This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.mft File: 5INFqgzXAm1iHFAIT52du1ucwvA.mft (raw, json) Hash identifier: DM2HTAvxiwGIAZBcHmBClLQj3r0aRcXT4CC49bvP+q4= Subject key identifier: 53:92:84:18:FD:25:5D:BA:A7:BD:96:73:F6:48:A4:D6:03:4A:80:2C Authority key identifier: E4:83:45:AA:0C:D7:02:6D:62:1C:50:08:4F:9D:9D:BB:5B:9C:C2:F0 Certificate issuer: /CN=e48345aa0cd7026d621c50084f9d9dbb5b9cc2f0 Certificate serial: 019B33B1ACE341588DC4915178D767B6128B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5INFqgzXAm1iHFAIT52du1ucwvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.mft Manifest number: 0EA1 Signing time: Thu 18 Dec 2025 23:00:40 +0000 Manifest this update: Thu 18 Dec 2025 23:00:40 +0000 Manifest next update: Fri 19 Dec 2025 23:00:40 +0000 Files and hashes: 1: 5INFqgzXAm1iHFAIT52du1ucwvA.crl (hash: eXTnjd+g3VxQvrnQZrbIkCqKfYkHDse73J7+QvInRhM=) 2: kUe56rRopp_KQsUYDln6H32rpVA.roa (hash: Nqm32SYb89EX8JBzdHqkHyeFXZStjUKylm9CZ3PRcrY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.crl rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.mft rsync://rpki.ripe.net/repository/DEFAULT/5INFqgzXAm1iHFAIT52du1ucwvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b1:ac:e3:41:58:8d:c4:91:51:78:d7:67:b6:12:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e48345aa0cd7026d621c50084f9d9dbb5b9cc2f0 Validity Not Before: Dec 18 23:00:40 2025 GMT Not After : Dec 19 23:00:40 2025 GMT Subject: CN=53928418fd255dbaa7bd9673f648a4d6034a802c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9c:3c:f0:22:ec:20:9f:0e:a4:28:47:9f:2e: 1a:f7:7c:53:81:de:6d:41:f6:dd:77:54:d7:2c:10: ae:b1:38:ce:d5:f5:7a:92:29:6d:0c:81:28:cd:39: 6e:d3:08:a8:ec:e3:69:0d:de:6f:11:00:50:b0:f3: d1:0c:f9:41:17:a5:33:38:ed:6e:2d:5f:51:25:a3: 29:c6:79:2f:1e:6d:6b:a4:d1:24:ec:c0:c4:d3:05: c9:fd:3f:c8:74:ea:a4:7b:47:0d:52:d5:95:56:fc: a2:1f:46:d2:31:dc:66:a2:e9:73:9b:91:b9:49:f7: 05:75:fa:a3:aa:8e:a4:80:e3:25:ac:0d:f9:5b:b1: 08:ed:72:84:40:bf:69:75:23:43:3a:2b:8f:ff:53: 8d:a5:96:7c:ea:c0:fb:09:50:49:1d:eb:9f:70:18: cf:58:1c:17:14:c5:58:b3:d2:23:b6:a9:79:b2:3a: 41:e3:e4:c1:06:53:ac:2e:43:8f:63:72:cf:9c:29: c8:37:e1:e6:c6:17:8b:0a:e7:6a:b6:d6:3d:48:25: 09:c2:be:ed:23:c2:58:65:f6:27:78:42:5a:dc:9c: f9:1a:e0:0d:5a:55:22:21:6e:18:cb:46:de:99:96: 22:fd:32:4b:ab:66:1b:8b:27:65:2f:3e:79:2e:eb: 33:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:92:84:18:FD:25:5D:BA:A7:BD:96:73:F6:48:A4:D6:03:4A:80:2C X509v3 Authority Key Identifier: keyid:E4:83:45:AA:0C:D7:02:6D:62:1C:50:08:4F:9D:9D:BB:5B:9C:C2:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5INFqgzXAm1iHFAIT52du1ucwvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:18:f4:7a:44:e4:16:e5:6e:1a:d4:88:13:fb:90:9a:fa:43: 75:ce:31:fc:99:64:d4:6a:53:4d:00:91:fb:bc:ed:78:89:98: fe:e3:83:0a:34:85:10:c2:6b:2d:d2:23:eb:f8:31:0b:5e:82: 4e:34:d1:4f:ad:c5:6b:fa:26:2a:e0:44:5b:41:94:d8:ec:c5: 49:e5:8e:16:fc:50:e5:7c:1a:ae:8d:94:a7:17:fd:08:00:83: d1:90:d4:da:e6:28:b4:15:7c:dd:06:99:73:ef:41:4b:95:07: 84:1d:01:51:55:8c:53:21:36:a8:59:31:86:73:62:be:39:61: f1:ed:81:13:92:8b:0c:4b:ce:47:1c:49:8d:e5:ca:fc:cf:6e: e2:ee:e7:23:ff:dc:95:c7:fa:7e:22:f4:a6:8d:29:ed:6d:c2: 7e:d3:61:e1:4c:2b:85:c9:58:10:5b:7b:20:56:72:d5:c9:fb: aa:2e:89:c9:a1:bf:e5:a1:91:e4:36:db:bb:34:82:8b:fa:19: 3a:f0:6f:de:67:90:43:21:13:c3:30:53:1a:2f:47:51:5c:d9: 81:cc:bc:99:1e:59:e7:87:38:15:a8:99:42:30:dc:6a:53:7b: 19:8f:1f:54:12:e3:19:40:f7:44:89:bb:1c:98:25:24:dd:57: cd:24:25:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsazjQViNxJFReNdnthKLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ODM0NWFhMGNkNzAyNmQ2MjFjNTAwODRmOWQ5ZGJiNWI5 Y2MyZjAwHhcNMjUxMjE4MjMwMDQwWhcNMjUxMjE5MjMwMDQwWjAzMTEwLwYDVQQD Eyg1MzkyODQxOGZkMjU1ZGJhYTdiZDk2NzNmNjQ4YTRkNjAzNGE4MDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5w88CLsIJ8OpChHny4a93xTgd5t Qfbdd1TXLBCusTjO1fV6kiltDIEozTlu0wio7ONpDd5vEQBQsPPRDPlBF6UzOO1u LV9RJaMpxnkvHm1rpNEk7MDE0wXJ/T/IdOqke0cNUtWVVvyiH0bSMdxmoulzm5G5 SfcFdfqjqo6kgOMlrA35W7EI7XKEQL9pdSNDOiuP/1ONpZZ86sD7CVBJHeufcBjP WBwXFMVYs9Ijtql5sjpB4+TBBlOsLkOPY3LPnCnIN+HmxheLCudqttY9SCUJwr7t I8JYZfYneEJa3Jz5GuANWlUiIW4Yy0bemZYi/TJLq2YbiydlLz55LuszxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFOShBj9JV26p72Wc/ZIpNYDSoAsMB8GA1UdIwQY MBaAFOSDRaoM1wJtYhxQCE+dnbtbnMLwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUlORnFnelhBbTFpSEZBSVQ1MmR1MXVjd3ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xNzRmMzItMWFkMS00NGY4LThhN2Yt NWZkYjk1NjMxMTNjLzEvNUlORnFnelhBbTFpSEZBSVQ1MmR1MXVjd3ZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi8xNzRmMzItMWFkMS00NGY4LThhN2YtNWZkYjk1NjMxMTNj LzEvNUlORnFnelhBbTFpSEZBSVQ1MmR1MXVjd3ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjRj0ekTk FuVuGtSIE/uQmvpDdc4x/Jlk1GpTTQCR+7zteImY/uODCjSFEMJrLdIj6/gxC16C TjTRT63Fa/omKuBEW0GU2OzFSeWOFvxQ5Xwaro2Upxf9CACD0ZDU2uYotBV83QaZ c+9BS5UHhB0BUVWMUyE2qFkxhnNivjlh8e2BE5KLDEvORxxJjeXK/M9u4u7nI//c lcf6fiL0po0p7W3CftNh4UwrhclYEFt7IFZy1cn7qi6JyaG/5aGR5DbbuzSCi/oZ OvBv3meQQyETwzBTGi9HUVzZgcy8mR5Z54c4FaiZQjDcalN7GY8fVBLjGUD3RIm7 HJglJN1XzSQlZQ== -----END CERTIFICATE-----Generated at Fri Dec 19 06:22:01 2025 by rpki-client