This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft File: 5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft (raw, json) Hash identifier: ZH/mgiYQvkZm4pwBgntQ3/Zpdhv7rOIIEX2PUtZ2j30= Subject key identifier: 68:B1:C5:57:D6:9B:E3:85:B4:22:37:56:D6:6A:C6:D3:4B:38:A3:F3 Authority key identifier: E6:CC:65:C2:7C:23:29:8B:0C:5A:0E:0B:C7:4B:A5:10:34:A7:04:C8 Certificate issuer: /CN=e6cc65c27c23298b0c5a0e0bc74ba51034a704c8 Certificate serial: 019B34C454EEC6EAF8B08D33C197FB3B838D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 04:00:40 +0000 Manifest this update: Fri 19 Dec 2025 04:00:40 +0000 Manifest next update: Sat 20 Dec 2025 04:00:40 +0000 Files and hashes: 1: 5sxlwnwjKYsMWg4Lx0ulEDSnBMg.crl (hash: zzTpx37aIvX+bIjAkZj2Uf/FHVqiCOFNLb6qhKCyJAE=) 2: xw1wxyD1fMrJTbgYiyQiF0uQJK0.roa (hash: TVVXOUY13A6nRw+KZkyghJdyM7alOs0fCSWauNlbS0U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft rsync://rpki.ripe.net/repository/DEFAULT/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:54:ee:c6:ea:f8:b0:8d:33:c1:97:fb:3b:83:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6cc65c27c23298b0c5a0e0bc74ba51034a704c8 Validity Not Before: Dec 19 04:00:40 2025 GMT Not After : Dec 20 04:00:40 2025 GMT Subject: CN=68b1c557d69be385b4223756d66ac6d34b38a3f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ba:7a:83:b4:39:f3:88:76:be:89:b5:13:6e: c6:49:0b:90:42:80:53:ea:0b:28:fb:99:83:80:ee: aa:26:e6:d8:aa:92:46:af:d1:4e:50:1a:2e:73:0e: f0:f1:7f:9b:1b:0c:77:b2:58:e0:98:86:66:f8:1e: 81:f0:d4:12:ba:00:7f:02:ca:cb:9f:8e:dc:92:c1: b8:68:b7:22:6e:cb:da:ed:a0:14:24:5f:93:92:e8: 8c:d8:4c:05:3c:38:41:ad:34:ab:81:1f:a2:03:0a: 96:83:5f:35:cd:a2:b8:5d:f8:10:76:8b:58:7e:cc: 22:e5:61:42:07:6e:40:4a:08:bb:2d:9a:02:d7:3c: be:a3:67:39:8e:2b:39:54:70:bf:59:61:e6:69:26: 52:64:36:1a:ab:af:5b:09:2c:d7:5a:dd:b2:82:78: ee:09:3c:71:cd:96:c8:a7:a1:22:0a:78:8c:95:4f: b9:37:ed:51:d4:54:92:d6:80:2e:56:a8:7a:04:7f: c8:62:ef:fd:31:57:76:06:25:ef:08:74:4c:e1:2a: 38:bf:f8:65:e0:84:c6:27:b5:1d:65:cb:6c:47:90: ff:7d:64:ac:06:63:aa:4c:fd:f0:b0:63:8f:15:54: 35:2a:20:96:7d:6d:45:4f:02:14:f4:88:5b:20:9d: b2:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B1:C5:57:D6:9B:E3:85:B4:22:37:56:D6:6A:C6:D3:4B:38:A3:F3 X509v3 Authority Key Identifier: keyid:E6:CC:65:C2:7C:23:29:8B:0C:5A:0E:0B:C7:4B:A5:10:34:A7:04:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:c1:18:e6:cb:c1:49:e3:13:e7:2a:29:c9:8e:04:b9:e7:2b: 