This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.mft File: 5INFqgzXAm1iHFAIT52du1ucwvA.mft (raw, json) Hash identifier: jtfo358WsmTxpati2atMgZdB23WzdsPMFmFWjLfZuoo= Subject key identifier: 38:E6:51:8B:62:EC:D4:D8:8D:0E:66:8E:66:C1:53:BD:41:D8:30:9D Authority key identifier: E4:83:45:AA:0C:D7:02:6D:62:1C:50:08:4F:9D:9D:BB:5B:9C:C2:F0 Certificate issuer: /CN=e48345aa0cd7026d621c50084f9d9dbb5b9cc2f0 Certificate serial: 019AF208C66FD2FF93FC56E7F684FEF5AB26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5INFqgzXAm1iHFAIT52du1ucwvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.mft Manifest number: 0E7F Signing time: Sat 06 Dec 2025 05:00:52 +0000 Manifest this update: Sat 06 Dec 2025 05:00:52 +0000 Manifest next update: Sun 07 Dec 2025 05:00:52 +0000 Files and hashes: 1: 5INFqgzXAm1iHFAIT52du1ucwvA.crl (hash: 8+z8l4SkdxwtPDwFY2ggsjFyFXJyGy4uRuZVpkhp1xE=) 2: kUe56rRopp_KQsUYDln6H32rpVA.roa (hash: Nqm32SYb89EX8JBzdHqkHyeFXZStjUKylm9CZ3PRcrY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.crl rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.mft rsync://rpki.ripe.net/repository/DEFAULT/5INFqgzXAm1iHFAIT52du1ucwvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:c6:6f:d2:ff:93:fc:56:e7:f6:84:fe:f5:ab:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e48345aa0cd7026d621c50084f9d9dbb5b9cc2f0 Validity Not Before: Dec 6 05:00:52 2025 GMT Not After : Dec 7 05:00:52 2025 GMT Subject: CN=38e6518b62ecd4d88d0e668e66c153bd41d8309d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4d:28:10:ad:31:21:6a:eb:81:c7:c7:bc:48: 6f:17:66:c2:25:05:66:b4:75:6e:6f:64:b9:24:ca: be:f0:d3:49:99:2e:e8:f7:b0:d8:ca:6b:27:0d:e5: ab:bc:5b:6b:14:c4:c2:d2:3c:9e:43:4c:c8:7c:91: d3:1e:e6:eb:18:91:9a:33:43:10:af:c4:09:ab:77: 3d:a0:7a:e7:87:16:16:d7:6c:49:fd:be:f8:63:79: 7a:b1:f9:bd:02:0a:80:9a:e9:03:1c:66:6f:81:69: c9:ed:65:ed:4c:e0:70:81:b5:fa:4f:c1:d8:7f:0b: a9:f4:06:68:0e:7d:f8:0a:2f:89:85:84:b9:a6:a1: a8:c9:d3:95:8a:7f:76:33:4a:ce:20:ec:e5:7d:09: a0:44:ca:0e:ec:24:0c:0e:7a:f9:91:75:e9:df:47: fe:66:d7:c3:16:00:cb:cc:9e:0c:08:08:81:67:36: 91:2c:71:c2:e7:a7:4f:de:63:89:ff:fc:f2:a6:ec: 35:b8:b2:98:fa:2b:4c:99:8f:fc:3d:c2:c4:fc:95: 95:63:b4:32:4b:8f:53:1b:2c:19:05:0a:e2:96:d5: c0:fb:70:ca:7b:7b:a2:2e:60:7a:4e:8c:ef:2e:19: b6:c8:31:93:67:37:14:b7:40:58:41:bd:30:bb:da: 9d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E6:51:8B:62:EC:D4:D8:8D:0E:66:8E:66:C1:53:BD:41:D8:30:9D X509v3 Authority Key Identifier: