This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft File: 5SrPy9efIyxdcqVQvExm8REHoOI.mft (raw, json) Hash identifier: Y79D6ugU1/PldtMMjxhOrtIk8WW/i/akqOzJoQu2QN0= Subject key identifier: 53:E7:AB:48:4D:0F:C7:C5:A8:1D:D6:71:FB:36:17:83:FC:AA:45:CB Authority key identifier: E5:2A:CF:CB:D7:9F:23:2C:5D:72:A5:50:BC:4C:66:F1:11:07:A0:E2 Certificate issuer: /CN=e52acfcbd79f232c5d72a550bc4c66f11107a0e2 Certificate serial: 019B24AD112A588094A97DB4A7FB3CBF76AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft Manifest number: 0499 Signing time: Tue 16 Dec 2025 01:01:20 +0000 Manifest this update: Tue 16 Dec 2025 01:01:20 +0000 Manifest next update: Wed 17 Dec 2025 01:01:20 +0000 Files and hashes: 1: 5SrPy9efIyxdcqVQvExm8REHoOI.crl (hash: 4mzzwnsE6oATVLe/NmmCkhvlVc6kAtOnYePLrbGQ608=) 2: GtnbuughA7lHebTG_DZyY-rxvp0.roa (hash: 0ytXaby9nsfJsM0kCLclgYx+EoqtC/Er8+W1ubhewEg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:ad:11:2a:58:80:94:a9:7d:b4:a7:fb:3c:bf:76:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e52acfcbd79f232c5d72a550bc4c66f11107a0e2 Validity Not Before: Dec 16 01:01:20 2025 GMT Not After : Dec 17 01:01:20 2025 GMT Subject: CN=53e7ab484d0fc7c5a81dd671fb361783fcaa45cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9d:29:5d:c4:45:3b:be:d2:46:55:82:99:02: bf:65:a1:5b:8f:df:a3:82:78:50:4b:6d:fc:02:f1: 34:2c:81:c7:e9:54:73:c2:9b:b1:6b:a5:e1:cf:f2: e0:ef:7e:0f:d5:1d:88:07:2c:0c:5a:33:52:57:e6: 28:2b:9c:df:d0:81:11:db:6b:79:5a:c9:3c:15:33: 01:19:c8:e3:fe:62:34:14:1a:7e:30:51:b0:6b:51: e4:fe:1b:ba:91:00:be:0d:28:d5:79:79:5f:6f:47: 72:30:75:9c:01:2e:f7:89:ab:40:42:00:7a:89:65: 85:bf:fb:01:a8:3e:75:33:4f:85:63:b1:7a:f5:72: 78:06:7c:2f:92:32:1a:e5:40:7a:0b:2e:42:11:6a: 94:3e:d2:35:cb:a0:bf:72:88:89:46:9f:18:7a:65: d7:a1:92:b5:21:9f:f4:5a:32:ae:e2:cb:56:8c:86: 1c:1b:69:ac:dd:54:1f:40:00:06:60:ce:a1:cb:17: 89:e0:e5:92:e3:17:9d:57:cf:b3:31:da:4e:05:23: 97:76:82:5c:a9:0d:99:ca:65:84:71:c1:9e:31:2b: 9e:0c:22:19:14:8e:b8:62:d8:dc:0b:b9:9c:41:4f: 59:a7:43:b4:62:d3:22:3f:33:0e:ae:46:51:f7:77: db:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:E7:AB:48:4D:0F:C7:C5:A8:1D:D6:71:FB:36:17:83:FC:AA:45:CB X509v3 Authority Key Identifier: keyid:E5:2A:CF:CB:D7:9F:23:2C:5D:72:A5:50:BC:4C:66:F1:11:07:A0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:69:5a:a4:a9:ee:ba:56:34:9a:0f:f6:cd:73:f3:11:51:ab: