This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft File: 5yaSa26JcM-E1rR1b6nFYhEgBTc.mft (raw, json) Hash identifier: 8Vukgzmss+reqH5bYN5UScPxfYb0kvMh38mSj+swims= Subject key identifier: 9A:55:EF:55:10:05:BB:79:CD:F7:7F:C2:4F:76:C7:8F:A8:44:62:A7 Authority key identifier: E7:26:92:6B:6E:89:70:CF:84:D6:B4:75:6F:A9:C5:62:11:20:05:37 Certificate issuer: /CN=e726926b6e8970cf84d6b4756fa9c56211200537 Certificate serial: 019B3E6DC23224D94EE790A1DEA73B879676 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft Manifest number: 1089 Signing time: Sun 21 Dec 2025 01:02:19 +0000 Manifest this update: Sun 21 Dec 2025 01:02:19 +0000 Manifest next update: Mon 22 Dec 2025 01:02:19 +0000 Files and hashes: 1: 5yaSa26JcM-E1rR1b6nFYhEgBTc.crl (hash: cKlYUmAoi5xy9h5P/Se/G5KNhmvFxQSWQ9Pd2xGZZBg=) 2: ElUtMbg_2SVD7otrBAd2hF50jDw.roa (hash: gBEbPywjfhmRcZU6nHTXUHZioujDMyqjzGbOG8d2lXc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft rsync://rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:c2:32:24:d9:4e:e7:90:a1:de:a7:3b:87:96:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e726926b6e8970cf84d6b4756fa9c56211200537 Validity Not Before: Dec 21 01:02:19 2025 GMT Not After : Dec 22 01:02:19 2025 GMT Subject: CN=9a55ef551005bb79cdf77fc24f76c78fa84462a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:98:c6:72:65:f4:35:c2:8c:46:ae:52:b4:9b: 1d:78:95:c5:06:03:a4:e5:e6:4a:eb:e8:cb:a2:e1: 9b:ce:44:f9:1d:a8:7b:f3:a4:fb:e3:e5:05:31:41: 2a:ad:94:43:e3:54:5f:29:6c:97:a2:08:d9:ee:7b: 3b:35:b2:ae:57:18:60:56:56:74:6d:3d:62:c7:ca: 58:a3:43:f9:f2:7c:6f:24:62:29:d2:cd:ec:33:44: 8c:9a:00:0b:e8:7f:88:f6:62:98:c2:62:ee:60:95: b8:45:a5:4e:16:d9:1e:6d:84:6f:90:e8:69:f9:ff: 7e:a7:28:1a:60:48:8c:23:11:c8:59:b9:df:da:bf: 9b:e7:ea:fb:b6:c3:77:21:fb:8d:d6:d6:6b:e9:48: 64:0a:cd:a5:6a:04:71:6c:b9:71:49:6b:67:d6:74: 42:95:dc:87:af:b4:cc:2b:e1:bb:8a:38:cf:f7:0b: ea:0e:ec:d4:a8:0d:1d:b3:dc:18:21:5a:d9:dc:0f: d0:78:1f:a7:e0:67:c6:5c:e5:e3:95:07:ce:e5:f2: 32:26:79:18:65:47:fa:e7:f4:a4:98:fa:26:08:d1: 09:d0:b8:f5:44:9e:44:31:a2:32:01:0c:d6:11:d2: df:d7:9d:09:18:31:0e:2c:72:63:05:9c:b1:f7:6b: e1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:55:EF:55:10:05:BB:79:CD:F7:7F:C2:4F:76:C7:8F:A8:44:62:A7 X509v3 Authority Key Identifier: keyid:E7:26:92:6B:6E:89:70:CF:84:D6:B4:75:6F:A9:C5:62:11:20:05:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:47:0c:5a:31:5b:4c:41:f7:98:7a:24:66:88:5f:ae:b5:69: