This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.mft File: 5wVXsySVkhfZJZvs0aBUm2_6n2U.mft (raw, json) Hash identifier: A0E+/St3rTvkWcrBw1xh4OOSWT2YSO8PvjiI+ab4cnQ= Subject key identifier: F1:AB:BC:96:25:0C:6B:B8:7D:07:4D:8E:3A:39:8A:4D:76:13:AF:44 Authority key identifier: E7:05:57:B3:24:95:92:17:D9:25:9B:EC:D1:A0:54:9B:6F:FA:9F:65 Certificate issuer: /CN=e70557b324959217d9259becd1a0549b6ffa9f65 Certificate serial: 019B3231958DF895F0C2385258E99C67169B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5wVXsySVkhfZJZvs0aBUm2_6n2U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.mft Manifest number: 04E1 Signing time: Thu 18 Dec 2025 16:01:08 +0000 Manifest this update: Thu 18 Dec 2025 16:01:08 +0000 Manifest next update: Fri 19 Dec 2025 16:01:08 +0000 Files and hashes: 1: 5wVXsySVkhfZJZvs0aBUm2_6n2U.crl (hash: o39dTnw3jfCd25OfG9y/jixud5PxcxX9s22LLfzZTlc=) 2: LC4E7CVdqve2s0imFECZpSxeumc.roa (hash: ctBI7RM04uAc4w/A50VeS7LJSTWUarW03NaBD0t5f6w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.mft rsync://rpki.ripe.net/repository/DEFAULT/5wVXsySVkhfZJZvs0aBUm2_6n2U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:95:8d:f8:95:f0:c2:38:52:58:e9:9c:67:16:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e70557b324959217d9259becd1a0549b6ffa9f65 Validity Not Before: Dec 18 16:01:08 2025 GMT Not After : Dec 19 16:01:08 2025 GMT Subject: CN=f1abbc96250c6bb87d074d8e3a398a4d7613af44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e7:30:fb:98:cc:90:41:47:7b:08:47:e3:90: d5:b2:e4:90:61:7d:4a:36:74:1b:7d:de:99:e1:f3: 3e:a4:2b:21:93:d2:f5:c5:6b:cf:44:4e:74:5f:79: ac:96:46:43:88:be:6a:d5:e8:8f:15:e4:9e:cf:fe: ab:e1:da:c3:8a:15:1c:99:06:32:98:69:9c:15:13: d4:17:27:c2:d8:b2:58:be:84:97:b9:20:29:d9:7b: ae:fc:97:16:b9:31:48:c6:49:a8:19:37:d8:0f:3a: 38:c9:2c:f2:70:1b:4e:f2:a3:cd:6d:e1:af:69:e2: fb:92:4f:cf:1b:9b:38:0d:ac:4f:41:f8:7e:83:f3: 8d:c1:b6:2f:61:4e:0f:f3:ef:a7:80:be:07:46:4f: b9:06:4b:b1:f8:10:c3:46:7d:93:ab:64:0c:fd:76: 41:b6:2c:be:97:e2:07:53:09:65:dc:36:84:20:4d: 61:b2:22:73:96:bb:dc:6c:5f:c9:28:48:27:3a:22: c8:4e:0f:86:08:1c:b6:70:0d:50:97:4c:b1:6d:a5: c3:0a:ac:8f:74:6e:f4:d1:01:a9:a0:4a:85:c2:6a: ef:ff:b4:56:6d:62:81:35:e0:2a:6a:c4:56:fa:88: 21:c6:dd:6c:d3:e7:27:2b:0c:31:34:2b:e0:04:c7: 78:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:AB:BC:96:25:0C:6B:B8:7D:07:4D:8E:3A:39:8A:4D:76:13:AF:44 X509v3 Authority Key Identifier: