This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
File: 5aJ1VcGlxd3396zIOfpXeqfuepw.mft (raw, json)
Hash identifier: AIXIFFWd2e3KKDwUrXM1iBic3WiHhfIDiCzLiGHiSS0=
Subject key identifier: 5F:E6:00:7F:25:2D:DE:6A:0E:35:2D:A3:B7:B5:2F:35:46:A0:14:E5
Authority key identifier: E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
Certificate issuer: /CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Certificate serial: 019B2C6690CF280F238D85E803C4867D013F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
Manifest number: 1783
Signing time: Wed 17 Dec 2025 13:01:17 +0000
Manifest this update: Wed 17 Dec 2025 13:01:17 +0000
Manifest next update: Thu 18 Dec 2025 13:01:17 +0000
Files and hashes: 1: 5aJ1VcGlxd3396zIOfpXeqfuepw.crl (hash: P+MTKJXNytrnV1HVTQIZ1H4RXoUMjW/Ri/BLkWS5QR0=)
2: 6UYJYSp_H1qb-Z1ShFc_cXl87FI.roa (hash: 7Wjn3rvrdmK/H1wlwqE+Z2pd0NQT1fwp/AaKLM/IzPg=)
3: jISWNsTxPdEjjPdMy-Whzlvb0Ac.roa (hash: La/cVhkJ14UaJXVbjX6BzXzgOteVwnmYx6tdmiaM0OE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Dec 2025 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:2c:66:90:cf:28:0f:23:8d:85:e8:03:c4:86:7d:01:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Validity
Not Before: Dec 17 13:01:17 2025 GMT
Not After : Dec 18 13:01:17 2025 GMT
Subject: CN=5fe6007f252dde6a0e352da3b7b52f3546a014e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:12:73:11:94:0e:29:17:42:76:d4:67:7a:88:
5d:f9:ae:ca:48:66:93:10:26:38:4f:31:97:b0:77:
ef:8f:a8:1f:54:3e:aa:6e:d3:df:ba:45:23:09:a2:
86:61:4b:bb:32:06:da:2c:b6:2b:ad:07:cd:cb:c5:
9b:11:80:95:fd:05:07:e9:07:4f:4a:82:18:45:8a:
95:cc:1d:a5:76:00:b8:d8:05:f0:d4:2d:7a:80:4b:
da:d0:cc:4e:c9:d6:05:58:25:ae:2b:7b:79:6a:fd:
ac:f2:db:01:4c:a9:88:ee:7f:f0:98:d3:18:bc:21:
07:cb:b0:19:a5:e9:ed:b1:b4:a5:0a:fc:87:8f:70:
2e:99:f7:91:4a:c4:88:98:2e:3d:d4:5c:dd:04:98:
86:35:39:f6:ea:56:5d:a2:9d:de:a7:de:9e:b6:11:
21:a4:3e:51:dc:73:00:6a:49:1e:19:af:42:a0:45:
c7:96:c0:7c:90:48:dd:87:b0:de:4a:8c:78:a2:4b:
3a:d7:60:a9:85:b6:43:94:e0:70:4b:c1:4f:27:e5:
77:38:4b:59:b4:2a:a0:12:f1:49:87:70:40:41:a8:
46:5a:63:fe:89:39:f8:0a:23:88:09:71:38:9d:73:
7e:07:f3:c3:7a:71:5d:01:a6:36:79:df:db:08:ac:
46:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E6:00:7F:25:2D:DE:6A:0E:35:2D:A3:B7:B5:2F:35:46:A0:14:E5
X509v3 Authority Key Identifier:
keyid:E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:f0:22:f1:ed:88:b6:74:de:f1:57:1b:f0:ab:05:9f:c1:5e:
