This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft File: 5YBpdIdI6a69e-QFh9gUDv3lW2s.mft (raw, json) Hash identifier: YHKq15XyUUNU50WFswhmKHXtpM67hFPJd9IHlWZzokY= Subject key identifier: 63:96:CB:F2:9D:3E:F2:91:8B:F2:26:BB:35:E7:CE:72:52:F5:41:05 Authority key identifier: E5:80:69:74:87:48:E9:AE:BD:7B:E4:05:87:D8:14:0E:FD:E5:5B:6B Certificate issuer: /CN=e58069748748e9aebd7be40587d8140efde55b6b Certificate serial: 019B0F00A956C5DBFE75C60731B3945B823F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft Manifest number: 1702 Signing time: Thu 11 Dec 2025 20:01:00 +0000 Manifest this update: Thu 11 Dec 2025 20:01:00 +0000 Manifest next update: Fri 12 Dec 2025 20:01:00 +0000 Files and hashes: 1: 5YBpdIdI6a69e-QFh9gUDv3lW2s.crl (hash: VAq1MiwbsC6fECXHc+N/EO6ZShWgIKcW4B5Ldyt+aYU=) 2: vmkVgb9N_5wAEFtAOAjwuSdx1Xs.roa (hash: To73D5BDmwWuULrYV7q3UmXkLh1DadkYNkNoo+AcLqo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:a9:56:c5:db:fe:75:c6:07:31:b3:94:5b:82:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e58069748748e9aebd7be40587d8140efde55b6b Validity Not Before: Dec 11 20:01:00 2025 GMT Not After : Dec 12 20:01:00 2025 GMT Subject: CN=6396cbf29d3ef2918bf226bb35e7ce7252f54105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:73:d8:db:6f:7a:1c:c7:e8:7f:3b:80:7f:6b: ac:a9:48:2a:f6:ab:d9:a4:e0:94:27:3a:d1:51:5f: 5b:db:b0:59:92:7f:df:87:7d:35:cf:db:95:19:63: a0:ad:51:34:57:d5:48:d8:22:71:08:f7:5f:57:0a: 6b:25:b7:32:8b:f6:56:78:96:d8:c2:f8:5d:91:18: 15:6a:dd:1e:ad:0a:39:5f:56:11:18:49:2b:63:55: ba:b3:fd:18:6b:fa:09:4d:91:c3:39:96:57:d6:ec: 4b:83:00:88:74:5b:32:1f:de:c7:44:0d:69:da:6a: 86:2f:59:b7:33:be:e6:cc:08:4e:7e:f6:bb:11:e1: 0c:84:cc:5e:4a:d7:43:7f:13:8c:7c:d9:13:49:2d: 8d:5e:5a:c8:ac:ff:9a:de:11:9e:eb:a8:1e:d2:bb: 99:02:17:ef:3a:43:f3:33:a8:d0:77:f8:b7:26:da: 8c:2b:5e:ad:02:83:eb:87:e4:85:f9:1f:55:bb:c3: 62:20:03:1e:31:dd:fa:48:8e:ce:a8:33:8c:66:f0: ad:1f:08:84:62:62:83:e9:87:7e:24:67:ed:26:7e: 96:86:8c:79:60:14:3f:25:1c:68:f0:e4:e4:9f:41: f3:7c:2e:4e:53:01:83:30:87:12:4f:62:24:3a:a4: 9a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:96:CB:F2:9D:3E:F2:91:8B:F2:26:BB:35:E7:CE:72:52:F5:41:05 X509v3 Authority Key Identifier: keyid:E5:80:69:74:87:48:E9:AE:BD:7B:E4:05:87:D8:14:0E:FD:E5:5B:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:87:52:bd:a2:97:ad:88:7d:1f:6e:15:43:99:0b:8d:67:17: