This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/5v-BaTR_UwcrLRGtGNmiU8r--uc.mft File: 5v-BaTR_UwcrLRGtGNmiU8r--uc.mft (raw, json) Hash identifier: Uy30By2vbMfHKhgz2uA1PLl8kO4UMMKgYmdkca89nHg= Subject key identifier: 07:C9:02:89:09:CB:68:91:4A:1A:E8:B4:5F:35:C8:61:63:EA:1A:3C Authority key identifier: E6:FF:81:69:34:7F:53:07:2B:2D:11:AD:18:D9:A2:53:CA:FE:FA:E7 Certificate issuer: /CN=e6ff8169347f53072b2d11ad18d9a253cafefae7 Certificate serial: 019B488232DEB7374FCF05E102CC9F6E3A27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5v-BaTR_UwcrLRGtGNmiU8r--uc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/5v-BaTR_UwcrLRGtGNmiU8r--uc.mft Manifest number: 0664 Signing time: Tue 23 Dec 2025 00:00:50 +0000 Manifest this update: Tue 23 Dec 2025 00:00:50 +0000 Manifest next update: Wed 24 Dec 2025 00:00:50 +0000 Files and hashes: 1: 5v-BaTR_UwcrLRGtGNmiU8r--uc.crl (hash: xwny4iNLtmfq/1zBCVWDwzWLgaJzu/xCtSBDsjpHaMc=) 2: wTQvHz6KrEBh22NnZfSVSbP_3L0.roa (hash: FPUhMtrstm1Ac2XI6rl3vCrIvxuS83fDR4A5ahN+U+w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/5v-BaTR_UwcrLRGtGNmiU8r--uc.crl rsync://rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/5v-BaTR_UwcrLRGtGNmiU8r--uc.mft rsync://rpki.ripe.net/repository/DEFAULT/5v-BaTR_UwcrLRGtGNmiU8r--uc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:82:32:de:b7:37:4f:cf:05:e1:02:cc:9f:6e:3a:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6ff8169347f53072b2d11ad18d9a253cafefae7 Validity Not Before: Dec 23 00:00:50 2025 GMT Not After : Dec 24 00:00:50 2025 GMT Subject: CN=07c9028909cb68914a1ae8b45f35c86163ea1a3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ec:e1:52:9f:ae:1b:e9:39:30:ce:e9:4e:7d: 46:cf:83:c9:66:07:89:f1:58:24:a0:25:19:c8:bd: 36:ca:c8:2d:1a:f3:87:6a:bb:7d:73:3f:e4:7b:d7: 88:37:7e:30:70:d4:20:a2:1b:8c:66:46:93:1a:81: 9f:a4:86:fa:0f:f1:7e:e7:35:81:39:92:1f:30:1e: fe:4d:4d:73:2a:a9:b3:6d:74:cf:7b:55:f0:1b:73: 27:de:a9:14:a3:bc:eb:f4:6e:25:13:83:af:d2:70: c9:6b:ec:36:74:a9:9b:dc:1e:95:b4:4e:7c:f9:e2: e6:1a:a3:26:42:6d:7a:e1:3c:86:f5:71:29:f4:cc: 05:d7:b2:6d:27:87:e6:d7:4a:1c:75:0e:ed:d9:fc: 28:f8:53:80:93:f6:ec:61:93:86:d5:19:df:c5:77: 1f:22:0b:f6:fd:02:cc:07:20:15:8e:69:53:69:7f: a9:ef:df:59:4d:8d:10:f9:fe:6c:0f:8c:f3:e4:c3: 02:1a:21:1b:19:f5:d7:ef:a6:87:e0:eb:73:4c:09: 3c:7c:a3:bf:5c:be:0e:45:15:fc:81:f2:43:a9:c3: ec:84:7a:04:0b:34:a0:9d:41:3c:35:e7:d9:43:8d: 7a:e1:16:b0:06:07:14:c9:81:90:0a:11:3a:11:e0: f8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:C9:02:89:09:CB:68:91:4A:1A:E8:B4:5F:35:C8:61:63:EA:1A:3C X509v3 Authority Key Identifier: