This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft File: 5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft (raw, json) Hash identifier: mbN5BNTbgizwF5LbcRys98OsZBRhf+zVQ43wHgyGx+w= Subject key identifier: 28:06:0C:47:3B:40:B5:16:D0:C9:D7:54:67:3A:0C:88:09:EE:40:C1 Authority key identifier: E7:18:51:20:E7:A3:B9:62:B9:FF:E4:AB:ED:16:D0:AA:3A:32:05:18 Certificate issuer: /CN=e7185120e7a3b962b9ffe4abed16d0aa3a320518 Certificate serial: 019B48153C7E44D8CA067B34A0AABCFE1A51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft Manifest number: 1161 Signing time: Mon 22 Dec 2025 22:01:49 +0000 Manifest this update: Mon 22 Dec 2025 22:01:49 +0000 Manifest next update: Tue 23 Dec 2025 22:01:49 +0000 Files and hashes: 1: 5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl (hash: tMaNuLqDthTY3ONbFxL6vnNpOfWa6CXkJbcX3SBPT/w=) 2: FrjAEg86v5SV-4VLldw-NEA5C1M.roa (hash: Rm7Xoat+7nBF56KNvwJMCJ6wscvSb/PfpXRNxa3KAIc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:15:3c:7e:44:d8:ca:06:7b:34:a0:aa:bc:fe:1a:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7185120e7a3b962b9ffe4abed16d0aa3a320518 Validity Not Before: Dec 22 22:01:49 2025 GMT Not After : Dec 23 22:01:49 2025 GMT Subject: CN=28060c473b40b516d0c9d754673a0c8809ee40c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1a:2d:4c:1a:2b:56:47:05:f2:36:17:05:29: f0:31:01:e0:7c:60:e1:02:2f:ce:61:96:3c:c4:c8: 9b:cd:e5:fe:94:eb:06:c9:0e:9d:28:fa:e7:0d:5d: 3f:95:c8:d3:59:03:63:89:91:60:e7:6c:de:c1:70: 8f:92:f3:b3:82:1f:3c:75:3a:11:1a:5b:b9:ea:3f: 6a:45:c5:74:fd:c9:4a:ba:bd:38:a7:5c:0c:9a:5d: b4:c3:54:a7:1e:ea:5b:b4:d6:31:76:01:27:c6:1f: 14:49:77:1e:aa:a3:c1:5c:6e:c3:ec:b7:81:39:66: 39:34:28:e5:ab:8f:69:a7:c9:e4:77:fd:b3:3e:e2: a5:c3:10:37:b0:be:2f:f8:dd:1b:ce:29:17:39:6e: 83:73:fe:e3:aa:5b:1a:54:33:8f:ec:11:cb:32:5b: b1:ac:6d:c6:69:92:d8:3d:ad:83:0f:5a:ea:d7:31: da:af:9a:bc:40:19:93:30:82:4b:1d:0c:fd:b3:8e: 41:30:32:3a:39:ca:4a:6f:7a:be:13:91:0a:a8:2d: 3f:2e:25:ef:9c:da:e4:88:0b:31:b0:27:ce:dd:71: f0:7c:a9:be:ae:b3:b2:9d:fc:9b:b7:6b:a3:7d:36: d0:70:92:a9:ea:ad:69:f4:20:b2:57:1d:90:cf:2e: 8a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:06:0C:47:3B:40:B5:16:D0:C9:D7:54:67:3A:0C:88:09:EE:40:C1 X509v3 Authority Key Identifier: keyid:E7:18:51:20:E7:A3:B9:62:B9:FF:E4:AB:ED:16:D0:AA:3A:32:05:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:78:57:fa:14:37:b2:49:5e:45:36:d1:3c:e1:83:6c:75:98: 