This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft File: 5wn3YuCC6tPW1-TK4p77tNEvV14.mft (raw, json) Hash identifier: jupOY6STA3ftfSnu+UQZsAZ1Fe2BN5WUDOlugH/joRQ= Subject key identifier: 1F:B7:84:B1:F1:2D:F5:61:9D:05:52:B1:ED:38:E5:97:2B:D9:97:DD Authority key identifier: E7:09:F7:62:E0:82:EA:D3:D6:D7:E4:CA:E2:9E:FB:B4:D1:2F:57:5E Certificate issuer: /CN=e709f762e082ead3d6d7e4cae29efbb4d12f575e Certificate serial: 019B19F1F3BD7AF6BCAF757D517B86AA0F8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft Manifest number: 0DCD Signing time: Sat 13 Dec 2025 23:00:45 +0000 Manifest this update: Sat 13 Dec 2025 23:00:45 +0000 Manifest next update: Sun 14 Dec 2025 23:00:45 +0000 Files and hashes: 1: 0I90jYLDsjsh8A1WdLN05NbEjj4.roa (hash: Kf+mfo5G5myFzzGKcZGygmTNr3GGZjTxsLuEcsJyKBc=) 2: 5wn3YuCC6tPW1-TK4p77tNEvV14.crl (hash: t1fSv+hiyRwwjCv5XYpLtXWbJFhB0Y/QO4DpAsxsG9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:f1:f3:bd:7a:f6:bc:af:75:7d:51:7b:86:aa:0f:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e709f762e082ead3d6d7e4cae29efbb4d12f575e Validity Not Before: Dec 13 23:00:45 2025 GMT Not After : Dec 14 23:00:45 2025 GMT Subject: CN=1fb784b1f12df5619d0552b1ed38e5972bd997dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:85:6a:c9:a9:54:8c:7c:53:c1:79:a4:98:68: 99:ec:49:e0:57:eb:cf:82:a9:dc:70:15:59:3d:ca: 2d:e9:0f:d7:ba:a6:18:7e:48:5b:c9:16:a4:65:44: bc:78:ee:0a:a3:36:9f:19:17:ad:1d:68:58:f0:4c: e5:1e:60:1f:76:ba:ec:15:4b:50:35:59:ff:57:c7: 7f:a5:8f:e9:d2:fa:20:be:6a:49:b4:f7:07:01:6d: f9:7a:81:c7:82:53:b7:49:d5:34:f7:ec:e8:2a:7e: 42:4f:ad:68:b0:34:f5:64:91:79:41:98:27:f4:ce: 82:17:97:c2:e2:b8:16:05:1d:77:fd:07:fd:04:9a: e4:08:1b:5d:54:20:3d:25:92:86:c9:9b:92:54:ec: ed:f5:71:98:50:5e:36:15:09:ac:8c:ad:bc:ce:c8: 4b:18:07:e8:a3:c0:50:bc:46:c9:3d:dc:70:43:d7: 4a:5b:79:d8:6c:b9:d2:4d:55:a9:6a:9c:8d:fe:ba: 0f:b8:d0:f1:b7:e5:19:dc:bc:9f:9c:e6:bf:2e:4a: 29:2c:7a:d8:39:de:21:c2:73:8b:87:fb:18:f6:74: b5:fb:02:a9:c7:d7:3a:ee:66:8b:fa:b9:f7:81:04: 7b:39:f5:0e:bd:5a:07:63:a8:ed:af:4b:a1:df:e7: 2b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B7:84:B1:F1:2D:F5:61:9D:05:52:B1:ED:38:E5:97:2B:D9:97:DD X509v3 Authority Key Identifier: keyid:E7:09:F7:62:E0:82:EA:D3:D6:D7:E4:CA:E2:9E:FB:B4:D1:2F:57:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:61:23:e0:a9:8f:c0:b9:6a:07:65:80:f6:48:df:a9:6f:50: 