This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft File: 5XRVuKiwV21vlPfgFPazTVqmxNc.mft (raw, json) Hash identifier: 7ZcCuuyEgeCyZuod6/BA3PL7hLFz1dUvya21ml1Y1H0= Subject key identifier: A2:15:9E:0A:50:2C:E5:5F:05:1B:CE:25:59:DF:72:7F:12:C9:EC:DA Authority key identifier: E5:74:55:B8:A8:B0:57:6D:6F:94:F7:E0:14:F6:B3:4D:5A:A6:C4:D7 Certificate issuer: /CN=e57455b8a8b0576d6f94f7e014f6b34d5aa6c4d7 Certificate serial: 019AF23F6FBD0E9AEC851F911FF99F8B56C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft Manifest number: 041B Signing time: Sat 06 Dec 2025 06:00:34 +0000 Manifest this update: Sat 06 Dec 2025 06:00:34 +0000 Manifest next update: Sun 07 Dec 2025 06:00:34 +0000 Files and hashes: 1: 5XRVuKiwV21vlPfgFPazTVqmxNc.crl (hash: lRvFrgmLKtAHWzXKRRs7FSrbr66yNGv9DnVUyoa5DyY=) 2: G1CrAOOUPvyOGO4Vql-2-rT1nVU.roa (hash: CDahFDyxeYD+jrtMUR5mOx6DNugSU2LZoNFW5kfO9s4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:6f:bd:0e:9a:ec:85:1f:91:1f:f9:9f:8b:56:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e57455b8a8b0576d6f94f7e014f6b34d5aa6c4d7 Validity Not Before: Dec 6 06:00:34 2025 GMT Not After : Dec 7 06:00:34 2025 GMT Subject: CN=a2159e0a502ce55f051bce2559df727f12c9ecda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a9:58:40:38:28:df:ce:96:32:a6:99:01:1d: ba:71:1d:93:34:0c:35:13:c9:86:7a:66:8f:88:65: bc:6a:f1:aa:f5:a3:99:d4:5e:12:dd:d8:9a:02:ea: 97:6d:3f:a7:a5:81:ef:3d:06:34:1e:0e:c9:13:87: 06:60:8d:ab:83:80:1c:4a:79:d1:cf:80:a7:ba:d0: 99:cd:fb:b7:92:9e:9e:16:c9:dc:8b:56:b0:e0:0f: d8:ff:06:1a:54:70:26:8f:5a:39:08:24:e4:6b:53: 34:a4:ac:9a:45:75:1f:90:14:fa:86:c0:65:1e:7e: 15:f0:22:e8:00:d4:31:d0:74:01:44:3b:78:80:d9: ad:59:c3:df:b4:2a:3b:2a:ac:e8:75:f7:59:d0:b0: 8f:43:cc:4c:2b:71:1e:53:42:1f:81:93:52:34:27: fd:14:2b:d9:3b:3f:70:22:8e:db:1e:db:34:c1:bc: ed:76:70:1b:98:2b:09:00:07:c8:00:f8:06:25:e5: a8:b0:f7:a8:b3:4f:81:b0:62:ab:46:21:78:5e:b7: 6d:47:b2:df:8c:f2:30:fc:3b:24:9d:a4:3c:55:70: 53:31:67:a7:b0:fe:40:9a:6f:24:8d:f1:60:14:98: 2e:af:c3:27:8f:ac:fb:86:11:aa:f0:d5:9b:27:fe: fe:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:15:9E:0A:50:2C:E5:5F:05:1B:CE:25:59:DF:72:7F:12:C9:EC:DA X509v3 Authority Key Identifier: keyid:E5:74:55:B8:A8:B0:57:6D:6F:94:F7:E0:14:F6:B3:4D:5A:A6:C4:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:ba:74:cf:75:5b:c9:db:bb:75:e4:f4:29:07:f2:b6:06:57: 