keyid:E7:05:57:B3:24:95:92:17:D9:25:9B:EC:D1:A0:54:9B:6F:FA:9F:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wVXsySVkhfZJZvs0aBUm2_6n2U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:22:17:84:b2:c3:e6:f1:2f:55:14:5a:5a:cd:7b:3e:9a:40: 5a:2e:44:ef:67:b5:0b:81:43:a4:79:49:28:06:7b:7e:89:cc: 7f:ae:8a:75:f2:82:e6:98:c1:48:c4:2e:e8:f4:a2:2c:61:ca: 2c:ad:d0:47:c7:3a:ee:66:2f:92:f1:ef:05:33:e5:07:ed:5b: 3d:fe:de:8c:1b:d5:a7:54:b3:d6:77:99:ee:6c:65:59:f3:e1: 58:89:66:8c:bb:a3:6d:25:5a:0c:44:18:52:61:cf:1d:7f:f6: 46:de:1a:15:46:1b:1e:42:d6:82:95:77:11:16:9c:30:08:b3: c0:fb:02:68:8b:e2:54:a8:c7:45:16:33:1d:9c:4e:a4:3c:f7: 0d:fb:e9:31:39:e3:09:71:2c:62:73:8e:54:2a:6d:48:94:f1: 48:70:c3:6e:7e:df:11:1d:1a:44:1a:25:2e:71:b6:03:18:f7: d3:17:a9:8d:13:cd:7d:89:42:f2:60:ef:ea:81:a5:01:95:f9: 54:94:21:87:92:9b:ce:9d:ea:34:9b:fb:be:d5:ef:c4:ec:61: 05:ef:67:bf:6e:d7:b4:a4:d9:73:96:10:84:1e:d9:19:fb:1f: a6:2c:e4:93:55:a7:92:a6:29:d3:a9:88:95:a7:c6:ee:52:ca: 01:00:03:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMZWN+JXwwjhSWOmcZxabMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3MDU1N2IzMjQ5NTkyMTdkOTI1OWJlY2QxYTA1NDliNmZm YTlmNjUwHhcNMjUxMjE4MTYwMTA4WhcNMjUxMjE5MTYwMTA4WjAzMTEwLwYDVQQD EyhmMWFiYmM5NjI1MGM2YmI4N2QwNzRkOGUzYTM5OGE0ZDc2MTNhZjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOcw+5jMkEFHewhH45DVsuSQYX1K NnQbfd6Z4fM+pCshk9L1xWvPRE50X3mslkZDiL5q1eiPFeSez/6r4drDihUcmQYy mGmcFRPUFyfC2LJYvoSXuSAp2Xuu/JcWuTFIxkmoGTfYDzo4ySzycBtO8qPNbeGv aeL7kk/PG5s4DaxPQfh+g/ONwbYvYU4P8++ngL4HRk+5Bkux+BDDRn2Tq2QM/XZB tiy+l+IHUwll3DaEIE1hsiJzlrvcbF/JKEgnOiLITg+GCBy2cA1Ql0yxbaXDCqyP dG700QGpoEqFwmrv/7RWbWKBNeAqasRW+oghxt1s0+cnKwwxNCvgBMd4VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPGrvJYlDGu4fQdNjjo5ik12E69EMB8GA1UdIwQY MBaAFOcFV7MklZIX2SWb7NGgVJtv+p9lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXdWWHN5U1ZraGZaSlp2czBhQlVtMl82bjJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9lY2QxNGItZDJhOS00MGY5LWI2MzEt ZDVjMjA4ZWE3ZTdlLzEvNXdWWHN5U1ZraGZaSlp2czBhQlVtMl82bjJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9lY2QxNGItZDJhOS00MGY5LWI2MzEtZDVjMjA4ZWE3ZTdl LzEvNXdWWHN5U1ZraGZaSlp2czBhQlVtMl82bjJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABiIXhLLD 5vEvVRRaWs17PppAWi5E72e1C4FDpHlJKAZ7fonMf66KdfKC5pjBSMQu6PSiLGHK LK3QR8c67mYvkvHvBTPlB+1bPf7ejBvVp1Sz1neZ7mxlWfPhWIlmjLujbSVaDEQY UmHPHX/2Rt4aFUYbHkLWgpV3ERacMAizwPsCaIviVKjHRRYzHZxOpDz3DfvpMTnj CXEsYnOOVCptSJTxSHDDbn7fER0aRBolLnG2Axj30xepjRPNfYlC8mDv6oGlAZX5 VJQhh5Kbzp3qNJv7vtXvxOxhBe9nv27XtKTZc5YQhB7ZGfsfpizkk1WnkqYp06mI lafG7lLKAQAD2Q== -----END CERTIFICATE-----Generated at Thu Dec 18 22:35:31 2025 by rpki-client