82:50:49:a5:f4:74:22:0f:da:a5:9d:79:4d:81:eb:2e:74:4a: 61:59:d6:b3:a7:05:49:35:c8:8c:fd:98:f0:e5:62:b4:6b:4f: 54:71:f0:d5:d2:9d:84:cd:c5:5d:ac:fc:9c:d6:cd:0f:60:2b: d5:00:2a:28:32:6d:a1:1f:95:59:22:dc:63:cf:63:40:52:cb: 1f:0d:89:e6:6d:26:fa:bb:94:21:d4:57:8b:f4:ad:52:af:2e: 4e:86:af:de:b6:35:86:17:53:a8:d3:67:17:cd:9c:e2:a0:b2: b3:94:a1:8e:8a:95:a5:7c:f2:d8:87:97:a6:97:b0:aa:34:80: 75:67:e9:13:f7:15:1e:f7:57:7f:4e:38:ab:fc:f4:49:2f:91: 95:43:0d:9f:67:a7:97:33:7c:0f:65:f7:bf:51:41:fb:c2:91: 98:cd:23:41:f6:e2:50:e2:c1:27:e5:89:b9:93:ba:ef:25:fd: 24:dd:70:88:18:06:cd:81:30:b1:61:69:4c:93:40:f4:c2:98: 2b:be:7c:24:ae:ab:a8:40:50:4d:b2:89:3e:8e:b1:de:7f:db: bb:94:e9:b7:27:4b:a0:06:c2:04:f1:c9:1c:ad:b0:cc:13:ca: 5b:15:76:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZ8fO9eva8r3V9UXuGqg+KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3MDlmNzYyZTA4MmVhZDNkNmQ3ZTRjYWUyOWVmYmI0ZDEy ZjU3NWUwHhcNMjUxMjEzMjMwMDQ1WhcNMjUxMjE0MjMwMDQ1WjAzMTEwLwYDVQQD EygxZmI3ODRiMWYxMmRmNTYxOWQwNTUyYjFlZDM4ZTU5NzJiZDk5N2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4VqyalUjHxTwXmkmGiZ7EngV+vP gqnccBVZPcot6Q/XuqYYfkhbyRakZUS8eO4KozafGRetHWhY8EzlHmAfdrrsFUtQ NVn/V8d/pY/p0vogvmpJtPcHAW35eoHHglO3SdU09+zoKn5CT61osDT1ZJF5QZgn 9M6CF5fC4rgWBR13/Qf9BJrkCBtdVCA9JZKGyZuSVOzt9XGYUF42FQmsjK28zshL GAfoo8BQvEbJPdxwQ9dKW3nYbLnSTVWpapyN/roPuNDxt+UZ3LyfnOa/LkopLHrY Od4hwnOLh/sY9nS1+wKpx9c67maL+rn3gQR7OfUOvVoHY6jtr0uh3+crhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+3hLHxLfVhnQVSse045Zcr2ZfdMB8GA1UdIwQY MBaAFOcJ92LggurT1tfkyuKe+7TRL1deMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXduM1l1Q0M2dFBXMS1USzRwNzd0TkV2VjE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wYmRhNGEtNWMxMC00NGRiLThmNjIt YWU0ZmE3ZjE3ZjljLzEvNXduM1l1Q0M2dFBXMS1USzRwNzd0TkV2VjE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8wYmRhNGEtNWMxMC00NGRiLThmNjItYWU0ZmE3ZjE3Zjlj LzEvNXduM1l1Q0M2dFBXMS1USzRwNzd0TkV2VjE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIGEj4KmP wLlqB2WA9kjfqW9QglBJpfR0Ig/apZ15TYHrLnRKYVnWs6cFSTXIjP2Y8OVitGtP VHHw1dKdhM3FXaz8nNbND2Ar1QAqKDJtoR+VWSLcY89jQFLLHw2J5m0m+ruUIdRX i/StUq8uToav3rY1hhdTqNNnF82c4qCys5ShjoqVpXzy2IeXppewqjSAdWfpE/cV HvdXf044q/z0SS+RlUMNn2enlzN8D2X3v1FB+8KRmM0jQfbiUOLBJ+WJuZO67yX9 JN1wiBgGzYEwsWFpTJNA9MKYK758JK6rqEBQTbKJPo6x3n/bu5TptydLoAbCBPHJ HK2wzBPKWxV2dA== -----END CERTIFICATE-----Generated at Sun Dec 14 01:58:44 2025 by rpki-client