This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft File: rsr5Su3_76Q2a8or65GZLB2zTMw.mft (raw, json) Hash identifier: nBVXPSbZuBLOZfZ1xmNk4SBAHWYUO78inTKzmupGFAs= Subject key identifier: 48:D6:49:97:86:99:84:A5:8F:1C:56:72:C7:E6:DD:79:35:92:51:E3 Authority key identifier: AE:CA:F9:4A:ED:FF:EF:A4:36:6B:CA:2B:EB:91:99:2C:1D:B3:4C:CC Certificate issuer: /CN=aecaf94aedffefa4366bca2beb91992c1db34ccc Certificate serial: 019B2FD527558E7E84BC35AA6C350F93A04A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rsr5Su3_76Q2a8or65GZLB2zTMw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft Manifest number: 0B19 Signing time: Thu 18 Dec 2025 05:00:56 +0000 Manifest this update: Thu 18 Dec 2025 05:00:56 +0000 Manifest next update: Fri 19 Dec 2025 05:00:56 +0000 Files and hashes: 1: rsr5Su3_76Q2a8or65GZLB2zTMw.crl (hash: LGr5qSAKmUXMsNbAYionzJ67uIpiwzlAEK1Aik+ZQi0=) 2: ycsxAxwfvi_ZHCMIh-H72E7BXeY.roa (hash: 5XrkDdaM3UebECdsSy+x2CvwywLxmUspYKKtB6gwnm0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.crl rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft rsync://rpki.ripe.net/repository/DEFAULT/rsr5Su3_76Q2a8or65GZLB2zTMw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d5:27:55:8e:7e:84:bc:35:aa:6c:35:0f:93:a0:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aecaf94aedffefa4366bca2beb91992c1db34ccc Validity Not Before: Dec 18 05:00:56 2025 GMT Not After : Dec 19 05:00:56 2025 GMT Subject: CN=48d64997869984a58f1c5672c7e6dd79359251e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:29:8b:20:50:5e:c9:89:6e:51:02:d2:9e:e6: 09:cd:e5:6d:fb:6e:9e:48:1e:91:ce:e4:51:bf:fb: 92:4a:82:9a:48:bc:15:98:91:53:0f:a5:f3:bf:45: 74:bd:3e:0a:f1:f9:9d:81:32:5f:16:b6:4c:82:85: 8b:f9:22:48:8a:c2:3a:d1:0c:7f:cd:f2:24:c7:d5: 24:5c:a0:90:63:51:94:85:48:d9:b2:ff:cc:6a:d1: 82:a5:64:9c:b6:b4:bc:e5:b9:fb:8a:5c:dc:40:38: 46:8f:6a:a3:3c:8f:96:84:d1:8b:47:b2:8a:94:6f: 0c:c5:f9:e9:cb:4f:7c:7e:30:0f:43:9c:c3:21:ba: 33:6c:94:85:3c:16:86:c6:70:65:54:a5:8c:88:23: 57:d3:c1:8b:f0:e3:95:bb:6c:e2:ef:aa:62:a7:e7: 19:4e:fe:ba:4d:47:88:c8:eb:12:f9:48:c6:35:66: 09:79:28:27:18:48:a3:4f:09:3e:d3:6a:11:0f:eb: 51:6c:10:b5:ea:b4:ba:c8:85:1c:f9:22:ba:5c:af: 67:21:1f:f2:28:98:f1:ed:a0:5d:61:24:01:b3:2e: 03:fb:2e:82:bd:b5:c9:70:08:40:09:e1:1d:13:a7: 53:9d:e5:47:a8:42:9a:32:74:18:64:fc:0f:6b:81: 04:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:D6:49:97:86:99:84:A5:8F:1C:56:72:C7:E6:DD:79:35:92:51:E3 X509v3 Authority Key Identifier: keyid:AE:CA:F9:4A:ED:FF:EF:A4:36:6B:CA:2B:EB:91:99:2C:1D:B3:4C:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rsr5Su3_76Q2a8or65GZLB2zTMw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:70:0b:07:93:1c:10:75:72:3f:fe:56:a2:dc:3f:8d:33:2b: 2a:31:6e:7f:72:0f:52:a2:95:e2:18:fb:d1:44:d9:49:16:b6: ea:01:ba:d9:ae:2e:98:82:4f:23:e6:48:88:32:fb:0a:7e:ee: ce:d3:6b:95:af:ed:9c:72:5a:75:ad:81:e5:d9:04:99:00:fd: 61:78:3e:aa:34:91:2e:fc:c6:6a:c9:df:2a:d5:ae:a4:01:83: ba:dd:83:3b:a3:88:e4:85:05:aa:ab:63:b3:bf:a1:26:96:61: f7:a5:ca:1f:0c:1f:56:47:a2:69:d5:80:c3:2a:46:3f:ed:09: 5d:54:41:84:98:ce:2d:29:00:5d:e9:a9:8d:03:c4:9e:6f:2d: 35:4e:e0:f2:d2:14:2d:d4:18:d4:0c:28:74:9f:86:5e:ad:53: 71:d5:2c:a2:c8:9a:5a:bd:f1:71:52:ca:88:35:85:a5:4e:86: f9:26:b3:ba:f7:ee:db:eb:1c:80:88:d3:44:d1:6b:49:65:d2: 4b:ee:34:55:1d:0f:4a:e8:f6:4a:84:b8:1d:92:f2:70:27:7c: 3b:e7:ee:59:1d:6d:30:7c:41:56:f9:70:fe:48:d9:2d:cb:81: 56:b2:e4:2c:6e:de:8a:ff:43:77:fa:1f:15:56:dc:05:48:6a: 3d:db:82:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1SdVjn6EvDWqbDUPk6BKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlY2FmOTRhZWRmZmVmYTQzNjZiY2EyYmViOTE5OTJjMWRi MzRjY2MwHhcNMjUxMjE4MDUwMDU2WhcNMjUxMjE5MDUwMDU2WjAzMTEwLwYDVQQD Eyg0OGQ2NDk5Nzg2OTk4NGE1OGYxYzU2NzJjN2U2ZGQ3OTM1OTI1MWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1imLIFBeyYluUQLSnuYJzeVt+26e SB6RzuRRv/uSSoKaSLwVmJFTD6Xzv0V0vT4K8fmdgTJfFrZMgoWL+SJIisI60Qx/ zfIkx9UkXKCQY1GUhUjZsv/MatGCpWSctrS85bn7ilzcQDhGj2qjPI+WhNGLR7KK lG8Mxfnpy098fjAPQ5zDIbozbJSFPBaGxnBlVKWMiCNX08GL8OOVu2zi76pip+cZ Tv66TUeIyOsS+UjGNWYJeSgnGEijTwk+02oRD+tRbBC16rS6yIUc+SK6XK9nIR/y KJjx7aBdYSQBsy4D+y6CvbXJcAhACeEdE6dTneVHqEKaMnQYZPwPa4EEbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEjWSZeGmYSljxxWcsfm3Xk1klHjMB8GA1UdIwQY MBaAFK7K+Urt/++kNmvKK+uRmSwds0zMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnNyNVN1M183NlEyYThvcjY1R1pMQjJ6VE13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8wNDdkZWMtZDg0NC00NjdhLWEwMWEt ZmMwM2VmNzk0NzE4LzEvcnNyNVN1M183NlEyYThvcjY1R1pMQjJ6VE13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My8wNDdkZWMtZDg0NC00NjdhLWEwMWEtZmMwM2VmNzk0NzE4 LzEvcnNyNVN1M183NlEyYThvcjY1R1pMQjJ6VE13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO3ALB5Mc EHVyP/5Wotw/jTMrKjFuf3IPUqKV4hj70UTZSRa26gG62a4umIJPI+ZIiDL7Cn7u ztNrla/tnHJada2B5dkEmQD9YXg+qjSRLvzGasnfKtWupAGDut2DO6OI5IUFqqtj s7+hJpZh96XKHwwfVkeiadWAwypGP+0JXVRBhJjOLSkAXempjQPEnm8tNU7g8tIU LdQY1AwodJ+GXq1TcdUsosiaWr3xcVLKiDWFpU6G+Sazuvfu2+scgIjTRNFrSWXS S+40VR0PSuj2SoS4HZLycCd8O+fuWR1tMHxBVvlw/kjZLcuBVrLkLG7eiv9Dd/of FVbcBUhqPduC9A== -----END CERTIFICATE-----Generated at Thu Dec 18 09:55:59 2025 by rpki-client