This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft File: 5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft (raw, json) Hash identifier: +gJ4sPEnpKRSX4zxCdVNPNHwhaYgt7XemjjFaL+6GLc= Subject key identifier: 17:CD:A2:C4:C4:96:6D:D2:DF:B4:65:78:7B:A3:8E:90:8F:F9:3C:87 Authority key identifier: E4:79:AF:17:16:DC:46:1E:5B:B3:F8:76:21:5B:CB:94:E8:80:8B:A0 Certificate issuer: /CN=e479af1716dc461e5bb3f876215bcb94e8808ba0 Certificate serial: 019B0E2520784A1A519DCF3B6FCE28F435A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft Manifest number: 1773 Signing time: Thu 11 Dec 2025 16:01:12 +0000 Manifest this update: Thu 11 Dec 2025 16:01:12 +0000 Manifest next update: Fri 12 Dec 2025 16:01:12 +0000 Files and hashes: 1: 5HmvFxbcRh5bs_h2IVvLlOiAi6A.crl (hash: MbhMpSFDsq28k5u0FGXpaBDNrzbJ3s4OfN/F6jO/NVo=) 2: PsjhieTymPBMhbBeD2G4Eb2tiXM.roa (hash: bN6R2jhfh/x3ks5vaycX08tQPelsEHr78ADbPw3Z954=) 3: b_wZ8vjY3m-nqcgia8Q1-09feRc.roa (hash: tIRWyoM1DUPvrXEJ2hmu6whNi1gGh3fnMsdJLxUNaQ4=) 4: db-V4RFiWk-DRMRx23Yi5GGB828.roa (hash: nklnqznrcypY4CcHnGmzs30m8K1faHbW1Og3XBCrp1c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:20:78:4a:1a:51:9d:cf:3b:6f:ce:28:f4:35:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e479af1716dc461e5bb3f876215bcb94e8808ba0 Validity Not Before: Dec 11 16:01:12 2025 GMT Not After : Dec 12 16:01:12 2025 GMT Subject: CN=17cda2c4c4966dd2dfb465787ba38e908ff93c87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:cd:ab:47:84:d8:ad:9c:0d:b0:26:a3:d6:5f: cc:81:7e:d4:e9:92:02:21:30:c4:f2:5c:1b:bf:b2: 39:bb:8d:7a:11:ea:0d:b3:9b:e7:da:d7:a6:79:21: 5f:65:b8:a5:e7:85:93:9f:d7:52:8f:7f:a3:5f:1b: 0e:58:3e:7b:71:1c:2f:a3:a9:0c:be:9c:bc:ae:58: 09:1b:7f:2a:14:4a:82:4d:b4:60:d9:58:ce:cb:48: 3c:fd:1d:b1:e4:00:48:9e:00:b8:04:d6:1e:10:8f: 43:d8:4a:3d:c0:e6:57:42:73:a9:74:74:46:e4:ca: 76:cb:d2:39:bc:e9:75:87:d5:a2:39:c4:77:ac:d4: a8:a0:b4:65:67:d6:ef:76:96:05:bb:c7:e3:f9:b4: ee:f4:9a:fe:34:0d:b5:e0:24:14:44:6e:8b:82:a4: 12:e4:2d:0b:40:a8:d6:24:d4:fa:53:01:44:96:84: 27:b6:1e:15:3c:31:f4:ae:d1:89:f2:bd:83:24:18: 4c:85:5b:9a:7d:6a:31:f9:c0:60:45:57:bf:6c:a1: f9:4f:02:9f:c9:96:f4:05:8d:df:13:37:49:e1:27: 6f:d9:76:24:bb:5b:bf:3e:9c:0a:29:42:7f:23:67: 04:f6:87:51:9c:6c:6b:7d:15:aa:8d:89:ca:76:a9: b1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:CD:A2:C4:C4:96:6D:D2:DF:B4:65:78:7B:A3:8E:90:8F:F9:3C:87 X509v3 Authority Key Identifier: keyid:E4:79:AF:17:16:DC:46:1E:5B:B3:F8:76:21:5B:CB:94:E8:80:8B:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:15:c0:79:ce:df:ab:84:9f:cb:99:c1:60:1a:01:d5:67:67: 