94:32:f7:e3:71:b0:52:86:77:21:f0:73:0c:79:c2:83:3a:6d: bb:aa:2e:16:12:46:17:9a:9a:9c:c0:9b:77:79:16:5c:6a:a9: 45:e6:98:0b:14:36:6d:b8:1d:a1:57:11:81:26:e5:4a:e6:7a: cd:f9:f3:81:f1:93:3e:85:2b:68:10:53:9e:a0:33:00:98:31: c6:52:b0:c5:30:90:2a:65:87:ff:d2:72:f3:6a:8b:0c:40:10: 04:c3:6c:41:9c:2e:f1:fb:c6:e4:8f:83:a7:6f:63:64:6e:f6: c1:5c:d6:c9:af:55:1e:39:79:88:ae:66:b0:2f:ae:96:8d:03: 29:32:60:1b:e9:55:65:d4:97:20:cc:82:ef:d7:a9:2e:b3:5b: 8e:01:62:01:74:48:3c:77:07:60:7f:8a:8f:84:f5:1f:16:de: 7d:03:5b:93:0e:46:12:fd:ae:3e:40:de:35:4e:2e:8d:83:dc: ad:71:0c:64:02:03:d7:6c:39:cf:d0:1e:3c:b5:90:2f:5d:05: 89:b8:5e:9c:a8:d7:cd:54:d3:70:3d:cf:25:5b:b5:8d:32:16: c5:a1:62:dd:3a:98:99:31:19:03:f0:a6:26:81:ba:68:d3:0a: ea:b7:7d:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xFTuxur4sI0zwZf7O4ONMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2Y2M2NWMyN2MyMzI5OGIwYzVhMGUwYmM3NGJhNTEwMzRh NzA0YzgwHhcNMjUxMjE5MDQwMDQwWhcNMjUxMjIwMDQwMDQwWjAzMTEwLwYDVQQD Eyg2OGIxYzU1N2Q2OWJlMzg1YjQyMjM3NTZkNjZhYzZkMzRiMzhhM2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLp6g7Q584h2vom1E27GSQuQQoBT 6gso+5mDgO6qJubYqpJGr9FOUBoucw7w8X+bGwx3sljgmIZm+B6B8NQSugB/AsrL n47cksG4aLcibsva7aAUJF+TkuiM2EwFPDhBrTSrgR+iAwqWg181zaK4XfgQdotY fswi5WFCB25ASgi7LZoC1zy+o2c5jis5VHC/WWHmaSZSZDYaq69bCSzXWt2ygnju CTxxzZbIp6EiCniMlU+5N+1R1FSS1oAuVqh6BH/IYu/9MVd2BiXvCHRM4So4v/hl 4ITGJ7UdZctsR5D/fWSsBmOqTP3wsGOPFVQ1KiCWfW1FTwIU9IhbIJ2yOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGixxVfWm+OFtCI3VtZqxtNLOKPzMB8GA1UdIwQY MBaAFObMZcJ8IymLDFoOC8dLpRA0pwTIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXN4bHdud2pLWXNNV2c0THgwdWxFRFNuQk1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8wZThiYWQtMTIxYy00YTU2LTk2Y2Qt YWFjZmMwZGJlZDEyLzEvNXN4bHdud2pLWXNNV2c0THgwdWxFRFNuQk1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC8wZThiYWQtMTIxYy00YTU2LTk2Y2QtYWFjZmMwZGJlZDEy LzEvNXN4bHdud2pLWXNNV2c0THgwdWxFRFNuQk1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdsEY5svB SeMT5yopyY4EuecrlDL343GwUoZ3IfBzDHnCgzptu6ouFhJGF5qanMCbd3kWXGqp ReaYCxQ2bbgdoVcRgSblSuZ6zfnzgfGTPoUraBBTnqAzAJgxxlKwxTCQKmWH/9Jy 82qLDEAQBMNsQZwu8fvG5I+Dp29jZG72wVzWya9VHjl5iK5msC+ulo0DKTJgG+lV ZdSXIMyC79epLrNbjgFiAXRIPHcHYH+Kj4T1HxbefQNbkw5GEv2uPkDeNU4ujYPc rXEMZAID12w5z9AePLWQL10FibhenKjXzVTTcD3PJVu1jTIWxaFi3TqYmTEZA/Cm JoG6aNMK6rd9Lw== -----END CERTIFICATE-----Generated at Fri Dec 19 06:23:23 2025 by rpki-client