This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft File: 5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft (raw, json) Hash identifier: oMNeREbi7C2Qf4FPDYvswPAH8cuEWUbhe/J8f6cuOiA= Subject key identifier: 9C:41:CB:6A:11:9D:76:84:A8:EB:C5:AC:C3:40:93:3B:BD:1E:F7:D5 Authority key identifier: E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB Certificate issuer: /CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb Certificate serial: 019B33E9100674A955776FD4F446C765D823 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft Manifest number: 137C Signing time: Fri 19 Dec 2025 00:01:10 +0000 Manifest this update: Fri 19 Dec 2025 00:01:10 +0000 Manifest next update: Sat 20 Dec 2025 00:01:10 +0000 Files and hashes: 1: 5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl (hash: 7B7k+tt55L8/hek0/t7+SS41b8VbsowIvnknLgcA5EM=) 2: heGVk36ucrG4MWNpzqidvrKZ7YQ.roa (hash: m5uFEBEQAoAGMceOf2ib4bFCfxUv5uqZ6mZG8baGWlk=) 3: vKXgeHxyf9Ij8PbBtwAWk4PkSNM.roa (hash: FZfpvGBPzqeBXQfd0+/kWA7PAyR+Gx7rv6DgDmnZlfE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 00:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e9:10:06:74:a9:55:77:6f:d4:f4:46:c7:65:d8:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb Validity Not Before: Dec 19 00:01:10 2025 GMT Not After : Dec 20 00:01:10 2025 GMT Subject: CN=9c41cb6a119d7684a8ebc5acc340933bbd1ef7d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:45:89:8c:85:53:db:e5:dc:ac:e4:79:b2:cf: 42:17:fb:1d:f9:7f:92:48:95:fb:70:9e:4c:52:89: aa:fc:16:6e:d7:f9:f4:4f:37:66:94:10:ed:c7:fe: 9f:dd:3f:5a:aa:30:68:80:f7:2e:c5:40:cd:99:f8: f7:d8:48:b9:e8:ce:8f:b2:17:ff:da:9a:54:9b:52: 1b:67:9c:b2:1e:21:ce:1a:a0:17:eb:e9:46:8e:8b: 1e:00:04:84:fd:06:08:83:87:78:6c:c4:50:bc:ab: 9b:fb:46:b2:cb:97:1f:b2:31:c6:7c:3a:d8:75:71: b3:9a:75:4a:3f:1d:f2:65:37:36:5c:7c:63:77:8f: bb:23:12:ee:58:ec:e7:4f:53:81:18:9b:77:b6:5a: 1b:80:01:c5:37:9f:87:93:db:89:76:29:12:e6:77: 55:8a:21:e7:b7:d2:d7:3b:c5:fe:2e:01:1f:97:c9: e5:e1:36:b5:38:ce:4c:5a:f3:d6:17:45:ca:7e:f2: 12:dc:ad:33:91:0e:90:df:08:43:89:74:2c:d3:ac: 90:2c:51:79:01:cb:c7:2d:40:0f:a4:88:94:28:85: e0:fa:d0:2b:da:35:9a:f0:94:a7:a8:5c:85:a8:01: 4b:0a:f1:7e:db:f5:0d:c7:42:21:83:93:2f:92:52: 7c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:41:CB:6A:11:9D:76:84:A8:EB:C5:AC:C3:40:93:3B:BD:1E:F7:D5 X509v3 Authority Key Identifier: keyid:E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:82:7e:a9:a1:8d:ee:3d:1a:42:f8:fd:75:de:6a:95:e1:e0: 