This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft File: 5aiGWRTezNyYByQf1wtrsIOkRLM.mft (raw, json) Hash identifier: H7OKrJv7BP+d2Jj3+qeJpI2QNsp1BZihk50zQWxJIew= Subject key identifier: 95:03:4F:59:33:BD:94:12:35:31:46:B4:5A:CE:3A:17:2F:C8:65:45 Authority key identifier: E5:A8:86:59:14:DE:CC:DC:98:07:24:1F:D7:0B:6B:B0:83:A4:44:B3 Certificate issuer: /CN=e5a8865914deccdc9807241fd70b6bb083a444b3 Certificate serial: 019B34FBE93601EF37E05242801D5BD4D277 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft Manifest number: 1100 Signing time: Fri 19 Dec 2025 05:01:23 +0000 Manifest this update: Fri 19 Dec 2025 05:01:23 +0000 Manifest next update: Sat 20 Dec 2025 05:01:23 +0000 Files and hashes: 1: 5aiGWRTezNyYByQf1wtrsIOkRLM.crl (hash: Mb+HsHHgY2vx2kju++AWUizALJT6TTPn9eM7gkpMvsg=) 2: syWGgITCZamVo-nCUcKih8Fhw7k.roa (hash: Y9UTs9CcobIoVtNfLT2NYBFUloNQFN2szm6vlcjIvRY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft rsync://rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:e9:36:01:ef:37:e0:52:42:80:1d:5b:d4:d2:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5a8865914deccdc9807241fd70b6bb083a444b3 Validity Not Before: Dec 19 05:01:23 2025 GMT Not After : Dec 20 05:01:23 2025 GMT Subject: CN=95034f5933bd9412353146b45ace3a172fc86545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6e:fe:af:28:5f:48:01:96:aa:e9:0e:f7:f0: f7:71:93:4e:35:07:49:dc:9b:28:bd:c0:48:1d:27: de:a7:de:b0:28:0f:33:07:18:24:6e:b8:95:38:ea: 0b:18:21:b7:b9:76:26:5d:25:a2:a2:69:28:0d:0c: 17:8d:2d:0d:ce:51:df:35:4b:57:d6:15:40:9b:35: 99:3c:3c:94:64:08:da:45:67:8d:69:ed:b6:58:b1: 08:86:33:4f:3c:b7:e5:8b:df:5a:f4:06:91:14:39: 37:65:ae:5e:a8:a4:b7:89:a1:8a:21:00:50:84:ae: 65:f3:c3:56:f5:2b:96:1e:c1:24:2e:ec:cf:8c:20: a8:6e:74:2e:e3:a3:54:2e:21:85:1d:e5:6b:a8:cb: a2:c1:55:ba:f9:53:61:52:f5:5b:a6:ce:e5:cd:85: c8:65:6b:68:ed:96:c1:b1:d1:34:b1:2d:35:c0:d0: e7:bd:61:dc:bd:cc:55:a8:3c:8a:d5:ac:5e:4f:ad: 53:f3:55:42:10:87:d6:ec:1d:03:00:b9:6f:f1:d9: 93:4a:32:e6:e3:73:a9:b8:61:cb:ac:97:83:1f:50: 35:e7:db:7d:28:97:d3:f9:75:9e:68:54:9d:d3:ea: c9:76:2e:3a:4f:db:33:0f:fc:aa:0d:1a:bd:42:41: 9a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:03:4F:59:33:BD:94:12:35:31:46:B4:5A:CE:3A:17:2F:C8:65:45 X509v3 Authority Key Identifier: keyid:E5:A8:86:59:14:DE:CC:DC:98:07:24:1F:D7:0B:6B:B0:83:A4:44:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:b4:6a:e8:77:8b:b1:10:c5:7a:e9:2d:b6:db:2b:26:7d:04: 