This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft File: 5LTFOvZfC4OWuVtNB9TsTnvid-U.mft (raw, json) Hash identifier: sKzPw0eqvrKdb4UQ89+i5q3DEBLdwQOcbS1lL9fHT5Y= Subject key identifier: D3:62:77:DA:95:8F:E6:8F:79:CC:80:46:85:6B:FD:77:26:67:3C:B3 Authority key identifier: E4:B4:C5:3A:F6:5F:0B:83:96:B9:5B:4D:07:D4:EC:4E:7B:E2:77:E5 Certificate issuer: /CN=e4b4c53af65f0b8396b95b4d07d4ec4e7be277e5 Certificate serial: 019B25513CE677B428E3DC0ACA795F0394AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft Manifest number: 177D Signing time: Tue 16 Dec 2025 04:00:39 +0000 Manifest this update: Tue 16 Dec 2025 04:00:39 +0000 Manifest next update: Wed 17 Dec 2025 04:00:39 +0000 Files and hashes: 1: 5LTFOvZfC4OWuVtNB9TsTnvid-U.crl (hash: WniwKsouG3n6OXAfeIPY4+1rLII1fMg4MEiDmCb2kLU=) 2: HPP-Y8CcP39de0XZZOWjFIJ96v4.roa (hash: wqE/NVLKIIjuJJuVTQbIHrmfJEIIZJeODzcidgoveO0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:51:3c:e6:77:b4:28:e3:dc:0a:ca:79:5f:03:94:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4b4c53af65f0b8396b95b4d07d4ec4e7be277e5 Validity Not Before: Dec 16 04:00:39 2025 GMT Not After : Dec 17 04:00:39 2025 GMT Subject: CN=d36277da958fe68f79cc8046856bfd7726673cb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:07:dc:e5:9c:e7:e1:8b:66:65:14:2f:63:3d: c4:de:51:f9:c8:32:9a:9d:4d:43:2d:3e:58:2f:e6: 85:1d:16:47:78:55:cc:54:66:74:7e:29:7c:1e:a8: 79:3d:18:eb:ba:54:0e:e0:e6:51:3e:17:f4:2e:ac: 8b:1a:de:42:e9:1d:09:78:99:f8:1f:9b:b5:1b:4e: 3a:ad:a7:66:e7:76:3b:46:7b:88:56:02:80:d3:a2: 8b:f5:34:bc:b7:75:35:6f:02:e8:cc:1d:5e:4d:be: 5f:56:61:b5:61:c2:32:91:05:35:4e:44:7f:2a:81: 3f:bb:96:4a:27:f1:a2:9e:fc:4b:0a:92:3c:c0:b8: 6d:17:19:50:f4:6b:64:19:6c:20:fe:ab:bf:67:b4: 54:ab:1b:5e:58:fe:5a:61:7b:f0:59:ac:7e:b4:d3: d9:a2:4c:0d:39:a3:88:e0:e0:78:52:9d:b8:99:e9: 29:b7:65:70:64:ce:43:f9:43:26:58:68:24:f5:52: 0b:95:25:26:03:fb:1b:39:83:a4:80:b9:f2:62:95: 61:e6:6e:d4:3f:e1:95:ac:12:53:25:18:ed:21:40: c9:7f:f8:05:3d:40:22:42:bc:ee:cd:33:87:8d:8e: 25:14:3d:cf:00:df:57:1a:c5:30:e7:c8:ae:f9:a9: 1e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:62:77:DA:95:8F:E6:8F:79:CC:80:46:85:6B:FD:77:26:67:3C:B3 X509v3 Authority Key Identifier: keyid:E4:B4:C5:3A:F6:5F:0B:83:96:B9:5B:4D:07:D4:EC:4E:7B:E2:77:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:41:8b:74:39:2c:85:d7:41:66:90:13:47:67:ee:2d:74:7f: 