This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft File: C5NMNrdzAIhlucn7D9SGaTlaxzA.mft (raw, json) Hash identifier: XXV0THnlrDYUYze+xqNMfmtmdnxGOVmN7rFXIPxihXA= Subject key identifier: 6E:8A:F3:2A:29:0F:A9:6A:E6:4C:B0:D9:9E:9A:D3:03:50:1E:34:8C Authority key identifier: 0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30 Certificate issuer: /CN=0b934c36b773008865b9c9fb0fd48669395ac730 Certificate serial: 019B1983FB23CDCC75F0F28514118E559AFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft Manifest number: 1775 Signing time: Sat 13 Dec 2025 21:00:38 +0000 Manifest this update: Sat 13 Dec 2025 21:00:38 +0000 Manifest next update: Sun 14 Dec 2025 21:00:38 +0000 Files and hashes: 1: C5NMNrdzAIhlucn7D9SGaTlaxzA.crl (hash: 3g2p7pNtrx4iztfW1MxyjUqXq5s0/GgC3cZdsvBuJrM=) 2: Gx6kPcyxpQCfjzDOqvTPIqfhzSo.roa (hash: cyozRe1tjffBQUtfs/kFeEbNNq7a/YhvaL4ybQ6y3bs=) 3: KDMQDMSKvzkVFCIuQ1vi5IKxFqc.roa (hash: W1z4PN9ehAB8VlW2fAtV3SogXVKZbFhw7EL82DUKuEY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:83:fb:23:cd:cc:75:f0:f2:85:14:11:8e:55:9a:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b934c36b773008865b9c9fb0fd48669395ac730 Validity Not Before: Dec 13 21:00:38 2025 GMT Not After : Dec 14 21:00:38 2025 GMT Subject: CN=6e8af32a290fa96ae64cb0d99e9ad303501e348c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b3:30:d0:07:27:89:db:bd:66:d1:7c:53:4b: 31:1b:50:33:bb:c4:70:fc:5d:db:4b:82:b9:c9:af: a5:23:60:82:51:31:c3:24:9d:5c:60:78:30:92:ee: a6:3d:cd:65:83:c3:a2:a2:48:eb:11:f2:c5:a3:8c: b2:f3:28:1f:9d:90:56:67:76:28:49:67:55:b9:be: 85:b6:1b:0e:3f:af:78:b4:b7:a5:31:2f:f9:1e:4c: 68:73:1b:62:0f:c4:56:0a:06:3d:b9:aa:9e:97:4d: 25:9f:e6:a6:f0:70:47:28:3c:76:32:5c:10:1d:f4: e8:84:d7:7a:0a:b4:37:3d:ec:37:da:5d:56:ca:79: 4d:92:5a:65:b9:d9:b5:25:ad:b4:99:a7:de:0f:fb: 42:0a:7b:c2:b1:b2:c2:3c:86:7e:2b:ee:cb:7d:43: df:de:03:7b:f1:71:bc:e5:d4:b1:5e:d5:27:3b:9c: 5c:3e:97:bb:a8:15:84:0c:ff:94:9b:3e:8e:3c:c1: 79:80:28:3b:4b:72:98:84:ac:46:f9:76:98:34:53: ec:06:c2:12:ad:45:76:36:62:ed:13:cc:ed:5e:c6: d6:9b:57:ea:6c:68:74:40:3b:db:1d:96:dc:9e:c3: 50:b0:d5:2d:f9:de:b0:64:8b:62:0f:e1:8b:b7:6c: 08:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:8A:F3:2A:29:0F:A9:6A:E6:4C:B0:D9:9E:9A:D3:03:50:1E:34:8C X509v3 Authority Key Identifier: keyid:0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:e8:aa:3f:62:2d:41:39:d8:77:6f:17:b8:c2:c9:69:b4:fa: