This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.mft File: 5SBEb3n_wtfDqe80DOneJXI6cZo.mft (raw, json) Hash identifier: cqLKqp2ZfF5quhF9oFbrTBpkwWVbxkfQK9KK+BSSWtk= Subject key identifier: F4:35:EC:A0:09:F9:4D:80:48:85:D8:CE:EA:8B:B1:DD:D8:4B:0A:F2 Authority key identifier: E5:20:44:6F:79:FF:C2:D7:C3:A9:EF:34:0C:E9:DE:25:72:3A:71:9A Certificate issuer: /CN=e520446f79ffc2d7c3a9ef340ce9de25723a719a Certificate serial: 019B2D0B17935477AC50230717D32D00469E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.mft Manifest number: 0DF8 Signing time: Wed 17 Dec 2025 16:01:00 +0000 Manifest this update: Wed 17 Dec 2025 16:01:00 +0000 Manifest next update: Thu 18 Dec 2025 16:01:00 +0000 Files and hashes: 1: 5SBEb3n_wtfDqe80DOneJXI6cZo.crl (hash: uj5SJk/LEXvd9voq2seAVUCenE+P5J+GPlTt0IDAxso=) 2: KwGp6Z3v_f_qdKMLeB5RP3eXNRo.roa (hash: A2C/O+Kqn5BMFDMcQh3sDt1p5I358AiHafCSfwd+Wn0=) 3: lX6hj9K_SgWpbjs9Vm4h-iLqKxg.roa (hash: sh68gHRxqa7fIqQfLrHiW3Yb8Ld23ANUs7IVCd+duFY=) 4: r9qf6KgX9IgFo0eq5J1Iki9tbIU.roa (hash: 5vA2NlXN7t+qJxC8MfIinBSgfDV+e3NTP2tOSZC2XEw=) 5: tZVX3qYygm8mhqLKvtgCUl1qics.roa (hash: C3pcGXYwCjQl9eRypOyqTAkBmg+sjPi6ucd+K6cZcQw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.crl rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.mft rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:17:93:54:77:ac:50:23:07:17:d3:2d:00:46:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e520446f79ffc2d7c3a9ef340ce9de25723a719a Validity Not Before: Dec 17 16:01:00 2025 GMT Not After : Dec 18 16:01:00 2025 GMT Subject: CN=f435eca009f94d804885d8ceea8bb1ddd84b0af2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d9:94:05:4b:53:66:46:fa:db:91:db:db:2d: 45:0e:28:bf:a8:ae:6f:ec:a7:30:41:ac:5f:d4:49: f9:36:0c:90:6f:f1:0f:14:a9:12:d9:05:ce:32:ea: 35:88:fa:c6:35:c1:2c:ec:43:10:2a:19:2f:ed:5d: 28:87:6d:7f:33:6c:4a:84:6b:ae:43:f2:51:df:8f: 43:2f:76:1e:cd:1b:34:68:b1:2b:46:c8:b9:62:62: c9:63:54:ef:1e:c7:5a:de:c5:3a:ec:9c:d1:cb:ad: 96:a6:50:bd:b3:46:94:99:eb:b7:43:5c:ad:74:7c: 23:7d:6c:1d:42:b1:8a:10:af:1a:98:44:2d:14:03: 8e:b6:a9:c5:ff:3a:c2:3c:64:34:87:f2:cd:5c:fc: a7:f9:6e:6a:06:86:6f:f0:5a:92:d6:49:36:42:46: 44:18:46:cb:ed:db:e2:d7:a1:0f:9e:fa:0f:86:00: ca:38:4d:87:ab:f7:6f:94:be:91:15:c1:86:cc:a1: 3e:32:15:b1:7b:78:28:39:b1:48:13:5e:bc:ab:af: 01:c2:6d:42:8f:96:2a:0c:ba:2f:92:8c:3e:d5:3f: a3:12:38:14:75:f1:bd:c0:82:fc:31:71:de:6b:b6: 6e:72:e8:30:87:6f:a7:fe:58:7e:12:1b:02:1f:24: 7c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:35:EC:A0:09:F9:4D:80:48:85:D8:CE:EA:8B:B1:DD:D8:4B:0A:F2 X509v3 Authority Key Identifier: keyid:E5:20:44:6F:79:FF:C2:D7:C3:A9:EF:34:0C:E9:DE:25:72:3A:71:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:23:95:2c:84:c0:f0:35:d3:01:9e:97:e1:b6:a5:c7:ba:55: 3a:25:7d:20:a7:90:7f:ea:0d:4e:44:84:62:b2:3b:15:6d:d5: b8:e6:75:d1:93:23:e7:1c:9a:d1:92:6f:a3:8a:7d:84:53:c7: 4f:74:e0:a8:29:04:d4:7b:4e:04:f8:54:14:8f:2c:e6:22:da: bf:66:48:f9:f7:3e:92:1a:b1:0f:29:5c:2a:e0:a5:22:e4:bc: b0:f3:5f:41:4e:de:a7:57:38:21:eb:b8:c8:a3:e5:83:b1:73: 36:97:34:b4:03:8d:94:e2:ae:43:da:b9:97:2e:74:95:d7:ef: f7:55:86:c4:c4:db:d2:82:3e:13:0b:57:82:9a:91:56:38:00: e4:25:ac:f9:12:2a:9d:3a:83:3d:8d:10:04:4b:1d:02:e0:18: b8:69:74:7f:e6:ab:62:85:00:19:dd:c6:86:fd:e4:4e:57:fc: 1d:2d:35:e5:b8:99:6b:e7:23:ac:95:68:86:1c:0a:ef:03:14: 38:16:f1:58:14:63:a8:83:33:10:6d:aa:01:77:8d:ac:98:81: be:31:da:0b:9d:1b:44:16:bc:08:8c:cd:41:de:b4:1b:f4:47: 26:69:37:66:43:da:c4:8d:53:d2:be:3d:8d:c8:6c:bc:42:96: 66:59:ce:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstCxeTVHesUCMHF9MtAEaeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1MjA0NDZmNzlmZmMyZDdjM2E5ZWYzNDBjZTlkZTI1NzIz YTcxOWEwHhcNMjUxMjE3MTYwMTAwWhcNMjUxMjE4MTYwMTAwWjAzMTEwLwYDVQQD EyhmNDM1ZWNhMDA5Zjk0ZDgwNDg4NWQ4Y2VlYThiYjFkZGQ4NGIwYWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9mUBUtTZkb625Hb2y1FDii/qK5v 7KcwQaxf1En5NgyQb/EPFKkS2QXOMuo1iPrGNcEs7EMQKhkv7V0oh21/M2xKhGuu Q/JR349DL3YezRs0aLErRsi5YmLJY1TvHsda3sU67JzRy62WplC9s0aUmeu3Q1yt dHwjfWwdQrGKEK8amEQtFAOOtqnF/zrCPGQ0h/LNXPyn+W5qBoZv8FqS1kk2QkZE GEbL7dvi16EPnvoPhgDKOE2Hq/dvlL6RFcGGzKE+MhWxe3goObFIE168q68Bwm1C j5YqDLovkow+1T+jEjgUdfG9wIL8MXHea7Zucugwh2+n/lh+EhsCHyR8eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPQ17KAJ+U2ASIXYzuqLsd3YSwryMB8GA1UdIwQY MBaAFOUgRG95/8LXw6nvNAzp3iVyOnGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVNCRWIzbl93dGZEcWU4MERPbmVKWEk2Y1pvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wMTFlZjItNzAxMi00YTZlLThhMWMt MGUwZTEzN2U1NTkxLzEvNVNCRWIzbl93dGZEcWU4MERPbmVKWEk2Y1pvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8wMTFlZjItNzAxMi00YTZlLThhMWMtMGUwZTEzN2U1NTkx LzEvNVNCRWIzbl93dGZEcWU4MERPbmVKWEk2Y1pvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQiOVLITA 8DXTAZ6X4balx7pVOiV9IKeQf+oNTkSEYrI7FW3VuOZ10ZMj5xya0ZJvo4p9hFPH T3TgqCkE1HtOBPhUFI8s5iLav2ZI+fc+khqxDylcKuClIuS8sPNfQU7ep1c4Ieu4 yKPlg7FzNpc0tAONlOKuQ9q5ly50ldfv91WGxMTb0oI+EwtXgpqRVjgA5CWs+RIq nTqDPY0QBEsdAuAYuGl0f+arYoUAGd3Ghv3kTlf8HS015biZa+cjrJVohhwK7wMU OBbxWBRjqIMzEG2qAXeNrJiBvjHaC50bRBa8CIzNQd60G/RHJmk3ZkPaxI1T0r49 jchsvEKWZlnOeg== -----END CERTIFICATE-----Generated at Wed Dec 17 17:44:35 2025 by rpki-client