This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft File: 5c4xqiBddBAUR-_9bDE1GGFGRTo.mft (raw, json) Hash identifier: +1yUOfjogQ6YC+aqJzX4ZjY8L2dabPq4+mMFT/t2sjA= Subject key identifier: 5B:1D:3F:23:8F:B2:6F:C0:DE:67:A4:E2:E6:D1:B6:78:1C:51:1D:2D Authority key identifier: E5:CE:31:AA:20:5D:74:10:14:47:EF:FD:6C:31:35:18:61:46:45:3A Certificate issuer: /CN=e5ce31aa205d74101447effd6c3135186146453a Certificate serial: 019B33B22EC71AA488F66F6BAECA38F6068D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 23:01:13 +0000 Manifest this update: Thu 18 Dec 2025 23:01:13 +0000 Manifest next update: Fri 19 Dec 2025 23:01:13 +0000 Files and hashes: 1: 1prUVz0HPmxrICK89MLWQGvd_os.roa (hash: nYOxG6xI/OF/g1onNafntFHFC9rtfVRgZj8b/z6tXRg=) 2: 5c4xqiBddBAUR-_9bDE1GGFGRTo.crl (hash: MEQ1nWGxzB9kNGWfnS8N81BcXIQ6O9AZBpbz5pCGcHk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.crl rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b2:2e:c7:1a:a4:88:f6:6f:6b:ae:ca:38:f6:06:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5ce31aa205d74101447effd6c3135186146453a Validity Not Before: Dec 18 23:01:13 2025 GMT Not After : Dec 19 23:01:13 2025 GMT Subject: CN=5b1d3f238fb26fc0de67a4e2e6d1b6781c511d2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:74:56:5a:16:05:63:61:b0:fb:be:bf:e2:ef: e1:ab:18:49:32:d6:f6:6b:a3:2e:9c:24:af:5d:a6: 9d:c3:f9:8b:3f:51:85:9c:32:96:1d:56:35:87:55: 0d:6a:8c:c9:79:34:66:49:f7:d0:fd:a3:f9:8f:e8: 39:cd:23:4b:55:d5:30:36:0e:0a:d6:d1:c2:8d:f2: 3e:d7:d6:85:f9:9b:87:c2:af:70:46:df:8f:e5:c7: 24:15:82:ff:34:a1:9d:94:d1:b4:62:02:cd:13:58: 0d:36:f3:4e:08:ee:46:4c:81:b0:49:74:c9:56:df: 03:47:6c:c8:8c:76:2a:18:4a:c0:40:f6:ba:1d:7d: 0a:67:ae:12:c2:2f:b8:0a:49:ba:7b:2f:1f:25:9b: c1:29:f3:db:9d:6d:6d:dd:ac:01:13:d2:5c:9b:61: d7:c1:31:34:21:96:81:25:93:92:a2:bd:93:ba:5b: dc:3e:b1:47:d3:42:71:78:97:d7:f1:98:5f:1e:e2: a6:36:de:8b:94:f3:59:1c:b6:78:13:42:77:c0:7f: 3a:d1:56:46:82:bb:57:cc:ab:a5:65:c9:b3:2a:88: 58:3e:a3:ec:f2:55:19:4a:36:90:3d:21:9a:ee:36: 9d:db:a6:c9:76:1f:6d:a7:cb:68:71:4a:0a:9a:39: 0a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:1D:3F:23:8F:B2:6F:C0:DE:67:A4:E2:E6:D1:B6:78:1C:51:1D:2D X509v3 Authority Key Identifier: keyid:E5:CE:31:AA:20:5D:74:10:14:47:EF:FD:6C:31:35:18:61:46:45:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:63:d1:d2:26:c1:b8:a6:09:3d:06:8b:ae:70:81:8e:2b:79: 