e0:57:9b:4d:e7:77:c9:7a:44:a3:90:9b:07:19:8e:f7:2f:05:
d6:06:91:a4:7b:5d:38:4f:45:6d:4f:be:3c:24:aa:2e:17:cc:
45:a6:37:76:9e:b1:a2:85:1b:db:70:cf:9e:a5:7f:ea:c7:a4:
df:c2:29:93:89:00:cf:6a:8c:75:a7:25:e9:30:80:b9:72:39:
b8:ef:55:f0:21:d8:1d:73:07:38:27:bb:36:61:10:c9:0f:df:
4c:30:0c:df:83:b9:eb:9c:33:2d:ca:2c:9b:49:20:b4:45:7f:
dd:a2:8c:df:a6:16:d7:a2:cb:ab:48:df:3d:fc:f8:db:50:fe:
7e:22:d4:e5:6c:06:b8:18:89:9a:2e:80:8f:3e:a2:f8:e6:de:
d3:e3:94:30:87:15:e7:bd:33:23:8d:88:ce:3d:93:8b:c2:75:
66:41:b0:f7:5d:90:4d:5b:49:f0:f3:6d:00:74:3d:11:47:9c:
0e:ef:e4:a8:b0:cb:b8:f7:85:80:e5:5c:71:fb:55:e2:d4:44:
cc:ba:59:33:90:35:37:81:b8:9e:52:e5:fa:01:10:08:41:61:
44:b7:95:9e:0c:74:a5:a9:af:29:31:63:76:58:13:c3:bd:9e:
1b:08:1d:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZssZpDPKA8jjYXoA8SGfQE/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YTI3NTU1YzFhNWM1ZGRmN2Y3YWNjODM5ZmE1NzdhYTdl
ZTdhOWMwHhcNMjUxMjE3MTMwMTE3WhcNMjUxMjE4MTMwMTE3WjAzMTEwLwYDVQQD
Eyg1ZmU2MDA3ZjI1MmRkZTZhMGUzNTJkYTNiN2I1MmYzNTQ2YTAxNGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRJzEZQOKRdCdtRneohd+a7KSGaT
ECY4TzGXsHfvj6gfVD6qbtPfukUjCaKGYUu7MgbaLLYrrQfNy8WbEYCV/QUH6QdP
SoIYRYqVzB2ldgC42AXw1C16gEva0MxOydYFWCWuK3t5av2s8tsBTKmI7n/wmNMY
vCEHy7AZpentsbSlCvyHj3AumfeRSsSImC491FzdBJiGNTn26lZdop3ep96ethEh
pD5R3HMAakkeGa9CoEXHlsB8kEjdh7DeSox4oks612CphbZDlOBwS8FPJ+V3OEtZ
tCqgEvFJh3BAQahGWmP+iTn4CiOICXE4nXN+B/PDenFdAaY2ed/bCKxGMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/mAH8lLd5qDjUto7e1LzVGoBTlMB8GA1UdIwQY
MBaAFOWidVXBpcXd9/esyDn6V3qn7nqcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWFKMVZjR2x4ZDMzOTZ6SU9mcFhlcWZ1ZXB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xY2NkOWEtYzMwZS00ZThhLTg5NGEt
ZmQ3MTY2N2EyYjVmLzEvNWFKMVZjR2x4ZDMzOTZ6SU9mcFhlcWZ1ZXB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8xY2NkOWEtYzMwZS00ZThhLTg5NGEtZmQ3MTY2N2EyYjVm
LzEvNWFKMVZjR2x4ZDMzOTZ6SU9mcFhlcWZ1ZXB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs/Ai8e2I
tnTe8Vcb8KsFn8Fe4FebTed3yXpEo5CbBxmO9y8F1gaRpHtdOE9FbU++PCSqLhfM
RaY3dp6xooUb23DPnqV/6sek38Ipk4kAz2qMdacl6TCAuXI5uO9V8CHYHXMHOCe7
NmEQyQ/fTDAM34O565wzLcosm0kgtEV/3aKM36YW16LLq0jfPfz421D+fiLU5WwG
uBiJmi6Ajz6i+Obe0+OUMIcV570zI42Izj2Ti8J1ZkGw912QTVtJ8PNtAHQ9EUec
Du/kqLDLuPeFgOVccftV4tREzLpZM5A1N4G4nlLl+gEQCEFhRLeVngx0pamvKTFj
dlgTw72eGwgdoA==
-----END CERTIFICATE-----
Generated at Wed Dec 17 20:49:19 2025 by rpki-client