This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft File: 5b15I6_brofQeyMI3TidnPCC7W0.mft (raw, json) Hash identifier: 3+sc2pXM1FrFihvo7xuuHfq1cu4Ua9h+G4b9banNrRg= Subject key identifier: 46:F4:1F:17:D0:11:37:22:52:FA:F3:52:4B:F5:F9:0F:E4:17:CA:C5 Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D Certificate issuer: /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d Certificate serial: 019B0E25C19DE596F9FD0F71D16326CF61F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft Manifest number: 124A Signing time: Thu 11 Dec 2025 16:01:53 +0000 Manifest this update: Thu 11 Dec 2025 16:01:53 +0000 Manifest next update: Fri 12 Dec 2025 16:01:53 +0000 Files and hashes: 1: 4Ri47V3WHq4tKoDHhOl1rwh2KAA.roa (hash: lLEUdxQQ/ffC7NhoECBTe0Cnix1csYMCuJzl8ssByXo=) 2: 5b15I6_brofQeyMI3TidnPCC7W0.crl (hash: MKR5i6bxhRpKPpWD9EMpdtk3tx4593s3vU9qVZJQmDE=) 3: 7Bsb-M9H7d4Hc8VS4AnIjyLsXlE.roa (hash: g+wem5y6cG+2ZtV6aLNz5ga+egeri0j1bBqB9ifdstE=) 4: PhUkNZ598A5ia5-UrJ9vFGUcNjk.roa (hash: KeqPA4mGFwTxFNdg5BKKsJzJk98xcvG22Bir2BXm6sw=) 5: hAUqHHOa5zKCAiaylV12xSKmjRM.roa (hash: 8CceZwUGeB+adYsoYQk00qGlq4ULcVFDHiLxSegah5g=) 6: k6g8GHkytSOVhgkLjUclPzoVHy4.roa (hash: +6vq3uBdq/4E/WX/WUrN8nWRXc0eqZ/mejCwa+UQTvk=) 7: tgxx8eKKt9THon5yuqezJ7Gyv60.roa (hash: uNDSHqnE8JqGtw2yUrw4/9adIpOhVHGi34SjFmkEDYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:c1:9d:e5:96:f9:fd:0f:71:d1:63:26:cf:61:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d Validity Not Before: Dec 11 16:01:53 2025 GMT Not After : Dec 12 16:01:53 2025 GMT Subject: CN=46f41f17d011372252faf3524bf5f90fe417cac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fb:be:69:43:4b:64:67:a4:7e:8b:86:0c:e6: 4c:b7:7b:f1:98:6b:a4:07:70:53:3c:02:78:8b:80: 68:a2:be:63:77:8d:8d:55:41:a0:8b:5a:2b:e5:36: 2c:17:92:59:54:26:90:ca:88:cb:86:f3:fc:79:41: 04:33:d4:da:2d:4c:d3:82:db:de:5f:6a:c6:34:97: 1f:fb:b7:96:1c:c2:be:be:28:7c:6d:90:67:94:09: a9:e3:1a:1e:b2:bf:80:3a:f1:59:a6:d9:09:36:02: 84:d6:6c:6b:1d:58:18:01:53:68:72:ff:2e:99:79: 65:be:df:5b:03:8d:10:5e:62:4b:3a:0d:d2:4d:6f: a2:6b:91:94:ff:2f:ec:54:8c:02:b8:d0:f6:d3:a6: 52:0f:07:1e:7b:24:62:e2:0d:e0:6d:bb:64:45:d9: dd:81:d8:a6:d5:01:51:4b:52:ec:25:8d:a8:db:77: 81:53:f0:9d:96:b6:ad:3a:78:84:74:23:0a:65:9a: f7:ff:73:af:17:58:ef:6a:56:e8:16:80:7f:68:46: c7:83:28:1e:d0:5e:e6:76:99:1a:fa:d6:8d:89:82: d6:10:14:d1:98:64:f0:a4:68:aa:42:c4:b6:81:6e: 46:b8:e8:97:0c:96:27:10:be:6e:e5:2e:fb:e9:28: a0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:F4:1F:17:D0:11:37:22:52:FA:F3:52:4B:F5:F9:0F:E4:17:CA:C5 