This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.mft File: 5S2LXLp8LSuK8EbrfzEBBawMCaw.mft (raw, json) Hash identifier: hhtV4ZgJ/2Ptx1zJMLcSczYdNGSe07UtIOzFfJKz/r8= Subject key identifier: 14:95:38:15:B6:3E:AC:B7:6D:14:6B:37:AE:24:2F:72:9A:67:2D:02 Authority key identifier: E5:2D:8B:5C:BA:7C:2D:2B:8A:F0:46:EB:7F:31:01:05:AC:0C:09:AC Certificate issuer: /CN=e52d8b5cba7c2d2b8af046eb7f310105ac0c09ac Certificate serial: 019B0E9320A874B1B10F69F8B22976060663 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5S2LXLp8LSuK8EbrfzEBBawMCaw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.mft Manifest number: 056C Signing time: Thu 11 Dec 2025 18:01:21 +0000 Manifest this update: Thu 11 Dec 2025 18:01:21 +0000 Manifest next update: Fri 12 Dec 2025 18:01:21 +0000 Files and hashes: 1: 5S2LXLp8LSuK8EbrfzEBBawMCaw.crl (hash: XM1Umuy1Ao6aoiHoX1mgaTCoWbjCI9OJ8kBzlnPbRCQ=) 2: GuglbdgQwP1s68zPxpBUKeDH1GE.roa (hash: Sf12fpSS/gSIfCrOMCQf0QxlhogqDHOYf+4YlIW4mDA=) 3: bXAo7mVEmX8iLg6GBEHUZO92vHY.roa (hash: VzCJRz8Ej6xsupU4wBQwIcnAcaQ/S8QtaCA4CMwW82M=) 4: xXGe4wyq05lrsF2tc38x8ySFe-g.roa (hash: ILPVEPIY9D2xyNF63XsnQpEMnM3xKobt0LuSW1aSmX4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.mft rsync://rpki.ripe.net/repository/DEFAULT/5S2LXLp8LSuK8EbrfzEBBawMCaw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:20:a8:74:b1:b1:0f:69:f8:b2:29:76:06:06:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e52d8b5cba7c2d2b8af046eb7f310105ac0c09ac Validity Not Before: Dec 11 18:01:21 2025 GMT Not After : Dec 12 18:01:21 2025 GMT Subject: CN=14953815b63eacb76d146b37ae242f729a672d02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:37:0b:a9:02:4d:19:62:04:ce:8a:b8:e3:c2: bb:e7:78:87:c3:19:28:b1:4c:b6:44:53:22:62:01: 2f:e9:1c:bb:99:0b:34:1c:39:d3:b1:11:d9:b4:97: 4c:78:28:56:83:e4:06:9d:d0:a8:54:18:c5:fb:52: be:25:06:09:80:c7:a6:ca:49:a1:47:5f:9c:7b:3e: 3e:a6:93:27:4d:11:52:89:29:e9:8c:ac:8d:d9:e4: 20:6d:24:8e:9a:92:a7:54:63:a9:88:b8:86:1f:20: 53:59:90:79:b0:e2:e3:05:4c:b3:4b:60:d4:68:d8: 69:d2:19:d5:45:92:a7:5a:d1:89:3a:36:d7:eb:7c: 3f:f4:dd:17:bd:79:00:79:25:32:7a:f8:ce:59:b1: 60:06:60:69:7e:e7:f3:82:27:ce:1c:ca:a0:13:c3: a0:57:cf:92:ca:9c:da:0f:6a:97:6b:1a:8a:e6:93: f1:e4:0d:21:a3:bf:4a:ac:8c:8f:c5:ee:5a:c6:80: cd:16:34:23:62:e0:10:69:10:f8:fd:8d:dd:10:c7: fa:8d:29:ff:73:41:d6:ac:b8:32:f8:bd:e6:aa:cc: 83:08:44:ca:e2:c8:26:d1:42:69:4d:a9:16:45:f9: d5:c7:8c:df:46:50:c5:7e:7f:92:5f:7a:b9:3f:bb: 78:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:95:38:15:B6:3E:AC:B7:6D:14:6B:37:AE:24:2F:72:9A:67:2D:02 X509v3 Authority Key Identifier: keyid:E5:2D:8B:5C:BA:7C:2D:2B:8A:F0:46:EB:7F:31:01:05:AC:0C:09:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5S2LXLp8LSuK8EbrfzEBBawMCaw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:2b:ba:6c:e1:71:9b:6c:18:8b:20:32:45:38:b8:e7:e5:81: b5:bb:d8:84:8f:ad:94:d8:32:68:9a:70:49:07:dd:1e:dc:8f: f9:4e:4f:3e:75:69:4b:46:79:5c:49:64:4d:58:ed:8f:10:c9: c0:58:77:8d:35:4a:9c:4b:12:50:8f:b6:0f:8c:81:e6:5c:8c: 86:c4:a3:bc:13:f3:fb:88:08:bf:87:4c:b1:c8:e3:81:04:64: b5:44:6d:d4:db:5a:ba:a3:19:dc:31:b4:57:79:c2:a2:9b:0e: 4a:1f:99:ed:72:3e:43:4a:9d:ae:93:da:fd:d5:ba:99:b6:6c: 24:e0:7f:00:c4:7d:76:83:0f:8c:05:86:e6:c2:2d:94:c7:98: 97:c2:a2:6b:e4:6d:d4:84:db:4b:04:79:b1:fb:e6:04:e5:8e: 5c:3d:bf:ff:ce:f8:85:b4:4c:2d:86:76:c5:0f:48:cc:63:fe: f4:d7:af:86:28:e8:5f:fc:7a:8d:c4:fb:e3:64:c5:d5:84:fb: 84:8e:0d:ba:50:66:32:c9:e0:ac:76:d4:48:66:a6:d8:1d:78: 84:25:83:bd:ca:46:cf:43:67:23:bd:7b:17:24:c2:76:4b:4e: 5a:c3:d9:e7:4a:8f:66:68:75:b6:ab:3e:45:de:d4:04:21:bc: 9f:ec:b5:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkyCodLGxD2n4sil2BgZjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1MmQ4YjVjYmE3YzJkMmI4YWYwNDZlYjdmMzEwMTA1YWMw YzA5YWMwHhcNMjUxMjExMTgwMTIxWhcNMjUxMjEyMTgwMTIxWjAzMTEwLwYDVQQD EygxNDk1MzgxNWI2M2VhY2I3NmQxNDZiMzdhZTI0MmY3MjlhNjcyZDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzcLqQJNGWIEzoq448K753iHwxko sUy2RFMiYgEv6Ry7mQs0HDnTsRHZtJdMeChWg+QGndCoVBjF+1K+JQYJgMemykmh R1+cez4+ppMnTRFSiSnpjKyN2eQgbSSOmpKnVGOpiLiGHyBTWZB5sOLjBUyzS2DU aNhp0hnVRZKnWtGJOjbX63w/9N0XvXkAeSUyevjOWbFgBmBpfufzgifOHMqgE8Og V8+SypzaD2qXaxqK5pPx5A0ho79KrIyPxe5axoDNFjQjYuAQaRD4/Y3dEMf6jSn/ c0HWrLgy+L3mqsyDCETK4sgm0UJpTakWRfnVx4zfRlDFfn+SX3q5P7t4/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBSVOBW2Pqy3bRRrN64kL3KaZy0CMB8GA1UdIwQY MBaAFOUti1y6fC0rivBG638xAQWsDAmsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVMyTFhMcDhMU3VLOEVicmZ6RUJCYXdNQ2F3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kNGY4M2QtZmI1My00MjRmLTg1MWQt YzBkMDYyYTc1MzU0LzEvNVMyTFhMcDhMU3VLOEVicmZ6RUJCYXdNQ2F3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9kNGY4M2QtZmI1My00MjRmLTg1MWQtYzBkMDYyYTc1MzU0 LzEvNVMyTFhMcDhMU3VLOEVicmZ6RUJCYXdNQ2F3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUCu6bOFx m2wYiyAyRTi45+WBtbvYhI+tlNgyaJpwSQfdHtyP+U5PPnVpS0Z5XElkTVjtjxDJ wFh3jTVKnEsSUI+2D4yB5lyMhsSjvBPz+4gIv4dMscjjgQRktURt1NtauqMZ3DG0 V3nCopsOSh+Z7XI+Q0qdrpPa/dW6mbZsJOB/AMR9doMPjAWG5sItlMeYl8Kia+Rt 1ITbSwR5sfvmBOWOXD2//874hbRMLYZ2xQ9IzGP+9NevhijoX/x6jcT742TF1YT7 hI4NulBmMsngrHbUSGam2B14hCWDvcpGz0NnI717FyTCdktOWsPZ50qPZmh1tqs+ Rd7UBCG8n+y13Q== -----END CERTIFICATE-----Generated at Fri Dec 12 00:16:45 2025 by rpki-client