This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft File: 5D8j1ok3SUKI38x6Dv4f50ogNuE.mft (raw, json) Hash identifier: 9LaDIhYWESW8tf0nD1Gj26c0/8G0BRx9AlAzKjL2yX8= Subject key identifier: 17:3A:58:78:1D:CE:60:06:4F:CB:B6:B6:D5:B7:A8:08:9B:32:FB:D8 Authority key identifier: E4:3F:23:D6:89:37:49:42:88:DF:CC:7A:0E:FE:1F:E7:4A:20:36:E1 Certificate issuer: /CN=e43f23d68937494288dfcc7a0efe1fe74a2036e1 Certificate serial: 019AF0BF746D451004F66D1F79234631DC52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft Manifest number: 1763 Signing time: Fri 05 Dec 2025 23:01:10 +0000 Manifest this update: Fri 05 Dec 2025 23:01:10 +0000 Manifest next update: Sat 06 Dec 2025 23:01:10 +0000 Files and hashes: 1: 1-rRkYRd227_5bnec3bYwnL5SxpY.roa (hash: R+OpLqItt4unWxgfStcunzTz6dBOZ563zxthlacRJZ4=) 2: 5D8j1ok3SUKI38x6Dv4f50ogNuE.crl (hash: ohtPCEUKn16H1UR7oidMYgcS4AKsxmC82Lms6BsSDj8=) 3: 7QAi3hol-4GpeEk0vacoCeiMLE8.roa (hash: 41WAyyFZEfqE7fT5J+jGu94yYNN3Qp+eHjuNlnSVUDI=) 4: N8lbW7Yoyaq7hT551OkHLLE0p-8.roa (hash: PaYSmfBdwZ0Nhmv4gZsttQQCgk3Gm/XsPJfIIlvLQgs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.crl rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:74:6d:45:10:04:f6:6d:1f:79:23:46:31:dc:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e43f23d68937494288dfcc7a0efe1fe74a2036e1 Validity Not Before: Dec 5 23:01:10 2025 GMT Not After : Dec 6 23:01:10 2025 GMT Subject: CN=173a58781dce60064fcbb6b6d5b7a8089b32fbd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ec:22:b4:cc:3e:b5:8c:a4:a8:da:88:91:34: f7:74:1a:40:1b:35:bf:48:9f:94:df:33:08:d6:2d: 94:79:6d:cf:ff:a2:1e:b1:5d:c3:22:ef:81:03:59: 13:a4:68:af:42:16:92:68:1c:fe:b9:b5:ac:a6:c5: 4f:ae:e2:87:92:e1:55:92:26:4e:bd:05:84:02:23: 4a:3c:c7:66:e4:c1:75:57:eb:72:02:48:aa:47:60: 82:ec:43:80:28:0c:38:ee:0a:be:a3:2d:48:ec:2a: af:aa:93:26:a7:74:7d:4e:53:1e:e5:2b:55:d0:73: 91:07:13:9a:f7:90:4a:83:75:5d:77:48:ea:4c:88: 41:ac:0d:b1:50:47:a7:32:d8:3f:3a:44:be:a1:ed: d4:d0:e8:46:ce:9d:ec:d5:2d:d5:c6:81:c6:40:3e: 58:52:bf:3e:95:5b:1b:19:9b:69:10:92:04:25:9c: 39:fb:ff:fb:88:60:6a:68:de:16:51:6f:87:40:37: 48:39:91:2f:61:f5:30:04:93:ec:e0:f2:ff:a8:72: 66:36:29:01:48:82:78:cb:0c:b5:6d:16:ee:15:87: 9e:40:a2:4c:a2:53:18:10:0a:c5:09:24:b2:e2:a5: 98:c8:f7:73:48:13:60:ad:91:71:90:0d:b0:b1:74: ba:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:3A:58:78:1D:CE:60:06:4F:CB:B6:B6:D5:B7:A8:08:9B:32:FB:D8 X509v3 Authority Key Identifier: keyid:E4:3F:23:D6:89:37:49:42:88:DF:CC:7A:0E:FE:1F:E7:4A:20:36:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:ce:cd:38:ff:32:31:54:30:de:b5:e1:40:74:da:c9:ba:b8: 8a:03:37:4d:63:d6:74:3a:5b:9b:51:17:e1:b1:05:31:ee:bd: 8a:02:65:5f:7d:de:07:d2:f8:fc:64:fc:26:3d:9e:d6:94:94: 3d:11:1f:7d:ca:81:92:6c:d2:ef:82:2f:4a:95:82:5d:e3:ff: b6:b2:85:d7:4d:42:6d:fd:e1:df:1e:77:02:53:74:8f:35:bd: d6:f5:ab:1a:46:08:9f:0c:ba:6d:91:14:17:22:61:97:22:d5: 17:9d:ac:7b:7e:26:12:0f:f8:9a:2d:fd:29:50:95:31:20:ea: 64:a4:3f:1e:ef:03:ba:9f:9a:92:4c:4d:64:1c:38:ef:97:67: 61:1e:ca:6b:90:84:ca:d6:4f:13:23:d0:22:d9:83:1d:e5:16: cf:a2:6e:5f:78:9d:7e:a8:bf:4a:02:bc:b4:6c:5f:2f:05:75: c4:d3:32:d1:b6:98:e2:62:eb:5a:82:53:5c:ed:f1:24:9b:e4: d6:16:ad:d0:80:86:34:ce:40:80:a3:0f:97:13:60:eb:fa:91: b9:f8:6d:59:d3:fd:3b:91:39:f2:06:28:b8:19:6d:96:99:88: 8c:7d:25:2a:f7:a7:87:e6:9d:6a:c7:47:58:52:0d:05:98:92: 42:19:ea:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv3RtRRAE9m0feSNGMdxSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0M2YyM2Q2ODkzNzQ5NDI4OGRmY2M3YTBlZmUxZmU3NGEy MDM2ZTEwHhcNMjUxMjA1MjMwMTEwWhcNMjUxMjA2MjMwMTEwWjAzMTEwLwYDVQQD EygxNzNhNTg3ODFkY2U2MDA2NGZjYmI2YjZkNWI3YTgwODliMzJmYmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruwitMw+tYykqNqIkTT3dBpAGzW/ SJ+U3zMI1i2UeW3P/6IesV3DIu+BA1kTpGivQhaSaBz+ubWspsVPruKHkuFVkiZO vQWEAiNKPMdm5MF1V+tyAkiqR2CC7EOAKAw47gq+oy1I7CqvqpMmp3R9TlMe5StV 0HORBxOa95BKg3Vdd0jqTIhBrA2xUEenMtg/OkS+oe3U0OhGzp3s1S3VxoHGQD5Y Ur8+lVsbGZtpEJIEJZw5+//7iGBqaN4WUW+HQDdIOZEvYfUwBJPs4PL/qHJmNikB SIJ4ywy1bRbuFYeeQKJMolMYEArFCSSy4qWYyPdzSBNgrZFxkA2wsXS6SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBc6WHgdzmAGT8u2ttW3qAibMvvYMB8GA1UdIwQY MBaAFOQ/I9aJN0lCiN/Meg7+H+dKIDbhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUQ4ajFvazNTVUtJMzh4NkR2NGY1MG9nTnVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hYjVmZGMtOWQ2Yi00Njc1LTlhMTMt OWQxODVmNzM4MjExLzEvNUQ4ajFvazNTVUtJMzh4NkR2NGY1MG9nTnVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9hYjVmZGMtOWQ2Yi00Njc1LTlhMTMtOWQxODVmNzM4MjEx LzEvNUQ4ajFvazNTVUtJMzh4NkR2NGY1MG9nTnVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYM7NOP8y MVQw3rXhQHTaybq4igM3TWPWdDpbm1EX4bEFMe69igJlX33eB9L4/GT8Jj2e1pSU PREffcqBkmzS74IvSpWCXeP/trKF101Cbf3h3x53AlN0jzW91vWrGkYInwy6bZEU FyJhlyLVF52se34mEg/4mi39KVCVMSDqZKQ/Hu8Dup+akkxNZBw475dnYR7Ka5CE ytZPEyPQItmDHeUWz6JuX3idfqi/SgK8tGxfLwV1xNMy0baY4mLrWoJTXO3xJJvk 1hat0ICGNM5AgKMPlxNg6/qRufhtWdP9O5E58gYouBltlpmIjH0lKvenh+adasdH WFINBZiSQhnqew== -----END CERTIFICATE-----Generated at Sat Dec 6 09:16:15 2025 by rpki-client