This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft File: 5fmFqUAlRIkU3qoXQiBzBDklE90.mft (raw, json) Hash identifier: h8yQo4NA3GsdCIPfuTvyAYYqHdj3y1Jr8Biw5ACttqs= Subject key identifier: 93:B3:88:48:18:48:EA:AC:7E:FF:2F:3D:DA:75:C5:E6:E2:17:A7:45 Authority key identifier: E5:F9:85:A9:40:25:44:89:14:DE:AA:17:42:20:73:04:39:25:13:DD Certificate issuer: /CN=e5f985a94025448914deaa1742207304392513dd Certificate serial: 019B59758B8927AF0852F76424D1A8568D69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fmFqUAlRIkU3qoXQiBzBDklE90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft Manifest number: 0368 Signing time: Fri 26 Dec 2025 07:00:34 +0000 Manifest this update: Fri 26 Dec 2025 07:00:34 +0000 Manifest next update: Sat 27 Dec 2025 07:00:34 +0000 Files and hashes: 1: 5fmFqUAlRIkU3qoXQiBzBDklE90.crl (hash: 54wucB94ghFOC+7qvdxk62US2cTFqZCtbdlXbJfXI64=) 2: nAZJBZ6VvJoN3Mjanp3D7Pbl_-s.roa (hash: toI1tT2hR8zRYJnuO8W3FR+ZELFSDV5ej6CQ6AsxKnE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft rsync://rpki.ripe.net/repository/DEFAULT/5fmFqUAlRIkU3qoXQiBzBDklE90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 07:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:8b:89:27:af:08:52:f7:64:24:d1:a8:56:8d:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5f985a94025448914deaa1742207304392513dd Validity Not Before: Dec 26 07:00:34 2025 GMT Not After : Dec 27 07:00:34 2025 GMT Subject: CN=93b388481848eaac7eff2f3dda75c5e6e217a745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:89:79:ba:4f:23:96:f5:8e:58:80:0b:96:78: a7:34:ff:47:71:8b:64:fe:95:4c:10:60:26:35:85: 06:c9:89:60:7b:5e:2a:3c:94:0a:01:c5:d0:54:a2: 9f:5f:91:d2:6e:a6:dd:b6:6d:3b:3c:00:95:f7:e3: 85:6a:38:67:3b:95:2c:6c:24:d8:ce:51:57:96:1b: 2c:f5:2a:3b:0c:60:d6:50:f3:84:62:c4:e2:a4:e2: 12:32:6b:12:ea:35:c9:89:ca:42:ac:35:51:d9:00: 1a:fd:23:c7:84:48:10:95:32:f0:96:0d:c8:ee:2d: d9:fa:05:7c:2b:b4:61:9a:e7:95:aa:46:b5:07:3c: 81:85:2a:76:d2:9f:cb:15:d5:ef:7c:04:ce:7b:12: ad:5c:95:d6:8b:1b:b5:4d:59:29:e3:4f:e8:1e:60: ed:bb:18:09:01:1f:5c:7a:eb:d4:22:82:4f:a8:29: 41:f4:97:42:12:4e:83:eb:7f:5e:86:ed:6b:80:0c: 1c:c8:dd:3b:3e:af:a4:85:16:f6:b2:48:8d:70:15: 24:c4:d4:1b:f6:85:a1:ef:46:a0:32:05:80:87:6d: 1a:39:a8:1a:26:ef:db:10:44:7a:37:2c:cd:a7:0f: 27:1d:5d:cb:2f:9e:66:b0:63:24:c6:a4:7b:b0:5d: 30:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B3:88:48:18:48:EA:AC:7E:FF:2F:3D:DA:75:C5:E6:E2:17:A7:45 X509v3 Authority Key Identifier: keyid:E5:F9:85:A9:40:25:44:89:14:DE:AA:17:42:20:73:04:39:25:13:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fmFqUAlRIkU3qoXQiBzBDklE90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:42:f2:a3:3a:a9:87:58:15:d4:90:df:16:84:4b:03:fe:12: d0:e1:8f:12:8b:da:38:ee:8f:79:90:eb:b7:23:0e:72:4b:c2: ed:c8:23:da:7e:5f:38:ad:b1:33:4b:75:f0:c5:a5:8e:35:a8: f1:4f:c2:19:ac:cb:90:aa:ad:9e:7a:d2:d4:a5:4c:37:74:d6: 38:11:00:08:d1:3a:37:ac:cd:a2:b8:d6:16:8a:f2:0f:9a:31: 97:49:8c:7a:cf:35:20:f5:bb:6d:5e:8f:46:31:a6:ed:cb:0d: ba:3b:fe:b2:bc:62:7c:e9:e6:cb:34:23:9b:87:d2:eb:5a:01: d7:58:33:bf:de:ff:2d:bf:d4:8b:17:5b:c8:eb:54:ba:c5:c0: 7f:81:70:d0:e0:c1:5d:3c:50:0d:02:c7:94:4a:1e:61:77:a9: af:a3:62:4b:30:a2:52:e7:e6:7b:21:da:05:dd:30:24:5d:95: 72:85:95:99:19:dc:65:cd:06:ff:6a:51:fa:66:b0:16:00:19: c7:e6:61:0d:87:a1:20:d9:f6:e5:9f:48:c0:45:f1:89:a3:09: b9:2f:7a:9b:27:8c:1e:db:9b:a4:8c:03:58:e9:a9:e7:fd:19: ee:3b:c5:6c:20:b9:a6:6a:26:0d:15:8a:fe:9b:a8:85:b6:b7: d8:50:2e:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdYuJJ68IUvdkJNGoVo1pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1Zjk4NWE5NDAyNTQ0ODkxNGRlYWExNzQyMjA3MzA0Mzky NTEzZGQwHhcNMjUxMjI2MDcwMDM0WhcNMjUxMjI3MDcwMDM0WjAzMTEwLwYDVQQD Eyg5M2IzODg0ODE4NDhlYWFjN2VmZjJmM2RkYTc1YzVlNmUyMTdhNzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIl5uk8jlvWOWIALlninNP9HcYtk /pVMEGAmNYUGyYlge14qPJQKAcXQVKKfX5HSbqbdtm07PACV9+OFajhnO5UsbCTY zlFXlhss9So7DGDWUPOEYsTipOISMmsS6jXJicpCrDVR2QAa/SPHhEgQlTLwlg3I 7i3Z+gV8K7RhmueVqka1BzyBhSp20p/LFdXvfATOexKtXJXWixu1TVkp40/oHmDt uxgJAR9ceuvUIoJPqClB9JdCEk6D639ehu1rgAwcyN07Pq+khRb2skiNcBUkxNQb 9oWh70agMgWAh20aOagaJu/bEER6NyzNpw8nHV3LL55msGMkxqR7sF0w/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJOziEgYSOqsfv8vPdp1xebiF6dFMB8GA1UdIwQY MBaAFOX5halAJUSJFN6qF0IgcwQ5JRPdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWZtRnFVQWxSSWtVM3FvWFFpQnpCRGtsRTkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9iYTFjOTctMGU1Ni00ODQwLWI2MTMt YjM2MWEyYzQ1N2M0LzEvNWZtRnFVQWxSSWtVM3FvWFFpQnpCRGtsRTkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9iYTFjOTctMGU1Ni00ODQwLWI2MTMtYjM2MWEyYzQ1N2M0 LzEvNWZtRnFVQWxSSWtVM3FvWFFpQnpCRGtsRTkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApkLyozqp h1gV1JDfFoRLA/4S0OGPEovaOO6PeZDrtyMOckvC7cgj2n5fOK2xM0t18MWljjWo 8U/CGazLkKqtnnrS1KVMN3TWOBEACNE6N6zNorjWForyD5oxl0mMes81IPW7bV6P RjGm7csNujv+srxifOnmyzQjm4fS61oB11gzv97/Lb/UixdbyOtUusXAf4Fw0ODB XTxQDQLHlEoeYXepr6NiSzCiUufmeyHaBd0wJF2VcoWVmRncZc0G/2pR+mawFgAZ x+ZhDYehINn25Z9IwEXxiaMJuS96myeMHtubpIwDWOmp5/0Z7jvFbCC5pmomDRWK /puohba32FAutg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:54 2025 by rpki-client