This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/5ADgGnlalXLPsazYWWya0zxhJlk.mft File: 5ADgGnlalXLPsazYWWya0zxhJlk.mft (raw, json) Hash identifier: Z+L1H7tgW+Cq79R7gpG3RBoY9mJ2b+Ud7rrYt2U0F8M= Subject key identifier: 42:41:E0:2A:4A:0D:6C:A5:C1:77:07:8C:B1:2E:49:9A:16:BD:2E:17 Authority key identifier: E4:00:E0:1A:79:5A:95:72:CF:B1:AC:D8:59:6C:9A:D3:3C:61:26:59 Certificate issuer: /CN=e400e01a795a9572cfb1acd8596c9ad33c612659 Certificate serial: 019AF540DC968451D65349A436634253ED2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ADgGnlalXLPsazYWWya0zxhJlk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/5ADgGnlalXLPsazYWWya0zxhJlk.mft Manifest number: F6 Signing time: Sat 06 Dec 2025 20:00:59 +0000 Manifest this update: Sat 06 Dec 2025 20:00:59 +0000 Manifest next update: Sun 07 Dec 2025 20:00:59 +0000 Files and hashes: 1: 5ADgGnlalXLPsazYWWya0zxhJlk.crl (hash: EBpogB8SB7YQbfenNEwYlHirtJkCdJ1WbnDLB6pHs50=) 2: qkvMUmepPhpdWAB6-kEpJtY3NgA.roa (hash: qaU4Jh390H+MIqIOppGDPnJrwDH9PpOIvAh+NgpJEXk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/5ADgGnlalXLPsazYWWya0zxhJlk.crl rsync://rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/5ADgGnlalXLPsazYWWya0zxhJlk.mft rsync://rpki.ripe.net/repository/DEFAULT/5ADgGnlalXLPsazYWWya0zxhJlk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:dc:96:84:51:d6:53:49:a4:36:63:42:53:ed:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e400e01a795a9572cfb1acd8596c9ad33c612659 Validity Not Before: Dec 6 20:00:59 2025 GMT Not After : Dec 7 20:00:59 2025 GMT Subject: CN=4241e02a4a0d6ca5c177078cb12e499a16bd2e17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:73:d7:5d:40:77:55:8d:27:89:dc:7c:d8:98: 57:aa:6b:a7:4c:62:53:fd:fc:ad:69:fc:b5:f5:f6: ed:0a:57:f5:b0:dc:23:10:63:46:71:bf:01:8a:df: 2a:1d:83:94:92:b5:71:48:4b:47:8b:e3:8f:b3:1f: b9:b2:20:25:cd:fb:55:3e:aa:20:c9:c6:6e:da:14: 7e:2c:f0:7a:ec:8d:82:fb:7c:95:00:e1:b8:84:0d: 30:42:e3:f3:1e:50:7b:98:0c:a3:b3:4f:61:e2:78: 72:2d:57:ee:06:51:1c:5c:d7:5f:60:a5:41:c2:65: a2:60:05:2d:9d:f6:8f:63:72:5a:93:63:81:c5:16: cd:bd:63:ba:cd:7c:50:ad:9f:aa:0a:0d:99:dc:0c: 96:d5:34:22:3d:d4:3e:8a:8a:8e:ff:aa:44:69:4c: 95:fa:bf:53:47:25:2c:23:c1:1d:9c:68:4b:a7:27: 93:80:c3:fe:7a:a3:9e:4f:f6:8d:53:42:97:e6:0f: e6:93:26:d6:bd:39:eb:82:90:ec:29:4e:e7:b0:59: 8a:29:fa:35:3a:ca:61:b3:1f:84:93:1c:01:9a:ba: 4e:04:1d:e8:ed:41:aa:c4:37:6f:33:04:28:3a:92: f1:17:3c:af:23:6a:cb:98:d3:82:31:86:62:10:9e: 98:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:41:E0:2A:4A:0D:6C:A5:C1:77:07:8C:B1:2E:49:9A:16:BD:2E:17 X509v3 Authority Key Identifier: