This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft File: 5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft (raw, json) Hash identifier: qf7Bmjr3VAqivYVkyoEN8JqAtuyPa0rmO2BUtDXs3tg= Subject key identifier: FE:45:61:D8:E0:78:A1:85:F8:16:80:4A:52:41:97:70:A3:71:0F:FD Authority key identifier: E5:4A:B8:9D:33:BD:8A:A9:43:8A:1D:D0:B4:C5:9E:DB:EB:0C:64:EE Certificate issuer: /CN=e54ab89d33bd8aa9438a1dd0b4c59edbeb0c64ee Certificate serial: 019B1A971E52A7959BA45839F3E8BA24E307 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Uq4nTO9iqlDih3QtMWe2-sMZO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft Manifest number: 0764 Signing time: Sun 14 Dec 2025 02:01:09 +0000 Manifest this update: Sun 14 Dec 2025 02:01:09 +0000 Manifest next update: Mon 15 Dec 2025 02:01:09 +0000 Files and hashes: 1: 5Uq4nTO9iqlDih3QtMWe2-sMZO4.crl (hash: Sghzi6xxpYIrVm3TYWwGIhW3L/wKOP625e+2Rp3iXKM=) 2: zwhatF5o3yk6nLXIa0yxqzP0ZTc.roa (hash: 9S00G7VwkBsXnXA2C5JQWmhqMbRgsqzBdUuOpwkdR1g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft rsync://rpki.ripe.net/repository/DEFAULT/5Uq4nTO9iqlDih3QtMWe2-sMZO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:97:1e:52:a7:95:9b:a4:58:39:f3:e8:ba:24:e3:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e54ab89d33bd8aa9438a1dd0b4c59edbeb0c64ee Validity Not Before: Dec 14 02:01:09 2025 GMT Not After : Dec 15 02:01:09 2025 GMT Subject: CN=fe4561d8e078a185f816804a52419770a3710ffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b7:01:fa:aa:a5:f0:83:cd:90:0d:7d:1a:7b: 47:d1:4a:8e:60:ff:e8:2c:f0:3b:63:38:eb:8f:d9: 48:96:15:49:f9:07:6a:17:ce:d9:8b:f3:f5:49:70: b0:bb:c3:a9:a7:a6:37:56:12:de:61:f2:02:58:3d: b7:71:f4:bb:38:86:34:34:d0:4f:62:3b:99:68:bc: d2:a2:3b:49:36:c0:c6:6b:88:35:f2:1d:ab:62:96: 86:ec:3c:b8:f0:4f:23:d7:61:c4:1e:2c:41:ce:7d: 1d:e0:3a:ce:ba:e8:22:6b:bd:6d:90:bb:90:23:5d: 53:94:97:15:5f:c5:c5:bf:fb:9e:cb:db:de:e5:ed: 94:86:91:97:cc:cf:64:53:f5:89:dd:5a:a2:38:d0: fe:1b:af:3e:9c:54:58:eb:43:0e:dc:47:80:a3:4c: b5:36:5f:03:b6:6a:a1:bd:83:21:a3:2c:74:4f:57: 07:4e:f9:e7:09:0d:c9:62:2c:7e:3a:43:a8:b6:bf: 30:8a:7a:af:60:69:64:4f:21:7a:3c:d6:fc:a7:c2: 44:7c:d4:08:61:91:1f:b4:6c:c9:1f:49:e9:a7:56: 57:ff:65:8e:ee:59:d8:af:53:ff:75:af:3a:75:ee: 54:b6:08:6f:ad:0f:e5:3a:a6:0b:f2:29:20:46:96: b1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:45:61:D8:E0:78:A1:85:F8:16:80:4A:52:41:97:70:A3:71:0F:FD X509v3 Authority Key Identifier: keyid:E5:4A:B8:9D:33:BD:8A:A9:43:8A:1D:D0:B4:C5:9E:DB:EB:0C:64:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Uq4nTO9iqlDih3QtMWe2-sMZO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:1f:82:0a:d6:d9:88:06:46:e7:70:a2:6c:c0:d0:bf:72:08: b1:71:f2:c2:ef:76:e3:29:29:b3:a9:63:7c:a1:c1:5a:11:e7: 0b:95:d2:0a:5c:72:d6:aa:26:f0:de:20:24:3f:f9:5f:b4:fc: 19:8d:16:dc:5f:2f:a5:e0:cb:b7:fc:44:44:dc:f6:63:8c:43: d3:2c:df:51:51:23:f0:b6:27:07:66:d3:c2:8f:e9:18:85:50: bb:e6:04:8b:00:ad:37:fd:12:cc:11:2f:fc:ab:32:5d:3c:c1: c6:fa:de:fd:5e:bd:44:e9:6d:18:0e:26:5c:42:42:20:98:1a: b0:d9:ef:df:8f:70:5e:67:21:39:8a:0d:b5:c5:84:9d:7a:b3: 42:88:eb:2b:6b:fa:e5:9a:54:ca:aa:c7:a0:78:a5:71:6d:ae: da:60:3e:51:ac:6d:d6:b1:c9:7c:2d:6b:53:74:b9:64:bb:34: 12:87:de:3a:10:56:3b:d0:0c:e4:0a:52:ed:0b:a0:4c:d3:f7: f8:d6:d2:82:b2:47:82:a3:ff:ad:2c:67:44:91:92:17:f5:08: 9d:18:60:9c:d7:04:f4:1a:e2:15:89:48:38:bb:b9:61:5f:50: 45:99:7c:be:c5:4b:28:9b:1d:12:32:3d:ca:be:79:de:f5:04: ff:1b:1a:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsalx5Sp5WbpFg58+i6JOMHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NGFiODlkMzNiZDhhYTk0MzhhMWRkMGI0YzU5ZWRiZWIw YzY0ZWUwHhcNMjUxMjE0MDIwMTA5WhcNMjUxMjE1MDIwMTA5WjAzMTEwLwYDVQQD EyhmZTQ1NjFkOGUwNzhhMTg1ZjgxNjgwNGE1MjQxOTc3MGEzNzEwZmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLcB+qql8IPNkA19GntH0UqOYP/o LPA7Yzjrj9lIlhVJ+QdqF87Zi/P1SXCwu8Opp6Y3VhLeYfICWD23cfS7OIY0NNBP YjuZaLzSojtJNsDGa4g18h2rYpaG7Dy48E8j12HEHixBzn0d4DrOuugia71tkLuQ I11TlJcVX8XFv/uey9ve5e2UhpGXzM9kU/WJ3VqiOND+G68+nFRY60MO3EeAo0y1 Nl8DtmqhvYMhoyx0T1cHTvnnCQ3JYix+OkOotr8winqvYGlkTyF6PNb8p8JEfNQI YZEftGzJH0npp1ZX/2WO7lnYr1P/da86de5UtghvrQ/lOqYL8ikgRpax6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP5FYdjgeKGF+BaASlJBl3CjcQ/9MB8GA1UdIwQY MBaAFOVKuJ0zvYqpQ4od0LTFntvrDGTuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVVxNG5UTzlpcWxEaWgzUXRNV2UyLXNNWk80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9jMzE2YjYtNzJlMy00YmNlLWJiZTIt MWI0MzI4NzJiY2ZmLzEvNVVxNG5UTzlpcWxEaWgzUXRNV2UyLXNNWk80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9jMzE2YjYtNzJlMy00YmNlLWJiZTItMWI0MzI4NzJiY2Zm LzEvNVVxNG5UTzlpcWxEaWgzUXRNV2UyLXNNWk80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbB+CCtbZ iAZG53CibMDQv3IIsXHywu924ykps6ljfKHBWhHnC5XSClxy1qom8N4gJD/5X7T8 GY0W3F8vpeDLt/xERNz2Y4xD0yzfUVEj8LYnB2bTwo/pGIVQu+YEiwCtN/0SzBEv /KsyXTzBxvre/V69ROltGA4mXEJCIJgasNnv349wXmchOYoNtcWEnXqzQojrK2v6 5ZpUyqrHoHilcW2u2mA+Uaxt1rHJfC1rU3S5ZLs0EofeOhBWO9AM5ApS7QugTNP3 +NbSgrJHgqP/rSxnRJGSF/UInRhgnNcE9BriFYlIOLu5YV9QRZl8vsVLKJsdEjI9 yr553vUE/xsaJw== -----END CERTIFICATE-----Generated at Sun Dec 14 03:32:20 2025 by rpki-client