This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.mft File: 5S2LXLp8LSuK8EbrfzEBBawMCaw.mft (raw, json) Hash identifier: 2EMH948TN7cd6maVZBOCDHoMC7D9RF5dO2K1GaDi/wo= Subject key identifier: FE:16:39:F7:84:24:9C:7C:4C:C9:59:71:B7:F4:FC:4B:C5:4F:44:6B Authority key identifier: E5:2D:8B:5C:BA:7C:2D:2B:8A:F0:46:EB:7F:31:01:05:AC:0C:09:AC Certificate issuer: /CN=e52d8b5cba7c2d2b8af046eb7f310105ac0c09ac Certificate serial: 019AF38993CE148775C2E24C57657C72F422 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5S2LXLp8LSuK8EbrfzEBBawMCaw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.mft Manifest number: 055E Signing time: Sat 06 Dec 2025 12:01:10 +0000 Manifest this update: Sat 06 Dec 2025 12:01:10 +0000 Manifest next update: Sun 07 Dec 2025 12:01:10 +0000 Files and hashes: 1: 5S2LXLp8LSuK8EbrfzEBBawMCaw.crl (hash: sa6CMxV0vHD8ftw8uYrptSqOEmE9CUtTr07JjpY+GPA=) 2: GuglbdgQwP1s68zPxpBUKeDH1GE.roa (hash: Sf12fpSS/gSIfCrOMCQf0QxlhogqDHOYf+4YlIW4mDA=) 3: bXAo7mVEmX8iLg6GBEHUZO92vHY.roa (hash: VzCJRz8Ej6xsupU4wBQwIcnAcaQ/S8QtaCA4CMwW82M=) 4: xXGe4wyq05lrsF2tc38x8ySFe-g.roa (hash: ILPVEPIY9D2xyNF63XsnQpEMnM3xKobt0LuSW1aSmX4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.mft rsync://rpki.ripe.net/repository/DEFAULT/5S2LXLp8LSuK8EbrfzEBBawMCaw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:93:ce:14:87:75:c2:e2:4c:57:65:7c:72:f4:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e52d8b5cba7c2d2b8af046eb7f310105ac0c09ac Validity Not Before: Dec 6 12:01:10 2025 GMT Not After : Dec 7 12:01:10 2025 GMT Subject: CN=fe1639f784249c7c4cc95971b7f4fc4bc54f446b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9b:55:01:3d:47:ff:75:50:96:a6:78:21:67: 52:64:b8:2f:8a:1c:47:8b:60:b4:30:9f:2f:da:85: 71:a1:17:bd:17:12:47:a9:69:67:d9:c7:6e:06:8b: 60:d7:aa:a7:0f:04:6e:3d:73:6f:11:d9:a0:11:ee: fc:4a:4c:2c:6b:3a:76:e3:46:db:1e:2d:2a:60:49: 95:24:f9:83:e1:97:21:3d:db:2c:85:be:6e:57:c5: de:bf:b8:34:bc:75:98:e0:50:34:eb:02:31:c3:53: a2:11:ca:a9:fc:9a:c6:7e:23:02:34:0f:85:ac:af: 74:8b:70:b9:39:12:98:1a:b2:9f:52:36:ff:c4:a9: bd:09:bf:ca:52:30:e0:1c:83:ea:4d:d5:c6:02:41: 24:7d:90:30:f1:a7:4e:b4:ea:1f:7a:90:45:2f:01: 3f:ba:ab:f2:21:7a:61:c4:85:bc:d2:33:db:85:9a: 99:f4:f7:9b:81:8b:fe:17:e7:44:65:74:c4:70:47: 33:8e:16:db:c5:a0:02:d4:02:63:b6:ab:96:71:ca: 22:6e:b4:d6:82:fa:bc:1e:31:c3:f2:ec:4c:64:90: b9:2f:a6:95:1e:cf:c6:21:40:b7:e9:58:88:f6:bc: ba:19:59:8a:bf:0c:62:24:e8:42:4a:09:d2:4a:1c: 9e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:16:39:F7:84:24:9C:7C:4C:C9:59:71:B7:F4:FC:4B:C5:4F:44:6B X509v3 Authority Key Identifier: keyid:E5:2D:8B:5C:BA:7C:2D:2B:8A:F0:46:EB:7F:31:01:05:AC:0C:09:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5S2LXLp8LSuK8EbrfzEBBawMCaw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:87:e3:00:b9:bd:5e:0a:ff:a0:8a:9e:93:b2:80:0d:12:bb: eb:b7:5a:2e:5e:18:67:ea:f8:2f:86:88:21:31:0f:67:89:17: 30:f7:7f:13:15:18:96:18:da:28:9f:16:dc:56:a3:5c:8f:97: 35:22:a1:07:b3:14:0a:44:68:7a:20:d7:fc:a9:66:e0:aa:26: 7b:46:d9:f0:14:51:45:c9:b6:a1:11:99:c7:fc:c7:66:3b:ad: 16:93:60:0c:d8:ce:8c:0c:85:08:1b:ff:eb:9b:f7:96:a8:bc: 2f:d7:15:0e:44:ee:9f:68:1c:50:09:f8:c1:c9:28:9d:d9:b6: cd:13:58:50:eb:29:e4:bc:bb:8e:f2:95:98:53:75:b3:1e:8e: 61:8c:2a:49:e6:49:47:39:39:39:33:82:4c:99:33:83:cf:24: 38:aa:b6:da:8b:c1:8f:b5:6b:b9:46:19:e3:43:12:57:70:3d: 74:4c:c6:6a:a7:06:dd:b3:ff:9c:5b:c7:cb:6e:e4:ce:cf:75: 85:38:fb:87:04:e2:cf:bd:96:f5:88:e2:af:2c:bc:20:ed:e4: 04:4d:54:d7:90:77:3f:a6:87:db:7a:82:ee:2d:4b:57:9e:86: e4:49:43:39:63:84:71:d2:a0:b4:ff:98:6e:b7:a8:e6:0c:14: 5f:60:d7:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziZPOFId1wuJMV2V8cvQiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1MmQ4YjVjYmE3YzJkMmI4YWYwNDZlYjdmMzEwMTA1YWMw YzA5YWMwHhcNMjUxMjA2MTIwMTEwWhcNMjUxMjA3MTIwMTEwWjAzMTEwLwYDVQQD EyhmZTE2MzlmNzg0MjQ5YzdjNGNjOTU5NzFiN2Y0ZmM0YmM1NGY0NDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJtVAT1H/3VQlqZ4IWdSZLgvihxH i2C0MJ8v2oVxoRe9FxJHqWln2cduBotg16qnDwRuPXNvEdmgEe78Skwsazp240bb Hi0qYEmVJPmD4ZchPdsshb5uV8Xev7g0vHWY4FA06wIxw1OiEcqp/JrGfiMCNA+F rK90i3C5ORKYGrKfUjb/xKm9Cb/KUjDgHIPqTdXGAkEkfZAw8adOtOofepBFLwE/ uqvyIXphxIW80jPbhZqZ9PebgYv+F+dEZXTEcEczjhbbxaAC1AJjtquWccoibrTW gvq8HjHD8uxMZJC5L6aVHs/GIUC36ViI9ry6GVmKvwxiJOhCSgnSShyeeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP4WOfeEJJx8TMlZcbf0/EvFT0RrMB8GA1UdIwQY MBaAFOUti1y6fC0rivBG638xAQWsDAmsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVMyTFhMcDhMU3VLOEVicmZ6RUJCYXdNQ2F3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kNGY4M2QtZmI1My00MjRmLTg1MWQt YzBkMDYyYTc1MzU0LzEvNVMyTFhMcDhMU3VLOEVicmZ6RUJCYXdNQ2F3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9kNGY4M2QtZmI1My00MjRmLTg1MWQtYzBkMDYyYTc1MzU0 LzEvNVMyTFhMcDhMU3VLOEVicmZ6RUJCYXdNQ2F3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHIfjALm9 Xgr/oIqek7KADRK767daLl4YZ+r4L4aIITEPZ4kXMPd/ExUYlhjaKJ8W3FajXI+X NSKhB7MUCkRoeiDX/Klm4Kome0bZ8BRRRcm2oRGZx/zHZjutFpNgDNjOjAyFCBv/ 65v3lqi8L9cVDkTun2gcUAn4wckondm2zRNYUOsp5Ly7jvKVmFN1sx6OYYwqSeZJ Rzk5OTOCTJkzg88kOKq22ovBj7VruUYZ40MSV3A9dEzGaqcG3bP/nFvHy27kzs91 hTj7hwTiz72W9Yjiryy8IO3kBE1U15B3P6aH23qC7i1LV56G5ElDOWOEcdKgtP+Y breo5gwUX2DXpw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:26:35 2025 by rpki-client