This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft File: 5NsDAf4kYcbeP3GNhHy13HwAstI.mft (raw, json) Hash identifier: rDRGP7vKpv3BDPnQkXxBPYeGKZhyLnVhyU8j6M1kD0Y= Subject key identifier: 65:97:22:A6:92:55:29:5B:20:B5:B5:34:40:E5:74:21:0F:D4:7F:58 Authority key identifier: E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2 Certificate issuer: /CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2 Certificate serial: 019B5C09553B18C59978855245AA24C7455F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft Manifest number: 137E Signing time: Fri 26 Dec 2025 19:01:14 +0000 Manifest this update: Fri 26 Dec 2025 19:01:14 +0000 Manifest next update: Sat 27 Dec 2025 19:01:14 +0000 Files and hashes: 1: 5NsDAf4kYcbeP3GNhHy13HwAstI.crl (hash: 9pxkydNi0UkEOD5KHuKm9JMBersP6J1iChabOjBeaxs=) 2: Hhlf2TMcsBbO8FDcjvrbEjaLNJk.roa (hash: ZLATPH9bmMVI2zAzUVqtDm2hTynFHZLFVRo0ph7khAc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:09:55:3b:18:c5:99:78:85:52:45:aa:24:c7:45:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2 Validity Not Before: Dec 26 19:01:14 2025 GMT Not After : Dec 27 19:01:14 2025 GMT Subject: CN=659722a69255295b20b5b53440e574210fd47f58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bc:ec:9c:b9:43:51:be:14:9a:23:82:38:a7: a8:7e:b7:7d:75:6b:0e:03:70:d9:f6:25:06:88:d4: 5e:e6:b1:74:7e:7f:e3:e5:e1:b1:e6:30:34:7f:07: 33:b3:db:cb:f7:c9:a4:29:4d:1b:94:30:95:88:f8: f4:a7:ba:f4:7a:b2:c2:c2:60:06:85:59:58:42:b1: 9d:77:f0:12:d1:f2:2b:f4:12:63:ed:45:61:b2:1c: 46:61:8f:f4:24:18:cb:72:8b:7f:b1:a8:f7:1f:ad: 65:45:d2:d3:bc:ca:6a:60:fe:c6:7f:4c:55:ae:65: b3:50:75:c4:d6:65:2a:cb:0c:80:3c:30:42:95:f3: 44:99:52:4a:66:9f:12:18:4a:0a:eb:a8:88:33:08: 99:39:c5:4c:9e:5f:f8:e6:aa:0a:91:32:ee:b0:04: cb:d6:58:55:ba:78:85:d0:73:0a:11:bc:db:e7:6a: 04:24:06:99:b6:70:3b:4c:49:a7:6b:12:b2:15:95: 73:65:fb:4a:f7:22:c3:e3:5c:d3:3c:b8:b2:2f:26: 5e:d1:00:54:21:5b:9e:d2:da:f5:41:ee:b8:b1:9f: 99:01:ea:da:12:1e:1b:22:ca:ab:1c:a7:69:2d:ea: cd:2f:da:c0:4c:a3:d4:eb:a1:c1:f5:01:c0:2c:17: aa:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:97:22:A6:92:55:29:5B:20:B5:B5:34:40:E5:74:21:0F:D4:7F:58 X509v3 Authority Key Identifier: keyid:E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:ec:78:71:3b:4e:b5:60:a3:b4:ed:01:2b:6a:6a:4e:69:b6: c7:e7:6e:19:15:e2:21:1a:f6:54:cc:af:d5:00:71:8b:18:d8: cb:fa:60:5b:73:6e:29:82:26:2c:85:b3:80:9a:33:0d:a5:66: 6c:db:43:e4:d8:28:cc:ec:f0:a4:32:72:09:36:34:25:79:0d: 3b:eb:0e:ca:d6:60:f4:41:e5:fc:5d:3f:f6:3c:93:af:22:78: d0:c8:af:53:49:56:06:51:88:34:2d:6b:df:db:e1:21:e7:3c: a8:46:df:8e:fe:c7:28:46:21:93:66:5c:b6:68:77:e6:14:2d: fc:9e:28:08:dc:47:43:2a:38:e2:4d:79:ad:1b:17:b7:a9:14: 89:57:e9:15:27:80:1d:44:03:84:3e:c5:67:25:a5:0f:c5:0e: 78:1d:b2:07:eb:3b:a0:e6:31:fb:fe:48:59:5d:f0:8d:bc:27: 31:10:c4:44:d2:e6:b4:4c:0a:c5:24:4e:8e:de:66:47:73:cb: 27:3c:20:46:b2:a8:74:e5:e3:94:32:c4:60:00:90:aa:02:b5: c9:c9:e0:24:e5:30:85:cd:95:39:54:a1:a1:9e:f8:37:13:57: 78:03:7f:17:ba:75:b2:b8:e2:53:ac:b0:99:2c:f4:83:73:9a: 45:2a:18:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcCVU7GMWZeIVSRaokx0VfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ZGIwMzAxZmUyNDYxYzZkZTNmNzE4ZDg0N2NiNWRjN2Mw MGIyZDIwHhcNMjUxMjI2MTkwMTE0WhcNMjUxMjI3MTkwMTE0WjAzMTEwLwYDVQQD Eyg2NTk3MjJhNjkyNTUyOTViMjBiNWI1MzQ0MGU1NzQyMTBmZDQ3ZjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7zsnLlDUb4UmiOCOKeofrd9dWsO A3DZ9iUGiNRe5rF0fn/j5eGx5jA0fwczs9vL98mkKU0blDCViPj0p7r0erLCwmAG hVlYQrGdd/AS0fIr9BJj7UVhshxGYY/0JBjLcot/saj3H61lRdLTvMpqYP7Gf0xV rmWzUHXE1mUqywyAPDBClfNEmVJKZp8SGEoK66iIMwiZOcVMnl/45qoKkTLusATL 1lhVuniF0HMKEbzb52oEJAaZtnA7TEmnaxKyFZVzZftK9yLD41zTPLiyLyZe0QBU IVue0tr1Qe64sZ+ZAeraEh4bIsqrHKdpLerNL9rATKPU66HB9QHALBeqQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGWXIqaSVSlbILW1NEDldCEP1H9YMB8GA1UdIwQY MBaAFOTbAwH+JGHG3j9xjYR8tdx8ALLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU5zREFmNGtZY2JlUDNHTmhIeTEzSHdBc3RJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC82ZTY0MDUtZGJlNy00MmIyLTg4N2Mt ZmZkZWJlYzhmNTA1LzEvNU5zREFmNGtZY2JlUDNHTmhIeTEzSHdBc3RJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC82ZTY0MDUtZGJlNy00MmIyLTg4N2MtZmZkZWJlYzhmNTA1 LzEvNU5zREFmNGtZY2JlUDNHTmhIeTEzSHdBc3RJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp+x4cTtO tWCjtO0BK2pqTmm2x+duGRXiIRr2VMyv1QBxixjYy/pgW3NuKYImLIWzgJozDaVm bNtD5NgozOzwpDJyCTY0JXkNO+sOytZg9EHl/F0/9jyTryJ40MivU0lWBlGINC1r 39vhIec8qEbfjv7HKEYhk2Zctmh35hQt/J4oCNxHQyo44k15rRsXt6kUiVfpFSeA HUQDhD7FZyWlD8UOeB2yB+s7oOYx+/5IWV3wjbwnMRDERNLmtEwKxSROjt5mR3PL JzwgRrKodOXjlDLEYACQqgK1ycngJOUwhc2VOVShoZ74NxNXeAN/F7p1srjiU6yw mSz0g3OaRSoYkw== -----END CERTIFICATE-----Generated at Fri Dec 26 21:01:20 2025 by rpki-client