This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.mft File: 0-5NbhwEoPWClbKpchCs1Hv32Wo.mft (raw, json) Hash identifier: m5GaDTcJhBHuQftdrqigCvufZR5mexCs5A4sjFXZbpA= Subject key identifier: 5D:0D:9D:95:52:1A:E6:9A:37:69:8D:43:11:4F:2C:3E:65:CB:53:9B Authority key identifier: D3:EE:4D:6E:1C:04:A0:F5:82:95:B2:A9:72:10:AC:D4:7B:F7:D9:6A Certificate issuer: /CN=d3ee4d6e1c04a0f58295b2a97210acd47bf7d96a Certificate serial: 019B5AF664D31B280CEEE2EC39CF90363629 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-5NbhwEoPWClbKpchCs1Hv32Wo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.mft Manifest number: 60 Signing time: Fri 26 Dec 2025 14:00:55 +0000 Manifest this update: Fri 26 Dec 2025 14:00:55 +0000 Manifest next update: Sat 27 Dec 2025 14:00:55 +0000 Files and hashes: 1: 0-5NbhwEoPWClbKpchCs1Hv32Wo.crl (hash: b48KHgJlkOF7jPtR8FC4NUKfJ/LvTXo3OTAxgzznG1g=) 2: Ta7GvGgg-bPfFWriKdj0eEqjLQs.roa (hash: i+dy6kCtfabYggOgUQEwIA55BDXvizsoJUVxKQ0JiAI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.mft rsync://rpki.ripe.net/repository/DEFAULT/0-5NbhwEoPWClbKpchCs1Hv32Wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:64:d3:1b:28:0c:ee:e2:ec:39:cf:90:36:36:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3ee4d6e1c04a0f58295b2a97210acd47bf7d96a Validity Not Before: Dec 26 14:00:55 2025 GMT Not After : Dec 27 14:00:55 2025 GMT Subject: CN=5d0d9d95521ae69a37698d43114f2c3e65cb539b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fa:03:ab:a4:e8:45:0e:e4:3f:d1:05:d9:b1: 35:bd:a9:cf:e3:0b:93:e1:d5:e3:57:db:ea:4f:76: c7:63:1e:4c:18:5f:39:91:08:57:c8:e3:4d:ff:0c: 46:42:a1:2f:83:db:8f:95:b2:3b:c8:2e:17:a6:36: 70:25:c3:f3:ae:58:99:4e:fc:48:27:e6:66:9a:21: 87:79:c4:67:0a:b8:6c:83:38:35:ef:dd:e9:6a:ee: 30:a3:a6:65:8d:37:43:4b:70:51:2f:a7:d7:6b:e5: ef:36:47:e0:a7:f9:11:05:1c:cf:f5:f6:04:53:8a: 52:97:db:1a:44:5a:13:74:af:30:31:ee:b3:e5:9b: 33:be:1a:a5:cf:3c:d1:9f:16:fd:35:5b:4d:ec:dc: cc:d9:62:9a:61:b4:82:70:09:26:da:5e:17:db:46: f6:ff:56:08:33:78:6a:28:da:0f:c2:e9:2e:ef:dc: c9:94:39:57:ef:0d:bb:34:af:3f:74:c2:5b:99:b5: d9:0a:e1:53:41:e7:24:6f:ea:7e:9c:9d:1a:12:6c: 8b:9a:9d:04:cd:b1:46:58:f2:25:7c:7b:d4:99:ac: b8:7c:73:85:ca:83:39:15:0b:20:1b:79:7d:bb:11: 2d:c2:56:ed:7b:42:13:e8:aa:e7:61:a5:37:40:66: da:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:0D:9D:95:52:1A:E6:9A:37:69:8D:43:11:4F:2C:3E:65:CB:53:9B X509v3 Authority Key Identifier: keyid:D3:EE:4D:6E:1C:04:A0:F5:82:95:B2:A9:72:10:AC:D4:7B:F7:D9:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-5NbhwEoPWClbKpchCs1Hv32Wo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:31:a9:fe:45:62:b6:a3:41:c2:94:5c:fc:5f:a7:4c:d3:5c: de:6b:e6:91:24:74:fb:cb:01:09:fa:ee:81:1e:5b:2a:2d:32: 12:4b:cb:92:d6:92:c3:81:00:b4:41:be:01:7f:30:09:74:2f: 98:5e:1d:88:eb:ab:2d:54:26:8e:ab:74:1a:4f:3c:a7:7e:ea: ba:6a:e1:9e:55:ea:b8:78:9f:96:0a:fb:b0:36:b1:6d:64:6d: 62:98:e7:68:ad:64:79:cd:1a:99:e7:11:96:dd:d7:f4:e4:9e: d9:35:6f:5e:31:ad:ea:09:e9:33:91:33:a5:74:fe:59:d5:d0: 43:d8:f0:fb:4c:af:f1:01:39:5f:55:ff:57:d3:e9:19:c7:ca: d7:70:2f:96:da:bb:bb:55:8d:cd:b2:70:d2:d9:e6:8c:03:17: ad:e2:e3:b0:c3:db:9d:92:69:ce:9a:e6:e6:82:05:ec:19:9a: b3:9c:a9:fa:34:c7:1f:84:c7:af:d1:6d:74:43:58:c1:e1:fe: 2d:5a:45:e4:69:c7:c8:e9:c9:bb:e3:65:a5:38:0f:c1:d7:70: 59:10:3e:73:03:8d:c6:bf:f2:a7:fb:5e:c9:28:9f:dd:eb:72: b7:53:08:f5:3e:e9:d6:4c:a7:74:da:3d:47:59:79:d9:29:53: bc:42:18:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9mTTGygM7uLsOc+QNjYpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZWU0ZDZlMWMwNGEwZjU4Mjk1YjJhOTcyMTBhY2Q0N2Jm N2Q5NmEwHhcNMjUxMjI2MTQwMDU1WhcNMjUxMjI3MTQwMDU1WjAzMTEwLwYDVQQD Eyg1ZDBkOWQ5NTUyMWFlNjlhMzc2OThkNDMxMTRmMmMzZTY1Y2I1MzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfoDq6ToRQ7kP9EF2bE1vanP4wuT 4dXjV9vqT3bHYx5MGF85kQhXyONN/wxGQqEvg9uPlbI7yC4XpjZwJcPzrliZTvxI J+ZmmiGHecRnCrhsgzg1793pau4wo6ZljTdDS3BRL6fXa+XvNkfgp/kRBRzP9fYE U4pSl9saRFoTdK8wMe6z5ZszvhqlzzzRnxb9NVtN7NzM2WKaYbSCcAkm2l4X20b2 /1YIM3hqKNoPwuku79zJlDlX7w27NK8/dMJbmbXZCuFTQeckb+p+nJ0aEmyLmp0E zbFGWPIlfHvUmay4fHOFyoM5FQsgG3l9uxEtwlbte0IT6KrnYaU3QGbaNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF0NnZVSGuaaN2mNQxFPLD5ly1ObMB8GA1UdIwQY MBaAFNPuTW4cBKD1gpWyqXIQrNR799lqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC01TmJod0VvUFdDbGJLcGNoQ3MxSHYzMldvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9mZDhlZjktNzgzMy00OTc0LTkyNTct NjViNGE2OWZiYmNlLzEvMC01TmJod0VvUFdDbGJLcGNoQ3MxSHYzMldvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9mZDhlZjktNzgzMy00OTc0LTkyNTctNjViNGE2OWZiYmNl LzEvMC01TmJod0VvUFdDbGJLcGNoQ3MxSHYzMldvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqzGp/kVi tqNBwpRc/F+nTNNc3mvmkSR0+8sBCfrugR5bKi0yEkvLktaSw4EAtEG+AX8wCXQv mF4diOurLVQmjqt0Gk88p37qumrhnlXquHiflgr7sDaxbWRtYpjnaK1kec0amecR lt3X9OSe2TVvXjGt6gnpM5EzpXT+WdXQQ9jw+0yv8QE5X1X/V9PpGcfK13Avltq7 u1WNzbJw0tnmjAMXreLjsMPbnZJpzprm5oIF7Bmas5yp+jTHH4THr9FtdENYweH+ LVpF5GnHyOnJu+NlpTgPwddwWRA+cwONxr/yp/teySif3etyt1MI9T7p1kyndNo9 R1l52SlTvEIYTA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:12 2025 by rpki-client