This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft File: 5yHQ6mg8xnWULAmPWcQRyGDorto.mft (raw, json) Hash identifier: ZWmFv3vp9gV0OVTdYXCf9EJ4E0yL08wx8nSGBbJMsds= Subject key identifier: B7:19:06:21:51:FA:66:72:E4:69:9E:F9:38:02:A6:E2:78:33:F7:B9 Authority key identifier: E7:21:D0:EA:68:3C:C6:75:94:2C:09:8F:59:C4:11:C8:60:E8:AE:DA Certificate issuer: /CN=e721d0ea683cc675942c098f59c411c860e8aeda Certificate serial: 019B38D87D602B2D8A47B62CC5DB94E3D909 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft Manifest number: 0367 Signing time: Fri 19 Dec 2025 23:01:10 +0000 Manifest this update: Fri 19 Dec 2025 23:01:10 +0000 Manifest next update: Sat 20 Dec 2025 23:01:10 +0000 Files and hashes: 1: 5yHQ6mg8xnWULAmPWcQRyGDorto.crl (hash: 8rFYeb2snoEHrw5rQJivFSZ99Y5yXvc8UgfuT0c0pWw=) 2: jgoeY3coRJMRVNj7rT_gdCxKrt4.roa (hash: HO7ymkMaYgqdA88q8uGMkiN43bUDJb9bwGWjnqtMFDI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 23:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:7d:60:2b:2d:8a:47:b6:2c:c5:db:94:e3:d9:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e721d0ea683cc675942c098f59c411c860e8aeda Validity Not Before: Dec 19 23:01:10 2025 GMT Not After : Dec 20 23:01:10 2025 GMT Subject: CN=b719062151fa6672e4699ef93802a6e27833f7b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ab:c3:32:2e:c6:68:6a:7d:17:7e:56:d3:61: 25:57:a2:1d:77:eb:eb:be:82:8d:52:1c:a2:ad:ec: 10:f8:e9:c3:0a:82:cd:9a:1b:48:eb:a3:50:81:92: 07:a8:1c:9d:14:38:c3:9e:38:e5:d5:8f:9b:7b:ac: 88:49:e9:c9:b4:23:c9:e4:6f:bd:67:67:8e:68:d6: 38:a7:3a:17:79:8f:d7:24:36:22:fe:ed:28:ef:46: b2:08:40:47:8b:73:0d:cc:d6:83:21:f8:a1:fb:b4: 64:b3:bb:32:0b:2f:fb:f5:ac:b5:99:52:66:4a:dd: 15:16:13:e2:89:35:aa:9c:e7:07:69:ee:26:6e:c8: 0c:8b:e9:eb:20:c5:55:4a:67:9b:fc:12:06:90:99: 8f:5e:f3:a7:12:a2:0a:9c:fc:df:0e:4e:15:7d:04: 44:a5:40:52:d9:03:be:18:8b:3b:5a:71:9a:dd:87: da:6c:1a:84:87:20:35:48:37:a7:6e:d6:45:66:dc: 14:a1:20:53:e0:b1:b4:d6:e9:20:9f:84:c6:8f:97: 90:f9:92:16:21:c8:f6:ff:b3:7b:90:8a:86:9a:59: 32:e6:34:e6:28:8b:a0:5d:30:b2:7e:67:c0:e5:0f: a2:92:36:29:e5:e2:38:ec:d2:53:4c:1c:8e:8f:02: 80:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:19:06:21:51:FA:66:72:E4:69:9E:F9:38:02:A6:E2:78:33:F7:B9 X509v3 Authority Key Identifier: keyid:E7:21:D0:EA:68:3C:C6:75:94:2C:09:8F:59:C4:11:C8:60:E8:AE:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:fc:06:ef:00:c3:f5:61:af:7f:20:36:a2:7f:cf:20:f7:04: 