This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft File: 5wb8lykDS_sEZN1MmF8UuiEOgeM.mft (raw, json) Hash identifier: P9n7JkTtd7wtgjErWjjlxp8KNDSeXsWT4TfpSfTx2CU= Subject key identifier: DC:25:AE:D3:E0:44:3A:5F:9D:81:82:6F:56:D8:C0:B5:20:C6:38:FA Authority key identifier: E7:06:FC:97:29:03:4B:FB:04:64:DD:4C:98:5F:14:BA:21:0E:81:E3 Certificate issuer: /CN=e706fc9729034bfb0464dd4c985f14ba210e81e3 Certificate serial: 019B1DCF2261AF6C67E7C069A9E7365D4780 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft Manifest number: 1535 Signing time: Sun 14 Dec 2025 17:01:12 +0000 Manifest this update: Sun 14 Dec 2025 17:01:12 +0000 Manifest next update: Mon 15 Dec 2025 17:01:12 +0000 Files and hashes: 1: 5wb8lykDS_sEZN1MmF8UuiEOgeM.crl (hash: CqAwf7g4ERN0Vs2Aji1yiFwL7/yXekZHXEv2cpeYQiU=) 2: b37_mvewRVwCg1bn4EBDzO-L-T4.roa (hash: Se2kErf9iBL4UpQAgg1UiulAV/XRVJ5FdDxPc7oRHW0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.crl rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 17:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:cf:22:61:af:6c:67:e7:c0:69:a9:e7:36:5d:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e706fc9729034bfb0464dd4c985f14ba210e81e3 Validity Not Before: Dec 14 17:01:12 2025 GMT Not After : Dec 15 17:01:12 2025 GMT Subject: CN=dc25aed3e0443a5f9d81826f56d8c0b520c638fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c4:6d:a6:d0:0b:26:32:80:b2:ef:af:cb:65: ad:03:94:34:be:cc:c8:1d:13:31:af:bd:a1:9c:83: 32:03:bb:12:98:fa:fd:e7:ef:4d:61:44:43:9c:ac: 14:5e:12:1f:c3:d1:83:87:c6:62:5d:30:16:d7:ef: b8:a2:46:b4:2f:06:51:e3:15:c1:62:29:79:96:59: 37:44:24:5d:8e:a4:0f:7c:ae:16:c1:2f:c9:8c:2d: fc:44:07:31:9f:ae:bf:da:ab:fe:40:99:68:ab:5a: 8c:71:1b:34:13:54:28:a1:31:58:03:46:e5:9d:ca: 32:b9:8b:21:f4:b5:57:a1:0b:b7:9f:e1:4e:ca:14: 72:00:c3:5f:ee:ff:fa:e1:7a:c5:08:ce:8b:22:e5: 46:df:c4:35:51:7e:1e:a1:47:c6:82:5a:fe:f6:83: 53:88:38:b3:e4:24:f1:af:3b:db:70:40:87:8a:57: 06:67:89:b2:fb:45:53:4b:f6:90:62:29:ef:e0:d9: 18:e1:19:63:2f:a2:f0:56:a3:9d:9f:dd:48:2d:a5: c1:c5:bd:3a:32:54:7d:ab:77:6a:d7:9d:08:eb:fb: 2e:2d:0a:cb:24:0b:80:e4:12:d4:4a:c6:fa:a3:fa: f8:70:b9:7d:90:b5:9c:d1:73:5b:5e:13:9c:5e:89: a2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:25:AE:D3:E0:44:3A:5F:9D:81:82:6F:56:D8:C0:B5:20:C6:38:FA X509v3 Authority Key Identifier: keyid:E7:06:FC:97:29:03:4B:FB:04:64:DD:4C:98:5F:14:BA:21:0E:81:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:59:c4:27:40:78:ce:79:b8:af:83:e6:d5:a3:54:0a:29:5a: a1:a2:84:39:b2:06:c5:8f:16:53:fa:13:06:c6:2a:97:10:f1: 35:36:57:1f:e3:f7:35:ae:e6:21:bc:2f:b5:43:6d:8e:8d:c5: 4e:b5:c1:74:58:bf:52:29:16:29:ed:04:df:c2:d3:30:3b:a4: 44:ea:8a:cc:73:7e:de:f9:95:2a:be:c7:cf:f9:61:ef:ae:97: 25:81:50:6d:5d:0a:be:ff:33:ea:8c:31:7b:65:15:56:b5:1b: fb:3d:4c:dc:cf:12:20:6c:cf:55:a8:e5:2f:17:7b:7e:86:f3: a9:92:23:95:18:47:e3:1b:16:6e:ee:be:40:91:04:6e:dc:45: 3f:5c:a9:37:d0:c9:46:33:82:e5:af:b0:f0:9a:ac:a1:9d:d0: a2:05:4d:73:28:b0:a4:6d:61:cf:14:c0:ef:b9:b8:a6:4e:73: 5d:d9:5e:ff:29:76:45:26:7d:ea:e7:f1:5f:78:4d:f9:81:a9: 7f:62:3a:d0:a7:6c:95:72:81:7a:47:55:f5:6c:bc:f1:d4:a4: c3:c8:fa:90:24:30:18:e9:b4:b6:38:2d:86:af:62:17:a9:fe: 33:bd:43:93:a8:88:30:9c:68:60:0e:e9:b8:21:17:5d:bf:eb: aa:06:ed:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdzyJhr2xn58Bpqec2XUeAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3MDZmYzk3MjkwMzRiZmIwNDY0ZGQ0Yzk4NWYxNGJhMjEw ZTgxZTMwHhcNMjUxMjE0MTcwMTEyWhcNMjUxMjE1MTcwMTEyWjAzMTEwLwYDVQQD EyhkYzI1YWVkM2UwNDQzYTVmOWQ4MTgyNmY1NmQ4YzBiNTIwYzYzOGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsRtptALJjKAsu+vy2WtA5Q0vszI HRMxr72hnIMyA7sSmPr95+9NYURDnKwUXhIfw9GDh8ZiXTAW1++4oka0LwZR4xXB Yil5llk3RCRdjqQPfK4WwS/JjC38RAcxn66/2qv+QJloq1qMcRs0E1QooTFYA0bl ncoyuYsh9LVXoQu3n+FOyhRyAMNf7v/64XrFCM6LIuVG38Q1UX4eoUfGglr+9oNT iDiz5CTxrzvbcECHilcGZ4my+0VTS/aQYinv4NkY4RljL6LwVqOdn91ILaXBxb06 MlR9q3dq150I6/suLQrLJAuA5BLUSsb6o/r4cLl9kLWc0XNbXhOcXomilQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNwlrtPgRDpfnYGCb1bYwLUgxjj6MB8GA1UdIwQY MBaAFOcG/JcpA0v7BGTdTJhfFLohDoHjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXdiOGx5a0RTX3NFWk4xTW1GOFV1aUVPZ2VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80NzYzODMtZjZkYS00ZTBlLThlMTIt ZDJkY2YwNWQzMzc2LzEvNXdiOGx5a0RTX3NFWk4xTW1GOFV1aUVPZ2VNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC80NzYzODMtZjZkYS00ZTBlLThlMTItZDJkY2YwNWQzMzc2 LzEvNXdiOGx5a0RTX3NFWk4xTW1GOFV1aUVPZ2VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASFnEJ0B4 znm4r4Pm1aNUCilaoaKEObIGxY8WU/oTBsYqlxDxNTZXH+P3Na7mIbwvtUNtjo3F TrXBdFi/UikWKe0E38LTMDukROqKzHN+3vmVKr7Hz/lh766XJYFQbV0Kvv8z6owx e2UVVrUb+z1M3M8SIGzPVajlLxd7fobzqZIjlRhH4xsWbu6+QJEEbtxFP1ypN9DJ RjOC5a+w8JqsoZ3QogVNcyiwpG1hzxTA77m4pk5zXdle/yl2RSZ96ufxX3hN+YGp f2I60KdslXKBekdV9Wy88dSkw8j6kCQwGOm0tjgthq9iF6n+M71Dk6iIMJxoYA7p uCEXXb/rqgbtnQ== -----END CERTIFICATE-----Generated at Mon Dec 15 01:39:55 2025 by rpki-client