This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft File: 5D-RsCFSiCv5YF12vqQhqgvU5ig.mft (raw, json) Hash identifier: fojTDPkgGCvW7ig4vKu5cr86hO+EEW4d0NDEUUzn7fc= Subject key identifier: D5:B8:7F:1D:6D:53:72:C8:80:A1:B1:7B:B7:76:66:75:E3:11:8F:EB Authority key identifier: E4:3F:91:B0:21:52:88:2B:F9:60:5D:76:BE:A4:21:AA:0B:D4:E6:28 Certificate issuer: /CN=e43f91b02152882bf9605d76bea421aa0bd4e628 Certificate serial: 019B2D0B9FE9E297C0EFB65FEE1A579379FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D-RsCFSiCv5YF12vqQhqgvU5ig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft Manifest number: 0D6E Signing time: Wed 17 Dec 2025 16:01:35 +0000 Manifest this update: Wed 17 Dec 2025 16:01:35 +0000 Manifest next update: Thu 18 Dec 2025 16:01:35 +0000 Files and hashes: 1: 5D-RsCFSiCv5YF12vqQhqgvU5ig.crl (hash: V0DzJaa5Gdd1eNGIo5P4Gyd2sz1VumuPA2zN73QxRbI=) 2: 6nbOuYfu8sbFCAUPUpe64Bd3Rmc.roa (hash: wbgE92t6bLMyfvwqmBJusUZf/7LqDlcOflMgewrcKFc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft rsync://rpki.ripe.net/repository/DEFAULT/5D-RsCFSiCv5YF12vqQhqgvU5ig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:9f:e9:e2:97:c0:ef:b6:5f:ee:1a:57:93:79:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e43f91b02152882bf9605d76bea421aa0bd4e628 Validity Not Before: Dec 17 16:01:35 2025 GMT Not After : Dec 18 16:01:35 2025 GMT Subject: CN=d5b87f1d6d5372c880a1b17bb7766675e3118feb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7d:cd:8a:81:7d:46:8c:40:93:fc:82:32:5d: 52:d7:18:49:b2:f8:be:0a:e5:49:a5:e7:2c:73:d2: 30:ac:fd:0f:f5:50:3a:cf:92:76:51:97:2f:1f:fc: 47:e4:0a:bb:59:de:83:86:21:1f:1a:08:e3:57:e2: f1:89:e3:ad:a3:85:88:6e:df:f3:eb:c4:b7:c5:6f: d1:4f:b9:04:da:65:51:84:7a:1b:40:0a:01:7f:07: 67:c4:10:d8:13:6a:7b:5f:bc:3c:89:34:e1:f5:b6: e0:18:f3:d4:61:3f:4e:40:34:5e:14:dd:9e:c5:78: db:60:38:a8:8a:a5:42:d2:de:08:26:61:cf:af:74: 81:63:cb:6e:fa:be:76:71:87:71:fd:4a:a0:2e:36: 7b:e7:d2:a0:75:8c:27:54:b1:af:6b:4f:a3:d7:69: 11:c8:69:16:d9:d4:49:3f:57:77:53:4e:b2:ef:df: 17:3e:5d:f2:b6:67:23:3c:5a:98:7f:44:5a:9a:bb: 67:11:65:5a:ca:fe:10:77:e3:ab:cd:c2:3d:23:83: db:04:57:83:ae:d5:b9:fe:84:94:e8:2c:17:82:b0: af:e2:2b:c5:cf:2b:01:69:61:9b:1e:e6:c8:da:5b: 85:ec:c0:6c:63:30:98:c6:d1:8a:53:09:f7:3c:c9: 52:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B8:7F:1D:6D:53:72:C8:80:A1:B1:7B:B7:76:66:75:E3:11:8F:EB X509v3 Authority Key Identifier: keyid:E4:3F:91:B0:21:52:88:2B:F9:60:5D:76:BE:A4:21:AA:0B:D4:E6:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D-RsCFSiCv5YF12vqQhqgvU5ig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:af:0a:2d:60:51:8d:4e:f2:b7:8e:a8:89:ad:a8:e3:8c:38: f7:4e:8b:57:d6:91:74:d3:8f:4d:e6:fa:c0:b4:60:0a:86:6c: c6:59:e2:21:d9:d5:7f:8a:ca:7b:a3:b2:df:42:8a:d9:c1:88: 21:27:3d:f4:26:ba:f5:2b:78:a6:49:6a:e5:3c:d0:1c:b7:9b: 6d:b0:96:f8:d0:3d:8d:5b:e5:b1:21:2e:77:e0:3f:0d:db:a1: 0e:e4:b1:34:f0:a7:82:1a:d6:e1:e8:8a:61:1c:77:8c:4d:b7: 47:59:dc:aa:f7:53:52:96:64:b8:86:29:ae:ba:be:9b:6c:22: d6:9c:95:29:6b:7c:a7:34:b6:e8:68:eb:89:9b:a0:32:98:6a: d3:39:47:ae:7e:08:25:c1:e5:2b:0d:00:c4:af:8c:aa:82:b7: aa:b4:e9:21:1e:f9:a8:8c:b9:85:4b:9c:0d:87:2a:82:16:87: 1c:95:06:9d:05:a6:97:53:3b:fe:95:06:ef:23:d9:48:02:89: 91:5e:fe:a9:35:dd:a6:dc:50:e7:e7:cd:8b:d0:20:9c:9f:69: d2:2f:83:3b:47:00:5f:64:05:5a:27:fc:0f:2b:d1:fa:42:7a: ed:e9:80:90:2a:12:06:72:73:d7:e9:b4:02:81:f0:7e:5d:9e: 6b:c8:4c:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstC5/p4pfA77Zf7hpXk3n+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0M2Y5MWIwMjE1Mjg4MmJmOTYwNWQ3NmJlYTQyMWFhMGJk NGU2MjgwHhcNMjUxMjE3MTYwMTM1WhcNMjUxMjE4MTYwMTM1WjAzMTEwLwYDVQQD EyhkNWI4N2YxZDZkNTM3MmM4ODBhMWIxN2JiNzc2NjY3NWUzMTE4ZmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr33NioF9RoxAk/yCMl1S1xhJsvi+ CuVJpecsc9IwrP0P9VA6z5J2UZcvH/xH5Aq7Wd6DhiEfGgjjV+LxieOto4WIbt/z 68S3xW/RT7kE2mVRhHobQAoBfwdnxBDYE2p7X7w8iTTh9bbgGPPUYT9OQDReFN2e xXjbYDioiqVC0t4IJmHPr3SBY8tu+r52cYdx/UqgLjZ759KgdYwnVLGva0+j12kR yGkW2dRJP1d3U06y798XPl3ytmcjPFqYf0RamrtnEWVayv4Qd+OrzcI9I4PbBFeD rtW5/oSU6CwXgrCv4ivFzysBaWGbHubI2luF7MBsYzCYxtGKUwn3PMlSoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNW4fx1tU3LIgKGxe7d2ZnXjEY/rMB8GA1UdIwQY MBaAFOQ/kbAhUogr+WBddr6kIaoL1OYoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUQtUnNDRlNpQ3Y1WUYxMnZxUWhxZ3ZVNWlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8zMzRjNTYtMmU2OS00ZGEyLWIwMWQt MDMwODAyNjQxYzY3LzEvNUQtUnNDRlNpQ3Y1WUYxMnZxUWhxZ3ZVNWlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8zMzRjNTYtMmU2OS00ZGEyLWIwMWQtMDMwODAyNjQxYzY3 LzEvNUQtUnNDRlNpQ3Y1WUYxMnZxUWhxZ3ZVNWlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK68KLWBR jU7yt46oia2o44w4906LV9aRdNOPTeb6wLRgCoZsxlniIdnVf4rKe6Oy30KK2cGI ISc99Ca69St4pklq5TzQHLebbbCW+NA9jVvlsSEud+A/DduhDuSxNPCnghrW4eiK YRx3jE23R1ncqvdTUpZkuIYprrq+m2wi1pyVKWt8pzS26GjriZugMphq0zlHrn4I JcHlKw0AxK+MqoK3qrTpIR75qIy5hUucDYcqghaHHJUGnQWml1M7/pUG7yPZSAKJ kV7+qTXdptxQ5+fNi9AgnJ9p0i+DO0cAX2QFWif8DyvR+kJ67emAkCoSBnJz1+m0 AoHwfl2ea8hMyg== -----END CERTIFICATE-----Generated at Wed Dec 17 18:44:44 2025 by rpki-client