85:6d:92:39:a7:9a:1f:5d:0e:3c:08:f8:1f:e3:96:9f:91:45: 0a:32:44:ec:8b:02:9b:3f:2b:50:24:4d:0c:6d:aa:99:ad:d0: 06:10:8f:2a:7f:6c:66:02:fe:ae:8f:88:b1:b9:5b:30:f1:38: 95:6f:cc:c4:80:5f:ff:02:e0:c4:78:bb:23:be:37:76:7b:2b: ad:09:57:a2:74:96:3b:a5:99:9e:17:3c:de:fe:c4:6f:66:b5: 10:e7:10:0c:37:15:7c:08:d1:ec:05:3a:b4:ed:87:79:d1:f3: 0e:79:08:67:21:3e:20:a7:04:a8:d6:5c:a3:4d:54:ff:b2:3c: 57:f7:a7:41:94:cc:ad:aa:93:c1:e9:d6:62:d6:a7:46:c3:9e: 37:f8:a8:21:45:6e:f2:fc:2a:69:aa:8b:9f:96:db:5a:21:cf: 7d:da:93:b0:a5:51:ea:3a:f3:0a:50:a1:5e:a1:2e:bf:0e:41: 3b:44:c5:0c:61:b9:53:f9:11:7f:7d:35:7c:b2:39:5b:97:ad: 00:8a:74:e3:4b:d9:f5:78:9c:87:3f:14:59:23:81:ba:a9:be: fb:c6:f4:bf:38:66:92:41:98:76:db:c0:aa:2c:3a:26:6c:05: 45:20:e3:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUTzmd7Qo49wKynlfA5StMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YjRjNTNhZjY1ZjBiODM5NmI5NWI0ZDA3ZDRlYzRlN2Jl Mjc3ZTUwHhcNMjUxMjE2MDQwMDM5WhcNMjUxMjE3MDQwMDM5WjAzMTEwLwYDVQQD EyhkMzYyNzdkYTk1OGZlNjhmNzljYzgwNDY4NTZiZmQ3NzI2NjczY2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQfc5Zzn4YtmZRQvYz3E3lH5yDKa nU1DLT5YL+aFHRZHeFXMVGZ0fil8Hqh5PRjrulQO4OZRPhf0LqyLGt5C6R0JeJn4 H5u1G046radm53Y7RnuIVgKA06KL9TS8t3U1bwLozB1eTb5fVmG1YcIykQU1TkR/ KoE/u5ZKJ/GinvxLCpI8wLhtFxlQ9GtkGWwg/qu/Z7RUqxteWP5aYXvwWax+tNPZ okwNOaOI4OB4Up24mekpt2VwZM5D+UMmWGgk9VILlSUmA/sbOYOkgLnyYpVh5m7U P+GVrBJTJRjtIUDJf/gFPUAiQrzuzTOHjY4lFD3PAN9XGsUw58iu+ake2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNNid9qVj+aPecyARoVr/XcmZzyzMB8GA1UdIwQY MBaAFOS0xTr2XwuDlrlbTQfU7E574nflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUxURk92WmZDNE9XdVZ0TkI5VHNUbnZpZC1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi80NmFhYmYtZGFkMC00ZDc2LWE1YjUt ODhkYjAxMjVhNmI4LzEvNUxURk92WmZDNE9XdVZ0TkI5VHNUbnZpZC1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi80NmFhYmYtZGFkMC00ZDc2LWE1YjUtODhkYjAxMjVhNmI4 LzEvNUxURk92WmZDNE9XdVZ0TkI5VHNUbnZpZC1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASEGLdDks hddBZpATR2fuLXR/hW2SOaeaH10OPAj4H+OWn5FFCjJE7IsCmz8rUCRNDG2qma3Q BhCPKn9sZgL+ro+IsblbMPE4lW/MxIBf/wLgxHi7I743dnsrrQlXonSWO6WZnhc8 3v7Eb2a1EOcQDDcVfAjR7AU6tO2HedHzDnkIZyE+IKcEqNZco01U/7I8V/enQZTM raqTwenWYtanRsOeN/ioIUVu8vwqaaqLn5bbWiHPfdqTsKVR6jrzClChXqEuvw5B O0TFDGG5U/kRf301fLI5W5etAIp040vZ9Xichz8UWSOBuqm++8b0vzhmkkGYdtvA qiw6JmwFRSDjNA== -----END CERTIFICATE-----Generated at Tue Dec 16 09:28:42 2025 by rpki-client