This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft File: 5YJfvufEOimDjqvk_IfXlDScDIA.mft (raw, json) Hash identifier: LDXXtNRcQhHtPG6/I218wG3LB0OO4Ow8npTvtW8FsVY= Subject key identifier: 56:69:50:C8:8D:D2:D9:51:09:CF:A6:7F:7F:1B:FB:D6:4A:85:90:38 Authority key identifier: E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80 Certificate issuer: /CN=e5825fbee7c43a29838eabe4fc87d794349c0c80 Certificate serial: 019B3569DDD84CD5B23CAEF2309C6FC1A622 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft Manifest number: 14DE Signing time: Fri 19 Dec 2025 07:01:29 +0000 Manifest this update: Fri 19 Dec 2025 07:01:29 +0000 Manifest next update: Sat 20 Dec 2025 07:01:29 +0000 Files and hashes: 1: 243IV1WXDUNyw7rjuRN5vP7IoKY.roa (hash: 0O92Hb85YHbJvLZRlVOgE6xTVbqzeKYfm5ftactSgfc=) 2: 5YJfvufEOimDjqvk_IfXlDScDIA.crl (hash: mR2cZlFXYFaddwALsaNqrqTO6hujltSUEfRlKf5ZZMU=) 3: 9MYfbdEtLjtEuoq4B1OcPGIAtDU.roa (hash: zTkYPMu8h5Z/txGXaV3nKQYC/0+0sqJF536VnkSLAUQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:dd:d8:4c:d5:b2:3c:ae:f2:30:9c:6f:c1:a6:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5825fbee7c43a29838eabe4fc87d794349c0c80 Validity Not Before: Dec 19 07:01:29 2025 GMT Not After : Dec 20 07:01:29 2025 GMT Subject: CN=566950c88dd2d95109cfa67f7f1bfbd64a859038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:89:80:36:b9:6a:64:1a:97:ed:e9:e2:fd:cd: 52:87:cc:39:84:16:cc:ca:07:3d:46:e2:27:ce:26: 0a:dc:91:26:06:9b:54:53:d5:00:cf:36:28:99:8f: ff:e0:1c:d1:a1:ca:0e:7e:29:ef:50:90:3b:03:bd: 9c:0f:97:a1:73:7b:ff:39:ea:1c:31:6a:44:70:e7: aa:b0:eb:eb:d2:05:1b:58:f2:03:99:9a:20:67:6a: c0:00:28:70:54:14:36:50:f2:38:ae:e7:a3:df:40: 7d:67:64:ab:a2:bf:f9:ba:0e:f7:52:1f:c3:b2:7c: 28:95:f6:79:00:9b:4b:cb:cc:19:1f:9f:00:33:92: 74:82:7e:9b:ab:14:52:3a:88:f0:1d:9e:28:0a:29: 93:72:a6:77:89:af:8e:75:17:f4:87:8c:03:c2:05: c2:fd:1d:d5:05:42:60:b9:ac:75:dd:fa:8a:ae:cb: 0d:33:b6:05:77:2d:2d:52:b2:c0:1a:66:f7:4a:f4: 5f:c0:fc:4f:6d:eb:c5:a8:a3:27:a3:fd:2b:fb:a7: 96:e9:68:bd:f5:92:74:08:c4:f1:14:50:f0:7b:4c: 0d:7c:1e:7c:0d:dc:84:85:c7:5f:4e:90:12:cf:d7: 88:b4:3f:9e:46:2f:83:64:96:8f:37:1e:4b:7d:4a: b6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:69:50:C8:8D:D2:D9:51:09:CF:A6:7F:7F:1B:FB:D6:4A:85:90:38 X509v3 Authority Key Identifier: keyid:E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:77:df:da:91:0b:cf:7d:bc:3e:b2:fb:9b:44:b2:3d:19:44: 