keyid:E4:00:E0:1A:79:5A:95:72:CF:B1:AC:D8:59:6C:9A:D3:3C:61:26:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ADgGnlalXLPsazYWWya0zxhJlk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/5ADgGnlalXLPsazYWWya0zxhJlk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/5ADgGnlalXLPsazYWWya0zxhJlk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:48:57:29:a7:bf:f1:02:5a:5a:51:76:d2:76:32:5b:2d:4c: 62:01:2f:6d:53:d2:a3:58:c1:8f:c9:80:28:8a:eb:42:0c:b0: 1b:c3:ce:03:ac:21:e8:8a:c1:31:38:48:eb:af:ea:98:e6:c7: dd:bd:84:8c:15:c3:c8:c1:d5:06:8b:47:ca:48:c5:06:ed:cf: 5e:b3:76:5f:4e:3a:67:d0:8f:8d:71:92:74:12:46:37:02:14: c4:0b:0b:be:10:2e:cb:ec:28:e7:80:96:40:27:09:64:68:2c: 14:7e:a2:eb:10:60:02:66:8e:0e:2a:e1:28:f9:93:51:42:c7: e0:ed:e8:26:dd:6b:c1:e7:11:54:9e:71:99:cf:6c:c7:ad:c3: ed:22:2b:34:1f:78:00:9a:ac:63:88:b1:ce:52:d1:41:df:17: a7:e3:72:3f:0e:fa:41:4b:e1:21:13:84:73:f1:51:ce:05:a1: 27:05:86:32:a8:cc:c1:78:3c:be:59:bd:95:e3:7d:6a:44:09: 20:f0:e2:aa:65:89:1b:0f:87:ee:79:d4:d3:74:ff:ef:5f:35: 87:6b:40:3d:7c:98:2e:a9:80:e5:65:e8:6a:ee:ff:5f:18:aa: d4:fc:c3:64:65:be:2d:2c:cb:bb:10:fc:ab:4a:36:4e:f8:2b: 2b:9b:b9:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QNyWhFHWU0mkNmNCU+0uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0MDBlMDFhNzk1YTk1NzJjZmIxYWNkODU5NmM5YWQzM2M2 MTI2NTkwHhcNMjUxMjA2MjAwMDU5WhcNMjUxMjA3MjAwMDU5WjAzMTEwLwYDVQQD Eyg0MjQxZTAyYTRhMGQ2Y2E1YzE3NzA3OGNiMTJlNDk5YTE2YmQyZTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13PXXUB3VY0nidx82JhXqmunTGJT /fytafy19fbtClf1sNwjEGNGcb8Bit8qHYOUkrVxSEtHi+OPsx+5siAlzftVPqog ycZu2hR+LPB67I2C+3yVAOG4hA0wQuPzHlB7mAyjs09h4nhyLVfuBlEcXNdfYKVB wmWiYAUtnfaPY3Jak2OBxRbNvWO6zXxQrZ+qCg2Z3AyW1TQiPdQ+ioqO/6pEaUyV +r9TRyUsI8EdnGhLpyeTgMP+eqOeT/aNU0KX5g/mkybWvTnrgpDsKU7nsFmKKfo1 Osphsx+EkxwBmrpOBB3o7UGqxDdvMwQoOpLxFzyvI2rLmNOCMYZiEJ6YvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJB4CpKDWylwXcHjLEuSZoWvS4XMB8GA1UdIwQY MBaAFOQA4Bp5WpVyz7Gs2FlsmtM8YSZZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUFEZ0dubGFsWExQc2F6WVdXeWEwenhoSmxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9hZWQyNjEtOTNiYy00YjBmLTk1Zjkt MGMzZWIxYTBkZDgwLzEvNUFEZ0dubGFsWExQc2F6WVdXeWEwenhoSmxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9hZWQyNjEtOTNiYy00YjBmLTk1ZjktMGMzZWIxYTBkZDgw LzEvNUFEZ0dubGFsWExQc2F6WVdXeWEwenhoSmxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAREhXKae/ 8QJaWlF20nYyWy1MYgEvbVPSo1jBj8mAKIrrQgywG8POA6wh6IrBMThI66/qmObH 3b2EjBXDyMHVBotHykjFBu3PXrN2X046Z9CPjXGSdBJGNwIUxAsLvhAuy+wo54CW QCcJZGgsFH6i6xBgAmaODirhKPmTUULH4O3oJt1rwecRVJ5xmc9sx63D7SIrNB94 AJqsY4ixzlLRQd8Xp+NyPw76QUvhIROEc/FRzgWhJwWGMqjMwXg8vlm9leN9akQJ IPDiqmWJGw+H7nnU03T/7181h2tAPXyYLqmA5WXoau7/Xxiq1PzDZGW+LSzLuxD8 q0o2TvgrK5u50Q== -----END CERTIFICATE-----Generated at Sun Dec 7 01:53:25 2025 by rpki-client