This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft File: 5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft (raw, json) Hash identifier: pVhHD75MXRQFFjrlwYXj+rKf7VmIsAuTlgq27iTA9zY= Subject key identifier: 29:58:ED:53:0D:46:02:3E:52:BD:68:03:A9:BE:93:A6:92:DD:87:CA Authority key identifier: E5:4A:B8:9D:33:BD:8A:A9:43:8A:1D:D0:B4:C5:9E:DB:EB:0C:64:EE Certificate issuer: /CN=e54ab89d33bd8aa9438a1dd0b4c59edbeb0c64ee Certificate serial: 019B262DDD9C409E76E9CDA9908440781183 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Uq4nTO9iqlDih3QtMWe2-sMZO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft Manifest number: 076A Signing time: Tue 16 Dec 2025 08:01:38 +0000 Manifest this update: Tue 16 Dec 2025 08:01:38 +0000 Manifest next update: Wed 17 Dec 2025 08:01:38 +0000 Files and hashes: 1: 5Uq4nTO9iqlDih3QtMWe2-sMZO4.crl (hash: PSUl2ba8iSez9y8O9cdWJm3Nu9w/P/d4VpOFNz/0QDs=) 2: zwhatF5o3yk6nLXIa0yxqzP0ZTc.roa (hash: 9S00G7VwkBsXnXA2C5JQWmhqMbRgsqzBdUuOpwkdR1g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft rsync://rpki.ripe.net/repository/DEFAULT/5Uq4nTO9iqlDih3QtMWe2-sMZO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 08:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:2d:dd:9c:40:9e:76:e9:cd:a9:90:84:40:78:11:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e54ab89d33bd8aa9438a1dd0b4c59edbeb0c64ee Validity Not Before: Dec 16 08:01:38 2025 GMT Not After : Dec 17 08:01:38 2025 GMT Subject: CN=2958ed530d46023e52bd6803a9be93a692dd87ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fa:3a:d7:0d:62:af:ec:fd:fc:be:b2:d3:13: 92:df:06:cf:96:30:8b:3c:61:7d:9e:7a:84:ee:59: 1b:79:51:00:53:27:20:4b:b1:5c:00:b1:6d:97:41: ad:15:06:b3:93:1e:d3:8d:b9:f3:90:00:f8:2e:a8: a9:6e:c1:50:25:02:53:cd:73:66:6c:9a:77:10:41: 7d:52:9c:6e:29:fb:13:e3:54:ef:70:b7:b7:73:2b: 1f:cd:be:7d:39:6c:31:2c:5f:c5:3a:00:4b:b0:d7: 73:9b:c2:8a:fe:c7:e1:5a:40:8f:6f:e0:47:c1:0c: c7:8c:92:32:14:2b:9e:29:6d:c4:88:91:19:fe:b2: fd:af:46:d9:c2:21:72:24:4c:45:8a:79:8f:88:51: d5:a3:a9:e7:c0:0d:9f:c8:f2:56:2d:db:3b:d2:a6: cf:b3:b3:b6:ed:48:37:4e:01:57:af:34:00:d9:20: 39:22:12:0b:ae:43:5f:b2:6a:f0:3a:02:f7:6e:81: b3:36:57:6c:fa:03:5f:39:a9:f8:2e:d3:81:aa:10: 99:37:3e:e2:b9:11:0c:71:dd:8f:cf:f4:69:21:32: 7c:f5:75:12:2d:82:af:8c:07:71:88:67:59:1a:88: f8:49:cd:80:91:35:14:f8:60:a5:44:74:43:a3:21: f9:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:58:ED:53:0D:46:02:3E:52:BD:68:03:A9:BE:93:A6:92:DD:87:CA X509v3 Authority Key Identifier: keyid:E5:4A:B8:9D:33:BD:8A:A9:43:8A:1D:D0:B4:C5:9E:DB:EB:0C:64:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Uq4nTO9iqlDih3QtMWe2-sMZO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:97:c3:4e:93:c3:14:96:d9:56:4d:13:74:dd:a8:36:c9:ee: c6:c3:aa:eb:cb:ef:66:ab:ca:40:9c:ba:94:37:c2:1c:e5:9a: 31:fd:99:6f:07:1e:b8:1c:c1:51:56:9b:44:07:30:a6:4b:d6: d1:b0:0e:8f:f1:1f:2f:86:98:b9:92:0b:25:d0:02:e3:58:12: 2a:5d:48:1f:9f:ce:23:a6:83:f9:67:0d:73:73:ad:08:e3:1c: 77:45:1e:4c:53:3f:58:2f:0c:89:a9:df:ca:55:42:dd:c2:08: fa:22:f0:ce:56:b9:a5:61:71:e6:29:d9:34:72:57:04:db:83: ff:76:b8:0b:0c:95:3a:e4:85:18:d2:77:48:15:25:ac:da:02: 86:f0:99:51:92:e5:48:63:87:00:09:a0:16:34:77:6c:04:fb: 02:4b:3a:56:66:e1:16:3c:8e:1d:12:ef:24:fc:bf:18:8f:f5: bf:6c:21:6c:cd:9c:26:b9:df:7f:8d:cf:3e:97:b1:a0:cc:e6: 71:55:77:77:28:17:01:ea:1c:20:40:a9:34:30:74:5c:d1:0a: f2:e0:24:78:22:93:3b:bd:2d:4e:f5:bc:91:bb:5f:00:7b:6c: 0f:1d:7c:d3:00:bf:ac:dc:3d:b3:72:57:ab:ce:14:c7:56:47: 33:74:86:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmLd2cQJ526c2pkIRAeBGDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NGFiODlkMzNiZDhhYTk0MzhhMWRkMGI0YzU5ZWRiZWIw YzY0ZWUwHhcNMjUxMjE2MDgwMTM4WhcNMjUxMjE3MDgwMTM4WjAzMTEwLwYDVQQD EygyOTU4ZWQ1MzBkNDYwMjNlNTJiZDY4MDNhOWJlOTNhNjkyZGQ4N2NhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPo61w1ir+z9/L6y0xOS3wbPljCL PGF9nnqE7lkbeVEAUycgS7FcALFtl0GtFQazkx7TjbnzkAD4LqipbsFQJQJTzXNm bJp3EEF9UpxuKfsT41TvcLe3cysfzb59OWwxLF/FOgBLsNdzm8KK/sfhWkCPb+BH wQzHjJIyFCueKW3EiJEZ/rL9r0bZwiFyJExFinmPiFHVo6nnwA2fyPJWLds70qbP s7O27Ug3TgFXrzQA2SA5IhILrkNfsmrwOgL3boGzNlds+gNfOan4LtOBqhCZNz7i uREMcd2Pz/RpITJ89XUSLYKvjAdxiGdZGoj4Sc2AkTUU+GClRHRDoyH5awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFClY7VMNRgI+Ur1oA6m+k6aS3YfKMB8GA1UdIwQY MBaAFOVKuJ0zvYqpQ4od0LTFntvrDGTuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVVxNG5UTzlpcWxEaWgzUXRNV2UyLXNNWk80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9jMzE2YjYtNzJlMy00YmNlLWJiZTIt MWI0MzI4NzJiY2ZmLzEvNVVxNG5UTzlpcWxEaWgzUXRNV2UyLXNNWk80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9jMzE2YjYtNzJlMy00YmNlLWJiZTItMWI0MzI4NzJiY2Zm LzEvNVVxNG5UTzlpcWxEaWgzUXRNV2UyLXNNWk80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkJfDTpPD FJbZVk0TdN2oNsnuxsOq68vvZqvKQJy6lDfCHOWaMf2ZbwceuBzBUVabRAcwpkvW 0bAOj/EfL4aYuZILJdAC41gSKl1IH5/OI6aD+WcNc3OtCOMcd0UeTFM/WC8Mianf ylVC3cII+iLwzla5pWFx5inZNHJXBNuD/3a4CwyVOuSFGNJ3SBUlrNoChvCZUZLl SGOHAAmgFjR3bAT7Aks6VmbhFjyOHRLvJPy/GI/1v2whbM2cJrnff43PPpexoMzm cVV3dygXAeocIECpNDB0XNEK8uAkeCKTO70tTvW8kbtfAHtsDx180wC/rNw9s3JX q84Ux1ZHM3SGZw== -----END CERTIFICATE-----Generated at Tue Dec 16 17:58:11 2025 by rpki-client