16:f5:bf:70:03:10:f0:c8:7b:7f:fb:ea:2a:d2:d4:71:0a:85: 2a:60:89:2c:a0:c0:b9:93:9f:09:95:2e:5a:be:8b:19:7b:26: a2:b9:9d:2c:c3:d2:6a:f1:24:29:ee:7a:2e:57:62:dd:28:2a: 33:2b:77:39:68:fe:5e:5c:6f:cd:66:6b:28:1e:26:47:cd:a6: e2:10:2f:4b:45:2e:6e:a4:fc:3f:65:ca:a5:42:8f:3e:25:08: 10:24:70:f4:7b:be:9a:26:b6:04:64:44:d9:71:69:2d:e7:94: d7:77:1c:9c:5b:a9:23:9b:35:d9:31:d8:f8:9e:b2:3d:de:95: d6:ff:ba:73:fc:18:7b:3a:f5:14:3a:ea:8d:88:c4:85:2f:d0: 89:06:4e:8f:f3:1d:ea:55:f8:c3:ec:84:a5:34:85:cf:14:f5: a3:e2:61:a5:a9:a9:0f:7c:a5:a0:a4:dc:dd:c9:da:94:5b:f1: e3:bb:b3:83:af:fa:ab:f6:79:73:f0:18:93:6d:0f:3d:ee:a4: 1c:a6:62:7f:0d:5d:eb:52:60:1a:ed:2f:ca:46:aa:8c:89:c6: c4:19:7c:70:02:36:0c:fe:78:f3:ba:ed:5a:fb:11:05:22:c4: 4d:26:f8:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1ad3YTNWyPK7yMJxvwaYiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ODI1ZmJlZTdjNDNhMjk4MzhlYWJlNGZjODdkNzk0MzQ5 YzBjODAwHhcNMjUxMjE5MDcwMTI5WhcNMjUxMjIwMDcwMTI5WjAzMTEwLwYDVQQD Eyg1NjY5NTBjODhkZDJkOTUxMDljZmE2N2Y3ZjFiZmJkNjRhODU5MDM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYmANrlqZBqX7eni/c1Sh8w5hBbM ygc9RuInziYK3JEmBptUU9UAzzYomY//4BzRocoOfinvUJA7A72cD5ehc3v/Oeoc MWpEcOeqsOvr0gUbWPIDmZogZ2rAAChwVBQ2UPI4ruej30B9Z2Sror/5ug73Uh/D snwolfZ5AJtLy8wZH58AM5J0gn6bqxRSOojwHZ4oCimTcqZ3ia+OdRf0h4wDwgXC /R3VBUJguax13fqKrssNM7YFdy0tUrLAGmb3SvRfwPxPbevFqKMno/0r+6eW6Wi9 9ZJ0CMTxFFDwe0wNfB58DdyEhcdfTpASz9eItD+eRi+DZJaPNx5LfUq2hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFZpUMiN0tlRCc+mf38b+9ZKhZA4MB8GA1UdIwQY MBaAFOWCX77nxDopg46r5PyH15Q0nAyAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVlKZnZ1ZkVPaW1EanF2a19JZlhsRFNjRElBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS83NThjOTYtNjExZC00MTY3LTgwY2Qt MDQxYWIzMDJjMmY5LzEvNVlKZnZ1ZkVPaW1EanF2a19JZlhsRFNjRElBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS83NThjOTYtNjExZC00MTY3LTgwY2QtMDQxYWIzMDJjMmY5 LzEvNVlKZnZ1ZkVPaW1EanF2a19JZlhsRFNjRElBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE3ff2pEL z328PrL7m0SyPRlEFvW/cAMQ8Mh7f/vqKtLUcQqFKmCJLKDAuZOfCZUuWr6LGXsm ormdLMPSavEkKe56Lldi3SgqMyt3OWj+XlxvzWZrKB4mR82m4hAvS0UubqT8P2XK pUKPPiUIECRw9Hu+mia2BGRE2XFpLeeU13ccnFupI5s12THY+J6yPd6V1v+6c/wY ezr1FDrqjYjEhS/QiQZOj/Md6lX4w+yEpTSFzxT1o+JhpampD3yloKTc3cnalFvx 47uzg6/6q/Z5c/AYk20PPe6kHKZifw1d61JgGu0vykaqjInGxBl8cAI2DP5487rt WvsRBSLETSb4eA== -----END CERTIFICATE-----Generated at Fri Dec 19 12:50:46 2025 by rpki-client