99:6e:2e:0c:d9:6c:be:6e:3e:be:d0:11:ff:77:4e:5e:94:31: b1:f4:26:6d:f4:a1:fa:f3:68:3e:30:51:b2:c6:9a:25:3d:6a: 83:4c:cb:dc:95:c1:c9:13:2d:1f:9f:92:92:dc:ee:51:4c:d8: 7c:fb:44:71:12:6c:dd:25:9e:a1:5f:22:ca:95:53:9c:ee:ab: e8:51:3c:5d:00:0b:a6:c7:59:ef:c7:92:16:b4:8b:80:28:ff: 8d:a0:a6:d2:75:36:48:74:43:76:89:d2:81:5b:dd:a3:63:45: 12:d9:14:96:69:8d:cd:a7:fa:0c:9d:23:5d:c3:75:c5:7a:75: 68:ee:e5:06:3d:f5:8e:88:93:0a:3b:93:1f:99:a5:b6:28:4a: e1:0f:09:fc:3c:3b:ff:b7:89:50:e8:a4:97:01:c9:91:5c:23: a8:15:c8:52:03:87:e1:14:65:4b:37:0c:f9:0c:9b:7d:7c:9b: 36:4a:36:f9:01:1c:14:07:8f:ec:7b:ab:a2:66:5f:d0:63:12: a8:d7:e7:a4:3a:65:ec:68:3e:e8:5c:87:b4:79:a9:d5:25:e5: 18:69:a8:80:21:33:4e:84:60:d4:a9:d9:26:39:82:bf:b5:22: 49:f7:dd:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6RAGdKlVd2/U9EbHZdgjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MTM1ZDYzOTc2OGEzYTYzZWQ5YzVmZjQwYWY1ZWQwMWRm NzQxY2IwHhcNMjUxMjE5MDAwMTEwWhcNMjUxMjIwMDAwMTEwWjAzMTEwLwYDVQQD Eyg5YzQxY2I2YTExOWQ3Njg0YThlYmM1YWNjMzQwOTMzYmJkMWVmN2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10WJjIVT2+XcrOR5ss9CF/sd+X+S SJX7cJ5MUomq/BZu1/n0TzdmlBDtx/6f3T9aqjBogPcuxUDNmfj32Ei56M6Pshf/ 2ppUm1IbZ5yyHiHOGqAX6+lGjoseAASE/QYIg4d4bMRQvKub+0ayy5cfsjHGfDrY dXGzmnVKPx3yZTc2XHxjd4+7IxLuWOznT1OBGJt3tlobgAHFN5+Hk9uJdikS5ndV iiHnt9LXO8X+LgEfl8nl4Ta1OM5MWvPWF0XKfvIS3K0zkQ6Q3whDiXQs06yQLFF5 AcvHLUAPpIiUKIXg+tAr2jWa8JSnqFyFqAFLCvF+2/UNx0Ihg5MvklJ8awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJxBy2oRnXaEqOvFrMNAkzu9HvfVMB8GA1UdIwQY MBaAFOYTXWOXaKOmPtnF/0CvXtAd90HLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWhOZFk1ZG9vNlktMmNYX1FLOWUwQjMzUWNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS83NDZhNzUtZDM2MS00ZTkxLTg3M2Et MGE3NzBmMGM3NjA4LzEvNWhOZFk1ZG9vNlktMmNYX1FLOWUwQjMzUWNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS83NDZhNzUtZDM2MS00ZTkxLTg3M2EtMGE3NzBmMGM3NjA4 LzEvNWhOZFk1ZG9vNlktMmNYX1FLOWUwQjMzUWNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA4J+qaGN 7j0aQvj9dd5qleHgmW4uDNlsvm4+vtAR/3dOXpQxsfQmbfSh+vNoPjBRssaaJT1q g0zL3JXByRMtH5+SktzuUUzYfPtEcRJs3SWeoV8iypVTnO6r6FE8XQALpsdZ78eS FrSLgCj/jaCm0nU2SHRDdonSgVvdo2NFEtkUlmmNzaf6DJ0jXcN1xXp1aO7lBj31 joiTCjuTH5mltihK4Q8J/Dw7/7eJUOiklwHJkVwjqBXIUgOH4RRlSzcM+QybfXyb Nko2+QEcFAeP7HuromZf0GMSqNfnpDpl7Gg+6FyHtHmp1SXlGGmogCEzToRg1KnZ JjmCv7UiSffd+w== -----END CERTIFICATE-----Generated at Fri Dec 19 08:42:47 2025 by rpki-client