This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft File: 5TrZtDK7g9FBxIDe54vDX_R8tyw.mft (raw, json) Hash identifier: i+/wbgypKwOkP5gHlHMx5SiGceHt8nwiRj7jmfUaX2M= Subject key identifier: D5:2E:0C:1E:F4:13:09:21:96:93:74:24:74:20:67:26:30:D1:09:CF Authority key identifier: E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C Certificate issuer: /CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c Certificate serial: 019B3532C1E846444A3DA365923D290C63DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 06:01:17 +0000 Manifest this update: Fri 19 Dec 2025 06:01:17 +0000 Manifest next update: Sat 20 Dec 2025 06:01:17 +0000 Files and hashes: 1: 5TrZtDK7g9FBxIDe54vDX_R8tyw.crl (hash: WktfNlYGkATX4s5ntGRkjavcZVS7gGjOXlx+TAs2fYE=) 2: FR3a7fbq59iIo0zAlvy5kzi1iZU.roa (hash: Z35c/JbC3hZCBf85VdNEpndC+c0TUxZMQxPjJSIsAQ0=) 3: suPxSfpNrh7z5_Ta2x6TjwnQ2sY.roa (hash: jrCuL3fpLVTl6VSsAmka/tgQrfuz/laa7SHWrZ9+ExE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:c1:e8:46:44:4a:3d:a3:65:92:3d:29:0c:63:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c Validity Not Before: Dec 19 06:01:17 2025 GMT Not After : Dec 20 06:01:17 2025 GMT Subject: CN=d52e0c1ef4130921969374247420672630d109cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:75:20:54:9e:61:0d:ad:40:ee:fd:fa:82:1b: 78:38:15:d0:bd:1d:03:01:ee:ef:01:89:a3:70:52: aa:a2:85:ab:dd:24:1e:8b:cf:07:a8:2c:d4:9f:bc: e3:02:be:8e:09:c0:88:68:94:75:f5:7e:69:4b:bd: eb:4a:19:7a:a2:c5:fb:e8:b0:a1:ce:2d:9e:49:34: 13:38:78:0f:8a:eb:f1:d8:20:1d:3e:00:7b:21:d8: a0:61:48:af:91:5c:97:4e:14:c9:d4:8b:c1:02:ea: 96:81:d9:78:3c:88:02:cb:60:b6:ad:d7:84:8a:1a: 55:24:3a:b9:f7:03:d0:fc:66:4d:d3:23:2d:bb:93: 97:dd:3c:2d:08:02:23:e1:39:b5:07:1f:ad:fd:ae: 32:2d:3f:11:77:c7:bf:4e:54:9f:58:c6:7b:6c:11: c0:e1:bd:35:3a:ea:6e:28:f5:f4:5b:17:59:37:f3: b0:bd:1f:cc:cb:14:08:a6:9b:b9:1d:39:d3:2f:b0: ee:d7:c3:dd:72:b7:ef:d1:0f:ea:22:13:d2:83:06: 53:f2:f8:71:c8:70:a7:2e:af:db:12:10:d3:83:83: 16:f3:3a:6a:07:7b:1d:e5:67:44:a8:db:03:7e:c7: 05:19:85:73:4c:70:46:b0:09:b8:26:7b:5b:16:65: 6d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:2E:0C:1E:F4:13:09:21:96:93:74:24:74:20:67:26:30:D1:09:CF X509v3 Authority Key Identifier: keyid:E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:f3:16:ef:8e:a6:b7:b4:94:c9:39:27:bb:40:a6:25:4e:ea: ab:cb:0f:fc:56:67:d4:b1:88:60:1a:64:e1:d9:bf:68:d9:eb: 