This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft File: 5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft (raw, json) Hash identifier: Kv7udwtJWvhRMoP+qsI9IcFnQBcmSXE0tkF074mgEVg= Subject key identifier: A7:8B:2F:4E:F7:F2:AA:CC:12:80:94:1A:F0:68:48:2E:63:9B:8C:71 Authority key identifier: E4:79:AF:17:16:DC:46:1E:5B:B3:F8:76:21:5B:CB:94:E8:80:8B:A0 Certificate issuer: /CN=e479af1716dc461e5bb3f876215bcb94e8808ba0 Certificate serial: 019B32D7FA0255644241227952368C798D9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft Manifest number: 1786 Signing time: Thu 18 Dec 2025 19:02:53 +0000 Manifest this update: Thu 18 Dec 2025 19:02:53 +0000 Manifest next update: Fri 19 Dec 2025 19:02:53 +0000 Files and hashes: 1: 5HmvFxbcRh5bs_h2IVvLlOiAi6A.crl (hash: uNt+scveG3cgSpLOWR7l9DvtCphWVOtJUwTX49/tZlQ=) 2: PsjhieTymPBMhbBeD2G4Eb2tiXM.roa (hash: bN6R2jhfh/x3ks5vaycX08tQPelsEHr78ADbPw3Z954=) 3: b_wZ8vjY3m-nqcgia8Q1-09feRc.roa (hash: tIRWyoM1DUPvrXEJ2hmu6whNi1gGh3fnMsdJLxUNaQ4=) 4: db-V4RFiWk-DRMRx23Yi5GGB828.roa (hash: nklnqznrcypY4CcHnGmzs30m8K1faHbW1Og3XBCrp1c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:fa:02:55:64:42:41:22:79:52:36:8c:79:8d:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e479af1716dc461e5bb3f876215bcb94e8808ba0 Validity Not Before: Dec 18 19:02:53 2025 GMT Not After : Dec 19 19:02:53 2025 GMT Subject: CN=a78b2f4ef7f2aacc1280941af068482e639b8c71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b8:ea:46:c8:13:9a:b5:0a:d4:1d:e4:3e:7a: bb:42:e6:2e:3f:6b:51:e4:7b:65:a4:41:76:a0:ba: ff:72:3b:64:42:a4:54:d6:5c:b2:28:d4:24:2c:97: 3f:06:ca:b1:cd:ee:24:d5:01:a3:d6:04:2a:66:92: bb:ff:6a:fe:37:1c:8e:82:4c:bc:e7:2a:df:f5:8f: 64:dd:e7:ad:d2:29:5a:a6:3c:14:41:ec:e8:e5:9f: bc:4c:d6:78:5f:38:65:a2:79:55:76:12:b6:d5:0a: 67:94:85:4d:2c:c8:4d:fa:0b:35:7f:9d:c9:5f:3f: 9f:8e:f7:62:a3:70:f4:6f:4a:e4:e6:97:14:f4:d3: 8c:8a:c8:40:41:8b:c0:9b:99:df:39:54:69:2f:21: 66:b0:8f:29:6a:84:ac:45:d9:c7:33:f2:64:c3:f8: d5:2f:82:2b:55:2e:aa:48:69:f9:92:a8:5f:b8:5b: ce:da:e6:6d:a6:ce:a6:5b:8b:fd:80:e7:1c:f3:bd: 78:b7:36:ea:97:4f:1b:a0:c5:d3:3a:e8:99:9a:c9: e0:ee:c4:45:4c:4c:26:fd:8a:d1:5d:1b:33:2f:ac: 49:5a:8c:a2:c9:30:5d:98:0a:c7:cb:cb:81:9e:24: e4:52:2f:28:76:e6:b0:88:1f:73:0d:b2:d7:09:dd: b4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:8B:2F:4E:F7:F2:AA:CC:12:80:94:1A:F0:68:48:2E:63:9B:8C:71 X509v3 Authority Key Identifier: keyid:E4:79:AF:17:16:DC:46:1E:5B:B3:F8:76:21:5B:CB:94:E8:80:8B:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:4e:93:bf:d4:ee:1b:c2:c0:aa:6d:bc:13:a9:3a:d9:77:02: aa:93:6e:5d:e0:dd:53:f9:0f:a5:a8:52:4e:25:13:20:55:65: 61:1c:ae:a3:cb:ef:fc:f7:9c:0a:ce:ee:f7:42:1c:1d:9e:95: a7:c6:c9:73:97:72:58:c8:b5:9c:a3:83:bc:89:d0:b8:19:2d: fa:c6:89:87:79:a2:89:f7:6a:d8:cf:35:2d:1e:c9:de:18:50: bb:98:ec:32:f3:46:93:26:2b:21:b5:ff:47:5a:bb:3b:6d:e0: 0e:1f:c9:44:37:cb:2f:c6:a4:9b:f6:4c:c2:46:53:c7:d5:84: 65:6f:da:2d:9c:83:b3:33:84:40:5f:ae:37:f7:20:0b:08:7b: 47:6c:3a:63:71:40:44:4d:39:5d:da:70:fb:8b:03:ad:5f:30: e9:44:c4:93:ae:29:2f:52:e3:af:42:20:af:4b:72:f5:a0:76: 23:e2:25:90:b7:d1:f2:35:9f:db:b3:d3:de:2d:98:88:48:f6: ef:2a:8e:cb:c1:e6:fd:b4:01:8f:e4:5c:84:4d:9b:a8:8c:32: ad:c1:de:91:0b:a1:2a:57:07:88:9b:2a:9b:ef:12:54:05:18: 4f:a8:47:1d:2f:c9:58:74:69:fc:83:ca:d3:e3:96:aa:89:d2: fc:f8:4a:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1/oCVWRCQSJ5UjaMeY2bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0NzlhZjE3MTZkYzQ2MWU1YmIzZjg3NjIxNWJjYjk0ZTg4 MDhiYTAwHhcNMjUxMjE4MTkwMjUzWhcNMjUxMjE5MTkwMjUzWjAzMTEwLwYDVQQD EyhhNzhiMmY0ZWY3ZjJhYWNjMTI4MDk0MWFmMDY4NDgyZTYzOWI4YzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrjqRsgTmrUK1B3kPnq7QuYuP2tR 5HtlpEF2oLr/cjtkQqRU1lyyKNQkLJc/Bsqxze4k1QGj1gQqZpK7/2r+NxyOgky8 5yrf9Y9k3eet0ilapjwUQezo5Z+8TNZ4XzhlonlVdhK21QpnlIVNLMhN+gs1f53J Xz+fjvdio3D0b0rk5pcU9NOMishAQYvAm5nfOVRpLyFmsI8paoSsRdnHM/Jkw/jV L4IrVS6qSGn5kqhfuFvO2uZtps6mW4v9gOcc8714tzbql08boMXTOuiZmsng7sRF TEwm/YrRXRszL6xJWoyiyTBdmArHy8uBniTkUi8oduawiB9zDbLXCd20ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKeLL0738qrMEoCUGvBoSC5jm4xxMB8GA1UdIwQY MBaAFOR5rxcW3EYeW7P4diFby5TogIugMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUhtdkZ4YmNSaDVic19oMklWdkxsT2lBaTZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS82MzI5OWEtODZiMi00OWZmLWI2ZTIt MjQxZWFiNjE0ODNmLzEvNUhtdkZ4YmNSaDVic19oMklWdkxsT2lBaTZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS82MzI5OWEtODZiMi00OWZmLWI2ZTItMjQxZWFiNjE0ODNm LzEvNUhtdkZ4YmNSaDVic19oMklWdkxsT2lBaTZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAME6Tv9Tu G8LAqm28E6k62XcCqpNuXeDdU/kPpahSTiUTIFVlYRyuo8vv/PecCs7u90IcHZ6V p8bJc5dyWMi1nKODvInQuBkt+saJh3miifdq2M81LR7J3hhQu5jsMvNGkyYrIbX/ R1q7O23gDh/JRDfLL8akm/ZMwkZTx9WEZW/aLZyDszOEQF+uN/cgCwh7R2w6Y3FA RE05Xdpw+4sDrV8w6UTEk64pL1Ljr0Igr0ty9aB2I+IlkLfR8jWf27PT3i2YiEj2 7yqOy8Hm/bQBj+RchE2bqIwyrcHekQuhKlcHiJsqm+8SVAUYT6hHHS/JWHRp/IPK 0+OWqonS/PhK0g== -----END CERTIFICATE-----Generated at Fri Dec 19 03:48:14 2025 by rpki-client