07:0b:06:96:2c:89:94:fb:28:2d:c9:89:65:cb:f2:67:7d:ea: 73:60:bb:61:c5:50:05:57:4d:a0:b2:c9:95:5f:b1:80:a0:bd: de:7d:fa:e8:d1:49:3e:2e:af:cc:5e:a2:b1:03:ef:36:0c:99: 43:e8:54:3a:50:f0:23:09:c5:c3:03:ae:5a:ee:a6:45:aa:26: 5d:36:67:20:82:1f:3f:dd:1d:c2:a7:4f:2b:14:02:f0:b6:27: 74:c3:64:e0:9c:6d:fd:22:1e:88:d2:20:85:59:bd:2c:28:51: 6a:b7:c5:59:81:fc:f7:c0:b4:9a:b6:60:06:1b:d4:62:ac:7a: ba:9a:0e:77:9f:a9:bc:ff:c6:02:ea:fa:67:f4:5d:d9:a0:e9: 02:54:c1:9b:38:48:18:98:00:86:18:5a:ef:74:c5:46:e5:ab: 93:4d:e1:dc:38:71:5f:e5:3a:83:4d:14:cd:94:1b:b0:e9:47: af:83:43:33:2b:84:e2:a1:7b:7c:db:f6:25:be:6d:aa:3e:ff: 8a:3f:87:ad:31:24:d7:e2:31:04:ad:5f:cd:16:0d:6b:16:da: ec:5c:dc:90:72:03:d7:2a:8e:42:04:8d:0d:94:4f:dc:a1:e2: 3f:5b:ac:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP2+9DprshR+RH/mfi1bHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NzQ1NWI4YThiMDU3NmQ2Zjk0ZjdlMDE0ZjZiMzRkNWFh NmM0ZDcwHhcNMjUxMjA2MDYwMDM0WhcNMjUxMjA3MDYwMDM0WjAzMTEwLwYDVQQD EyhhMjE1OWUwYTUwMmNlNTVmMDUxYmNlMjU1OWRmNzI3ZjEyYzllY2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxalYQDgo386WMqaZAR26cR2TNAw1 E8mGemaPiGW8avGq9aOZ1F4S3diaAuqXbT+npYHvPQY0Hg7JE4cGYI2rg4AcSnnR z4CnutCZzfu3kp6eFsnci1aw4A/Y/wYaVHAmj1o5CCTka1M0pKyaRXUfkBT6hsBl Hn4V8CLoANQx0HQBRDt4gNmtWcPftCo7KqzodfdZ0LCPQ8xMK3EeU0IfgZNSNCf9 FCvZOz9wIo7bHts0wbztdnAbmCsJAAfIAPgGJeWosPeos0+BsGKrRiF4XrdtR7Lf jPIw/DsknaQ8VXBTMWensP5Amm8kjfFgFJgur8Mnj6z7hhGq8NWbJ/7+2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKIVngpQLOVfBRvOJVnfcn8SyezaMB8GA1UdIwQY MBaAFOV0VbiosFdtb5T34BT2s01apsTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVhSVnVLaXdWMjF2bFBmZ0ZQYXpUVnFteE5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kNDk4ZTMtMGVhOS00MzE0LTk4NDkt MDAyMzNhZTUwYjUyLzEvNVhSVnVLaXdWMjF2bFBmZ0ZQYXpUVnFteE5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9kNDk4ZTMtMGVhOS00MzE0LTk4NDktMDAyMzNhZTUwYjUy LzEvNVhSVnVLaXdWMjF2bFBmZ0ZQYXpUVnFteE5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABrp0z3Vb ydu7deT0KQfytgZXBwsGliyJlPsoLcmJZcvyZ33qc2C7YcVQBVdNoLLJlV+xgKC9 3n366NFJPi6vzF6isQPvNgyZQ+hUOlDwIwnFwwOuWu6mRaomXTZnIIIfP90dwqdP KxQC8LYndMNk4Jxt/SIeiNIghVm9LChRarfFWYH898C0mrZgBhvUYqx6upoOd5+p vP/GAur6Z/Rd2aDpAlTBmzhIGJgAhhha73TFRuWrk03h3DhxX+U6g00UzZQbsOlH r4NDMyuE4qF7fNv2Jb5tqj7/ij+HrTEk1+IxBK1fzRYNaxba7FzckHID1yqOQgSN DZRP3KHiP1usDA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:37 2025 by rpki-client