This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.mft File: 5XXe8Yp160XEQHcaziRsUOip0xY.mft (raw, json) Hash identifier: R+ukvTDaXqvTcvEMC9dl6MNRwJovWxzHUdCEKoaQvac= Subject key identifier: D5:5C:77:71:E6:5A:1C:40:23:A3:8F:05:8A:0F:E3:F5:06:E7:F9:8C Authority key identifier: E5:75:DE:F1:8A:75:EB:45:C4:40:77:1A:CE:24:6C:50:E8:A9:D3:16 Certificate issuer: /CN=e575def18a75eb45c440771ace246c50e8a9d316 Certificate serial: 019B454A18E1485386C0706D2BF7E8A12F71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XXe8Yp160XEQHcaziRsUOip0xY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.mft Manifest number: 0A96 Signing time: Mon 22 Dec 2025 09:00:42 +0000 Manifest this update: Mon 22 Dec 2025 09:00:42 +0000 Manifest next update: Tue 23 Dec 2025 09:00:42 +0000 Files and hashes: 1: 5XXe8Yp160XEQHcaziRsUOip0xY.crl (hash: rAT7may8ssADGnrz1AXDEjBXBsOxfEGVkjsmaFVLCK8=) 2: OSfCvRDn5rwH2xpcMtEUP0sV1D0.roa (hash: YJd7BM/YO/DejIANNT19DgGaGBCVl/athIJy3uYWmVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.mft rsync://rpki.ripe.net/repository/DEFAULT/5XXe8Yp160XEQHcaziRsUOip0xY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 09:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:4a:18:e1:48:53:86:c0:70:6d:2b:f7:e8:a1:2f:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e575def18a75eb45c440771ace246c50e8a9d316 Validity Not Before: Dec 22 09:00:42 2025 GMT Not After : Dec 23 09:00:42 2025 GMT Subject: CN=d55c7771e65a1c4023a38f058a0fe3f506e7f98c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ca:bc:1c:d0:5b:72:97:e4:ba:57:dc:ae:12: 57:48:22:67:b6:f9:0f:5f:03:11:a8:e6:de:04:6a: d3:f7:25:6c:1f:e2:62:c8:e9:8a:43:23:56:45:1a: 1c:e8:f1:a8:6c:2d:ab:a5:78:00:4d:99:48:57:a7: c8:e9:18:30:46:10:85:64:07:0e:f9:2a:4e:0d:31: b0:2b:73:5b:9c:cb:87:79:ea:d2:52:af:a2:f8:4a: 04:c5:47:fc:6b:4b:33:89:f5:0a:12:10:31:01:a8: e6:9a:08:f9:db:5e:3a:c9:0e:88:61:52:12:1c:e5: 02:ff:86:68:1a:da:20:26:5d:fa:b8:b8:93:fe:eb: 7c:79:75:7c:4a:99:dc:23:54:8d:73:ce:7d:a5:77: 3b:2b:39:1e:bd:0c:e2:c7:8f:ab:e9:e8:b5:72:1f: 90:8d:45:8d:fb:ef:63:80:08:8d:ce:de:5e:f8:ab: ea:8d:b7:d5:b1:6b:70:1f:0a:d8:90:09:47:48:aa: db:e7:c8:9d:40:a5:4d:68:f8:8e:1b:61:f5:fb:91: ab:f2:b9:06:3d:95:f7:c3:cb:c0:81:f3:d2:16:08: fb:c1:98:13:ea:6a:f2:ea:78:ee:20:aa:b3:cf:36: 3e:a3:f1:4c:36:50:3a:40:96:18:7d:72:d8:74:e8: 4b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:5C:77:71:E6:5A:1C:40:23:A3:8F:05:8A:0F:E3:F5:06:E7:F9:8C X509v3 Authority Key Identifier: keyid:E5:75:DE:F1:8A:75:EB:45:C4:40:77:1A:CE:24:6C:50:E8:A9:D3:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XXe8Yp160XEQHcaziRsUOip0xY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:90:00:1b:c7:d5:36:5b:7a:38:55:69:0b:43:3a:6a:cb:f3: ab:08:5b:79:f4:74:c7:85:f1:91:cd:14:74:7a:b7:e3:5c:6a: 7e:b7:e9:86:10:d9:84:7f:e2:e6:49:91:fc:7d:80:88:a8:0c: 44:af:68:b4:28:af:b0:7d:ad:f5:bf:a9:e4:c3:83:60:e4:65: 39:49:06:a1:04:e8:f1:82:50:ac:76:99:34:5b:29:09:4e:68: 97:1f:e5:23:53:bd:d6:aa:e1:05:59:7e:67:5b:e4:43:a7:bb: f6:7c:c8:1f:b4:38:81:e6:89:9d:6d:da:5a:e5:4b:3f:ad:56: 0d:e9:4f:43:75:94:8d:77:8d:db:7c:7f:f7:99:bb:7a:5d:18: 8f:04:ae:53:d0:a4:34:6c:8f:a3:a6:df:75:f5:ac:2e:3d:43: e3:c7:88:3d:c4:bf:f2:fc:57:89:8b:58:55:02:9b:53:ce:03: 46:8a:65:ee:73:fb:fc:8d:b7:0e:4f:69:47:d1:9b:72:f0:42: 6a:7d:ad:82:b1:bc:4e:81:e5:d8:dc:fd:8a:57:e8:d0:0c:62: 8d:3b:da:b9:51:85:bc:5a:06:94:4b:ba:c3:5e:06:6e:2b:5e: 44:8f:22:9a:db:d3:1a:a4:42:0d:1a:d2:63:ff:05:4a:f3:7e: f7:60:a4:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFShjhSFOGwHBtK/fooS9xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NzVkZWYxOGE3NWViNDVjNDQwNzcxYWNlMjQ2YzUwZThh OWQzMTYwHhcNMjUxMjIyMDkwMDQyWhcNMjUxMjIzMDkwMDQyWjAzMTEwLwYDVQQD EyhkNTVjNzc3MWU2NWExYzQwMjNhMzhmMDU4YTBmZTNmNTA2ZTdmOThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksq8HNBbcpfkulfcrhJXSCJntvkP XwMRqObeBGrT9yVsH+JiyOmKQyNWRRoc6PGobC2rpXgATZlIV6fI6RgwRhCFZAcO +SpODTGwK3NbnMuHeerSUq+i+EoExUf8a0szifUKEhAxAajmmgj52146yQ6IYVIS HOUC/4ZoGtogJl36uLiT/ut8eXV8SpncI1SNc859pXc7KzkevQzix4+r6ei1ch+Q jUWN++9jgAiNzt5e+KvqjbfVsWtwHwrYkAlHSKrb58idQKVNaPiOG2H1+5Gr8rkG PZX3w8vAgfPSFgj7wZgT6mry6njuIKqzzzY+o/FMNlA6QJYYfXLYdOhLAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNVcd3HmWhxAI6OPBYoP4/UG5/mMMB8GA1UdIwQY MBaAFOV13vGKdetFxEB3Gs4kbFDoqdMWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVhYZThZcDE2MFhFUUhjYXppUnNVT2lwMHhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9jYTA4OTgtMjk3OS00M2FlLThiODkt ZmI5NzQxMzU5NzI3LzEvNVhYZThZcDE2MFhFUUhjYXppUnNVT2lwMHhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9jYTA4OTgtMjk3OS00M2FlLThiODktZmI5NzQxMzU5NzI3 LzEvNVhYZThZcDE2MFhFUUhjYXppUnNVT2lwMHhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgpAAG8fV Nlt6OFVpC0M6asvzqwhbefR0x4Xxkc0UdHq341xqfrfphhDZhH/i5kmR/H2AiKgM RK9otCivsH2t9b+p5MODYORlOUkGoQTo8YJQrHaZNFspCU5olx/lI1O91qrhBVl+ Z1vkQ6e79nzIH7Q4geaJnW3aWuVLP61WDelPQ3WUjXeN23x/95m7el0YjwSuU9Ck NGyPo6bfdfWsLj1D48eIPcS/8vxXiYtYVQKbU84DRopl7nP7/I23Dk9pR9GbcvBC an2tgrG8ToHl2Nz9ilfo0AxijTvauVGFvFoGlEu6w14GbiteRI8imtvTGqRCDRrS Y/8FSvN+92Ck1w== -----END CERTIFICATE-----Generated at Mon Dec 22 12:33:28 2025 by rpki-client