This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft File: 5Icdjywm6nGuXBPIRUp70xhxkYQ.mft (raw, json) Hash identifier: CHm4yJXhqLwWve//w+rO2+CRhX3i79Q25H/r330K5Zs= Subject key identifier: F4:16:24:AE:83:17:0A:84:44:EC:93:7F:D4:38:47:61:B8:F9:A6:81 Authority key identifier: E4:87:1D:8F:2C:26:EA:71:AE:5C:13:C8:45:4A:7B:D3:18:71:91:84 Certificate issuer: /CN=e4871d8f2c26ea71ae5c13c8454a7bd318719184 Certificate serial: 019AF1D256960587D74D1D888F296074BDF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft Manifest number: 0EE1 Signing time: Sat 06 Dec 2025 04:01:25 +0000 Manifest this update: Sat 06 Dec 2025 04:01:25 +0000 Manifest next update: Sun 07 Dec 2025 04:01:25 +0000 Files and hashes: 1: 5Icdjywm6nGuXBPIRUp70xhxkYQ.crl (hash: kuHfiwntdRd37E5DDQ6JZSiSdAsjAczDXv1xr/jX+GA=) 2: ook9uIQAuCcVv2Fg0PJ5r3IwiNU.roa (hash: Y/wn2KIY7krXyisLSYMbczx5AjYDM8sXL4TRFNZpN6U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:56:96:05:87:d7:4d:1d:88:8f:29:60:74:bd:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4871d8f2c26ea71ae5c13c8454a7bd318719184 Validity Not Before: Dec 6 04:01:25 2025 GMT Not After : Dec 7 04:01:25 2025 GMT Subject: CN=f41624ae83170a8444ec937fd4384761b8f9a681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:72:d5:fe:8e:38:3e:ca:41:49:aa:ae:85:9e: a4:c8:9c:0f:02:d2:a8:f7:73:a9:31:37:27:e9:74: 0b:24:d1:0c:bb:0d:ca:5d:a9:9f:b5:5e:ef:eb:03: c7:b6:25:2c:f8:6a:1d:93:76:69:1f:1f:66:9b:0b: c1:2f:37:09:6f:2e:9d:4f:8b:c7:92:a8:f7:90:1f: ae:d5:5c:e6:2f:0c:6a:0b:55:23:86:99:b5:ea:bf: 2a:d2:d5:04:91:73:55:d7:0d:6c:fb:cd:ca:a4:16: b4:be:9d:06:e1:e3:cd:27:c5:be:96:46:45:45:0f: 81:c2:1e:c6:7a:c1:25:1c:52:d0:86:d9:d5:8d:8b: bf:b8:1f:b1:8c:62:f1:05:c8:53:37:5e:1b:4e:da: 74:c0:d4:6f:96:1d:66:96:07:4e:86:10:ab:44:a0: 10:3c:97:68:7f:e0:22:8e:f3:4d:32:b4:de:ab:2b: da:35:f4:37:d6:31:de:79:a9:3d:ad:96:87:81:df: e8:54:6e:ad:c7:42:c6:b8:9b:da:b6:72:20:0a:eb: 6a:00:c3:4a:b4:ea:2f:90:b7:bf:ad:fc:b6:6a:7c: 67:25:30:55:e5:c6:22:43:50:37:c8:86:30:89:2f: 07:d0:9e:b5:4e:85:9d:b0:5b:fe:b3:a7:c4:7b:98: 46:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:16:24:AE:83:17:0A:84:44:EC:93:7F:D4:38:47:61:B8:F9:A6:81 X509v3 Authority Key Identifier: keyid:E4:87:1D:8F:2C:26:EA:71:AE:5C:13:C8:45:4A:7B:D3:18:71:91:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:24:47:c2:9b:de:37:c3:cd:69:58:61:af:79:2a:87:96:6e: bc:95:b8:95:59:f9:8c:43:33:57:56:ed:71:51:f7:ce:70:28: b4:64:4c:ae:4e:9f:19:7c:96:07:df:1d:2c:8a:07:53:ee:6f: 3e:77:4c:b7:72:6d:59:cc:65:94:9c:07:ce:cc:5e:58:aa:13: a1:05:50:12:0b:87:49:42:99:9c:9f:c5:80:36:b2:63:67:2d: 3b:4b:48:0c:82:9e:06:91:37:8e:fa:d5:93:f6:94:18:5d:5c: 7c:7c:b3:b6:88:94:37:e9:58:3a:d9:f0:c6:b5:15:21:b4:04: ff:d8:e9:05:b1:96:a8:95:9b:18:21:59:f5:85:fd:ea:0b:01: 14:6c:c9:cb:72:4f:36:8a:37:08:43:35:05:89:05:29:92:13: 55:81:69:f5:18:6a:f1:bf:b8:f6:75:3f:1e:15:86:52:a6:8a: d8:80:88:a8:a3:ef:ac:25:87:27:7c:51:91:83:59:ef:a8:d2: 1a:e2:c0:d6:14:5b:61:1e:1e:8a:d5:be:28:cd:f7:72:ae:bb: 51:41:22:40:08:56:7c:2f:e0:53:0d:e7:c1:7b:8e:5f:96:32: 8b:68:e4:50:ae:ce:3b:aa:24:a0:42:d5:12:10:ba:91:69:4e: 3a:32:5e:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0laWBYfXTR2IjylgdL31MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ODcxZDhmMmMyNmVhNzFhZTVjMTNjODQ1NGE3YmQzMTg3 MTkxODQwHhcNMjUxMjA2MDQwMTI1WhcNMjUxMjA3MDQwMTI1WjAzMTEwLwYDVQQD EyhmNDE2MjRhZTgzMTcwYTg0NDRlYzkzN2ZkNDM4NDc2MWI4ZjlhNjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HLV/o44PspBSaquhZ6kyJwPAtKo 93OpMTcn6XQLJNEMuw3KXamftV7v6wPHtiUs+Godk3ZpHx9mmwvBLzcJby6dT4vH kqj3kB+u1VzmLwxqC1Ujhpm16r8q0tUEkXNV1w1s+83KpBa0vp0G4ePNJ8W+lkZF RQ+Bwh7GesElHFLQhtnVjYu/uB+xjGLxBchTN14bTtp0wNRvlh1mlgdOhhCrRKAQ PJdof+AijvNNMrTeqyvaNfQ31jHeeak9rZaHgd/oVG6tx0LGuJvatnIgCutqAMNK tOovkLe/rfy2anxnJTBV5cYiQ1A3yIYwiS8H0J61ToWdsFv+s6fEe5hG5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPQWJK6DFwqEROyTf9Q4R2G4+aaBMB8GA1UdIwQY MBaAFOSHHY8sJupxrlwTyEVKe9MYcZGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUljZGp5d202bkd1WEJQSVJVcDcweGh4a1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8zNGZlMmUtMjZkNi00NTVkLTg3Nzgt ZjkwNWE4M2JkMzg5LzEvNUljZGp5d202bkd1WEJQSVJVcDcweGh4a1lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8zNGZlMmUtMjZkNi00NTVkLTg3NzgtZjkwNWE4M2JkMzg5 LzEvNUljZGp5d202bkd1WEJQSVJVcDcweGh4a1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfCRHwpve N8PNaVhhr3kqh5ZuvJW4lVn5jEMzV1btcVH3znAotGRMrk6fGXyWB98dLIoHU+5v PndMt3JtWcxllJwHzsxeWKoToQVQEguHSUKZnJ/FgDayY2ctO0tIDIKeBpE3jvrV k/aUGF1cfHyztoiUN+lYOtnwxrUVIbQE/9jpBbGWqJWbGCFZ9YX96gsBFGzJy3JP Noo3CEM1BYkFKZITVYFp9Rhq8b+49nU/HhWGUqaK2ICIqKPvrCWHJ3xRkYNZ76jS GuLA1hRbYR4eitW+KM33cq67UUEiQAhWfC/gUw3nwXuOX5Yyi2jkUK7OO6okoELV EhC6kWlOOjJe2g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:44:57 2025 by rpki-client