This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.mft File: 5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.mft (raw, json) Hash identifier: VHwu+jCNzxX1AP+gblyJ6EVP3YRkIInG+koQDIjl2Mo= Subject key identifier: 8E:A1:A6:E7:B5:2D:0A:86:CE:CA:A0:3F:11:C6:92:26:3F:39:7C:FD Authority key identifier: E4:1B:F7:8B:70:AC:27:6C:BF:65:BB:90:9F:99:34:08:2F:4D:2D:79 Certificate issuer: /CN=e41bf78b70ac276cbf65bb909f9934082f4d2d79 Certificate serial: 019B3CEBFE051750FCB4D76A715F1AA02C8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.mft Manifest number: 141B Signing time: Sat 20 Dec 2025 18:00:57 +0000 Manifest this update: Sat 20 Dec 2025 18:00:57 +0000 Manifest next update: Sun 21 Dec 2025 18:00:57 +0000 Files and hashes: 1: 5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.crl (hash: mIMGgcE94USgEhZfNSx7vRDMOc3LwvBiM0MWQJvfkJM=) 2: zKYpcRfJ0yCrd-f2baj9-TyNLi8.roa (hash: T7q7FvhXmWHJ0yC6vmc/dnmnSYNoJL5+7o5GUV51uGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.crl rsync://rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.mft rsync://rpki.ripe.net/repository/DEFAULT/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:fe:05:17:50:fc:b4:d7:6a:71:5f:1a:a0:2c:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e41bf78b70ac276cbf65bb909f9934082f4d2d79 Validity Not Before: Dec 20 18:00:57 2025 GMT Not After : Dec 21 18:00:57 2025 GMT Subject: CN=8ea1a6e7b52d0a86cecaa03f11c692263f397cfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:85:56:13:37:4b:9b:75:24:08:ce:09:5f:55: 52:f5:21:a9:61:3a:d0:b1:3a:03:8b:8b:06:a5:25: 89:62:33:d1:9a:38:74:ce:81:b8:7f:d9:2f:bd:73: 27:97:2b:b7:43:4b:c8:66:e9:10:f5:55:b3:31:89: 56:9e:85:dd:c6:47:d6:c6:23:dc:02:a3:ad:4b:e7: 2d:48:f7:d1:2c:2c:86:f3:38:b8:c1:67:2c:4f:71: 45:f5:a6:49:fa:0e:03:d5:b1:87:e9:3d:ab:54:97: e1:bc:76:63:35:dd:d9:4c:1a:cf:ec:80:34:a5:22: 4c:0f:a5:13:71:b1:7c:be:75:19:b3:e1:61:c4:f9: 80:fb:3d:57:66:3e:80:b2:bc:19:a8:32:25:93:34: 7d:38:f6:e7:33:8a:67:d8:bd:e1:32:49:e0:47:76: e2:9b:04:4a:ed:c6:de:bb:f5:32:8e:73:67:b7:ab: 70:66:99:d4:33:ad:d0:8d:d5:a1:fe:2e:fb:70:1e: dd:7b:bc:b4:d4:6a:7b:dd:e7:ff:b2:e4:09:9f:f2: a2:e2:a6:e0:1a:2a:ce:18:31:d8:79:69:b4:f7:3f: 3e:43:bf:c6:86:29:3b:2e:43:5a:3b:24:2a:66:62: 45:28:33:21:86:1a:80:58:5b:bb:0c:4f:7e:5c:04: f5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A1:A6:E7:B5:2D:0A:86:CE:CA:A0:3F:11:C6:92:26:3F:39:7C:FD X509v3 Authority Key Identifier: keyid:E4:1B:F7:8B:70:AC:27:6C:BF:65:BB:90:9F:99:34:08:2F:4D:2D:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:46:c1:51:3a:23:89:e3:72:b9:4b:12:66:5d:22:e0:aa:58: 74:21:5d:a2:da:34:e8:10:ca:10:2e:09:24:02:33:47:46:a6: 9d:3d:bf:0a:84:f0:27:93:df:9a:91:0c:68:63:78:48:c1:86: ab:7b:38:e9:8c:74:16:52:c2:5f:e3:13:dd:6e:83:1c:b9:7b: 65:20:ff:fa:e7:65:40:af:1d:af:9d:68:e8:8a:8a:d6:97:b3: 89:05:52:ee:f3:e7:aa:0e:46:1b:cf:13:62:8b:60:9f:27:a4: b8:1d:ed:fe:d0:28:8e:b7:8f:c4:8d:54:3f:0f:4f:94:78:89: c2:2c:00:43:f7:9d:ae:e7:91:ff:17:89:98:f5:df:a6:59:7b: b4:e0:0c:fb:c6:c0:a6:0e:5a:c4:4c:ab:47:51:ff:59:28:48: 7b:32:66:91:fc:66:70:9e:a5:d0:3a:b5:71:69:bd:56:6b:a3: 2b:16:27:78:ad:7f:44:ce:e7:8e:89:25:2f:98:b1:42:77:90: 49:57:03:16:46:00:95:95:71:b6:4e:23:f1:ce:1b:33:2c:93: 56:8c:9a:7d:9f:44:29:03:1b:bb:62:0a:16:30:49:d5:75:84: 1b:a7:63:f2:49:b8:1e:54:2c:e6:0f:84:93:3b:ac:3c:da:28: f7:0b:21:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs86/4FF1D8tNdqcV8aoCyLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0MWJmNzhiNzBhYzI3NmNiZjY1YmI5MDlmOTkzNDA4MmY0 ZDJkNzkwHhcNMjUxMjIwMTgwMDU3WhcNMjUxMjIxMTgwMDU3WjAzMTEwLwYDVQQD Eyg4ZWExYTZlN2I1MmQwYTg2Y2VjYWEwM2YxMWM2OTIyNjNmMzk3Y2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIVWEzdLm3UkCM4JX1VS9SGpYTrQ sToDi4sGpSWJYjPRmjh0zoG4f9kvvXMnlyu3Q0vIZukQ9VWzMYlWnoXdxkfWxiPc AqOtS+ctSPfRLCyG8zi4wWcsT3FF9aZJ+g4D1bGH6T2rVJfhvHZjNd3ZTBrP7IA0 pSJMD6UTcbF8vnUZs+FhxPmA+z1XZj6AsrwZqDIlkzR9OPbnM4pn2L3hMkngR3bi mwRK7cbeu/UyjnNnt6twZpnUM63QjdWh/i77cB7de7y01Gp73ef/suQJn/Ki4qbg GirOGDHYeWm09z8+Q7/Ghik7LkNaOyQqZmJFKDMhhhqAWFu7DE9+XAT1mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI6hpue1LQqGzsqgPxHGkiY/OXz9MB8GA1UdIwQY MBaAFOQb94twrCdsv2W7kJ+ZNAgvTS15MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUJ2M2kzQ3NKMnlfWmJ1UW41azBDQzlOTFhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8wY2MwNDItY2YyYi00NjE2LTkyZTAt YWYwNTU2YzQ3YTM3LzEvNUJ2M2kzQ3NKMnlfWmJ1UW41azBDQzlOTFhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8wY2MwNDItY2YyYi00NjE2LTkyZTAtYWYwNTU2YzQ3YTM3 LzEvNUJ2M2kzQ3NKMnlfWmJ1UW41azBDQzlOTFhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbUbBUToj ieNyuUsSZl0i4KpYdCFdoto06BDKEC4JJAIzR0amnT2/CoTwJ5PfmpEMaGN4SMGG q3s46Yx0FlLCX+MT3W6DHLl7ZSD/+udlQK8dr51o6IqK1peziQVS7vPnqg5GG88T YotgnyekuB3t/tAojrePxI1UPw9PlHiJwiwAQ/edrueR/xeJmPXfpll7tOAM+8bA pg5axEyrR1H/WShIezJmkfxmcJ6l0Dq1cWm9VmujKxYneK1/RM7njoklL5ixQneQ SVcDFkYAlZVxtk4j8c4bMyyTVoyafZ9EKQMbu2IKFjBJ1XWEG6dj8km4HlQs5g+E kzusPNoo9wsheA== -----END CERTIFICATE-----Generated at Sat Dec 20 22:22:08 2025 by rpki-client