a1:32:3e:a4:94:a8:29:44:84:25:97:9a:8c:c9:1e:41:78:e3: 40:e5:87:ce:06:8c:51:e1:4e:4b:de:cd:5c:e9:df:f4:a5:9d: 98:9e:99:86:e7:76:9e:2c:4b:10:c5:35:62:1e:f1:78:d4:0b: e8:a9:e7:8c:96:90:22:b4:86:88:69:b7:6c:93:bf:21:90:f1: e1:7e:a2:70:4a:ce:30:95:0c:f6:17:e0:8c:9a:ed:65:8c:31: 30:6c:ac:b3:08:b9:70:1c:ce:21:57:82:05:99:06:e4:ea:97: c9:9f:58:c9:78:3e:bd:64:04:28:6c:f7:91:81:ae:8c:f3:b7: 17:16:c7:d1:90:eb:8f:5f:f2:c4:06:d0:05:d5:9d:68:52:b0: 3e:63:38:68:7e:54:53:8e:4b:0d:c9:42:82:ef:ce:fa:de:01: e1:b1:55:95:fc:8e:ca:2c:56:41:74:48:b6:0c:40:ae:fb:26: 2a:b3:5c:26:bb:78:95:b0:0e:e2:af:14:be:86:9a:d8:9c:56: c7:09:f3:41:3c:3d:5a:5d:e6:7d:62:0d:b1:c9:40:d7:09:8f: 1f:5e:20:7f:36:e0:07:f3:ac:da:81:04:27:57:83:a8:f8:9d: bf:f2:97:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskrREqWICUqX20p/s8v3atMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1MmFjZmNiZDc5ZjIzMmM1ZDcyYTU1MGJjNGM2NmYxMTEw N2EwZTIwHhcNMjUxMjE2MDEwMTIwWhcNMjUxMjE3MDEwMTIwWjAzMTEwLwYDVQQD Eyg1M2U3YWI0ODRkMGZjN2M1YTgxZGQ2NzFmYjM2MTc4M2ZjYWE0NWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJ0pXcRFO77SRlWCmQK/ZaFbj9+j gnhQS238AvE0LIHH6VRzwpuxa6Xhz/Lg734P1R2IBywMWjNSV+YoK5zf0IER22t5 Wsk8FTMBGcjj/mI0FBp+MFGwa1Hk/hu6kQC+DSjVeXlfb0dyMHWcAS73iatAQgB6 iWWFv/sBqD51M0+FY7F69XJ4BnwvkjIa5UB6Cy5CEWqUPtI1y6C/coiJRp8YemXX oZK1IZ/0WjKu4stWjIYcG2ms3VQfQAAGYM6hyxeJ4OWS4xedV8+zMdpOBSOXdoJc qQ2ZymWEccGeMSueDCIZFI64YtjcC7mcQU9Zp0O0YtMiPzMOrkZR93fbewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFPnq0hND8fFqB3Wcfs2F4P8qkXLMB8GA1UdIwQY MBaAFOUqz8vXnyMsXXKlULxMZvERB6DiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVNyUHk5ZWZJeXhkY3FWUXZFeG04UkVIb09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80MmExOTMtYjMwYi00MDNmLWJlZmUt MzI0NTQ1MGQzNzQyLzEvNVNyUHk5ZWZJeXhkY3FWUXZFeG04UkVIb09JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS80MmExOTMtYjMwYi00MDNmLWJlZmUtMzI0NTQ1MGQzNzQy LzEvNVNyUHk5ZWZJeXhkY3FWUXZFeG04UkVIb09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVmlapKnu ulY0mg/2zXPzEVGroTI+pJSoKUSEJZeajMkeQXjjQOWHzgaMUeFOS97NXOnf9KWd mJ6Zhud2nixLEMU1Yh7xeNQL6KnnjJaQIrSGiGm3bJO/IZDx4X6icErOMJUM9hfg jJrtZYwxMGysswi5cBzOIVeCBZkG5OqXyZ9YyXg+vWQEKGz3kYGujPO3FxbH0ZDr j1/yxAbQBdWdaFKwPmM4aH5UU45LDclCgu/O+t4B4bFVlfyOyixWQXRItgxArvsm KrNcJrt4lbAO4q8Uvoaa2JxWxwnzQTw9Wl3mfWINsclA1wmPH14gfzbgB/Os2oEE J1eDqPidv/KXVA== -----END CERTIFICATE-----Generated at Tue Dec 16 09:49:04 2025 by rpki-client