This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.mft File: 5acKgaoDCKPLv2hXixgPNWtu2Kw.mft (raw, json) Hash identifier: lKy+NRR5Ye3yquDeF8TG4ExliDPXRvZFRbvWBci4sCE= Subject key identifier: 78:D1:05:6F:3B:2B:39:0A:11:DC:23:57:B8:31:8B:7E:F1:A4:0C:7D Authority key identifier: E5:A7:0A:81:AA:03:08:A3:CB:BF:68:57:8B:18:0F:35:6B:6E:D8:AC Certificate issuer: /CN=e5a70a81aa0308a3cbbf68578b180f356b6ed8ac Certificate serial: 019AF088620D14072165CD258B3A218916E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5acKgaoDCKPLv2hXixgPNWtu2Kw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.mft Manifest number: 21 Signing time: Fri 05 Dec 2025 22:01:01 +0000 Manifest this update: Fri 05 Dec 2025 22:01:01 +0000 Manifest next update: Sat 06 Dec 2025 22:01:01 +0000 Files and hashes: 1: 5acKgaoDCKPLv2hXixgPNWtu2Kw.crl (hash: 5irq33/y2bOx0f7GXjICaeyQZdWF1JBterlO5eZ0vUs=) 2: CR5pF2HbE6D5LcTETffukkx2vck.roa (hash: kN5s4H8iChAANCid30crO48UwA7aOOJPbdOFsCvMt/A=) 3: wCY1_XE2obeKJbx5m_aVtIIpSJ0.roa (hash: IrizyUZppxsaZx9puuAZtialqb9m0XB5Lu51pe6ilJg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.crl rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.mft rsync://rpki.ripe.net/repository/DEFAULT/5acKgaoDCKPLv2hXixgPNWtu2Kw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:62:0d:14:07:21:65:cd:25:8b:3a:21:89:16:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5a70a81aa0308a3cbbf68578b180f356b6ed8ac Validity Not Before: Dec 5 22:01:01 2025 GMT Not After : Dec 6 22:01:01 2025 GMT Subject: CN=78d1056f3b2b390a11dc2357b8318b7ef1a40c7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:37:0a:83:cc:09:4c:3b:29:48:33:99:e8:83: b3:be:aa:62:a6:6e:9a:83:42:a9:83:24:20:02:e1: c9:c5:f5:ed:13:66:50:99:fe:de:be:2b:77:91:2e: 8b:50:02:b9:3c:41:8e:94:d1:30:1c:d2:4c:29:5a: 1c:e2:78:5b:6b:76:e4:f3:f5:3d:19:3c:ea:f3:73: e7:da:8d:ce:3b:86:2a:6f:ea:db:22:bf:49:9f:06: 20:34:f6:33:fd:7b:db:67:80:5e:a9:d3:1a:8c:85: 32:5f:bf:d8:58:0f:d8:d1:f2:ea:58:f5:33:2d:5a: 35:bb:76:9c:c5:bf:e8:bd:a1:d9:92:83:b5:19:93: 1c:b6:fc:2e:60:60:17:fd:cd:56:43:b5:9e:6e:dc: e8:f6:00:11:e7:53:e5:8e:df:c8:dd:91:eb:bb:c0: ad:63:fc:c4:06:24:f4:32:0c:82:b9:0c:d7:1b:e9: e5:02:b4:c6:3d:e5:4a:09:72:03:c2:e2:d7:0a:cb: f1:da:25:50:2e:e4:7e:86:c0:95:ff:2b:b6:23:0a: 13:be:c5:40:e3:5d:19:94:b5:1a:0b:72:ce:97:db: bd:4e:10:ea:e4:34:75:20:15:2b:cb:cf:ad:0c:0f: 6f:4d:99:57:23:90:fe:c9:cd:e6:02:6d:51:ef:14: 9c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:D1:05:6F:3B:2B:39:0A:11:DC:23:57:B8:31:8B:7E:F1:A4:0C:7D X509v3 Authority Key Identifier: keyid:E5:A7:0A:81:AA:03:08:A3:CB:BF:68:57:8B:18:0F:35:6B:6E:D8:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5acKgaoDCKPLv2hXixgPNWtu2Kw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:58:39:b4:44:0c:b6:0d:a9:bd:9f:be:bc:01:b9:a0:52:a3: 24:81:10:57:b6:31:a4:90:5a:d9:73:64:3c:8c:48:59:fc:7d: 3f:ac:42:13:81:a9:34:84:bf:81:9a:06:2c:30:08:32:43:5c: 10:ad:e1:ed:d6:20:8c:28:1c:f4:60:ce:49:c5:b1:14:34:65: 64:33:b2:53:1e:10:5a:d0:bf:62:2c:59:16:58:33:1e:a8:42: 63:0a:b2:a6:ee:c1:f8:65:40:a6:82:b6:ef:44:09:89:52:49: 40:e1:4d:fd:e6:12:5e:10:53:a6:42:29:62:32:8b:97:b5:57: 2c:cc:fd:50:8c:19:92:19:5c:34:ff:c9:8d:6d:fe:ea:db:2c: 87:80:c7:f4:01:17:6a:8f:8e:e5:ae:df:9c:fb:10:8b:8d:ee: 1a:68:83:99:81:a3:79:a7:68:37:89:f3:ba:4d:a5:fa:a0:ff: 24:6b:8a:bd:a8:36:d1:8f:db:c6:1d:4c:36:88:3f:f6:39:48: 87:9c:b9:bb:9d:c2:4d:9f:26:21:c4:cd:f2:e1:04:2c:43:59: 36:ad:66:35:dd:e5:3a:58:5c:b5:61:18:59:4f:a3:d5:46:3b: d1:e3:30:a9:e6:fe:ba:b0:6a:2b:19:9a:16:09:e8:73:fb:78: f7:00:3f:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiGINFAchZc0lizohiRbiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YTcwYTgxYWEwMzA4YTNjYmJmNjg1NzhiMTgwZjM1NmI2 ZWQ4YWMwHhcNMjUxMjA1MjIwMTAxWhcNMjUxMjA2MjIwMTAxWjAzMTEwLwYDVQQD Eyg3OGQxMDU2ZjNiMmIzOTBhMTFkYzIzNTdiODMxOGI3ZWYxYTQwYzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDcKg8wJTDspSDOZ6IOzvqpipm6a g0KpgyQgAuHJxfXtE2ZQmf7evit3kS6LUAK5PEGOlNEwHNJMKVoc4nhba3bk8/U9 GTzq83Pn2o3OO4Yqb+rbIr9JnwYgNPYz/XvbZ4BeqdMajIUyX7/YWA/Y0fLqWPUz LVo1u3acxb/ovaHZkoO1GZMctvwuYGAX/c1WQ7Webtzo9gAR51Pljt/I3ZHru8Ct Y/zEBiT0MgyCuQzXG+nlArTGPeVKCXIDwuLXCsvx2iVQLuR+hsCV/yu2IwoTvsVA 410ZlLUaC3LOl9u9ThDq5DR1IBUry8+tDA9vTZlXI5D+yc3mAm1R7xScQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHjRBW87KzkKEdwjV7gxi37xpAx9MB8GA1UdIwQY MBaAFOWnCoGqAwijy79oV4sYDzVrbtisMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWFjS2dhb0RDS1BMdjJoWGl4Z1BOV3R1Mkt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8zMWQxZjAtOTRlNS00ZmQ0LTg3ZjIt ZWU5NmUyOGVhNmU5LzEvNWFjS2dhb0RDS1BMdjJoWGl4Z1BOV3R1Mkt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8zMWQxZjAtOTRlNS00ZmQ0LTg3ZjItZWU5NmUyOGVhNmU5 LzEvNWFjS2dhb0RDS1BMdjJoWGl4Z1BOV3R1Mkt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt1g5tEQM tg2pvZ++vAG5oFKjJIEQV7YxpJBa2XNkPIxIWfx9P6xCE4GpNIS/gZoGLDAIMkNc EK3h7dYgjCgc9GDOScWxFDRlZDOyUx4QWtC/YixZFlgzHqhCYwqypu7B+GVApoK2 70QJiVJJQOFN/eYSXhBTpkIpYjKLl7VXLMz9UIwZkhlcNP/JjW3+6tssh4DH9AEX ao+O5a7fnPsQi43uGmiDmYGjeadoN4nzuk2l+qD/JGuKvag20Y/bxh1MNog/9jlI h5y5u53CTZ8mIcTN8uEELENZNq1mNd3lOlhctWEYWU+j1UY70eMwqeb+urBqKxma Fgnoc/t49wA/Hw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:02:48 2025 by rpki-client