This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft File: 5NJxw_qQOlkP31SJlEnmmPLpxjI.mft (raw, json) Hash identifier: MiBxjvsrywpmtqpcMOjJy5hFmY2upF0nqxmIM9FRGBM= Subject key identifier: 2A:70:D5:5A:96:4F:B5:33:04:41:95:12:59:22:51:38:BF:39:58:99 Authority key identifier: E4:D2:71:C3:FA:90:3A:59:0F:DF:54:89:94:49:E6:98:F2:E9:C6:32 Certificate issuer: /CN=e4d271c3fa903a590fdf54899449e698f2e9c632 Certificate serial: 019B59E382638E9AFD1B7FF7AAA2D0F12D60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 09:00:40 +0000 Manifest this update: Fri 26 Dec 2025 09:00:40 +0000 Manifest next update: Sat 27 Dec 2025 09:00:40 +0000 Files and hashes: 1: 5NJxw_qQOlkP31SJlEnmmPLpxjI.crl (hash: Od+i0jzs0+rRHGRySW5Kq/YcHq4JoWleyBmnHlXeyBc=) 2: uY1QhTOWxV4UKC9D82RM9yb0zNE.roa (hash: Bvx8t4Oi0CQUF3Zey6rE/7ccr+hwq753xh5wAVW5P6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:82:63:8e:9a:fd:1b:7f:f7:aa:a2:d0:f1:2d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4d271c3fa903a590fdf54899449e698f2e9c632 Validity Not Before: Dec 26 09:00:40 2025 GMT Not After : Dec 27 09:00:40 2025 GMT Subject: CN=2a70d55a964fb5330441951259225138bf395899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:32:1a:60:6b:55:5f:93:50:ad:9d:60:39:1b: ca:49:83:c1:44:9f:d6:6b:6d:95:a3:d6:c4:6b:d6: 92:e2:62:67:a1:28:33:2a:75:19:f3:45:b4:e6:2a: fe:a5:16:f1:42:25:6a:a9:0e:5c:40:ed:0a:b9:df: 23:dc:e4:11:59:fb:7b:59:e2:c2:5e:dc:f5:24:d2: fb:9c:1e:9f:11:4b:90:9c:4e:87:f3:74:5d:ad:ce: 9d:b0:35:99:3c:d2:62:5d:48:37:8d:cb:d7:9a:4d: 4b:60:7e:35:fe:39:44:a4:28:c5:ca:62:44:2b:c6: 81:96:f9:8c:90:37:a3:c8:05:0e:78:0d:09:47:a6: 0e:b3:a5:0b:13:07:27:b1:54:f7:bf:2b:3b:a4:dd: 23:2f:8d:3f:4f:84:e4:38:9d:72:93:54:44:ea:f5: 49:ce:64:4a:07:70:66:ce:fa:66:ee:f5:52:d0:9a: 8e:37:86:63:65:f0:a6:5a:d0:25:de:43:87:d2:af: 6c:07:b3:a8:ae:27:b8:4b:e8:80:f2:6d:43:bf:22: 77:88:d7:6f:2f:ac:7b:07:43:27:10:b7:00:7d:b2: 52:8d:df:ee:35:7b:22:3b:9e:ac:3d:d4:07:79:6c: bc:88:ac:77:23:9d:3e:64:92:e4:54:7e:4f:94:5a: cd:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:70:D5:5A:96:4F:B5:33:04:41:95:12:59:22:51:38:BF:39:58:99 X509v3 Authority Key Identifier: keyid:E4:D2:71:C3:FA:90:3A:59:0F:DF:54:89:94:49:E6:98:F2:E9:C6:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:99:d0:66:bf:21:be:8b:74:1b:8a:e3:66:65:81:4c:a0:c8: a0:ce:23:e2:94:5e:89:69:ac:b8:ca:bb:64:dd:68:4e:34:57: b2:0b:d0:5d:97:d0:e9:fb:c8:9b:19:bd:c4:ff:26:6a:31:77: 91:f3:4e:e3:0f:3b:48:a8:59:f2:c9:2a:32:e1:04:fe:a5:b9: b6:20:ac:84:36:9d:65:8d:61:9e:80:d8:f2:87:f9:57:0b:66: 89:26:43:d5:fd:a8:2f:e4:28:5e:20:11:b0:7f:f1:4b:7c:cb: aa:a9:d5:b1:99:88:a3:c3:b6:6a:55:d7:38:af:0d:41:48:cd: 00:ce:b6:00:24:1d:31:d4:6d:85:b7:54:bf:30:16:76:10:25: c5:5e:0c:02:ee:d3:77:98:69:46:b8:5a:ff:74:07:3e:15:87: dd:c6:d1:95:8f:3e:58:e4:25:2c:81:1c:14:25:72:d8:95:12: bf:46:89:f7:3e:98:fd:08:2f:de:56:f9:f3:ff:2e:bd:1a:af: 3d:68:27:a7:9f:8f:35:d8:f6:88:9e:99:ad:ba:55:a7:49:9f: b8:22:b8:d5:f9:a6:30:0d:b4:d7:12:72:de:80:ef:c4:9a:41: 79:a6:28:a2:bb:bb:4c:7d:c1:6c:60:f2:11:db:cd:18:5d:4f: dc:e0:11:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ44Jjjpr9G3/3qqLQ8S1gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ZDI3MWMzZmE5MDNhNTkwZmRmNTQ4OTk0NDllNjk4ZjJl OWM2MzIwHhcNMjUxMjI2MDkwMDQwWhcNMjUxMjI3MDkwMDQwWjAzMTEwLwYDVQQD EygyYTcwZDU1YTk2NGZiNTMzMDQ0MTk1MTI1OTIyNTEzOGJmMzk1ODk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzIaYGtVX5NQrZ1gORvKSYPBRJ/W a22Vo9bEa9aS4mJnoSgzKnUZ80W05ir+pRbxQiVqqQ5cQO0Kud8j3OQRWft7WeLC Xtz1JNL7nB6fEUuQnE6H83Rdrc6dsDWZPNJiXUg3jcvXmk1LYH41/jlEpCjFymJE K8aBlvmMkDejyAUOeA0JR6YOs6ULEwcnsVT3vys7pN0jL40/T4TkOJ1yk1RE6vVJ zmRKB3Bmzvpm7vVS0JqON4ZjZfCmWtAl3kOH0q9sB7Oorie4S+iA8m1DvyJ3iNdv L6x7B0MnELcAfbJSjd/uNXsiO56sPdQHeWy8iKx3I50+ZJLkVH5PlFrN6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCpw1VqWT7UzBEGVElkiUTi/OViZMB8GA1UdIwQY MBaAFOTSccP6kDpZD99UiZRJ5pjy6cYyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU5KeHdfcVFPbGtQMzFTSmxFbm1tUExweGpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC84OTcwOTItMDc1MC00ZDk2LWIzMmYt NWYyMDUyMzZkZTFmLzEvNU5KeHdfcVFPbGtQMzFTSmxFbm1tUExweGpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC84OTcwOTItMDc1MC00ZDk2LWIzMmYtNWYyMDUyMzZkZTFm LzEvNU5KeHdfcVFPbGtQMzFTSmxFbm1tUExweGpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARZnQZr8h vot0G4rjZmWBTKDIoM4j4pReiWmsuMq7ZN1oTjRXsgvQXZfQ6fvImxm9xP8majF3 kfNO4w87SKhZ8skqMuEE/qW5tiCshDadZY1hnoDY8of5VwtmiSZD1f2oL+QoXiAR sH/xS3zLqqnVsZmIo8O2alXXOK8NQUjNAM62ACQdMdRthbdUvzAWdhAlxV4MAu7T d5hpRrha/3QHPhWH3cbRlY8+WOQlLIEcFCVy2JUSv0aJ9z6Y/Qgv3lb58/8uvRqv PWgnp5+PNdj2iJ6ZrbpVp0mfuCK41fmmMA201xJy3oDvxJpBeaYooru7TH3BbGDy EdvNGF1P3OARvw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:18 2025 by rpki-client