This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft File: t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft (raw, json) Hash identifier: f4qLdGwL2ZnewQRSRyq4OpYG9QbI8PUS+uzY+6oz+7c= Subject key identifier: 4A:36:2F:12:62:FD:38:6D:E1:FA:B8:C7:B9:1F:A9:A5:05:A1:5D:00 Authority key identifier: B7:92:D7:EC:F3:B4:5C:49:38:F0:5B:B9:05:1C:5A:89:72:9D:D4:41 Certificate issuer: /CN=b792d7ecf3b45c4938f05bb9051c5a89729dd441 Certificate serial: 019B183A4CAF1B1F2B77F3BE8DA857259E9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5LX7PO0XEk48Fu5BRxaiXKd1EE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft Manifest number: 0E0A Signing time: Sat 13 Dec 2025 15:00:32 +0000 Manifest this update: Sat 13 Dec 2025 15:00:32 +0000 Manifest next update: Sun 14 Dec 2025 15:00:32 +0000 Files and hashes: 1: t5LX7PO0XEk48Fu5BRxaiXKd1EE.crl (hash: ISG/B/7PDjsapFoXIFAgJirayCLhLnwCIIXHXpcbjqE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft rsync://rpki.ripe.net/repository/DEFAULT/t5LX7PO0XEk48Fu5BRxaiXKd1EE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 15:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:3a:4c:af:1b:1f:2b:77:f3:be:8d:a8:57:25:9e:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b792d7ecf3b45c4938f05bb9051c5a89729dd441 Validity Not Before: Dec 13 15:00:32 2025 GMT Not After : Dec 14 15:00:32 2025 GMT Subject: CN=4a362f1262fd386de1fab8c7b91fa9a505a15d00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d6:f0:cf:25:58:23:a6:11:9e:52:c7:75:ea: 17:d6:29:8d:97:4a:57:e3:26:0f:c6:c3:7d:3a:9c: e3:be:d7:05:31:26:9f:68:fa:ca:6c:7c:3e:db:4b: cc:4d:dd:b3:80:0f:b7:5f:69:16:62:68:fb:7b:a2: 54:7d:52:ce:29:f3:74:45:6d:71:04:0e:c0:ff:68: 63:b7:dd:9f:b1:72:79:d7:b0:2e:6d:32:86:02:1a: 3a:0c:47:4f:ae:5a:ce:44:67:93:07:69:29:e3:2d: a1:d1:2a:51:f9:e3:45:97:cc:a1:51:e0:bd:6c:6f: 98:08:72:d4:1f:d4:76:c3:f4:92:c2:f3:87:af:69: 64:32:de:e1:21:62:43:0c:ca:9e:a9:58:3e:1f:f2: da:cb:1e:6b:e7:31:94:db:4c:bf:f9:4e:12:b7:7f: cb:69:f8:3e:66:68:05:78:ee:9f:b2:85:8b:37:d7: c2:ea:c8:d8:0e:5d:b7:30:06:b0:3a:ac:e0:40:4b: eb:0a:6a:bf:b0:05:41:b1:b6:1d:c0:f3:72:7f:b2: 59:b6:2f:7c:59:0c:32:a0:54:29:c5:e2:48:fa:8b: 80:71:75:34:8a:94:5b:d7:a3:60:ff:f3:1a:36:25: 33:72:c5:04:14:ff:28:1c:03:99:00:3d:f9:d6:c5: 38:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:36:2F:12:62:FD:38:6D:E1:FA:B8:C7:B9:1F:A9:A5:05:A1:5D:00 X509v3 Authority Key Identifier: keyid:B7:92:D7:EC:F3:B4:5C:49:38:F0:5B:B9:05:1C:5A:89:72:9D:D4:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5LX7PO0XEk48Fu5BRxaiXKd1EE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:99:ff:8e:af:a5:ca:15:ba:da:a1:5e:3b:e9:e3:33:f4:17: 