This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft File: 5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft (raw, json) Hash identifier: E3JSy1L3ItBTIYVOZGIR66lg5b2oNkG3Y3c1HREaMFE= Subject key identifier: 1B:4D:87:E1:AC:35:03:72:43:7A:26:BB:5F:60:71:12:46:E1:DE:A2 Authority key identifier: E4:43:FC:20:3F:70:6F:97:31:41:27:61:B2:7A:1A:4B:39:5C:FC:1E Certificate issuer: /CN=e443fc203f706f9731412761b27a1a4b395cfc1e Certificate serial: 019AF3F72F17806857BFFBF36EF55241B6B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft Manifest number: 16FC Signing time: Sat 06 Dec 2025 14:00:54 +0000 Manifest this update: Sat 06 Dec 2025 14:00:54 +0000 Manifest next update: Sun 07 Dec 2025 14:00:54 +0000 Files and hashes: 1: 5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl (hash: R2Bun3moMW43HAd7BQdNx0B6+I2mlj67CyQoUtBHjwE=) 2: 80LgJ-bt-JVgl28q8iQu1JZiGBg.roa (hash: SbBL53O4850VvEVexpsOte6oujPeOQsBp7gTPoi1dqw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:2f:17:80:68:57:bf:fb:f3:6e:f5:52:41:b6:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e443fc203f706f9731412761b27a1a4b395cfc1e Validity Not Before: Dec 6 14:00:54 2025 GMT Not After : Dec 7 14:00:54 2025 GMT Subject: CN=1b4d87e1ac350372437a26bb5f60711246e1dea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f0:0e:06:09:e7:31:f5:ea:06:b5:12:67:6d: 71:2b:16:77:31:e6:9c:ca:59:c8:5d:76:96:f8:d1: 4d:89:f2:d8:fd:08:a8:ed:54:cc:91:b0:41:c4:c7: e5:6a:16:51:98:55:1e:83:1f:0e:2a:3d:22:6f:c4: 25:3b:5c:a4:b6:25:63:9e:fd:fb:55:97:fc:f5:4b: 7c:2d:e8:ae:a8:d3:4f:44:0a:74:08:48:78:ce:47: d9:a6:d8:b9:d3:6b:d6:94:20:5a:ec:85:e4:4e:3e: 34:19:f1:53:d5:de:36:fd:a7:4b:41:b0:55:39:a0: f2:c9:16:0e:17:e8:7d:0f:b2:b9:d4:5e:a2:d9:66: 13:8e:81:69:8a:db:17:0d:62:2b:33:f3:81:f8:3f: 38:cb:2e:04:12:26:9a:bc:41:84:46:67:72:d9:3b: b0:a2:ef:ec:2e:d7:a5:b6:b0:d8:7f:ff:ef:e9:4b: 8f:de:f4:c4:64:82:46:fc:65:92:17:34:dd:db:d3: de:8b:04:90:9c:4f:9c:41:26:19:0f:c7:0a:94:f7: 3b:4d:f3:4e:77:60:fc:9f:87:a4:52:4a:f2:b9:59: 37:7c:69:6e:31:26:9f:c3:d8:32:ce:29:13:36:7e: 0f:56:de:6c:81:0e:59:64:cd:3d:b8:c2:36:c6:ea: 3e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:4D:87:E1:AC:35:03:72:43:7A:26:BB:5F:60:71:12:46:E1:DE:A2 X509v3 Authority Key Identifier: keyid:E4:43:FC:20:3F:70:6F:97:31:41:27:61:B2:7A:1A:4B:39:5C:FC:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:18:3f:ee:b4:31:0a:12:c9:a8:7f:8c:ce:ee:d0:c2:75:59: 