keyid:E6:FF:81:69:34:7F:53:07:2B:2D:11:AD:18:D9:A2:53:CA:FE:FA:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5v-BaTR_UwcrLRGtGNmiU8r--uc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/5v-BaTR_UwcrLRGtGNmiU8r--uc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/5v-BaTR_UwcrLRGtGNmiU8r--uc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:5d:03:7b:bf:0b:bd:8e:3c:a7:bc:40:fc:7a:62:ee:90:b4: 2c:20:d3:fb:27:35:61:9a:00:f8:f4:52:55:c7:52:c8:a4:7a: 05:09:1d:17:11:68:7e:90:75:02:5b:83:4e:28:3c:c3:ef:98: ec:cf:31:60:5b:13:d1:37:2c:2a:65:f1:ff:d9:a1:83:da:fa: cb:4d:1b:44:f7:9e:8b:29:cc:b8:7d:c6:53:ee:83:c1:e9:d8: b0:21:f3:fe:f6:3a:4f:9d:02:ee:fe:8b:d0:bb:18:15:e0:da: f3:36:c7:7c:32:fb:81:79:7c:25:9c:e1:81:ed:b4:fe:40:23: e3:a8:d9:be:8a:07:75:37:8f:9d:06:d8:89:64:0f:30:8c:7a: 95:46:2e:a5:08:4a:00:4d:af:5b:49:94:45:4f:9d:47:3f:1c: 75:81:a2:74:ca:90:b4:27:5a:04:10:4b:d2:17:92:f8:11:ec: 81:67:10:85:01:67:81:17:2a:84:db:30:f8:7e:87:8f:b6:5d: dc:cc:2b:0e:0c:24:1e:8f:f0:33:18:dc:9c:a4:c4:89:0b:c7: c0:6a:15:42:37:b8:51:3d:ba:25:77:cf:43:af:5f:ac:be:42: ab:9d:e6:55:be:5a:6d:df:ca:00:19:02:49:a8:5c:cf:60:13: fd:1b:7a:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIgjLetzdPzwXhAsyfbjonMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2ZmY4MTY5MzQ3ZjUzMDcyYjJkMTFhZDE4ZDlhMjUzY2Fm ZWZhZTcwHhcNMjUxMjIzMDAwMDUwWhcNMjUxMjI0MDAwMDUwWjAzMTEwLwYDVQQD EygwN2M5MDI4OTA5Y2I2ODkxNGExYWU4YjQ1ZjM1Yzg2MTYzZWExYTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouzhUp+uG+k5MM7pTn1Gz4PJZgeJ 8VgkoCUZyL02ysgtGvOHart9cz/ke9eIN34wcNQgohuMZkaTGoGfpIb6D/F+5zWB OZIfMB7+TU1zKqmzbXTPe1XwG3Mn3qkUo7zr9G4lE4Ov0nDJa+w2dKmb3B6VtE58 +eLmGqMmQm164TyG9XEp9MwF17JtJ4fm10ocdQ7t2fwo+FOAk/bsYZOG1RnfxXcf Igv2/QLMByAVjmlTaX+p799ZTY0Q+f5sD4zz5MMCGiEbGfXX76aH4OtzTAk8fKO/ XL4ORRX8gfJDqcPshHoECzSgnUE8NefZQ4164RawBgcUyYGQChE6EeD4GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAfJAokJy2iRShrotF81yGFj6ho8MB8GA1UdIwQY MBaAFOb/gWk0f1MHKy0RrRjZolPK/vrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXYtQmFUUl9Vd2NyTFJHdEdObWlVOHItLXVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC81MGY3NDktNTU4MS00NjAxLWFlNDEt OWZiMDNkMDNlZmY5LzEvNXYtQmFUUl9Vd2NyTFJHdEdObWlVOHItLXVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC81MGY3NDktNTU4MS00NjAxLWFlNDEtOWZiMDNkMDNlZmY5 LzEvNXYtQmFUUl9Vd2NyTFJHdEdObWlVOHItLXVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM10De78L vY48p7xA/Hpi7pC0LCDT+yc1YZoA+PRSVcdSyKR6BQkdFxFofpB1AluDTig8w++Y 7M8xYFsT0TcsKmXx/9mhg9r6y00bRPeeiynMuH3GU+6DwenYsCHz/vY6T50C7v6L 0LsYFeDa8zbHfDL7gXl8JZzhge20/kAj46jZvooHdTePnQbYiWQPMIx6lUYupQhK AE2vW0mURU+dRz8cdYGidMqQtCdaBBBL0heS+BHsgWcQhQFngRcqhNsw+H6Hj7Zd 3MwrDgwkHo/wMxjcnKTEiQvHwGoVQje4UT26JXfPQ69frL5Cq53mVb5abd/KABkC Sahcz2AT/Rt6Fw== -----END CERTIFICATE-----Generated at Tue Dec 23 09:57:45 2025 by rpki-client