This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft File: 5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft (raw, json) Hash identifier: Klbdt685dgqtprGAxOc10nPZwDOvHj/oAWCXSZoN+/M= Subject key identifier: 03:81:7C:37:2E:65:A6:DA:A6:DD:BA:F4:51:92:65:BE:93:CD:E7:C7 Authority key identifier: E6:6E:77:26:FF:53:A1:3C:80:CC:BC:A4:D5:D3:94:E4:E8:AE:F5:42 Certificate issuer: /CN=e66e7726ff53a13c80ccbca4d5d394e4e8aef542 Certificate serial: 019AF2402C7DA70565A37384AE22E8AD982D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft Manifest number: 11D2 Signing time: Sat 06 Dec 2025 06:01:23 +0000 Manifest this update: Sat 06 Dec 2025 06:01:23 +0000 Manifest next update: Sun 07 Dec 2025 06:01:23 +0000 Files and hashes: 1: 5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl (hash: 3IDyXy/ATDqLyHYp+wATKKk7ewRzXSJBdsKYNE1leVk=) 2: H6bhT27iuFLhHVqQgSnkWJ-ZJeU.roa (hash: i2LnQkjhZAFSNChfBlCEm3RTe0uFLiWtEs5W37IjKHk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:2c:7d:a7:05:65:a3:73:84:ae:22:e8:ad:98:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e66e7726ff53a13c80ccbca4d5d394e4e8aef542 Validity Not Before: Dec 6 06:01:23 2025 GMT Not After : Dec 7 06:01:23 2025 GMT Subject: CN=03817c372e65a6daa6ddbaf4519265be93cde7c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5e:c8:d6:02:d3:89:5b:e7:cc:48:0a:0f:e2: 12:83:18:2d:27:92:9f:29:85:0f:79:80:c6:ae:cf: cf:eb:6a:6f:c3:a7:b8:1f:1f:4f:da:ec:2c:b1:9f: 76:4e:c3:9a:aa:ef:66:4f:23:a8:3a:3d:e6:bf:80: d2:d7:8a:d6:75:7a:0d:2c:ad:75:09:3c:8f:bb:3d: 00:8f:7a:b6:33:05:5d:f4:68:83:19:4c:ca:11:be: 74:76:10:b6:59:31:47:de:62:25:2e:a6:7c:a2:8f: 6a:9c:82:1e:02:2d:4a:55:72:00:87:24:d4:95:cf: 8f:0a:2c:86:ba:98:4d:e5:79:e8:ca:db:22:7d:df: a1:a5:d1:51:af:83:98:c9:49:73:59:f3:98:89:06: ac:f0:40:f5:48:6f:8a:4e:2f:0c:96:77:41:31:23: 24:83:55:aa:30:50:3d:5e:ea:15:98:df:a2:da:53: 93:58:b4:f9:1f:f7:2f:24:1e:fd:90:23:5e:88:ec: f7:7d:01:4a:f7:1e:e6:a4:f6:35:cb:e5:8d:4f:e4: fd:c2:b0:6e:ca:3e:0b:24:f5:dd:2e:9e:de:32:b7: 27:6f:b8:7c:b5:74:fa:b9:3d:cd:81:12:a4:db:94: 10:ba:48:60:dd:77:f0:2c:52:24:df:c7:18:74:10: 3e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:81:7C:37:2E:65:A6:DA:A6:DD:BA:F4:51:92:65:BE:93:CD:E7:C7 X509v3 Authority Key Identifier: keyid:E6:6E:77:26:FF:53:A1:3C:80:CC:BC:A4:D5:D3:94:E4:E8:AE:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:c2:8c:a6:e4:ff:32:b6:2f:f2:a5:b3:0f:9f:5c:42:c4:ca: e3:ee:5a:c5:ef:61:30:38:a6:91:bd:37:d3:55:c2:c8:dd:d2: 53:64:c5:21:af:0c:01:69:2c:96:72:43:d3:3c:f2:3a:38:6f: 60:a4:64:9b:9f:ef:17:13:ad:98:1e:60:24:2e:40:dc:c9:9f: 5c:e5:84:b2:39:f6:19:22:dc:06:e8:ad:db:d0:7d:f9:2c:07: b0:4d:0a:c8:45:8d:9a:e9:7d:cc:f9:80:9f:c1:f3:5e:10:05: 49:f6:99:64:3f:db:a0:39:61:07:1b:56:2b:ff:e5:2b:02:6d: ab:39:01:56:d1:8d:64:20:66:ea:bb:b1:f3:cd:3e:58:7e:04: 84:d5:6b:22:a7:b4:70:f0:c6:c2:9d:e1:34:6e:fc:8a:10:ae: 90:3e:65:94:fa:e5:ca:67:03:09:26:21:cd:51:1f:b7:d4:a6: f2:47:b8:3d:2b:4f:83:c4:39:d1:7c:47:f5:38:69:72:40:6f: ff:9c:6f:82:80:57:15:d3:5a:65:4b:58:f1:4f:1c:97:47:63: 64:45:18:8c:c9:26:8a:f5:fd:91:d5:75:3f:4e:1e:7e:af:c8: 02:0f:d8:2a:76:a6:01:3b:b8:b1:0c:82:87:42:61:ec:af:e1: 92:4a:11:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQCx9pwVlo3OEriLorZgtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2NmU3NzI2ZmY1M2ExM2M4MGNjYmNhNGQ1ZDM5NGU0ZThh ZWY1NDIwHhcNMjUxMjA2MDYwMTIzWhcNMjUxMjA3MDYwMTIzWjAzMTEwLwYDVQQD EygwMzgxN2MzNzJlNjVhNmRhYTZkZGJhZjQ1MTkyNjViZTkzY2RlN2M3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAll7I1gLTiVvnzEgKD+ISgxgtJ5Kf KYUPeYDGrs/P62pvw6e4Hx9P2uwssZ92TsOaqu9mTyOoOj3mv4DS14rWdXoNLK11 CTyPuz0Aj3q2MwVd9GiDGUzKEb50dhC2WTFH3mIlLqZ8oo9qnIIeAi1KVXIAhyTU lc+PCiyGuphN5Xnoytsifd+hpdFRr4OYyUlzWfOYiQas8ED1SG+KTi8MlndBMSMk g1WqMFA9XuoVmN+i2lOTWLT5H/cvJB79kCNeiOz3fQFK9x7mpPY1y+WNT+T9wrBu yj4LJPXdLp7eMrcnb7h8tXT6uT3NgRKk25QQukhg3XfwLFIk38cYdBA+5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAOBfDcuZabapt269FGSZb6TzefHMB8GA1UdIwQY MBaAFOZudyb/U6E8gMy8pNXTlOTorvVCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNW01M0p2OVRvVHlBekx5azFkT1U1T2l1OVVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8zMWIxMWYtMmI2Yi00MjUyLTk5MGIt NTE2Y2E4NGZlNWZlLzEvNW01M0p2OVRvVHlBekx5azFkT1U1T2l1OVVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8zMWIxMWYtMmI2Yi00MjUyLTk5MGItNTE2Y2E4NGZlNWZl LzEvNW01M0p2OVRvVHlBekx5azFkT1U1T2l1OVVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmcKMpuT/ MrYv8qWzD59cQsTK4+5axe9hMDimkb0301XCyN3SU2TFIa8MAWkslnJD0zzyOjhv YKRkm5/vFxOtmB5gJC5A3MmfXOWEsjn2GSLcBuit29B9+SwHsE0KyEWNmul9zPmA n8HzXhAFSfaZZD/boDlhBxtWK//lKwJtqzkBVtGNZCBm6rux880+WH4EhNVrIqe0 cPDGwp3hNG78ihCukD5llPrlymcDCSYhzVEft9Sm8ke4PStPg8Q50XxH9ThpckBv /5xvgoBXFdNaZUtY8U8cl0djZEUYjMkmivX9kdV1P04efq/IAg/YKnamATu4sQyC h0Jh7K/hkkoRpA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:22:49 2025 by rpki-client