This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft File: 5oBHj67Itn3f7OY1fPJc8sodhdA.mft (raw, json) Hash identifier: IKzxhZ9wKsj34qaThFHjquthYGdzYR5YbYr2eO0cV5I= Subject key identifier: FF:E9:1D:86:3F:3B:36:69:77:9D:60:63:32:59:D1:E6:45:4D:94:56 Authority key identifier: E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0 Certificate issuer: /CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0 Certificate serial: 019B2D0BAE41F6E9D1822625FAA5F4590C3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft Manifest number: 1782 Signing time: Wed 17 Dec 2025 16:01:38 +0000 Manifest this update: Wed 17 Dec 2025 16:01:38 +0000 Manifest next update: Thu 18 Dec 2025 16:01:38 +0000 Files and hashes: 1: 5oBHj67Itn3f7OY1fPJc8sodhdA.crl (hash: jYhkOGyKWPy0E6LN8kEetYddABbWKzhV1lsT3t0V4Cs=) 2: tRzSJb7DVEfQEAa9U4BrDqM_SWA.roa (hash: XZPt+PoWwjSkw1pIWuwBcMWbKd9UU7K0EsDZzwNXa5E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.crl rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:ae:41:f6:e9:d1:82:26:25:fa:a5:f4:59:0c:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0 Validity Not Before: Dec 17 16:01:38 2025 GMT Not After : Dec 18 16:01:38 2025 GMT Subject: CN=ffe91d863f3b3669779d60633259d1e6454d9456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1e:5f:94:69:10:57:6e:be:31:cc:ec:47:4f: 60:43:01:d0:c0:8e:7d:6a:92:ed:18:12:ec:21:45: 41:e1:39:2b:0e:ad:8e:6f:29:f3:e8:66:f5:42:d3: 9f:d9:56:36:5d:74:72:c9:99:4c:28:8b:3a:1d:ad: a8:3a:b7:15:89:88:3d:fd:c8:96:96:88:6c:e6:b2: 5f:8e:54:2a:27:de:68:38:66:ce:7c:5d:b7:31:ac: f3:50:eb:01:12:3e:59:17:61:d9:87:f0:64:76:26: 85:f4:fc:fe:86:8e:cf:a5:ab:37:1b:2c:4d:00:c1: e9:8b:20:0c:99:86:e8:2f:d8:98:54:39:8a:b5:45: e4:26:f3:5b:c8:76:03:31:38:ad:50:0a:e8:9a:9d: 53:6a:10:d5:b5:32:c2:d4:d3:9b:ba:78:5e:46:aa: 8d:ae:91:4c:85:b5:d2:34:f5:b0:d6:ff:4f:ea:42: 8f:6e:3e:5d:78:a5:e7:40:a8:13:69:06:19:90:fd: 36:b0:54:e4:e7:e4:b9:b1:57:bc:44:7a:6a:68:72: 01:d1:7d:20:cc:0c:55:25:87:a5:dc:53:69:65:df: 55:b4:ff:49:dd:26:b0:6d:7c:a7:12:41:cc:35:9a: 2a:25:ac:aa:70:93:b0:fc:d0:2c:25:cc:b3:17:91: 61:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:E9:1D:86:3F:3B:36:69:77:9D:60:63:32:59:D1:E6:45:4D:94:56 X509v3 Authority Key Identifier: keyid:E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:cc:97:52:a3:d7:bb:ac:3d:c8:08:18:50:ee:f7:3b:a9:32: 35:42:c0:b1:32:33:b8:f0:fd:ba:67:cf:0a:9a:08:ee:10:95: 