This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft File: 5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft (raw, json) Hash identifier: VKFsxygGGmccIO7pF6O0OPzAdqOurUBgPxfVxH4D3YA= Subject key identifier: 76:26:5E:8E:24:BE:69:6E:10:D2:03:EF:37:92:4A:FB:9A:C2:9A:9D Authority key identifier: E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94 Certificate issuer: /CN=e5a6794b91b81406412a137870bfde3b170de094 Certificate serial: 019B0F6E7FCC5324EEA8F4C6630770941A63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft Manifest number: 1256 Signing time: Thu 11 Dec 2025 22:00:58 +0000 Manifest this update: Thu 11 Dec 2025 22:00:58 +0000 Manifest next update: Fri 12 Dec 2025 22:00:58 +0000 Files and hashes: 1: 1n-VVl_FUGuc471oALycpRiqCLk.roa (hash: CyDn40gRMpRIy4CCIQiJsw5qJAYeVVUI59AY9O976Cg=) 2: 5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl (hash: GuWICiwcvEp+hFQ0xj9h+4zzs+iOfgDCMXqBS9tD/jE=) 3: bvJaB1n4DlwgW-YHgMlWz2d0zE0.roa (hash: Aum897RCErwCFSWkB8MTk4Vue2u5uq3XMcwvd1bOMFQ=) 4: d-c3fV9q29dsWUsutXEO_XUxELA.roa (hash: odfjS8/wqJCuj1kyoe6nkIiHEr+jKawF6ritEznO31s=) 5: sXJREdbwAm9mG_ih-kGMSE4IF1g.roa (hash: Vz5vIbPRAiUHJvwDkitmXzn8yuqUilXU/W786A3ZvJM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:7f:cc:53:24:ee:a8:f4:c6:63:07:70:94:1a:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5a6794b91b81406412a137870bfde3b170de094 Validity Not Before: Dec 11 22:00:58 2025 GMT Not After : Dec 12 22:00:58 2025 GMT Subject: CN=76265e8e24be696e10d203ef37924afb9ac29a9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:63:d3:16:2a:54:8f:7b:ac:f9:a7:89:f6:c2: cf:a8:fe:db:b0:17:1e:3a:97:ee:f1:3d:06:d2:1e: 98:91:e2:5b:7c:a1:ff:d4:76:02:08:3b:8c:79:d4: 9a:1e:a5:e9:62:f9:db:5e:77:0c:df:80:4b:e1:81: 29:4f:cb:71:c0:8d:17:7d:a2:db:aa:8e:d3:67:c6: c9:1a:dc:a9:78:7b:cc:92:66:01:7f:29:20:ef:02: b2:71:00:0d:b9:14:52:c2:db:9b:77:f8:fb:6f:f2: a7:f0:1c:ba:8d:9f:9e:bc:04:33:f2:51:d4:61:79: 9f:d4:96:41:3c:17:15:55:3b:14:8f:32:5a:a5:c0: d1:18:05:4e:77:28:2c:50:66:f3:08:9d:38:de:0c: 4d:c6:5f:f3:63:f6:bb:f7:4f:65:db:a3:2c:7b:ce: ac:d8:36:07:50:70:e0:aa:bb:eb:89:4e:75:a7:90: 0a:01:e4:f4:9c:27:e1:16:dc:6d:db:92:3c:9d:c7: fd:2c:95:72:01:72:ba:61:e4:97:79:7b:58:8e:cc: 19:13:d3:7d:d1:b5:11:04:a4:71:e6:85:c5:40:2b: f8:4f:7d:76:fd:00:d4:c4:4f:b3:7d:57:d8:fd:63: bf:59:f7:2c:b8:f8:c5:f2:f1:9f:a8:00:19:42:c5: 88:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:26:5E:8E:24:BE:69:6E:10:D2:03:EF:37:92:4A:FB:9A:C2:9A:9D X509v3 Authority Key Identifier: keyid:E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:9f:f6:a8:1b:1a:73:8b:41:5e:a9:c4:b2:2a:24:d1:d4:68: d0:04:fd:d7:51:07:a0:7d:7c:69:ee:5c:e6:9b:5b:9a:6c:24: ce:13:9b:9e:64:1b:a8:62:17:76:de:d7:f8:e2:5d:ee:40:ae: 0f:e3:1c:25:b3:eb:10:d7:00:a6:72:99:8f:22:0b:eb:d0:ed: de:7c:ec:15:b3:11:92:b8:8d:48:ec:9f:6f:49:3f:e7:f3:3f: 12:07:88:15:60:1b:dd:48:fa:e1:44:e6:5d:c1:b9:3c:6d:98: fa:a5:46:a2:7d:05:be:a7:70:54:3a:2f:fd:fa:ca:23:80:91: 53:36:d7:2b:34:5d:fa:ea:0e:30:6a:9c:64:4c:d6:a9:8b:d8: 48:37:10:e0:36:ee:fe:67:a9:83:cb:d3:33:cd:2f:2e:f3:fd: 2a:dc:1e:f7:65:d6:cb:c7:f1:e7:6c:86:7d:58:c9:22:f7:c6: 2b:08:37:c0:6e:2f:05:71:29:a6:bf:63:7e:27:97:37:9e:c0: 9b:a8:1e:ad:63:b4:58:2f:b7:30:9d:c4:4f:3d:da:97:4d:5d: a1:d1:c8:aa:c5:25:8f:bd:bf:c4:b2:d8:bb:fd:31:87:5f:c1: d0:9b:51:09:2b:32:33:2c:7d:7a:2f:27:dd:f3:48:70:67:fe: d2:8d:95:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbn/MUyTuqPTGYwdwlBpjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YTY3OTRiOTFiODE0MDY0MTJhMTM3ODcwYmZkZTNiMTcw ZGUwOTQwHhcNMjUxMjExMjIwMDU4WhcNMjUxMjEyMjIwMDU4WjAzMTEwLwYDVQQD Eyg3NjI2NWU4ZTI0YmU2OTZlMTBkMjAzZWYzNzkyNGFmYjlhYzI5YTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA62PTFipUj3us+aeJ9sLPqP7bsBce Opfu8T0G0h6YkeJbfKH/1HYCCDuMedSaHqXpYvnbXncM34BL4YEpT8txwI0XfaLb qo7TZ8bJGtypeHvMkmYBfykg7wKycQANuRRSwtubd/j7b/Kn8By6jZ+evAQz8lHU YXmf1JZBPBcVVTsUjzJapcDRGAVOdygsUGbzCJ043gxNxl/zY/a7909l26Mse86s 2DYHUHDgqrvriU51p5AKAeT0nCfhFtxt25I8ncf9LJVyAXK6YeSXeXtYjswZE9N9 0bURBKRx5oXFQCv4T312/QDUxE+zfVfY/WO/WfcsuPjF8vGfqAAZQsWISQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHYmXo4kvmluENID7zeSSvuawpqdMB8GA1UdIwQY MBaAFOWmeUuRuBQGQSoTeHC/3jsXDeCUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWFaNVM1RzRGQVpCS2hONGNMX2VPeGNONEpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9jYTM0ZWItOGUyMC00YmYxLWIxYjIt NTg3MjEwOWI2N2E4LzEvNWFaNVM1RzRGQVpCS2hONGNMX2VPeGNONEpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9jYTM0ZWItOGUyMC00YmYxLWIxYjItNTg3MjEwOWI2N2E4 LzEvNWFaNVM1RzRGQVpCS2hONGNMX2VPeGNONEpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJJ/2qBsa c4tBXqnEsiok0dRo0AT911EHoH18ae5c5ptbmmwkzhObnmQbqGIXdt7X+OJd7kCu D+McJbPrENcApnKZjyIL69Dt3nzsFbMRkriNSOyfb0k/5/M/EgeIFWAb3Uj64UTm XcG5PG2Y+qVGon0FvqdwVDov/frKI4CRUzbXKzRd+uoOMGqcZEzWqYvYSDcQ4Dbu /mepg8vTM80vLvP9Ktwe92XWy8fx52yGfVjJIvfGKwg3wG4vBXEppr9jfieXN57A m6gerWO0WC+3MJ3ETz3al01dodHIqsUlj72/xLLYu/0xh1/B0JtRCSsyMyx9ei8n 3fNIcGf+0o2Vjw== -----END CERTIFICATE-----Generated at Thu Dec 11 23:59:58 2025 by rpki-client