67:3b:e0:a0:14:e5:48:c6:7a:cb:52:0f:da:4e:f8:6c:18:e0: f5:6e:3c:70:8e:2a:b6:dc:ae:39:83:7e:70:cf:bd:4f:d5:70: e0:89:b5:9f:79:cb:fb:08:db:c0:52:c3:67:01:6b:e9:e1:3b: d9:ca:5e:f7:fc:5e:5e:ba:be:93:16:8e:6d:24:7c:05:9f:c0: 53:46:a8:9b:a1:42:7d:21:8f:ae:2f:04:63:b1:5e:3a:fc:ba: cc:80:12:65:eb:12:9c:0c:4c:92:1f:a4:b2:63:88:c0:51:5e: b9:0b:ad:14:38:23:39:b9:87:f4:b1:7a:47:3d:4b:b9:03:f0: e4:b4:c7:e3:57:42:a4:37:88:5d:e7:54:36:93:78:57:b6:10: 34:97:5a:2f:d2:30:e1:8d:13:87:fc:60:b3:84:93:02:42:95: 89:59:cb:84:1d:38:e7:da:5b:89:a5:fd:00:da:5e:97:eb:0b: 37:63:78:af:58:27:45:78:b5:7b:71:5b:83:c2:33:6c:44:f4: 4d:fd:2f:cc:77:c3:52:43:ac:a2:6b:18:07:f6:b6:b8:ec:9e: e7:e7:db:df:d1:46:83:e4:d5:69:9e:91:99:ca:97:4a:ff:a0: 83:ec:8d:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsi7HGqSI9m9rrso49gaNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1Y2UzMWFhMjA1ZDc0MTAxNDQ3ZWZmZDZjMzEzNTE4NjE0 NjQ1M2EwHhcNMjUxMjE4MjMwMTEzWhcNMjUxMjE5MjMwMTEzWjAzMTEwLwYDVQQD Eyg1YjFkM2YyMzhmYjI2ZmMwZGU2N2E0ZTJlNmQxYjY3ODFjNTExZDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnRWWhYFY2Gw+76/4u/hqxhJMtb2 a6MunCSvXaadw/mLP1GFnDKWHVY1h1UNaozJeTRmSffQ/aP5j+g5zSNLVdUwNg4K 1tHCjfI+19aF+ZuHwq9wRt+P5cckFYL/NKGdlNG0YgLNE1gNNvNOCO5GTIGwSXTJ Vt8DR2zIjHYqGErAQPa6HX0KZ64Swi+4Ckm6ey8fJZvBKfPbnW1t3awBE9Jcm2HX wTE0IZaBJZOSor2TulvcPrFH00JxeJfX8ZhfHuKmNt6LlPNZHLZ4E0J3wH860VZG grtXzKulZcmzKohYPqPs8lUZSjaQPSGa7jad26bJdh9tp8tocUoKmjkKfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFsdPyOPsm/A3mek4ubRtngcUR0tMB8GA1UdIwQY MBaAFOXOMaogXXQQFEfv/WwxNRhhRkU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWM0eHFpQmRkQkFVUi1fOWJERTFHR0ZHUlRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC84Yzg1MjQtN2Y4NS00MzEzLThlZDIt YmY4NjZkYTc0N2FmLzEvNWM0eHFpQmRkQkFVUi1fOWJERTFHR0ZHUlRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC84Yzg1MjQtN2Y4NS00MzEzLThlZDItYmY4NjZkYTc0N2Fm LzEvNWM0eHFpQmRkQkFVUi1fOWJERTFHR0ZHUlRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANmPR0ibB uKYJPQaLrnCBjit5ZzvgoBTlSMZ6y1IP2k74bBjg9W48cI4qttyuOYN+cM+9T9Vw 4Im1n3nL+wjbwFLDZwFr6eE72cpe9/xeXrq+kxaObSR8BZ/AU0aom6FCfSGPri8E Y7FeOvy6zIASZesSnAxMkh+ksmOIwFFeuQutFDgjObmH9LF6Rz1LuQPw5LTH41dC pDeIXedUNpN4V7YQNJdaL9Iw4Y0Th/xgs4STAkKViVnLhB0459pbiaX9ANpel+sL N2N4r1gnRXi1e3Fbg8IzbET0Tf0vzHfDUkOsomsYB/a2uOye5+fb39FGg+TVaZ6R mcqXSv+gg+yN7Q== -----END CERTIFICATE-----Generated at Fri Dec 19 03:05:33 2025 by rpki-client