This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.mft File: 5DusShu7pWzENIYaTHaf-c4tFew.mft (raw, json) Hash identifier: uNjQqSJRHxxGSUr4r7LgUzTy+QbVGsHNnbJTSYXKU6k= Subject key identifier: 39:95:40:76:06:FB:76:42:BF:2B:74:83:0F:62:EF:0D:02:8A:0C:4B Authority key identifier: E4:3B:AC:4A:1B:BB:A5:6C:C4:34:86:1A:4C:76:9F:F9:CE:2D:15:EC Certificate issuer: /CN=e43bac4a1bbba56cc434861a4c769ff9ce2d15ec Certificate serial: 019B31FAD33061DE730582DC6D46256B8A29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5DusShu7pWzENIYaTHaf-c4tFew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 15:01:20 +0000 Manifest this update: Thu 18 Dec 2025 15:01:20 +0000 Manifest next update: Fri 19 Dec 2025 15:01:20 +0000 Files and hashes: 1: 0k8NU0Yf2AeHHbiTpnAXvABs1hU.roa (hash: oJ2JUNCDknxTjzNTxQM1bVAa79T0L1UKQs2YDAYDgxc=) 2: 5DusShu7pWzENIYaTHaf-c4tFew.crl (hash: Odo5TX1j9hs2eZQaZroUi2H5bvE2lIgrMmAlrbfYa30=) 3: FkwWWQIMWtA4iybPzQx4iJn4LA4.roa (hash: dygheTAaWRRRFFcR/Y94QKMdhM+IdtEOUxFApI6osJI=) 4: nG4btH8hnfj9Xq5wDsBzy66KvCI.roa (hash: aqERMHBB2BmuiOQ91Bb+OrBKwS60vrChPD7BlEGQeXA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.mft rsync://rpki.ripe.net/repository/DEFAULT/5DusShu7pWzENIYaTHaf-c4tFew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:d3:30:61:de:73:05:82:dc:6d:46:25:6b:8a:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e43bac4a1bbba56cc434861a4c769ff9ce2d15ec Validity Not Before: Dec 18 15:01:20 2025 GMT Not After : Dec 19 15:01:20 2025 GMT Subject: CN=3995407606fb7642bf2b74830f62ef0d028a0c4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7d:62:79:33:b7:7b:74:40:95:59:fb:87:4f: 79:db:6e:df:f8:8b:5e:6a:a6:4e:2f:f7:d9:0d:9e: d0:8b:ff:29:62:d4:c3:23:03:fd:37:b1:2e:af:71: 17:2c:6a:b9:a7:f8:3b:58:96:a1:e4:63:5e:a5:a7: c3:c0:ed:07:77:2c:05:37:17:da:21:9d:67:62:7c: 13:16:19:b0:fa:af:88:de:6e:01:33:a6:2c:0c:1e: f7:ec:bd:86:d7:cb:bd:d7:ea:59:59:7e:72:09:25: f6:4b:0f:68:82:f0:41:b8:7f:13:cf:c5:af:99:40: 5e:f0:35:09:aa:27:5b:7a:68:75:54:63:6e:48:38: 99:cf:3d:e5:ce:cb:b3:5a:cc:c4:35:65:54:b9:fb: 59:e0:7b:df:77:11:88:01:c1:a7:74:1e:21:fd:40: 95:f7:ba:94:bc:a6:af:08:86:dd:f3:5d:53:1c:6b: 8d:b4:fd:18:82:a1:9a:82:6c:1f:97:87:21:f5:cb: 03:53:c2:5a:26:a5:84:04:b8:3b:29:18:c6:a5:22: 4c:9b:bb:77:f4:ac:c4:cb:f6:d5:f5:76:70:82:b6: 84:45:13:1d:d9:ba:b2:a3:7f:f7:1d:15:72:ce:11: ff:74:37:4a:a5:83:4e:fd:23:8c:1f:71:6a:21:b6: 09:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:95:40:76:06:FB:76:42:BF:2B:74:83:0F:62:EF:0D:02:8A:0C:4B X509v3 Authority Key Identifier: keyid:E4:3B:AC:4A:1B:BB:A5:6C:C4:34:86:1A:4C:76:9F:F9:CE:2D:15:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5DusShu7pWzENIYaTHaf-c4tFew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:29:f9:b5:cb:52:2e:e4:51:c5:92:82:04:fd:3f:27:9c:8c: 1b:9d:a0:cd:48:9f:50:60:7f:ef:17:cd:ef:f4:7e:28:da:50: f1:7d:10:ef:ae:d6:d6:77:05:d7:46:1a:de:c4:d9:b4:eb:e7: 5d:b4:1d:fa:ff:59:f3:b0:a4:8b:8e:48:f4:cc:d8:b7:61:39: b1:98:91:66:8c:51:7c:c6:45:93:6f:43:c0:98:e2:84:28:37: 41:3a:e5:3a:48:30:84:cd:ed:a7:ff:af:ad:76:2a:98:2e:eb: 96:8b:b6:e5:ee:e8:ca:3e:ff:30:45:19:9a:88:6a:ed:60:0e: 08:6b:99:87:b8:64:19:2b:f7:c9:9c:a3:b1:b7:1b:4f:ac:26: 8d:2c:41:f8:8a:d3:0c:78:3c:c8:d3:3b:a0:c1:50:1d:1f:18: da:69:a9:be:fd:f4:ec:1a:a0:e8:f5:cd:13:5d:ec:7b:29:87: d2:95:0b:ee:05:bf:ea:63:f7:9a:70:5b:70:7e:79:c9:30:fc: 02:ec:62:fe:44:c1:31:a1:fd:77:ee:5f:3e:b3:98:e8:f7:af: 38:77:db:c7:8e:8f:4d:ef:cf:d0:36:82:9f:97:b8:15:3c:78: 52:a1:c3:17:06:be:e4:86:27:d1:3d:e2:0b:4a:11:e8:6f:4d: 7e:c6:5c:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsx+tMwYd5zBYLcbUYla4opMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0M2JhYzRhMWJiYmE1NmNjNDM0ODYxYTRjNzY5ZmY5Y2Uy ZDE1ZWMwHhcNMjUxMjE4MTUwMTIwWhcNMjUxMjE5MTUwMTIwWjAzMTEwLwYDVQQD EygzOTk1NDA3NjA2ZmI3NjQyYmYyYjc0ODMwZjYyZWYwZDAyOGEwYzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz31ieTO3e3RAlVn7h095227f+Ite aqZOL/fZDZ7Qi/8pYtTDIwP9N7Eur3EXLGq5p/g7WJah5GNepafDwO0HdywFNxfa IZ1nYnwTFhmw+q+I3m4BM6YsDB737L2G18u91+pZWX5yCSX2Sw9ogvBBuH8Tz8Wv mUBe8DUJqidbemh1VGNuSDiZzz3lzsuzWszENWVUuftZ4HvfdxGIAcGndB4h/UCV 97qUvKavCIbd811THGuNtP0YgqGagmwfl4ch9csDU8JaJqWEBLg7KRjGpSJMm7t3 9KzEy/bV9XZwgraERRMd2bqyo3/3HRVyzhH/dDdKpYNO/SOMH3FqIbYJnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDmVQHYG+3ZCvyt0gw9i7w0CigxLMB8GA1UdIwQY MBaAFOQ7rEobu6VsxDSGGkx2n/nOLRXsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUR1c1NodTdwV3pFTklZYVRIYWYtYzR0RmV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9mMmFiMGYtYmU0My00NjY1LWJiYWEt MWNkM2NiMDdlZjVkLzEvNUR1c1NodTdwV3pFTklZYVRIYWYtYzR0RmV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9mMmFiMGYtYmU0My00NjY1LWJiYWEtMWNkM2NiMDdlZjVk LzEvNUR1c1NodTdwV3pFTklZYVRIYWYtYzR0RmV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQCn5tctS LuRRxZKCBP0/J5yMG52gzUifUGB/7xfN7/R+KNpQ8X0Q767W1ncF10Ya3sTZtOvn XbQd+v9Z87Cki45I9MzYt2E5sZiRZoxRfMZFk29DwJjihCg3QTrlOkgwhM3tp/+v rXYqmC7rlou25e7oyj7/MEUZmohq7WAOCGuZh7hkGSv3yZyjsbcbT6wmjSxB+IrT DHg8yNM7oMFQHR8Y2mmpvv307Bqg6PXNE13seymH0pUL7gW/6mP3mnBbcH55yTD8 Auxi/kTBMaH9d+5fPrOY6PevOHfbx46PTe/P0DaCn5e4FTx4UqHDFwa+5IYn0T3i C0oR6G9NfsZc3w== -----END CERTIFICATE-----Generated at Thu Dec 18 20:05:11 2025 by rpki-client