8f:f3:b3:71:ee:fe:8a:1e:f7:c9:c5:37:44:42:8d:8a:8f:01: 94:7b:9e:8e:14:6d:fe:9f:5e:aa:85:d7:ea:b4:7b:ee:84:3c: fa:dd:58:01:10:89:26:2b:e4:6d:de:a6:53:9f:18:cc:15:ad: 50:60:c2:52:a7:3e:a6:83:64:35:51:ea:f1:db:a6:9e:54:f3: 60:58:26:5f:5e:7f:39:48:73:0c:91:20:b9:c5:b4:40:6a:cf: a1:75:47:e9:b1:36:9e:d6:4a:a0:4a:0a:58:b4:9e:fc:db:db: de:53:01:4b:86:ca:e2:59:bf:bc:33:8b:4e:78:c1:d4:56:94: 75:09:02:45:2f:35:99:d9:05:6a:bd:3f:54:8e:e9:bb:8b:69: 0a:47:18:7f:d0:e5:94:fb:ca:6f:99:65:6b:8f:c3:27:a5:34: 2c:ab:13:45:03:f2:df:3d:0d:e4:ff:49:ff:c4:54:16:31:7c: 9c:40:57:9b:49:05:42:c7:8d:51:26:30:b7:fd:31:ed:7b:c9: c4:b9:03:20:47:05:0f:23:6e:b7:48:cf:6b:58:22:73:d2:91: 76:5c:32:66:f5:c8:51:67:98:c0:ee:37:b2:55:a1:f1:63:bd: fe:6c:ca:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFTx+RNjKBns0oKq8/hpRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3MTg1MTIwZTdhM2I5NjJiOWZmZTRhYmVkMTZkMGFhM2Ez MjA1MTgwHhcNMjUxMjIyMjIwMTQ5WhcNMjUxMjIzMjIwMTQ5WjAzMTEwLwYDVQQD EygyODA2MGM0NzNiNDBiNTE2ZDBjOWQ3NTQ2NzNhMGM4ODA5ZWU0MGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxotTBorVkcF8jYXBSnwMQHgfGDh Ai/OYZY8xMibzeX+lOsGyQ6dKPrnDV0/lcjTWQNjiZFg52zewXCPkvOzgh88dToR Glu56j9qRcV0/clKur04p1wMml20w1SnHupbtNYxdgEnxh8USXceqqPBXG7D7LeB OWY5NCjlq49pp8nkd/2zPuKlwxA3sL4v+N0bzikXOW6Dc/7jqlsaVDOP7BHLMlux rG3GaZLYPa2DD1rq1zHar5q8QBmTMIJLHQz9s45BMDI6OcpKb3q+E5EKqC0/LiXv nNrkiAsxsCfO3XHwfKm+rrOynfybt2ujfTbQcJKp6q1p9CCyVx2Qzy6KKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCgGDEc7QLUW0MnXVGc6DIgJ7kDBMB8GA1UdIwQY MBaAFOcYUSDno7liuf/kq+0W0Ko6MgUYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXhoUklPZWp1V0s1Xy1TcjdSYlFxam95QlJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84MDAwMWQtYjU4MS00NWZiLTkxMzgt ODljNjQyMGQ2ZjM2LzEvNXhoUklPZWp1V0s1Xy1TcjdSYlFxam95QlJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84MDAwMWQtYjU4MS00NWZiLTkxMzgtODljNjQyMGQ2ZjM2 LzEvNXhoUklPZWp1V0s1Xy1TcjdSYlFxam95QlJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANXhX+hQ3 skleRTbRPOGDbHWYj/Ozce7+ih73ycU3REKNio8BlHuejhRt/p9eqoXX6rR77oQ8 +t1YARCJJivkbd6mU58YzBWtUGDCUqc+poNkNVHq8dumnlTzYFgmX15/OUhzDJEg ucW0QGrPoXVH6bE2ntZKoEoKWLSe/Nvb3lMBS4bK4lm/vDOLTnjB1FaUdQkCRS81 mdkFar0/VI7pu4tpCkcYf9DllPvKb5lla4/DJ6U0LKsTRQPy3z0N5P9J/8RUFjF8 nEBXm0kFQseNUSYwt/0x7XvJxLkDIEcFDyNut0jPa1gic9KRdlwyZvXIUWeYwO43 slWh8WO9/mzKmg== -----END CERTIFICATE-----Generated at Tue Dec 23 06:09:22 2025 by rpki-client