7f:2d:ad:92:d2:0d:fd:ef:2c:9c:d8:e3:69:8e:c7:b3:62:44: 3d:3a:65:f0:15:ed:07:a7:c5:76:d3:38:b0:5c:93:83:bc:8b: 3e:4f:c8:94:09:86:d6:24:ea:74:19:ca:95:e2:20:a7:75:e8: 97:fa:d3:ad:0c:4d:52:18:82:de:ce:11:93:64:92:eb:b1:32: 15:2b:94:8c:84:04:66:fb:93:55:8a:39:ff:94:f9:8a:15:8d: 5d:f9:9f:6b:f2:bc:46:dc:b7:49:7f:c9:e1:5d:3c:60:21:9b: 27:1a:8d:9a:3c:68:1c:ba:a6:1e:9e:92:75:37:26:cf:39:a3: 45:cd:4c:1e:9d:6d:06:87:eb:bc:6c:78:f9:7c:79:eb:ed:e1: f7:91:ef:47:39:db:4c:9d:d2:b9:ee:08:d3:73:70:88:dd:c9: 29:3e:ba:26:e0:17:fa:96:a7:45:3e:ba:d0:94:a5:c6:46:6a: c7:ff:bf:4a:a2:bf:1a:31:ca:ce:d5:cc:37:0b:07:1b:1b:ab: df:21:fb:b4:1b:01:b4:75:5c:d7:6e:ed:7d:80:ba:4d:0c:ed: 4c:36:ee:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstC65B9unRgiYl+qX0WQw9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2ODA0NzhmYWVjOGI2N2RkZmVjZTYzNTdjZjI1Y2YyY2Ex ZDg1ZDAwHhcNMjUxMjE3MTYwMTM4WhcNMjUxMjE4MTYwMTM4WjAzMTEwLwYDVQQD EyhmZmU5MWQ4NjNmM2IzNjY5Nzc5ZDYwNjMzMjU5ZDFlNjQ1NGQ5NDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx5flGkQV26+MczsR09gQwHQwI59 apLtGBLsIUVB4TkrDq2Obynz6Gb1QtOf2VY2XXRyyZlMKIs6Ha2oOrcViYg9/ciW lohs5rJfjlQqJ95oOGbOfF23MazzUOsBEj5ZF2HZh/BkdiaF9Pz+ho7Ppas3GyxN AMHpiyAMmYboL9iYVDmKtUXkJvNbyHYDMTitUAromp1TahDVtTLC1NObunheRqqN rpFMhbXSNPWw1v9P6kKPbj5deKXnQKgTaQYZkP02sFTk5+S5sVe8RHpqaHIB0X0g zAxVJYel3FNpZd9VtP9J3SawbXynEkHMNZoqJayqcJOw/NAsJcyzF5FhIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/pHYY/OzZpd51gYzJZ0eZFTZRWMB8GA1UdIwQY MBaAFOaAR4+uyLZ93+zmNXzyXPLKHYXQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNW9CSGo2N0l0bjNmN09ZMWZQSmM4c29kaGRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yNWEwMWItNWZiMC00NDRlLWEyYzct MzM5YzlkNDg3NzRjLzEvNW9CSGo2N0l0bjNmN09ZMWZQSmM4c29kaGRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8yNWEwMWItNWZiMC00NDRlLWEyYzctMzM5YzlkNDg3NzRj LzEvNW9CSGo2N0l0bjNmN09ZMWZQSmM4c29kaGRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh8yXUqPX u6w9yAgYUO73O6kyNULAsTIzuPD9umfPCpoI7hCVfy2tktIN/e8snNjjaY7Hs2JE PTpl8BXtB6fFdtM4sFyTg7yLPk/IlAmG1iTqdBnKleIgp3Xol/rTrQxNUhiC3s4R k2SS67EyFSuUjIQEZvuTVYo5/5T5ihWNXfmfa/K8Rty3SX/J4V08YCGbJxqNmjxo HLqmHp6SdTcmzzmjRc1MHp1tBofrvGx4+Xx56+3h95HvRznbTJ3Sue4I03NwiN3J KT66JuAX+panRT660JSlxkZqx/+/SqK/GjHKztXMNwsHGxur3yH7tBsBtHVc127t fYC6TQztTDbunw== -----END CERTIFICATE-----Generated at Wed Dec 17 18:29:26 2025 by rpki-client