This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft File: 5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft (raw, json) Hash identifier: xupDqtYe3062kMJrP9cF3J/RcXynlfWBiZxxjuBZ4Jo= Subject key identifier: 6F:AB:53:1B:B5:61:A5:C9:C3:BD:E5:BC:4B:60:8C:69:E2:73:7C:43 Authority key identifier: E7:18:51:20:E7:A3:B9:62:B9:FF:E4:AB:ED:16:D0:AA:3A:32:05:18 Certificate issuer: /CN=e7185120e7a3b962b9ffe4abed16d0aa3a320518 Certificate serial: 019B4BF13FAAB501E0A84E22F6763900992F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft Manifest number: 1163 Signing time: Tue 23 Dec 2025 16:00:59 +0000 Manifest this update: Tue 23 Dec 2025 16:00:59 +0000 Manifest next update: Wed 24 Dec 2025 16:00:59 +0000 Files and hashes: 1: 5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl (hash: z9wlZ9VR3rC1EZ3byDP8sCOCAxMvX+ncS4/w63nv95E=) 2: FrjAEg86v5SV-4VLldw-NEA5C1M.roa (hash: Rm7Xoat+7nBF56KNvwJMCJ6wscvSb/PfpXRNxa3KAIc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 16:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f1:3f:aa:b5:01:e0:a8:4e:22:f6:76:39:00:99:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7185120e7a3b962b9ffe4abed16d0aa3a320518 Validity Not Before: Dec 23 16:00:59 2025 GMT Not After : Dec 24 16:00:59 2025 GMT Subject: CN=6fab531bb561a5c9c3bde5bc4b608c69e2737c43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7f:ac:ed:46:14:dc:6c:d6:81:7d:38:e4:0a: 25:6a:c5:38:32:1b:b6:d4:85:d7:62:88:18:2b:f1: 4b:bf:84:bf:ac:79:a2:7b:27:ec:60:3a:ac:eb:1d: 07:44:d6:f9:80:d2:78:39:e2:5f:31:0f:c6:2c:c8: c7:26:0b:0f:38:5c:70:e2:06:61:5a:62:d8:77:cf: dc:0a:ac:30:47:99:6d:3e:e5:46:54:3f:4f:04:dd: 8e:d4:f3:75:69:76:de:bc:70:a0:ad:6e:56:d2:f9: ab:3c:4c:94:a6:65:f7:2b:97:41:c9:48:fa:f7:0d: 23:b5:11:8f:e6:db:90:c3:37:31:61:14:60:a6:0b: 1c:14:b0:5b:0e:48:dc:c0:04:29:6c:23:9e:4e:1f: a9:09:81:e9:ef:b0:2a:e9:7b:13:b9:d4:96:c3:13: b5:aa:e8:39:63:0a:38:35:21:d8:44:dc:45:1e:3b: 1b:6d:7a:35:6c:10:78:ca:6b:1a:9c:50:55:9e:83: 32:8b:2c:46:94:86:4a:08:29:57:11:78:3b:fb:01: 71:24:db:20:72:aa:5d:37:6e:cc:14:46:a2:a8:51: 30:24:e0:d2:76:a5:b5:0a:69:7f:94:39:2a:22:0f: 2a:62:c0:01:75:df:9b:34:a2:8c:71:81:db:4d:9e: 16:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:AB:53:1B:B5:61:A5:C9:C3:BD:E5:BC:4B:60:8C:69:E2:73:7C:43 X509v3 Authority Key Identifier: keyid:E7:18:51:20:E7:A3:B9:62:B9:FF:E4:AB:ED:16:D0:AA:3A:32:05:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:b7:45:75:0e:00:87:ee:77:af:b7:8e:86:aa:11:5e:45:d0: a7:f0:65:72:9e:fe:28:50:d4:1e:8b:99:45:9e:f1:80:a9:e1: c4:aa:1b:a9:2e:b8:9d:f3:0f:8d:4a:ec:b1:bf:03:f1:9c:a2: 55:d0:19:f8:ae:eb:0e:97:ab:1e:4a:54:d2:eb:cf:17:39:6a: 71:c6:92:c5:8e:ce:33:c1:14:8c:00:d0:71:3a:18:fb:78:f2: 86:01:36:0d:1d:5d:f3:03:55:16:5a:a3:85:67:5a:92:59:00: f1:d1:9a:b9:a6:a8:a6:f6:6c:ea:ec:b4:9e:f7:34:5d:d3:81: d4:ee:30:ed:97:a4:00:44:77:1e:e6:43:b5:6e:c5:c5:ed:f6: ac:4b:09:15:97:73:f2:fc:7f:e0:3f:da:56:6b:3d:ca:d6:21: 0e:65:41:3d:46:5d:5e:ea:bf:d9:76:b5:4a:6d:ed:74:45:b6: 08:11:37:75:f6:d9:a4:bb:7c:43:0f:fe:ec:97:e8:2f:d1:1f: 87:eb:0f:db:08:36:25:d9:c8:56:8e:c2:08:23:1d:e5:96:e8: 3b:75:29:37:08:64:81:c4:ba:4b:29:2f:8f:31:d3:3b:67:d4: 5e:5b:a3:53:80:5b:4f:b5:18:d0:fa:d3:99:2e:f5:3a:a8:3b: 79:38:ab:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8T+qtQHgqE4i9nY5AJkvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3MTg1MTIwZTdhM2I5NjJiOWZmZTRhYmVkMTZkMGFhM2Ez MjA1MTgwHhcNMjUxMjIzMTYwMDU5WhcNMjUxMjI0MTYwMDU5WjAzMTEwLwYDVQQD Eyg2ZmFiNTMxYmI1NjFhNWM5YzNiZGU1YmM0YjYwOGM2OWUyNzM3YzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvH+s7UYU3GzWgX045AolasU4Mhu2 1IXXYogYK/FLv4S/rHmieyfsYDqs6x0HRNb5gNJ4OeJfMQ/GLMjHJgsPOFxw4gZh WmLYd8/cCqwwR5ltPuVGVD9PBN2O1PN1aXbevHCgrW5W0vmrPEyUpmX3K5dByUj6 9w0jtRGP5tuQwzcxYRRgpgscFLBbDkjcwAQpbCOeTh+pCYHp77Aq6XsTudSWwxO1 qug5Ywo4NSHYRNxFHjsbbXo1bBB4ymsanFBVnoMyiyxGlIZKCClXEXg7+wFxJNsg cqpdN27MFEaiqFEwJODSdqW1Cml/lDkqIg8qYsABdd+bNKKMcYHbTZ4WRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG+rUxu1YaXJw73lvEtgjGnic3xDMB8GA1UdIwQY MBaAFOcYUSDno7liuf/kq+0W0Ko6MgUYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXhoUklPZWp1V0s1Xy1TcjdSYlFxam95QlJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84MDAwMWQtYjU4MS00NWZiLTkxMzgt ODljNjQyMGQ2ZjM2LzEvNXhoUklPZWp1V0s1Xy1TcjdSYlFxam95QlJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84MDAwMWQtYjU4MS00NWZiLTkxMzgtODljNjQyMGQ2ZjM2 LzEvNXhoUklPZWp1V0s1Xy1TcjdSYlFxam95QlJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZbdFdQ4A h+53r7eOhqoRXkXQp/Blcp7+KFDUHouZRZ7xgKnhxKobqS64nfMPjUrssb8D8Zyi VdAZ+K7rDperHkpU0uvPFzlqccaSxY7OM8EUjADQcToY+3jyhgE2DR1d8wNVFlqj hWdaklkA8dGauaaopvZs6uy0nvc0XdOB1O4w7ZekAER3HuZDtW7Fxe32rEsJFZdz 8vx/4D/aVms9ytYhDmVBPUZdXuq/2Xa1Sm3tdEW2CBE3dfbZpLt8Qw/+7JfoL9Ef h+sP2wg2JdnIVo7CCCMd5ZboO3UpNwhkgcS6SykvjzHTO2fUXlujU4BbT7UY0PrT mS71Oqg7eTirgg== -----END CERTIFICATE-----Generated at Wed Dec 24 02:17:10 2025 by rpki-client