This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft File: 5LEwYQHMnsn86YUoDB2w83wTWjo.mft (raw, json) Hash identifier: 0tvz7E6pzQI9TR15h+64cwVkKnt5BInVFup60VLj7xY= Subject key identifier: C4:FE:0A:C8:35:95:56:4F:C1:FA:74:47:4F:B4:7D:74:BA:EA:5B:46 Authority key identifier: E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A Certificate issuer: /CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a Certificate serial: 019B3DFE5B5815D2AE73E8341B2AD42948AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft Manifest number: 12CB Signing time: Sat 20 Dec 2025 23:00:38 +0000 Manifest this update: Sat 20 Dec 2025 23:00:38 +0000 Manifest next update: Sun 21 Dec 2025 23:00:38 +0000 Files and hashes: 1: 5LEwYQHMnsn86YUoDB2w83wTWjo.crl (hash: pPrtFzwFKv09hQTrdCZ2PrxrJ4r97/VJAfu1l9tEqlc=) 2: kI0vHB0itKLKV54MYG6cGrVo0eY.roa (hash: C5TgalX0uC/rPE4DDIN7aoT3cFXmNAi4cZYsmZl5eDw=) 3: u8V02AIoZzOPfjpi5j7wtSWVgSg.roa (hash: 9pvkolnrpZjRfbBA2Q8IhG+FM5X8l0p9e5PvDFmhqmQ=) 4: y-M_EBDyqDFIVawFxida8qjR5Co.roa (hash: OVypj78ZSdDN2W9JmlOfV0llyXCESZchLL8yqQ85v9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:5b:58:15:d2:ae:73:e8:34:1b:2a:d4:29:48:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a Validity Not Before: Dec 20 23:00:38 2025 GMT Not After : Dec 21 23:00:38 2025 GMT Subject: CN=c4fe0ac83595564fc1fa74474fb47d74baea5b46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e2:35:88:12:5a:6d:e0:57:46:e2:ec:a3:7e: 5a:de:45:10:ea:b2:1e:9a:19:9b:d5:0f:8a:86:4a: 49:4b:3e:2f:22:0a:9e:ac:bc:a1:fb:5e:18:d4:2e: b1:bc:23:24:96:1a:84:98:3c:e7:1f:f5:18:82:7a: 3d:70:94:22:06:3a:23:e9:d4:9b:ba:a3:8c:f7:6b: 43:e4:50:f8:1e:c9:a5:76:a5:e2:68:49:6d:2c:b4: e0:10:4a:5e:dc:00:ea:b1:f6:0b:58:74:b1:60:e1: 29:d3:ca:75:48:e6:1c:68:6d:a1:37:d4:d3:ee:d0: ba:f1:59:16:56:88:dc:88:c4:c2:81:7b:7f:87:d2: f4:05:9a:77:bf:66:df:d8:e7:4c:86:8f:87:55:f4: b8:b8:b0:da:8f:5d:af:c7:1f:ca:45:11:1d:11:8e: 7e:98:a2:be:c0:cb:ed:09:b6:d5:65:c9:c7:ca:f9: 21:a6:5d:32:e4:5b:4e:16:41:55:ba:c8:41:e1:4f: 1a:cd:15:84:5e:c2:f4:32:dd:e9:18:7a:39:16:a6: 97:e1:68:d7:a1:d0:4d:ed:29:ea:80:59:85:4a:f1: 53:d3:da:6c:8f:ac:e2:10:25:72:51:73:da:b9:73: 5f:1b:fc:99:24:87:21:03:ce:f5:e5:8c:cb:c8:c6: d7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:FE:0A:C8:35:95:56:4F:C1:FA:74:47:4F:B4:7D:74:BA:EA:5B:46 X509v3 Authority Key Identifier: keyid:E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:ac:88:fe:1b:fe:25:b1:54:97:48:6f:e2:0e:3f:b1:33:48: 