X509v3 Authority Key Identifier: keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:7a:fb:f8:20:6d:19:08:74:9a:e3:39:33:f1:52:10:a0:3c: 3b:b9:e1:df:95:96:cc:11:02:d2:45:50:b9:99:d0:30:b7:3a: a2:35:2a:02:e7:b1:10:dc:a0:66:37:1f:58:51:7a:79:fe:b7: 12:58:29:9c:c5:44:94:dd:f6:d2:36:c7:5d:d3:c3:8c:06:3e: 22:31:f6:72:0a:f9:9e:fe:24:87:25:cd:09:77:22:4a:86:1e: a9:c4:d0:40:13:b2:08:e3:87:07:8a:fd:bd:5c:d0:fc:a0:64: ef:da:fe:72:0d:84:69:2b:6f:1c:2e:45:5c:ee:e5:79:bd:7a: 98:b5:75:71:44:19:d7:f9:a2:ce:2d:86:19:d0:3f:38:2a:cd: 33:8d:48:24:4b:7d:41:d9:73:a1:4e:93:ef:9a:75:d3:00:a2: 48:c0:ba:a3:4c:fa:cd:af:c6:03:5c:f1:57:6c:3c:34:dd:cd: 81:46:13:9b:da:88:22:ce:d8:27:89:6c:51:b1:66:03:2a:97: 7f:7d:18:89:1c:9b:51:f8:9e:30:e6:77:0f:a2:c8:32:37:43: d8:0d:60:d8:a7:f8:c5:13:8d:38:71:b7:d1:3d:12:8d:b5:49: ce:00:e4:a5:9c:0b:8f:77:80:87:c7:85:3f:96:95:e8:75:d1: 22:b0:0b:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJcGd5Zb5/Q9x0WMmz2H5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YmQ3OTIzYWZkYmFlODdkMDdiMjMwOGRkMzg5ZDljZjA4 MmVkNmQwHhcNMjUxMjExMTYwMTUzWhcNMjUxMjEyMTYwMTUzWjAzMTEwLwYDVQQD Eyg0NmY0MWYxN2QwMTEzNzIyNTJmYWYzNTI0YmY1ZjkwZmU0MTdjYWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfu+aUNLZGekfouGDOZMt3vxmGuk B3BTPAJ4i4Boor5jd42NVUGgi1or5TYsF5JZVCaQyojLhvP8eUEEM9TaLUzTgtve X2rGNJcf+7eWHMK+vih8bZBnlAmp4xoesr+AOvFZptkJNgKE1mxrHVgYAVNocv8u mXllvt9bA40QXmJLOg3STW+ia5GU/y/sVIwCuND206ZSDwceeyRi4g3gbbtkRdnd gdim1QFRS1LsJY2o23eBU/CdlratOniEdCMKZZr3/3OvF1jvalboFoB/aEbHgyge 0F7mdpka+taNiYLWEBTRmGTwpGiqQsS2gW5GuOiXDJYnEL5u5S776Sig6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEb0HxfQETciUvrzUkv1+Q/kF8rFMB8GA1UdIwQY MBaAFOW9eSOv266H0HsjCN04nZzwgu1tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWIxNUk2X2Jyb2ZRZXlNSTNUaWRuUENDN1cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8yNjkyMjktMjBlYi00ZjFjLWExM2Ut MjZkMWU1NDU3OGYxLzEvNWIxNUk2X2Jyb2ZRZXlNSTNUaWRuUENDN1cwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS8yNjkyMjktMjBlYi00ZjFjLWExM2UtMjZkMWU1NDU3OGYx LzEvNWIxNUk2X2Jyb2ZRZXlNSTNUaWRuUENDN1cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK3r7+CBt GQh0muM5M/FSEKA8O7nh35WWzBEC0kVQuZnQMLc6ojUqAuexENygZjcfWFF6ef63 ElgpnMVElN320jbHXdPDjAY+IjH2cgr5nv4khyXNCXciSoYeqcTQQBOyCOOHB4r9 vVzQ/KBk79r+cg2EaStvHC5FXO7leb16mLV1cUQZ1/mizi2GGdA/OCrNM41IJEt9 QdlzoU6T75p10wCiSMC6o0z6za/GA1zxV2w8NN3NgUYTm9qIIs7YJ4lsUbFmAyqX f30YiRybUfieMOZ3D6LIMjdD2A1g2Kf4xRONOHG30T0SjbVJzgDkpZwLj3eAh8eF P5aV6HXRIrALNA== -----END CERTIFICATE-----Generated at Thu Dec 11 21:12:34 2025 by rpki-client