9f:25:ff:93:fa:eb:a3:b8:5e:2d:64:43:c5:dc:c9:4c:ed:40: 07:53:52:e0:9d:20:d4:5d:5e:fc:1c:0e:34:0f:4a:70:62:3d: 63:9c:40:e6:52:5a:83:fc:1b:cc:a0:a8:fb:af:a3:61:a3:0d: 0c:98:eb:2e:64:fe:c7:36:8b:9c:b0:86:70:ed:33:44:4a:d1: b6:79:ea:2b:4c:48:98:37:33:df:c4:5a:8a:60:89:b6:be:81: db:2c:43:c3:f0:a2:25:84:59:ff:9f:de:1c:0f:b6:6b:bc:a6: 9f:05:9b:38:91:e3:75:04:1d:73:8e:b6:c9:ff:21:33:19:fd: 2f:29:02:3a:1d:10:92:d3:be:26:bc:0c:15:2c:8d:58:8b:4c: 25:1f:da:00:e0:e0:8c:30:38:f1:16:ab:ba:bc:5e:51:10:75: e0:de:fc:10:5d:89:70:12:d5:5e:e3:32:c6:b2:3d:66:f3:3c: ce:89:4d:74:05:58:0d:32:44:66:ff:13:f7:a4:55:b5:61:6e: 98:7a:d1:47:ee:00:e2:b8:9b:71:b7:69:b4:8e:95:1a:1a:5f: a7:6d:ce:81:56:c6:01:a0:9c:ed:34:b8:0f:33:ae:b0:58:11: d1:43:ae:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0++k2Ae834FJCgB1b1NJ3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YTg4NjU5MTRkZWNjZGM5ODA3MjQxZmQ3MGI2YmIwODNh NDQ0YjMwHhcNMjUxMjE5MDUwMTIzWhcNMjUxMjIwMDUwMTIzWjAzMTEwLwYDVQQD Eyg5NTAzNGY1OTMzYmQ5NDEyMzUzMTQ2YjQ1YWNlM2ExNzJmYzg2NTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu27+ryhfSAGWqukO9/D3cZNONQdJ 3JsovcBIHSfep96wKA8zBxgkbriVOOoLGCG3uXYmXSWiomkoDQwXjS0NzlHfNUtX 1hVAmzWZPDyUZAjaRWeNae22WLEIhjNPPLfli99a9AaRFDk3Za5eqKS3iaGKIQBQ hK5l88NW9SuWHsEkLuzPjCCobnQu46NULiGFHeVrqMuiwVW6+VNhUvVbps7lzYXI ZWto7ZbBsdE0sS01wNDnvWHcvcxVqDyK1axeT61T81VCEIfW7B0DALlv8dmTSjLm 43OpuGHLrJeDH1A159t9KJfT+XWeaFSd0+rJdi46T9szD/yqDRq9QkGaFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJUDT1kzvZQSNTFGtFrOOhcvyGVFMB8GA1UdIwQY MBaAFOWohlkU3szcmAckH9cLa7CDpESzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWFpR1dSVGV6TnlZQnlRZjF3dHJzSU9rUkxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8zYWZjODEtMzBlNi00YjhlLThkM2It NTdmNTRlYTQzZTE2LzEvNWFpR1dSVGV6TnlZQnlRZjF3dHJzSU9rUkxNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi8zYWZjODEtMzBlNi00YjhlLThkM2ItNTdmNTRlYTQzZTE2 LzEvNWFpR1dSVGV6TnlZQnlRZjF3dHJzSU9rUkxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdLRq6HeL sRDFeuktttsrJn0EnyX/k/rro7heLWRDxdzJTO1AB1NS4J0g1F1e/BwONA9KcGI9 Y5xA5lJag/wbzKCo+6+jYaMNDJjrLmT+xzaLnLCGcO0zRErRtnnqK0xImDcz38Ra imCJtr6B2yxDw/CiJYRZ/5/eHA+2a7ymnwWbOJHjdQQdc462yf8hMxn9LykCOh0Q ktO+JrwMFSyNWItMJR/aAODgjDA48RarurxeURB14N78EF2JcBLVXuMyxrI9ZvM8 zolNdAVYDTJEZv8T96RVtWFumHrRR+4A4ribcbdptI6VGhpfp23OgVbGAaCc7TS4 DzOusFgR0UOuAA== -----END CERTIFICATE-----Generated at Fri Dec 19 07:33:33 2025 by rpki-client