25:e0:e4:80:f5:1b:53:ba:0e:2f:a4:98:8b:c2:4e:b4:4c:26: 71:95:72:f3:21:20:a5:1b:d0:71:c9:c2:64:20:9e:ac:1d:8f: 78:07:91:58:32:3a:79:f8:22:cc:92:71:9a:15:68:27:a3:c3: 27:8d:51:6c:bc:61:a8:3f:7c:44:b8:3e:19:cb:3a:59:92:45: 0a:94:f2:7d:60:68:89:5a:60:b0:d1:3b:5d:4c:9e:ff:26:24: 14:f4:a5:34:0e:05:63:a9:ad:38:87:fb:6f:32:00:1a:6b:41: a2:f5:cf:47:ad:1b:67:cd:e4:81:1e:db:a4:b1:2a:b9:75:d9: b8:46:b9:72:41:41:43:1b:49:14:6e:2a:37:87:0c:a6:68:41: 84:7c:a0:0e:e3:c0:41:04:3f:e0:95:9f:98:83:60:8d:2f:d6: 9e:6e:10:9c:54:f1:fa:ee:8e:a4:17:7b:e6:f6:6a:06:23:98: 51:b1:20:d1:a2:80:92:f0:18:da:e7:84:bb:cd:4f:ef:c5:1d: c5:a0:03:7f:c2:d0:8b:a6:9e:37:9e:d2:30:42:09:40:ad:a1: ee:20:a9:e9:be:05:16:65:04:33:e8:cf:87:60:38:49:4b:3b: 9a:24:75:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42H1gKy2KR7YsxduU49kJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3MjFkMGVhNjgzY2M2NzU5NDJjMDk4ZjU5YzQxMWM4NjBl OGFlZGEwHhcNMjUxMjE5MjMwMTEwWhcNMjUxMjIwMjMwMTEwWjAzMTEwLwYDVQQD EyhiNzE5MDYyMTUxZmE2NjcyZTQ2OTllZjkzODAyYTZlMjc4MzNmN2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6vDMi7GaGp9F35W02ElV6Idd+vr voKNUhyirewQ+OnDCoLNmhtI66NQgZIHqBydFDjDnjjl1Y+be6yISenJtCPJ5G+9 Z2eOaNY4pzoXeY/XJDYi/u0o70ayCEBHi3MNzNaDIfih+7Rks7syCy/79ay1mVJm St0VFhPiiTWqnOcHae4mbsgMi+nrIMVVSmeb/BIGkJmPXvOnEqIKnPzfDk4VfQRE pUBS2QO+GIs7WnGa3YfabBqEhyA1SDenbtZFZtwUoSBT4LG01ukgn4TGj5eQ+ZIW Icj2/7N7kIqGmlky5jTmKIugXTCyfmfA5Q+ikjYp5eI47NJTTByOjwKAwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLcZBiFR+mZy5Gme+TgCpuJ4M/e5MB8GA1UdIwQY MBaAFOch0OpoPMZ1lCwJj1nEEchg6K7aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXlIUTZtZzh4bldVTEFtUFdjUVJ5R0RvcnRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS84NDEyNTctOWQ5My00OTE4LWE4YWUt NzJjYTEzZGZhZDJiLzEvNXlIUTZtZzh4bldVTEFtUFdjUVJ5R0RvcnRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS84NDEyNTctOWQ5My00OTE4LWE4YWUtNzJjYTEzZGZhZDJi LzEvNXlIUTZtZzh4bldVTEFtUFdjUVJ5R0RvcnRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyfwG7wDD 9WGvfyA2on/PIPcEJeDkgPUbU7oOL6SYi8JOtEwmcZVy8yEgpRvQccnCZCCerB2P eAeRWDI6efgizJJxmhVoJ6PDJ41RbLxhqD98RLg+Gcs6WZJFCpTyfWBoiVpgsNE7 XUye/yYkFPSlNA4FY6mtOIf7bzIAGmtBovXPR60bZ83kgR7bpLEquXXZuEa5ckFB QxtJFG4qN4cMpmhBhHygDuPAQQQ/4JWfmINgjS/Wnm4QnFTx+u6OpBd75vZqBiOY UbEg0aKAkvAY2ueEu81P78UdxaADf8LQi6aeN57SMEIJQK2h7iCp6b4FFmUEM+jP h2A4SUs7miR1tQ== -----END CERTIFICATE-----Generated at Sat Dec 20 09:13:37 2025 by rpki-client