keyid:E4:83:45:AA:0C:D7:02:6D:62:1C:50:08:4F:9D:9D:BB:5B:9C:C2:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5INFqgzXAm1iHFAIT52du1ucwvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:15:f4:3c:ff:03:d7:be:97:bf:c5:f1:28:ee:37:10:8a:a6: c1:0a:b5:ee:a5:e9:a9:27:41:ad:aa:66:36:23:57:6a:82:53: 5b:77:8a:20:f8:2a:09:5c:9a:38:16:a8:85:0a:fa:0a:53:c2: e1:25:99:a9:44:37:37:40:11:13:98:b3:68:c2:18:ff:39:a2: 0f:d4:ae:18:72:75:80:ad:5a:3f:2c:d9:5f:5c:f2:d2:56:bd: 1a:3f:ef:66:08:36:84:35:a0:3c:22:a3:72:07:26:bf:a1:2c: b9:0a:78:a9:d9:24:8e:85:76:c1:93:d8:ce:37:ea:22:f7:ef: f7:5a:f9:8c:de:16:34:61:df:49:28:49:29:8e:a2:74:ff:9e: 70:45:22:16:fd:3d:3e:17:ec:a8:f9:d0:e6:cb:0e:e4:a4:a4: 76:12:83:69:65:ab:99:6f:ab:de:1b:69:bd:6a:2f:a9:4b:68: 6e:c9:a5:c6:db:6d:1a:b4:c1:5a:2e:a2:40:b4:0a:59:d3:fc: f9:14:71:48:fe:da:71:d1:a2:8b:51:f4:f2:27:b9:66:93:c5: 06:13:f9:88:70:d2:43:af:57:11:e3:53:7a:72:d1:3f:6a:cd: e3:15:76:1b:d1:c0:1b:45:44:1b:61:c7:6e:68:c1:16:26:ad: cb:7e:19:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCMZv0v+T/Fbn9oT+9asmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ODM0NWFhMGNkNzAyNmQ2MjFjNTAwODRmOWQ5ZGJiNWI5 Y2MyZjAwHhcNMjUxMjA2MDUwMDUyWhcNMjUxMjA3MDUwMDUyWjAzMTEwLwYDVQQD EygzOGU2NTE4YjYyZWNkNGQ4OGQwZTY2OGU2NmMxNTNiZDQxZDgzMDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApk0oEK0xIWrrgcfHvEhvF2bCJQVm tHVub2S5JMq+8NNJmS7o97DYymsnDeWrvFtrFMTC0jyeQ0zIfJHTHubrGJGaM0MQ r8QJq3c9oHrnhxYW12xJ/b74Y3l6sfm9AgqAmukDHGZvgWnJ7WXtTOBwgbX6T8HY fwup9AZoDn34Ci+JhYS5pqGoydOVin92M0rOIOzlfQmgRMoO7CQMDnr5kXXp30f+ ZtfDFgDLzJ4MCAiBZzaRLHHC56dP3mOJ//zypuw1uLKY+itMmY/8PcLE/JWVY7Qy S49TGywZBQriltXA+3DKe3uiLmB6TozvLhm2yDGTZzcUt0BYQb0wu9qdXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDjmUYti7NTYjQ5mjmbBU71B2DCdMB8GA1UdIwQY MBaAFOSDRaoM1wJtYhxQCE+dnbtbnMLwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUlORnFnelhBbTFpSEZBSVQ1MmR1MXVjd3ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xNzRmMzItMWFkMS00NGY4LThhN2Yt NWZkYjk1NjMxMTNjLzEvNUlORnFnelhBbTFpSEZBSVQ1MmR1MXVjd3ZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi8xNzRmMzItMWFkMS00NGY4LThhN2YtNWZkYjk1NjMxMTNj LzEvNUlORnFnelhBbTFpSEZBSVQ1MmR1MXVjd3ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJhX0PP8D 176Xv8XxKO43EIqmwQq17qXpqSdBrapmNiNXaoJTW3eKIPgqCVyaOBaohQr6ClPC 4SWZqUQ3N0ARE5izaMIY/zmiD9SuGHJ1gK1aPyzZX1zy0la9Gj/vZgg2hDWgPCKj cgcmv6EsuQp4qdkkjoV2wZPYzjfqIvfv91r5jN4WNGHfSShJKY6idP+ecEUiFv09 PhfsqPnQ5ssO5KSkdhKDaWWrmW+r3htpvWovqUtobsmlxtttGrTBWi6iQLQKWdP8 +RRxSP7acdGii1H08ie5ZpPFBhP5iHDSQ69XEeNTenLRP2rN4xV2G9HAG0VEG2HH bmjBFiaty34ZYg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:44:36 2025 by rpki-client