f2:9c:f7:02:ea:19:93:dc:00:36:ca:e9:88:79:f4:83:18:f8: 58:77:8d:b3:7e:d2:de:bd:90:c5:f2:13:82:12:57:1c:1d:43: b9:59:d8:fe:5c:5c:1c:f8:cc:77:cc:0d:c8:a8:71:3c:38:f8: d8:3e:1f:dd:1b:24:f8:38:83:8c:0b:1b:7f:8e:32:b7:0f:af: 5a:97:3f:b6:84:61:82:83:4e:5a:61:4a:e8:02:4f:04:40:fc: b9:45:d9:2d:4b:3a:35:22:a2:dd:14:b4:71:30:6d:9d:44:4a: 95:14:df:83:75:0a:cd:81:e6:b4:b4:4a:ad:d3:13:90:71:b8: cf:fd:4c:7d:a0:ef:42:3d:e8:ad:30:0b:22:8a:a1:6d:c8:79: 53:9d:d9:16:69:9e:82:14:b2:79:a9:b4:37:38:ce:2f:50:01: 9c:23:0d:be:70:40:e5:6f:5e:2a:f7:3f:84:a4:64:24:0e:9b: 8c:ed:09:d8:20:ca:c9:e8:24:0a:a2:ee:9d:bc:e2:c3:7b:a8: 2e:08:80:96:5a:8b:6b:23:45:bd:2b:b5:03:0b:e0:04:a4:74: ab:82:da:b7:8a:6a:16:56:96:e3:72:41:b0:ac:ca:4a:b1:64: b1:d1:97:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bcIyJNlO55Ch3qc7h5Z2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3MjY5MjZiNmU4OTcwY2Y4NGQ2YjQ3NTZmYTljNTYyMTEy MDA1MzcwHhcNMjUxMjIxMDEwMjE5WhcNMjUxMjIyMDEwMjE5WjAzMTEwLwYDVQQD Eyg5YTU1ZWY1NTEwMDViYjc5Y2RmNzdmYzI0Zjc2Yzc4ZmE4NDQ2MmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppjGcmX0NcKMRq5StJsdeJXFBgOk 5eZK6+jLouGbzkT5Hah786T74+UFMUEqrZRD41RfKWyXogjZ7ns7NbKuVxhgVlZ0 bT1ix8pYo0P58nxvJGIp0s3sM0SMmgAL6H+I9mKYwmLuYJW4RaVOFtkebYRvkOhp +f9+pygaYEiMIxHIWbnf2r+b5+r7tsN3IfuN1tZr6UhkCs2lagRxbLlxSWtn1nRC ldyHr7TMK+G7ijjP9wvqDuzUqA0ds9wYIVrZ3A/QeB+n4GfGXOXjlQfO5fIyJnkY ZUf65/SkmPomCNEJ0Lj1RJ5EMaIyAQzWEdLf150JGDEOLHJjBZyx92vhZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJpV71UQBbt5zfd/wk92x4+oRGKnMB8GA1UdIwQY MBaAFOcmkmtuiXDPhNa0dW+pxWIRIAU3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXlhU2EyNkpjTS1FMXJSMWI2bkZZaEVnQlRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9kNzE4ZTQtOGFiYy00YjIzLWFjMTAt YzEwMmVlOTY4NThlLzEvNXlhU2EyNkpjTS1FMXJSMWI2bkZZaEVnQlRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9kNzE4ZTQtOGFiYy00YjIzLWFjMTAtYzEwMmVlOTY4NThl LzEvNXlhU2EyNkpjTS1FMXJSMWI2bkZZaEVnQlRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATUcMWjFb TEH3mHokZohfrrVp8pz3AuoZk9wANsrpiHn0gxj4WHeNs37S3r2QxfITghJXHB1D uVnY/lxcHPjMd8wNyKhxPDj42D4f3Rsk+DiDjAsbf44ytw+vWpc/toRhgoNOWmFK 6AJPBED8uUXZLUs6NSKi3RS0cTBtnURKlRTfg3UKzYHmtLRKrdMTkHG4z/1MfaDv Qj3orTALIoqhbch5U53ZFmmeghSyeam0NzjOL1ABnCMNvnBA5W9eKvc/hKRkJA6b jO0J2CDKyegkCqLunbziw3uoLgiAllqLayNFvSu1AwvgBKR0q4Lat4pqFlaW43JB sKzKSrFksdGXhQ== -----END CERTIFICATE-----Generated at Sun Dec 21 06:22:10 2025 by rpki-client