bb:d4:b7:c8:82:a3:ca:0e:1e:15:24:af:99:b0:bb:c0:66:fd: e5:a3:5d:6e:6e:18:84:64:40:47:40:53:30:a1:07:35:5e:fa: 5f:28:a0:b7:4a:17:08:c2:cb:ed:d2:09:95:ab:59:f4:c5:6b: 90:d9:0a:96:09:b5:bb:f6:b9:3f:da:dc:b3:48:77:b0:04:1c: 66:c7:5f:91:a6:b7:c8:37:f0:a2:31:88:e6:ff:04:dc:fa:50: f1:f5:00:a0:b1:b1:16:b6:54:11:19:fa:35:ee:26:ea:ee:85: 1d:79:db:19:38:d9:e9:28:02:84:fa:31:13:f9:e0:84:2f:4d: b2:8d:f7:54:56:97:09:4a:5c:f1:2c:6d:51:30:81:b2:a3:74: 0d:f3:7c:06:fe:a7:75:be:5e:c4:42:68:0d:ae:4a:2b:e4:ab: 8c:32:97:4a:56:32:82:a3:2e:1f:93:34:00:c3:ab:55:fe:3c: 2d:1a:f8:3b:0c:2d:8f:ad:d3:84:ee:3d:54:3e:6c:ca:b5:44: 82:f6:4b:3e:4e:aa:af:38:62:b3:70:0f:c8:94:66:44:f9:4c: 4a:f1:aa:43:b1:cc:d9:d6:e8:7d:f8:0d:36:b3:6f:7f:78:6f: 42:9e:ed:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZg/sjzcx18PKFFBGOVZr8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiOTM0YzM2Yjc3MzAwODg2NWI5YzlmYjBmZDQ4NjY5Mzk1 YWM3MzAwHhcNMjUxMjEzMjEwMDM4WhcNMjUxMjE0MjEwMDM4WjAzMTEwLwYDVQQD Eyg2ZThhZjMyYTI5MGZhOTZhZTY0Y2IwZDk5ZTlhZDMwMzUwMWUzNDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLMw0Acnidu9ZtF8U0sxG1Azu8Rw /F3bS4K5ya+lI2CCUTHDJJ1cYHgwku6mPc1lg8OiokjrEfLFo4yy8ygfnZBWZ3Yo SWdVub6FthsOP694tLelMS/5HkxocxtiD8RWCgY9uaqel00ln+am8HBHKDx2MlwQ HfTohNd6CrQ3Pew32l1WynlNklpludm1Ja20mafeD/tCCnvCsbLCPIZ+K+7LfUPf 3gN78XG85dSxXtUnO5xcPpe7qBWEDP+Umz6OPMF5gCg7S3KYhKxG+XaYNFPsBsIS rUV2NmLtE8ztXsbWm1fqbGh0QDvbHZbcnsNQsNUt+d6wZItiD+GLt2wIBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG6K8yopD6lq5kyw2Z6a0wNQHjSMMB8GA1UdIwQY MBaAFAuTTDa3cwCIZbnJ+w/Uhmk5WscwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzVOTU5yZHpBSWhsdWNuN0Q5U0dhVGxheHpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9kZWNiN2QtMDM4OC00ZTNjLThkYjQt YTMwMmY1MWQzODJjLzEvQzVOTU5yZHpBSWhsdWNuN0Q5U0dhVGxheHpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9kZWNiN2QtMDM4OC00ZTNjLThkYjQtYTMwMmY1MWQzODJj LzEvQzVOTU5yZHpBSWhsdWNuN0Q5U0dhVGxheHpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL+iqP2It QTnYd28XuMLJabT6u9S3yIKjyg4eFSSvmbC7wGb95aNdbm4YhGRAR0BTMKEHNV76 Xyigt0oXCMLL7dIJlatZ9MVrkNkKlgm1u/a5P9rcs0h3sAQcZsdfkaa3yDfwojGI 5v8E3PpQ8fUAoLGxFrZUERn6Ne4m6u6FHXnbGTjZ6SgChPoxE/nghC9Nso33VFaX CUpc8SxtUTCBsqN0DfN8Bv6ndb5exEJoDa5KK+SrjDKXSlYygqMuH5M0AMOrVf48 LRr4Owwtj63ThO49VD5syrVEgvZLPk6qrzhis3APyJRmRPlMSvGqQ7HM2dboffgN NrNvf3hvQp7t0g== -----END CERTIFICATE-----Generated at Sun Dec 14 00:07:34 2025 by rpki-client