98:43:7b:4f:39:e0:03:5f:92:7d:50:7a:f5:8c:c4:85:be:8a: ff:e6:32:2d:a1:f2:11:b7:90:24:ac:a9:95:94:50:6f:98:c2: 89:08:c7:2a:54:53:74:21:4b:75:92:0a:9b:34:75:6f:79:71: 5b:80:b5:5f:bc:3b:db:21:2b:7b:cf:16:26:bf:e6:c1:fb:1f: 4c:1a:93:0b:aa:29:de:42:ba:c7:db:c8:d1:e7:2b:f8:d8:c2: b6:af:1b:5a:99:d1:2c:eb:74:be:97:be:bd:20:f7:c3:72:22: 1a:3e:2c:df:26:13:6f:4b:7d:dd:f2:9f:81:f1:1e:b3:e0:e4: d6:c4:52:03:ea:12:00:01:af:25:c1:3c:6e:75:ae:0f:9c:d8: 6b:31:b3:f1:13:dd:b2:e0:c7:4d:4a:cf:d8:7f:41:34:14:7c: e1:79:d8:97:ac:e7:e5:cc:62:ca:87:5d:b9:91:72:bb:dd:b4: 59:f4:d6:e1:6c:df:5c:44:76:7e:8d:87:aa:39:93:b2:17:3d: e2:28:fc:11:c3:f2:1e:b0:2d:7d:02:dd:ae:a3:04:07:77:e0: 71:68:76:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MsHoRkRKPaNlkj0pDGPcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1M2FkOWI0MzJiYjgzZDE0MWM0ODBkZWU3OGJjMzVmZjQ3 Y2I3MmMwHhcNMjUxMjE5MDYwMTE3WhcNMjUxMjIwMDYwMTE3WjAzMTEwLwYDVQQD EyhkNTJlMGMxZWY0MTMwOTIxOTY5Mzc0MjQ3NDIwNjcyNjMwZDEwOWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3UgVJ5hDa1A7v36ght4OBXQvR0D Ae7vAYmjcFKqooWr3SQei88HqCzUn7zjAr6OCcCIaJR19X5pS73rShl6osX76LCh zi2eSTQTOHgPiuvx2CAdPgB7IdigYUivkVyXThTJ1IvBAuqWgdl4PIgCy2C2rdeE ihpVJDq59wPQ/GZN0yMtu5OX3TwtCAIj4Tm1Bx+t/a4yLT8Rd8e/TlSfWMZ7bBHA 4b01OupuKPX0WxdZN/OwvR/MyxQIppu5HTnTL7Du18Pdcrfv0Q/qIhPSgwZT8vhx yHCnLq/bEhDTg4MW8zpqB3sd5WdEqNsDfscFGYVzTHBGsAm4JntbFmVtIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNUuDB70EwkhlpN0JHQgZyYw0QnPMB8GA1UdIwQY MBaAFOU62bQyu4PRQcSA3ueLw1/0fLcsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVRyWnRESzdnOUZCeElEZTU0dkRYX1I4dHl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9lOGJkMGItZjM2ZC00NWY1LWI5ODUt MDliYjUyODc1MzFiLzEvNVRyWnRESzdnOUZCeElEZTU0dkRYX1I4dHl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9lOGJkMGItZjM2ZC00NWY1LWI5ODUtMDliYjUyODc1MzFi LzEvNVRyWnRESzdnOUZCeElEZTU0dkRYX1I4dHl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJPMW746m t7SUyTknu0CmJU7qq8sP/FZn1LGIYBpk4dm/aNnrmEN7TzngA1+SfVB69YzEhb6K /+YyLaHyEbeQJKyplZRQb5jCiQjHKlRTdCFLdZIKmzR1b3lxW4C1X7w72yEre88W Jr/mwfsfTBqTC6op3kK6x9vI0ecr+NjCtq8bWpnRLOt0vpe+vSD3w3IiGj4s3yYT b0t93fKfgfEes+Dk1sRSA+oSAAGvJcE8bnWuD5zYazGz8RPdsuDHTUrP2H9BNBR8 4XnYl6zn5cxiyodduZFyu920WfTW4WzfXER2fo2HqjmTshc94ij8EcPyHrAtfQLd rqMEB3fgcWh2DQ== -----END CERTIFICATE-----Generated at Fri Dec 19 12:26:16 2025 by rpki-client