This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/5ADgGnlalXLPsazYWWya0zxhJlk.mft File: 5ADgGnlalXLPsazYWWya0zxhJlk.mft (raw, json) Hash identifier: zjC7OhqZJyQHx7apJaBXt48XHJ/s5xBkvH5xa03ddiQ= Subject key identifier: 5A:4B:9C:3B:1A:FE:6C:E3:42:44:C0:F0:F1:2C:DE:33:79:81:78:1A Authority key identifier: E4:00:E0:1A:79:5A:95:72:CF:B1:AC:D8:59:6C:9A:D3:3C:61:26:59 Certificate issuer: /CN=e400e01a795a9572cfb1acd8596c9ad33c612659 Certificate serial: 019B59ACA10B3AA20B484B337FAA81DA5D1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ADgGnlalXLPsazYWWya0zxhJlk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/5ADgGnlalXLPsazYWWya0zxhJlk.mft Manifest number: 012A Signing time: Fri 26 Dec 2025 08:00:44 +0000 Manifest this update: Fri 26 Dec 2025 08:00:44 +0000 Manifest next update: Sat 27 Dec 2025 08:00:44 +0000 Files and hashes: 1: 5ADgGnlalXLPsazYWWya0zxhJlk.crl (hash: VravZ5AIJyfboOKcTvOD66ttn2PC9MXZXtqnSPKovEQ=) 2: qkvMUmepPhpdWAB6-kEpJtY3NgA.roa (hash: qaU4Jh390H+MIqIOppGDPnJrwDH9PpOIvAh+NgpJEXk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/5ADgGnlalXLPsazYWWya0zxhJlk.crl rsync://rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/5ADgGnlalXLPsazYWWya0zxhJlk.mft rsync://rpki.ripe.net/repository/DEFAULT/5ADgGnlalXLPsazYWWya0zxhJlk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 08:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:a1:0b:3a:a2:0b:48:4b:33:7f:aa:81:da:5d:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e400e01a795a9572cfb1acd8596c9ad33c612659 Validity Not Before: Dec 26 08:00:44 2025 GMT Not After : Dec 27 08:00:44 2025 GMT Subject: CN=5a4b9c3b1afe6ce34244c0f0f12cde337981781a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:48:fa:f1:51:5c:d8:b5:d4:1d:b3:36:db:97: ae:20:65:09:c8:33:dc:2e:86:8b:e1:fa:eb:fc:97: 7f:0e:9c:19:1c:19:8c:6b:0e:0f:13:bc:1f:c7:20: a7:70:15:99:47:46:d4:57:14:c5:a8:e2:e0:3c:c7: 72:d5:f0:8e:59:19:d3:ba:8b:ca:69:0a:78:20:95: 3e:3e:30:88:cb:ec:de:59:ac:1c:a8:a0:d9:d6:e1: 26:2d:ed:c3:86:73:0c:f1:c4:89:16:b7:62:8b:62: d5:76:6c:24:8d:20:42:6d:1e:5b:79:e0:a2:f9:d9: 10:1b:a5:25:5d:a6:0d:44:ba:64:3e:69:f3:ae:91: f4:a8:c8:34:c3:fc:35:71:7e:82:02:d7:85:da:9f: 5c:7a:78:2d:f0:c3:61:6a:02:44:2b:26:1d:bb:53: 58:16:50:30:e0:34:ec:3c:15:88:51:df:78:ec:a8: ba:38:d1:84:a2:b0:b3:36:d8:e5:7f:57:01:f3:cd: d8:30:f5:b4:cf:bd:a6:07:40:c2:d3:d0:d9:2d:d2: b7:82:5b:c2:2a:45:f0:6a:75:f4:55:03:59:79:41: 82:09:b0:8e:aa:d4:26:17:57:85:fa:8b:b2:d2:30: a9:b9:8e:4b:d8:b7:95:b5:0b:5f:2e:dc:c5:78:55: d2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:4B:9C:3B:1A:FE:6C:E3:42:44:C0:F0:F1:2C:DE:33:79:81:78:1A X509v3 Authority Key Identifier: keyid:E4:00:E0:1A:79:5A:95:72:CF:B1:AC:D8:59:6C:9A:D3:3C:61:26:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ADgGnlalXLPsazYWWya0zxhJlk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/5ADgGnlalXLPsazYWWya0zxhJlk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/5ADgGnlalXLPsazYWWya0zxhJlk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:ef:4f:58:52:61:b1:64:79:cf:39:a1:40:e4:25:94:97:8e: a6:a6:2c:d1:31:49:00:00:a7:42:19:4e:c1:7e:ce:c5:6d:86: 08:8e:6a:d6:21:e0:f3:ce:b3:36:34:60:5d:5a:f0:c5:33:c3: 40:14:b6:b2:06:c3:0e:69:9a:bb:42:71:9b:ec:e3:8e:72:a8: a3:bd:c1:a5:a7:b8:59:9e:90:d3:89:97:94:7f:b5:dd:64:ec: 60:f0:05:d4:c4:3c:7d:71:e0:7b:b0:1d:d4:1d:55:5e:59:92: 85:ea:6c:0a:0f:3e:ef:b3:83:09:a1:76:5e:0a:68:22:55:6a: 20:ae:3a:0a:e0:ff:ea:86:10:a6:10:6b:fa:b5:48:f3:d5:ce: d0:bd:89:09:98:77:6c:06:58:a7:e3:05:74:19:ff:f8:f7:ef: ae:3f:4c:10:3a:46:fa:af:c6:b4:e3:f3:f3:a3:e2:1b:93:75: c6:e8:56:e4:db:12:03:4a:bf:d4:37:d5:f8:b6:6c:ab:54:d5: b5:ca:cc:f0:52:a7:d7:16:0b:ab:00:b8:60:35:d1:c9:71:f2: 5d:f9:11:37:99:a3:be:c8:a3:3f:fd:19:a8:88:69:db:34:a5: 19:97:44:79:7e:59:90:e9:d6:38:2c:2a:9d:2a:aa:98:f0:f7: ed:37:26:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrKELOqILSEszf6qB2l0aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0MDBlMDFhNzk1YTk1NzJjZmIxYWNkODU5NmM5YWQzM2M2 MTI2NTkwHhcNMjUxMjI2MDgwMDQ0WhcNMjUxMjI3MDgwMDQ0WjAzMTEwLwYDVQQD Eyg1YTRiOWMzYjFhZmU2Y2UzNDI0NGMwZjBmMTJjZGUzMzc5ODE3ODFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUj68VFc2LXUHbM225euIGUJyDPc LoaL4frr/Jd/DpwZHBmMaw4PE7wfxyCncBWZR0bUVxTFqOLgPMdy1fCOWRnTuovK aQp4IJU+PjCIy+zeWawcqKDZ1uEmLe3DhnMM8cSJFrdii2LVdmwkjSBCbR5beeCi +dkQG6UlXaYNRLpkPmnzrpH0qMg0w/w1cX6CAteF2p9cengt8MNhagJEKyYdu1NY FlAw4DTsPBWIUd947Ki6ONGEorCzNtjlf1cB883YMPW0z72mB0DC09DZLdK3glvC KkXwanX0VQNZeUGCCbCOqtQmF1eF+ouy0jCpuY5L2LeVtQtfLtzFeFXSPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFpLnDsa/mzjQkTA8PEs3jN5gXgaMB8GA1UdIwQY MBaAFOQA4Bp5WpVyz7Gs2FlsmtM8YSZZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUFEZ0dubGFsWExQc2F6WVdXeWEwenhoSmxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9hZWQyNjEtOTNiYy00YjBmLTk1Zjkt MGMzZWIxYTBkZDgwLzEvNUFEZ0dubGFsWExQc2F6WVdXeWEwenhoSmxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9hZWQyNjEtOTNiYy00YjBmLTk1ZjktMGMzZWIxYTBkZDgw LzEvNUFEZ0dubGFsWExQc2F6WVdXeWEwenhoSmxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHu9PWFJh sWR5zzmhQOQllJeOpqYs0TFJAACnQhlOwX7OxW2GCI5q1iHg886zNjRgXVrwxTPD QBS2sgbDDmmau0Jxm+zjjnKoo73Bpae4WZ6Q04mXlH+13WTsYPAF1MQ8fXHge7Ad 1B1VXlmShepsCg8+77ODCaF2XgpoIlVqIK46CuD/6oYQphBr+rVI89XO0L2JCZh3 bAZYp+MFdBn/+Pfvrj9MEDpG+q/GtOPz86PiG5N1xuhW5NsSA0q/1DfV+LZsq1TV tcrM8FKn1xYLqwC4YDXRyXHyXfkRN5mjvsijP/0ZqIhp2zSlGZdEeX5ZkOnWOCwq nSqqmPD37TcmHA== -----END CERTIFICATE-----Generated at Fri Dec 26 17:44:11 2025 by rpki-client