72:55:14:3d:f2:ed:eb:40:77:85:00:a5:0d:aa:4a:24:c1:6a: ff:75:b7:67:33:fd:ab:cc:5f:13:22:85:c7:e4:a6:6c:0c:c0: dd:fc:10:74:bc:51:de:35:8e:1a:dd:4f:59:0f:68:c4:5c:2e: 5e:b1:c4:44:28:92:a7:37:07:b9:8f:3a:98:c1:d9:19:55:2c: 38:c7:f2:1b:4b:08:bd:e7:41:7c:cb:d2:07:1a:e5:9e:29:fc: 0a:af:c4:3f:99:3d:57:3b:d4:6e:c7:bd:83:8e:e0:b3:55:b0: 30:33:ba:8f:b6:97:ee:05:63:b7:aa:dd:58:89:82:1f:44:fc: 5f:3b:cb:77:40:7f:c5:fb:b3:07:fd:90:54:c8:9c:d6:42:c7: 41:62:d8:c5:13:9d:30:51:bd:f4:e5:2c:dd:a6:91:35:e2:e9: 05:65:5f:60:1c:48:a0:2f:07:8f:e2:44:f0:41:8f:1e:81:04: 47:8f:40:6b:f2:99:5b:5e:bb:0c:41:37:ca:11:0d:78:87:0d: ed:eb:79:6c:54:02:73:47:b2:2d:45:8b:71:fc:c9:ef:fa:6a: dd:e9:4f:ed:f9:69:2a:b8:18:20:61:d7:83:b1:79:eb:6f:bb: b6:1d:00:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYOkyvGx8rd/O+jahXJZ6fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3OTJkN2VjZjNiNDVjNDkzOGYwNWJiOTA1MWM1YTg5NzI5 ZGQ0NDEwHhcNMjUxMjEzMTUwMDMyWhcNMjUxMjE0MTUwMDMyWjAzMTEwLwYDVQQD Eyg0YTM2MmYxMjYyZmQzODZkZTFmYWI4YzdiOTFmYTlhNTA1YTE1ZDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5dbwzyVYI6YRnlLHdeoX1imNl0pX 4yYPxsN9OpzjvtcFMSafaPrKbHw+20vMTd2zgA+3X2kWYmj7e6JUfVLOKfN0RW1x BA7A/2hjt92fsXJ517AubTKGAho6DEdPrlrORGeTB2kp4y2h0SpR+eNFl8yhUeC9 bG+YCHLUH9R2w/SSwvOHr2lkMt7hIWJDDMqeqVg+H/Layx5r5zGU20y/+U4St3/L afg+ZmgFeO6fsoWLN9fC6sjYDl23MAawOqzgQEvrCmq/sAVBsbYdwPNyf7JZti98 WQwyoFQpxeJI+ouAcXU0ipRb16Ng//MaNiUzcsUEFP8oHAOZAD351sU4iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEo2LxJi/Tht4fq4x7kfqaUFoV0AMB8GA1UdIwQY MBaAFLeS1+zztFxJOPBbuQUcWolyndRBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDVMWDdQTzBYRWs0OEZ1NUJSeGFpWEtkMUVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9iMDVlNjItY2FjMi00MmY5LTllZjYt YTMyNTQ5MjMyNTIwLzEvdDVMWDdQTzBYRWs0OEZ1NUJSeGFpWEtkMUVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9iMDVlNjItY2FjMi00MmY5LTllZjYtYTMyNTQ5MjMyNTIw LzEvdDVMWDdQTzBYRWs0OEZ1NUJSeGFpWEtkMUVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkZn/jq+l yhW62qFeO+njM/QXclUUPfLt60B3hQClDapKJMFq/3W3ZzP9q8xfEyKFx+SmbAzA 3fwQdLxR3jWOGt1PWQ9oxFwuXrHERCiSpzcHuY86mMHZGVUsOMfyG0sIvedBfMvS Bxrlnin8Cq/EP5k9VzvUbse9g47gs1WwMDO6j7aX7gVjt6rdWImCH0T8XzvLd0B/ xfuzB/2QVMic1kLHQWLYxROdMFG99OUs3aaRNeLpBWVfYBxIoC8Hj+JE8EGPHoEE R49Aa/KZW167DEE3yhENeIcN7et5bFQCc0eyLUWLcfzJ7/pq3elP7flpKrgYIGHX g7F562+7th0AVw== -----END CERTIFICATE-----Generated at Sun Dec 14 00:05:00 2025 by rpki-client