13:29:79:8c:ad:69:c5:4c:22:5d:64:53:9f:33:2f:de:65:54: e6:e8:a3:e0:6a:d9:2a:93:e1:56:47:49:f7:16:cd:53:5e:8c: 27:fb:39:bc:e3:be:e1:75:08:4c:b4:87:90:e5:26:ed:6b:cc: 67:1c:79:a6:4d:32:29:2f:79:26:ec:bd:d0:29:c1:74:c8:3a: bc:c8:bb:93:9b:42:12:6d:dc:f3:c3:cf:08:50:95:e7:0c:80: fa:22:7a:de:51:bc:5b:b9:2b:5c:36:9a:7f:b9:6c:dd:37:a7: 35:2c:f5:b9:7e:69:c7:2b:0b:c3:07:df:16:0c:5a:04:41:53: b8:a4:6e:7f:97:49:b1:a5:50:c8:37:b6:1f:95:5e:8f:d8:8f: 9c:2d:ed:61:6b:7e:b1:0a:c5:b0:d1:69:7a:66:6f:8e:a8:d6: 73:d8:c4:05:63:bc:e7:bf:2d:83:f3:b4:2c:f6:36:94:ed:74: 6a:41:c0:19:b7:68:38:9a:35:7c:87:6b:da:81:4f:7c:b2:35: c9:fe:f3:b2:8f:96:9b:34:c4:0f:70:9d:22:78:1f:00:00:bc: 45:81:97:52:b2:8d:52:d6:2f:ba:ff:a9:97:53:2f:44:e0:14: 7d:8c:a5:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/ltYFdKuc+g0GyrUKUivMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YjEzMDYxMDFjYzllYzlmY2U5ODUyODBjMWRiMGYzN2Mx MzVhM2EwHhcNMjUxMjIwMjMwMDM4WhcNMjUxMjIxMjMwMDM4WjAzMTEwLwYDVQQD EyhjNGZlMGFjODM1OTU1NjRmYzFmYTc0NDc0ZmI0N2Q3NGJhZWE1YjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuI1iBJabeBXRuLso35a3kUQ6rIe mhmb1Q+KhkpJSz4vIgqerLyh+14Y1C6xvCMklhqEmDznH/UYgno9cJQiBjoj6dSb uqOM92tD5FD4HsmldqXiaEltLLTgEEpe3ADqsfYLWHSxYOEp08p1SOYcaG2hN9TT 7tC68VkWVojciMTCgXt/h9L0BZp3v2bf2OdMho+HVfS4uLDaj12vxx/KRREdEY5+ mKK+wMvtCbbVZcnHyvkhpl0y5FtOFkFVushB4U8azRWEXsL0Mt3pGHo5FqaX4WjX odBN7SnqgFmFSvFT09psj6ziECVyUXPauXNfG/yZJIchA8715YzLyMbXIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMT+Csg1lVZPwfp0R0+0fXS66ltGMB8GA1UdIwQY MBaAFOSxMGEBzJ7J/OmFKAwdsPN8E1o6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUxFd1lRSE1uc244NllVb0RCMnc4M3dUV2pvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS80ZDA4OWUtNWQxYy00ZTM0LTk0NjUt ZmE2MzQ4ZjY5NWI1LzEvNUxFd1lRSE1uc244NllVb0RCMnc4M3dUV2pvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS80ZDA4OWUtNWQxYy00ZTM0LTk0NjUtZmE2MzQ4ZjY5NWI1 LzEvNUxFd1lRSE1uc244NllVb0RCMnc4M3dUV2pvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXqyI/hv+ JbFUl0hv4g4/sTNIEyl5jK1pxUwiXWRTnzMv3mVU5uij4GrZKpPhVkdJ9xbNU16M J/s5vOO+4XUITLSHkOUm7WvMZxx5pk0yKS95Juy90CnBdMg6vMi7k5tCEm3c88PP CFCV5wyA+iJ63lG8W7krXDaaf7ls3TenNSz1uX5pxysLwwffFgxaBEFTuKRuf5dJ saVQyDe2H5Vej9iPnC3tYWt+sQrFsNFpemZvjqjWc9jEBWO8578tg/O0LPY2lO10 akHAGbdoOJo1fIdr2oFPfLI1yf7zso+WmzTED3CdIngfAAC8RYGXUrKNUtYvuv+p l1MvROAUfYylFg== -----END CERTIFICATE-----Generated at Sun Dec 21 08:54:30 2025 by rpki-client