MrI5t2pSKc75cwQrfnyyvvdRGam/8Pv85AjvTxs uQGkaj5G3iw3iw== -----END CERTIFICATE-----Generated at Mon Dec 22 02:19:56 2025 by rpki-client