This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.mft File: 5wVXsySVkhfZJZvs0aBUm2_6n2U.mft (raw, json) Hash identifier: tfI93ugPKUD4kYkV0+zmCZB/GYtTqsFegShTEIKkheU= Subject key identifier: 02:0E:4F:68:5E:E2:42:CE:97:64:CA:F3:75:D3:3A:01:36:A3:D3:4F Authority key identifier: E7:05:57:B3:24:95:92:17:D9:25:9B:EC:D1:A0:54:9B:6F:FA:9F:65 Certificate issuer: /CN=e70557b324959217d9259becd1a0549b6ffa9f65 Certificate serial: 019B20CFC93C076B609FDFC8FA8614648E07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5wVXsySVkhfZJZvs0aBUm2_6n2U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.mft Manifest number: 04D8 Signing time: Mon 15 Dec 2025 07:00:46 +0000 Manifest this update: Mon 15 Dec 2025 07:00:46 +0000 Manifest next update: Tue 16 Dec 2025 07:00:46 +0000 Files and hashes: 1: 5wVXsySVkhfZJZvs0aBUm2_6n2U.crl (hash: gAoCK+w68yJga9htggk4BORHqcqGFgA8jRhtkMc0D1Q=) 2: LC4E7CVdqve2s0imFECZpSxeumc.roa (hash: ctBI7RM04uAc4w/A50VeS7LJSTWUarW03NaBD0t5f6w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.mft rsync://rpki.ripe.net/repository/DEFAULT/5wVXsySVkhfZJZvs0aBUm2_6n2U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 07:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:cf:c9:3c:07:6b:60:9f:df:c8:fa:86:14:64:8e:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e70557b324959217d9259becd1a0549b6ffa9f65 Validity Not Before: Dec 15 07:00:46 2025 GMT Not After : Dec 16 07:00:46 2025 GMT Subject: CN=020e4f685ee242ce9764caf375d33a0136a3d34f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7c:d2:3c:88:57:5d:ba:9f:3d:87:2e:b6:0d: da:b5:a5:5d:e4:bb:01:9d:2b:bb:85:37:4d:ae:f5: 75:96:14:e8:6d:f3:a4:d3:bd:48:30:b6:85:72:27: bd:80:10:2b:05:dd:09:12:a1:8a:90:be:89:99:b0: 67:0b:2e:36:39:b6:47:9c:cd:79:d8:54:81:82:46: ab:e4:cf:db:68:4b:ae:f0:61:25:14:9f:4f:ad:52: ab:c8:b8:73:b8:d1:ce:d3:05:ad:d5:77:43:dc:ae: 85:20:19:23:48:a6:b3:6b:5b:9b:a2:12:f6:1f:74: c0:6a:a2:be:bb:1d:12:06:de:73:79:d1:74:1b:51: 01:97:fa:63:78:f2:db:c2:07:74:25:14:a2:a2:6f: b7:8f:53:ab:39:a2:05:ef:aa:ee:25:58:b4:77:a3: c0:46:76:c3:f0:88:8b:48:d0:2f:05:76:0d:28:f3: 11:af:eb:44:f6:60:24:c6:dc:7b:dc:d9:28:01:dd: cb:3a:d0:49:7e:5c:cb:86:75:d7:58:0b:76:d4:af: 77:ca:0e:5c:19:b8:8b:e8:82:7e:a8:79:13:98:9c: 34:df:d4:2d:1e:bc:ba:2e:d7:df:cf:72:ef:63:ca: 37:e4:5d:c5:14:66:ee:41:80:af:48:f6:08:5d:8b: 0d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:0E:4F:68:5E:E2:42:CE:97:64:CA:F3:75:D3:3A:01:36:A3:D3:4F X509v3 Authority Key Identifier: keyid:E7:05:57:B3:24:95:92:17:D9:25:9B:EC:D1:A0:54:9B:6F:FA:9F:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wVXsySVkhfZJZvs0aBUm2_6n2U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:91:73:af:48:ac:35:3d:27:a3:c8:f7:ce:d1:17:ee:d5:a6: cd:03:5f:97:b1:ae:fd:0a:26:3d:35:a3:43:eb:e5:4e:12:e4: 9e:86:0d:30:58:e1:5f:75:39:61:e3:1b:46:dd:57:a9:ed:43: 79:50:9d:f6:e2:7f:40:5e:ff:54:21:9e:11:5e:0b:6b:36:40: 03:b5:97:6a:06:a0:28:54:7d:6c:72:e9:27:1b:e9:31:ef:61: 1a:08:84:84:8d:34:b6:79:9c:f3:35:68:bd:d8:b2:d6:f1:90: f4:d0:67:5c:c2:3e:b8:28:f9:f0:e5:5b:bb:99:c9:b6:3c:fc: 22:98:63:e7:5d:86:7f:5c:d6:f0:2f:78:71:ff:04:58:a0:69: 6c:2d:a2:41:5b:fd:66:01:7f:4f:70:38:48:a7:0d:f4:39:dc: 87:35:73:e5:42:d4:2f:8a:99:28:56:11:5a:22:39:76:0f:6b: ea:fd:7f:34:ad:a7:e0:ab:8c:44:e1:07:66:24:42:a3:8f:52: 8f:6c:29:cc:c6:56:4f:25:56:ff:ae:01:12:be:1a:ea:22:3f: a0:90:80:7f:4d:1d:e0:25:eb:2e:00:85:9f:3c:50:eb:66:72: 4e:4c:e2:11:34:9a:85:c9:46:59:73:f4:b7:bd:e3:56:b5:1f: bc:82:4c:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgz8k8B2tgn9/I+oYUZI4HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3MDU1N2IzMjQ5NTkyMTdkOTI1OWJlY2QxYTA1NDliNmZm YTlmNjUwHhcNMjUxMjE1MDcwMDQ2WhcNMjUxMjE2MDcwMDQ2WjAzMTEwLwYDVQQD EygwMjBlNGY2ODVlZTI0MmNlOTc2NGNhZjM3NWQzM2EwMTM2YTNkMzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnzSPIhXXbqfPYcutg3ataVd5LsB nSu7hTdNrvV1lhTobfOk071IMLaFcie9gBArBd0JEqGKkL6JmbBnCy42ObZHnM15 2FSBgkar5M/baEuu8GElFJ9PrVKryLhzuNHO0wWt1XdD3K6FIBkjSKaza1ubohL2 H3TAaqK+ux0SBt5zedF0G1EBl/pjePLbwgd0JRSiom+3j1OrOaIF76ruJVi0d6PA RnbD8IiLSNAvBXYNKPMRr+tE9mAkxtx73NkoAd3LOtBJflzLhnXXWAt21K93yg5c GbiL6IJ+qHkTmJw039QtHry6Ltffz3LvY8o35F3FFGbuQYCvSPYIXYsNEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAIOT2he4kLOl2TK83XTOgE2o9NPMB8GA1UdIwQY MBaAFOcFV7MklZIX2SWb7NGgVJtv+p9lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXdWWHN5U1ZraGZaSlp2czBhQlVtMl82bjJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9lY2QxNGItZDJhOS00MGY5LWI2MzEt ZDVjMjA4ZWE3ZTdlLzEvNXdWWHN5U1ZraGZaSlp2czBhQlVtMl82bjJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9lY2QxNGItZDJhOS00MGY5LWI2MzEtZDVjMjA4ZWE3ZTdl LzEvNXdWWHN5U1ZraGZaSlp2czBhQlVtMl82bjJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr5Fzr0is NT0no8j3ztEX7tWmzQNfl7Gu/QomPTWjQ+vlThLknoYNMFjhX3U5YeMbRt1Xqe1D eVCd9uJ/QF7/VCGeEV4LazZAA7WXagagKFR9bHLpJxvpMe9hGgiEhI00tnmc8zVo vdiy1vGQ9NBnXMI+uCj58OVbu5nJtjz8Iphj512Gf1zW8C94cf8EWKBpbC2iQVv9 ZgF/T3A4SKcN9DnchzVz5ULUL4qZKFYRWiI5dg9r6v1/NK2n4KuMROEHZiRCo49S j2wpzMZWTyVW/64BEr4a6iI/oJCAf00d4CXrLgCFnzxQ62ZyTkziETSahclGWXP0 t73jVrUfvIJMEA== -----END CERTIFICATE-----Generated at Mon Dec 15 16:53:47 2025 by rpki-client