0d:db:13:4d:00:cb:67:21:88:1b:1f:2f:db:5a:ed:44:80:df: ff:ad:23:23:3f:6b:84:e4:5b:5b:81:5b:cf:ce:6f:38:6a:03: 02:83:16:2c:54:d8:b2:ac:bc:3c:2b:2f:27:7b:60:07:96:e2: b1:33:0e:f6:b9:64:81:b9:49:7c:c4:aa:f8:19:05:b2:fc:ee: b7:c5:1d:ad:8a:cf:5d:97:00:10:e5:3c:67:42:6e:0e:be:ac: 7f:8b:ce:2d:57:b7:59:d0:15:64:37:4f:b0:9b:be:fc:0a:f2: 5f:af:b3:ef:10:3e:a0:d4:a6:3b:56:9b:3f:b1:ae:83:89:56: f9:57:8d:81:34:8b:8a:27:b6:61:85:52:6d:71:0e:e8:3c:bd: 14:e3:90:6c:8a:e6:ab:bb:5f:01:04:d1:99:3f:8b:5a:9e:42: 8e:95:6d:e2:29:00:4e:8e:fc:69:ac:ef:41:98:31:0f:35:91: ea:0b:20:40:59:89:e7:3a:bc:67:6c:9d:ce:f7:77:c3:ca:30: 1b:a7:30:25:12:f4:ad:6c:86:8a:32:a0:9c:e3:a3:0d:a4:c1: cd:df:0a:d0:43:45:7a:13:85:be:98:9b:39:52:65:5c:fd:f5: 05:36:28:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJSB4ShpRnc87b84o9DWgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0NzlhZjE3MTZkYzQ2MWU1YmIzZjg3NjIxNWJjYjk0ZTg4 MDhiYTAwHhcNMjUxMjExMTYwMTEyWhcNMjUxMjEyMTYwMTEyWjAzMTEwLwYDVQQD EygxN2NkYTJjNGM0OTY2ZGQyZGZiNDY1Nzg3YmEzOGU5MDhmZjkzYzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3s2rR4TYrZwNsCaj1l/MgX7U6ZIC ITDE8lwbv7I5u416EeoNs5vn2temeSFfZbil54WTn9dSj3+jXxsOWD57cRwvo6kM vpy8rlgJG38qFEqCTbRg2VjOy0g8/R2x5ABIngC4BNYeEI9D2Eo9wOZXQnOpdHRG 5Mp2y9I5vOl1h9WiOcR3rNSooLRlZ9bvdpYFu8fj+bTu9Jr+NA214CQURG6LgqQS 5C0LQKjWJNT6UwFEloQnth4VPDH0rtGJ8r2DJBhMhVuafWox+cBgRVe/bKH5TwKf yZb0BY3fEzdJ4Sdv2XYku1u/PpwKKUJ/I2cE9odRnGxrfRWqjYnKdqmxHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBfNosTElm3S37RleHujjpCP+TyHMB8GA1UdIwQY MBaAFOR5rxcW3EYeW7P4diFby5TogIugMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUhtdkZ4YmNSaDVic19oMklWdkxsT2lBaTZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS82MzI5OWEtODZiMi00OWZmLWI2ZTIt MjQxZWFiNjE0ODNmLzEvNUhtdkZ4YmNSaDVic19oMklWdkxsT2lBaTZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS82MzI5OWEtODZiMi00OWZmLWI2ZTItMjQxZWFiNjE0ODNm LzEvNUhtdkZ4YmNSaDVic19oMklWdkxsT2lBaTZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATBXAec7f q4Sfy5nBYBoB1WdnDdsTTQDLZyGIGx8v21rtRIDf/60jIz9rhORbW4Fbz85vOGoD AoMWLFTYsqy8PCsvJ3tgB5bisTMO9rlkgblJfMSq+BkFsvzut8UdrYrPXZcAEOU8 Z0JuDr6sf4vOLVe3WdAVZDdPsJu+/AryX6+z7xA+oNSmO1abP7Gug4lW+VeNgTSL iie2YYVSbXEO6Dy9FOOQbIrmq7tfAQTRmT+LWp5CjpVt4ikATo78aazvQZgxDzWR 6gsgQFmJ5zq8Z2ydzvd3w8owG6cwJRL0rWyGijKgnOOjDaTBzd8K0ENFehOFvpib OVJlXP31BTYooQ== -----END CERTIFICATE-----Generated at Thu Dec 11 23:55:46 2025 by rpki-client