cd:b5:f8:04:0a:2c:05:09:e9:11:08:2d:65:d7:bf:ad:3d:1f: 31:88:54:37:26:99:73:ce:13:bc:ea:f3:4a:9b:ed:7a:07:0a: bb:95:71:ed:de:78:f5:50:63:66:41:38:2a:5f:24:f4:6e:85: 4a:0f:6d:55:09:9a:40:b8:69:93:9e:8a:50:f4:74:1e:6f:c1: ad:9a:f8:e2:ac:04:60:94:40:42:69:7b:ba:97:4b:9a:54:41: 74:ac:f4:1e:f6:b0:06:f8:fc:0b:c4:56:ff:4f:15:1b:fd:02: 4b:0a:5c:1b:b1:66:e2:e4:cf:65:85:5c:fd:c8:16:1c:83:b4: b2:62:1f:39:a1:50:7d:59:e1:e7:30:12:1a:6d:23:30:99:f6: ea:f1:f0:a8:0b:32:2f:cd:03:8b:64:4e:de:70:f6:a3:b2:93: 49:38:18:3f:93:cc:1c:d2:c5:d2:ef:ea:57:89:23:79:38:bf: 72:ea:86:e9:33:a9:3d:f6:b2:dc:50:8e:be:d2:88:2b:4b:66: 8e:40:4a:ea:f4:f5:63:45:3e:38:26:d6:b8:6d:14:84:1c:0f: 43:6f:4b:45:98:c6:30:44:f0:b9:29:a5:e5:e8:fe:0a:e7:36: bd:9b:d8:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAKlWxdv+dcYHMbOUW4I/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ODA2OTc0ODc0OGU5YWViZDdiZTQwNTg3ZDgxNDBlZmRl NTViNmIwHhcNMjUxMjExMjAwMTAwWhcNMjUxMjEyMjAwMTAwWjAzMTEwLwYDVQQD Eyg2Mzk2Y2JmMjlkM2VmMjkxOGJmMjI2YmIzNWU3Y2U3MjUyZjU0MTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunPY2296HMfofzuAf2usqUgq9qvZ pOCUJzrRUV9b27BZkn/fh301z9uVGWOgrVE0V9VI2CJxCPdfVwprJbcyi/ZWeJbY wvhdkRgVat0erQo5X1YRGEkrY1W6s/0Ya/oJTZHDOZZX1uxLgwCIdFsyH97HRA1p 2mqGL1m3M77mzAhOfva7EeEMhMxeStdDfxOMfNkTSS2NXlrIrP+a3hGe66ge0ruZ AhfvOkPzM6jQd/i3JtqMK16tAoPrh+SF+R9Vu8NiIAMeMd36SI7OqDOMZvCtHwiE YmKD6Yd+JGftJn6Whox5YBQ/JRxo8OTkn0HzfC5OUwGDMIcST2IkOqSahwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGOWy/KdPvKRi/ImuzXnznJS9UEFMB8GA1UdIwQY MBaAFOWAaXSHSOmuvXvkBYfYFA795VtrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVlCcGRJZEk2YTY5ZS1RRmg5Z1VEdjNsVzJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84ZWZkODAtN2RiMy00ZTUyLWFkNzYt MGY4OTZlYmNhNGY4LzEvNVlCcGRJZEk2YTY5ZS1RRmg5Z1VEdjNsVzJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS84ZWZkODAtN2RiMy00ZTUyLWFkNzYtMGY4OTZlYmNhNGY4 LzEvNVlCcGRJZEk2YTY5ZS1RRmg5Z1VEdjNsVzJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk4dSvaKX rYh9H24VQ5kLjWcXzbX4BAosBQnpEQgtZde/rT0fMYhUNyaZc84TvOrzSpvtegcK u5Vx7d549VBjZkE4Kl8k9G6FSg9tVQmaQLhpk56KUPR0Hm/BrZr44qwEYJRAQml7 updLmlRBdKz0HvawBvj8C8RW/08VG/0CSwpcG7Fm4uTPZYVc/cgWHIO0smIfOaFQ fVnh5zASGm0jMJn26vHwqAsyL80Di2RO3nD2o7KTSTgYP5PMHNLF0u/qV4kjeTi/ cuqG6TOpPfay3FCOvtKIK0tmjkBK6vT1Y0U+OCbWuG0UhBwPQ29LRZjGMETwuSml 5ej+Cuc2vZvY7Q== -----END CERTIFICATE-----Generated at Thu Dec 11 23:00:04 2025 by rpki-client