This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft File: 5YBcX-NFAofc3mreDZyVWLphXjI.mft (raw, json) Hash identifier: 8x9ee3LUqHHO7BsVmI19kvnNbrRUGkStWKwqZa/T714= Subject key identifier: E3:AA:2C:DC:21:67:A8:74:B8:4C:F1:B1:AE:D4:07:F6:3B:86:E2:3D Authority key identifier: E5:80:5C:5F:E3:45:02:87:DC:DE:6A:DE:0D:9C:95:58:BA:61:5E:32 Certificate issuer: /CN=e5805c5fe3450287dcde6ade0d9c9558ba615e32 Certificate serial: 019B2407CD8F70C0AB14B7F7B55A4D48256D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft Manifest number: 12BC Signing time: Mon 15 Dec 2025 22:00:49 +0000 Manifest this update: Mon 15 Dec 2025 22:00:49 +0000 Manifest next update: Tue 16 Dec 2025 22:00:49 +0000 Files and hashes: 1: 4smvePH69FAYNSdSIOq-IbOCEOY.roa (hash: YP4Y8XIxmd6gqrm+p+MzPpn8EJXfmEHsFE9JRUt3QgM=) 2: 5YBcX-NFAofc3mreDZyVWLphXjI.crl (hash: G3CDiwPVeiNVTae+Zjc0Uw8ZcdmLXF0WcduUw4+ng6I=) 3: LE09wGjm-4tV478e5hKoYO1ss_4.roa (hash: ZvvOcJV43Cg5jGcdcMkvsbLcwJVugyuR0arAlKHmsbc=) 4: bslnxciGSGjp5x3mv5ejIjp-fOk.roa (hash: aguWPYFuH/8n3kD28WuYVtoo2iM5Q/UCEREfJbZ73y8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:07:cd:8f:70:c0:ab:14:b7:f7:b5:5a:4d:48:25:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5805c5fe3450287dcde6ade0d9c9558ba615e32 Validity Not Before: Dec 15 22:00:49 2025 GMT Not After : Dec 16 22:00:49 2025 GMT Subject: CN=e3aa2cdc2167a874b84cf1b1aed407f63b86e23d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a9:21:e1:9f:22:9a:2a:01:af:57:1c:61:7b: d3:cb:af:c3:74:8f:64:de:e9:cd:59:bf:ea:f6:b3: 41:88:ab:a6:8f:ae:f9:3f:72:0a:77:32:e2:0a:11: 28:a2:28:0a:b6:4c:1d:05:07:53:a1:46:50:07:76: d7:4f:47:ef:ac:ea:10:32:8a:7d:ca:78:a0:13:53: ac:0f:f0:2c:4f:1b:85:af:0f:e6:c6:44:91:19:9a: 39:ad:3c:a8:7f:ba:11:d8:be:76:4c:bd:33:b3:64: af:dc:fc:1c:8f:3e:41:51:f4:6d:93:15:8f:b8:18: f4:a7:70:25:ab:2e:bb:70:0d:b8:3e:19:83:fc:f9: 20:ea:1c:dc:f6:16:8e:b5:91:68:18:91:33:7b:63: 39:dd:17:cf:5b:6b:f8:77:df:d6:71:2a:bf:fe:85: 92:53:25:9f:3e:06:e6:dc:33:e0:9e:b7:d7:d1:60: 2c:f7:5c:ee:4b:b7:3f:ea:23:79:ee:39:d9:c7:ed: 1b:6f:43:2a:ba:8c:81:c4:0b:fb:11:2a:58:cd:36: f9:7d:50:c4:cc:b0:bf:d6:d6:be:77:e0:74:15:9c: d6:9d:5f:a2:ab:d9:dc:87:c6:43:38:cc:d5:f0:ec: e2:da:d1:0a:22:18:b9:db:0a:af:71:d8:01:74:42: 60:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:AA:2C:DC:21:67:A8:74:B8:4C:F1:B1:AE:D4:07:F6:3B:86:E2:3D X509v3 Authority Key Identifier: keyid:E5:80:5C:5F:E3:45:02:87:DC:DE:6A:DE:0D:9C:95:58:BA:61:5E:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:f2:c6:e8:bd:21:85:84:e7:2b:e5:e5:ff:0a:96:40:c4:e6: ec:8c:2a:80:00:1f:d6:aa:95:d3:f6:4c:b7:6e:94:b9:15:df: 07:9b:83:d5:4c:8c:8f:4d:e1:29:92:2f:6e:c2:01:a8:45:b0: 01:c9:2f:d9:40:be:d0:07:4b:41:2a:3f:57:03:d4:a9:22:b8: df:6b:bb:94:b5:7c:8b:ca:85:b8:13:75:bc:bb:1b:f8:13:c2: bb:26:ec:8b:6d:a0:7d:39:f5:b5:c9:1f:aa:88:89:4d:17:d7: 27:26:ee:e7:8f:e8:72:ef:df:85:66:ca:48:77:95:e5:51:e5: ed:67:e8:ae:c9:e9:68:07:11:64:0e:02:6e:f4:24:bc:43:08: 80:f8:ff:12:de:63:07:85:4e:70:ab:26:89:f5:17:34:c1:66: e9:c0:e6:df:ce:bd:5a:ec:33:71:95:ba:eb:a4:05:2b:66:a1: 78:b8:d5:87:72:63:75:a7:91:05:54:df:8a:5a:3b:5a:b9:ff: 5f:96:42:37:fd:60:b3:3c:5e:fd:ea:a2:94:bb:15:59:a3:43: 86:d9:a1:d1:d4:25:d6:54:8d:95:d0:9b:2e:dc:bd:d8:56:a5: 77:30:c4:d3:c0:ee:16:8a:c8:87:34:c0:3e:a4:d4:9a:ca:7a: f6:47:36:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskB82PcMCrFLf3tVpNSCVtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ODA1YzVmZTM0NTAyODdkY2RlNmFkZTBkOWM5NTU4YmE2 MTVlMzIwHhcNMjUxMjE1MjIwMDQ5WhcNMjUxMjE2MjIwMDQ5WjAzMTEwLwYDVQQD EyhlM2FhMmNkYzIxNjdhODc0Yjg0Y2YxYjFhZWQ0MDdmNjNiODZlMjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6kh4Z8imioBr1ccYXvTy6/DdI9k 3unNWb/q9rNBiKumj675P3IKdzLiChEooigKtkwdBQdToUZQB3bXT0fvrOoQMop9 ynigE1OsD/AsTxuFrw/mxkSRGZo5rTyof7oR2L52TL0zs2Sv3Pwcjz5BUfRtkxWP uBj0p3Alqy67cA24PhmD/Pkg6hzc9haOtZFoGJEze2M53RfPW2v4d9/WcSq//oWS UyWfPgbm3DPgnrfX0WAs91zuS7c/6iN57jnZx+0bb0MquoyBxAv7ESpYzTb5fVDE zLC/1ta+d+B0FZzWnV+iq9nch8ZDOMzV8Ozi2tEKIhi52wqvcdgBdEJgIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOOqLNwhZ6h0uEzxsa7UB/Y7huI9MB8GA1UdIwQY MBaAFOWAXF/jRQKH3N5q3g2clVi6YV4yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVlCY1gtTkZBb2ZjM21yZURaeVZXTHBoWGpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iNGRjM2MtZWNhYi00MzZkLWFjNTIt NTk1MzA3ZjQ3MTEwLzEvNVlCY1gtTkZBb2ZjM21yZURaeVZXTHBoWGpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9iNGRjM2MtZWNhYi00MzZkLWFjNTItNTk1MzA3ZjQ3MTEw LzEvNVlCY1gtTkZBb2ZjM21yZURaeVZXTHBoWGpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjfLG6L0h hYTnK+Xl/wqWQMTm7IwqgAAf1qqV0/ZMt26UuRXfB5uD1UyMj03hKZIvbsIBqEWw Ackv2UC+0AdLQSo/VwPUqSK432u7lLV8i8qFuBN1vLsb+BPCuybsi22gfTn1tckf qoiJTRfXJybu54/ocu/fhWbKSHeV5VHl7WforsnpaAcRZA4CbvQkvEMIgPj/Et5j B4VOcKsmifUXNMFm6cDm3869WuwzcZW666QFK2aheLjVh3JjdaeRBVTfilo7Wrn/ X5ZCN/1gszxe/eqilLsVWaNDhtmh0dQl1lSNldCbLty92FaldzDE08DuForIhzTA PqTUmsp69kc2sg== -----END CERTIFICATE-----Generated at Tue Dec 16 04:40:21 2025 by rpki-client