This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft File: 5sLg0_3CFaOJxwQ8paGga-LFWO8.mft (raw, json) Hash identifier: zfowfUxf0BXKJ0MqJMmLwi28XA0ct0kgAEAv+8CsTZE= Subject key identifier: EF:32:2E:5B:8F:92:10:49:A5:06:A0:D6:90:E6:15:F0:61:7C:34:9A Authority key identifier: E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF Certificate issuer: /CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef Certificate serial: 019B49CBA251B66B6ECD1DEDE1414136B70C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft Manifest number: 0A42 Signing time: Tue 23 Dec 2025 06:00:40 +0000 Manifest this update: Tue 23 Dec 2025 06:00:40 +0000 Manifest next update: Wed 24 Dec 2025 06:00:40 +0000 Files and hashes: 1: 5sLg0_3CFaOJxwQ8paGga-LFWO8.crl (hash: VcfNMlOPJiCPgre12X1V3MUcIa9VUP/VbVC1nZJyDaI=) 2: BQSs352-EOwWdJt5W4JX2r66118.roa (hash: SQJWh7RfqqUI9aMjD6YSzrE33eXIstI44fKb5g3qqDI=) 3: UyklqcY4QQ3ESWmiy5lj4wfy-lE.roa (hash: gDteXJLELGLpEyJXH+6t7iRhrt3b5/Agnwke1FnjUuY=) 4: g0FtGOw6TxkA3fw7sxIeFzhy8n0.roa (hash: VbLDwTgdy1V+yunFyXeS8r5ju6kbA+Nmv4L7O3VlwNM=) 5: mx4mEjcUAqOj7-yzqqHmPAfoCTw.roa (hash: TADBUKVvbfWL8WOCN7ye3V2kF6YpMBXr/Ao/gRMpF0w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 06:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:cb:a2:51:b6:6b:6e:cd:1d:ed:e1:41:41:36:b7:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef Validity Not Before: Dec 23 06:00:40 2025 GMT Not After : Dec 24 06:00:40 2025 GMT Subject: CN=ef322e5b8f921049a506a0d690e615f0617c349a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:71:49:e8:60:53:83:f1:34:bf:63:2b:56:f3: a3:a2:30:49:8b:c9:67:6e:fc:4a:90:9d:36:f2:9f: 65:f7:64:a0:a9:d3:59:24:70:ae:7d:5c:00:58:4f: 75:4f:40:12:08:f9:ca:bd:bc:81:0c:47:55:26:d2: 00:ba:c2:0e:5f:a3:13:7b:72:c6:45:13:70:fa:ff: db:f1:d8:59:3a:66:19:80:0f:b1:a6:42:66:c7:da: 4d:9d:85:3f:2e:5a:94:e3:b7:90:24:49:bd:c2:df: 2f:b2:3c:23:eb:10:f7:e4:27:67:fd:f4:18:20:91: 64:d2:46:0d:4e:a6:2d:5a:47:07:81:e9:dc:e1:b1: 14:e1:57:92:b4:5d:7b:85:11:87:bd:31:85:25:fa: 1a:c0:ca:cb:2b:d0:8b:d2:e6:1b:b9:e5:50:a1:80: df:ee:78:0a:4d:32:bb:b1:a9:c2:e7:1b:4a:98:4e: 54:e6:80:ac:ac:54:6d:82:a7:30:d3:9c:aa:93:58: 84:86:65:ba:6a:f3:f8:af:a3:55:33:ef:d0:07:5f: a0:f0:5f:97:64:10:0c:a5:3a:b8:8e:7f:09:5b:7a: 68:1b:84:71:bb:9a:9e:42:6e:f4:75:7b:05:61:82: 29:27:b8:a7:8d:22:0a:c6:e1:af:da:05:87:54:cc: f9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:32:2E:5B:8F:92:10:49:A5:06:A0:D6:90:E6:15:F0:61:7C:34:9A X509v3 Authority Key Identifier: keyid:E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:7b:27:92:4e:d4:e2:05:b0:2f:ce:99:38:12:01:bc:ee:79: ab:f4:76:c0:52:68:03:86:ce:ff:c7:ef:f4:0c:10:d0:bb:ff: 46:27:74:91:fe:ff:8f:53:5e:dd:96:5f:27:ef:2f:22:12:a7: 98:00:92:51:90:93:10:c1:f8:cd:e3:27:d8:a7:24:32:d0:27: 3d:ca:b1:7d:de:7c:83:fe:b4:9d:9e:83:dc:e9:14:46:a8:ea: dd:c8:30:a8:dc:e0:e4:d5:bb:1d:6f:8f:62:d9:48:f1:72:9d: 62:ba:01:b9:6a:32:5e:0a:30:0b:7b:55:9d:18:72:86:1b:d6: a2:ad:d1:7d:3a:aa:5e:a6:23:68:fc:5c:f4:cf:06:04:5a:c7: ba:ee:c8:b2:1b:b0:81:97:de:66:c4:2d:a8:4e:d8:20:9e:34: d6:7e:df:33:6d:0c:ac:25:37:6c:32:a4:c9:27:31:2e:85:a3: 7a:b4:e5:34:d5:f4:8d:85:ea:87:75:b4:c0:5d:38:b2:70:df: ba:a7:a5:5e:eb:9c:ab:5a:38:90:dd:74:e7:e8:e0:7a:5f:1d: ee:ba:63:f0:8b:37:be:41:9d:ea:ba:3d:75:3a:9f:e5:42:0a: ed:73:e4:e7:ea:f4:9d:98:da:ed:b6:bf:85:90:28:74:26:e3: 71:b6:12:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJy6JRtmtuzR3t4UFBNrcMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2YzJlMGQzZmRjMjE1YTM4OWM3MDQzY2E1YTFhMDZiZTJj NTU4ZWYwHhcNMjUxMjIzMDYwMDQwWhcNMjUxMjI0MDYwMDQwWjAzMTEwLwYDVQQD EyhlZjMyMmU1YjhmOTIxMDQ5YTUwNmEwZDY5MGU2MTVmMDYxN2MzNDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnFJ6GBTg/E0v2MrVvOjojBJi8ln bvxKkJ028p9l92SgqdNZJHCufVwAWE91T0ASCPnKvbyBDEdVJtIAusIOX6MTe3LG RRNw+v/b8dhZOmYZgA+xpkJmx9pNnYU/LlqU47eQJEm9wt8vsjwj6xD35Cdn/fQY IJFk0kYNTqYtWkcHgenc4bEU4VeStF17hRGHvTGFJfoawMrLK9CL0uYbueVQoYDf 7ngKTTK7sanC5xtKmE5U5oCsrFRtgqcw05yqk1iEhmW6avP4r6NVM+/QB1+g8F+X ZBAMpTq4jn8JW3poG4Rxu5qeQm70dXsFYYIpJ7injSIKxuGv2gWHVMz5bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO8yLluPkhBJpQag1pDmFfBhfDSaMB8GA1UdIwQY MBaAFObC4NP9whWjiccEPKWhoGvixVjvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXNMZzBfM0NGYU9KeHdROHBhR2dhLUxGV084LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8yOTE3NmItMTAzOC00NDE3LWJkYWQt ZjNlMDUyYmFiMTQ0LzEvNXNMZzBfM0NGYU9KeHdROHBhR2dhLUxGV084Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8yOTE3NmItMTAzOC00NDE3LWJkYWQtZjNlMDUyYmFiMTQ0 LzEvNXNMZzBfM0NGYU9KeHdROHBhR2dhLUxGV084LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkHsnkk7U 4gWwL86ZOBIBvO55q/R2wFJoA4bO/8fv9AwQ0Lv/Rid0kf7/j1Ne3ZZfJ+8vIhKn mACSUZCTEMH4zeMn2KckMtAnPcqxfd58g/60nZ6D3OkURqjq3cgwqNzg5NW7HW+P YtlI8XKdYroBuWoyXgowC3tVnRhyhhvWoq3RfTqqXqYjaPxc9M8GBFrHuu7Ishuw gZfeZsQtqE7YIJ401n7fM20MrCU3bDKkyScxLoWjerTlNNX0jYXqh3W0wF04snDf uqelXuucq1o4kN105+jgel8d7rpj8Is3vkGd6ro9dTqf5UIK7XPk5+r0nZja7ba/ hZAodCbjcbYSbg== -----END CERTIFICATE-----Generated at Tue Dec 23 13:00:16 2025 by rpki-client