34:f6:f7:ed:f7:02:2e:38:db:13:a0:b8:18:09:f4:2c:8f:23: cf:c4:59:06:42:70:b8:2c:7b:29:f2:3b:f8:92:f9:cd:2d:75: 3c:b2:ae:8a:5e:22:af:a9:f6:5d:33:a5:79:6e:fd:f6:88:6b: 45:37:6c:d1:94:b2:80:a1:92:f1:ac:15:b2:e6:de:ce:ae:9c: bf:ba:5f:56:a3:b2:c5:d3:52:d3:76:3c:08:ce:1d:2f:38:a5: 16:41:c4:68:8b:99:9f:eb:c8:1d:4c:42:7e:ca:39:5c:96:e3: 54:57:f9:7c:d1:15:f5:6f:9e:7e:6b:3d:8f:77:80:4a:5e:b0: ee:86:12:63:65:6a:84:41:6b:c6:ac:73:31:ba:fe:8e:80:c0: 67:43:a0:5e:ef:49:06:ab:bb:ce:0e:e2:b9:b0:ca:e0:3b:fd: cf:f2:59:b6:0e:67:1a:13:08:cd:df:a4:2d:d5:58:6c:86:52: 8b:30:b3:ff:44:78:2c:63:cf:c6:10:e3:2f:af:db:31:fb:60: 56:75:11:0a:1b:33:4d:c7:a4:5f:5d:f6:35:c1:27:c6:50:34: 7b:31:dd:ce:e0:68:46:3f:73:66:7f:70:72:b1:a4:18:ba:b0: e5:60:33:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9y8XgGhXv/vzbvVSQbayMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0NDNmYzIwM2Y3MDZmOTczMTQxMjc2MWIyN2ExYTRiMzk1 Y2ZjMWUwHhcNMjUxMjA2MTQwMDU0WhcNMjUxMjA3MTQwMDU0WjAzMTEwLwYDVQQD EygxYjRkODdlMWFjMzUwMzcyNDM3YTI2YmI1ZjYwNzExMjQ2ZTFkZWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/AOBgnnMfXqBrUSZ21xKxZ3Meac ylnIXXaW+NFNifLY/Qio7VTMkbBBxMflahZRmFUegx8OKj0ib8QlO1yktiVjnv37 VZf89Ut8LeiuqNNPRAp0CEh4zkfZpti502vWlCBa7IXkTj40GfFT1d42/adLQbBV OaDyyRYOF+h9D7K51F6i2WYTjoFpitsXDWIrM/OB+D84yy4EEiaavEGERmdy2Tuw ou/sLteltrDYf//v6UuP3vTEZIJG/GWSFzTd29PeiwSQnE+cQSYZD8cKlPc7TfNO d2D8n4ekUkryuVk3fGluMSafw9gyzikTNn4PVt5sgQ5ZZM09uMI2xuo+uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBtNh+GsNQNyQ3omu19gcRJG4d6iMB8GA1UdIwQY MBaAFORD/CA/cG+XMUEnYbJ6Gks5XPweMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUVQOElEOXdiNWN4UVNkaHNub2FTemxjX0I0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8wNjg5ZWEtY2RkOS00NzkwLTlmOWIt YzBmOWQwODdmYzEwLzEvNUVQOElEOXdiNWN4UVNkaHNub2FTemxjX0I0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8wNjg5ZWEtY2RkOS00NzkwLTlmOWItYzBmOWQwODdmYzEw LzEvNUVQOElEOXdiNWN4UVNkaHNub2FTemxjX0I0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsBg/7rQx ChLJqH+Mzu7QwnVZNPb37fcCLjjbE6C4GAn0LI8jz8RZBkJwuCx7KfI7+JL5zS11 PLKuil4ir6n2XTOleW799ohrRTds0ZSygKGS8awVsubezq6cv7pfVqOyxdNS03Y8 CM4dLzilFkHEaIuZn+vIHUxCfso5XJbjVFf5fNEV9W+efms9j3eASl6w7oYSY2Vq hEFrxqxzMbr+joDAZ0OgXu9JBqu7zg7iubDK4Dv9z/JZtg5nGhMIzd+kLdVYbIZS izCz/0R4LGPPxhDjL6/bMftgVnURChszTcekX132NcEnxlA0ezHdzuBoRj9zZn9w crGkGLqw5WAzog== -----END CERTIFICATE-----Generated at Sat Dec 6 15:46:29 2025 by rpki-client