This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft File: 5I2jNbByU21Y5rfN9M2xZEW8vDM.mft (raw, json) Hash identifier: 5TvHUbBGfphasgGYaD592bzkqu6ZUDa0PXAsPnrIjKc= Subject key identifier: 2A:BC:39:AA:AF:2B:42:32:63:B8:2A:5A:CD:09:D3:FD:E6:30:08:F8 Authority key identifier: E4:8D:A3:35:B0:72:53:6D:58:E6:B7:CD:F4:CD:B1:64:45:BC:BC:33 Certificate issuer: /CN=e48da335b072536d58e6b7cdf4cdb16445bcbc33 Certificate serial: 019AF2764D0DF9531486D9C68C872F0A0089 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft Manifest number: 0822 Signing time: Sat 06 Dec 2025 07:00:30 +0000 Manifest this update: Sat 06 Dec 2025 07:00:30 +0000 Manifest next update: Sun 07 Dec 2025 07:00:30 +0000 Files and hashes: 1: 5I2jNbByU21Y5rfN9M2xZEW8vDM.crl (hash: KoDV87QhkUrrG6td6Y+fsBZWqCkv13BzMTKXEM1tuX4=) 2: ysIsaLM09cg2MhKfd83ZPzLp9n4.roa (hash: Bh4BJiariQCaXX5PXErLYBqRPl/Hwd8mcol52yoHkJc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft rsync://rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:4d:0d:f9:53:14:86:d9:c6:8c:87:2f:0a:00:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e48da335b072536d58e6b7cdf4cdb16445bcbc33 Validity Not Before: Dec 6 07:00:30 2025 GMT Not After : Dec 7 07:00:30 2025 GMT Subject: CN=2abc39aaaf2b423263b82a5acd09d3fde63008f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3e:87:f9:59:69:18:48:a9:e7:bc:40:d8:5f: 7f:d5:a3:10:01:03:40:4c:78:92:e8:fb:73:38:df: ea:29:e5:9f:6d:6b:ee:d5:0c:dc:2f:5d:a4:a5:1b: 8f:53:85:87:cd:f5:4c:41:5e:c8:7e:95:b8:f6:a1: c9:9d:4c:7f:0c:9d:1b:fc:25:c2:d7:30:57:85:38: 20:5e:03:25:51:8c:e7:74:d5:a5:b7:9a:16:37:01: 7d:d1:eb:c4:9a:38:74:0b:db:50:30:1b:eb:d1:fa: 36:bd:91:f9:2f:8f:32:d4:c5:c4:d1:66:33:43:e7: 92:41:e7:11:c9:51:d7:2c:81:ab:3f:55:25:d4:27: 83:e5:f0:e0:5a:0b:1c:c6:73:48:91:0f:c5:b1:c8: 97:84:fe:40:0c:3b:0b:5f:1a:77:35:32:18:a7:f3: 30:3b:5f:ce:db:35:f3:45:ff:95:17:d6:bc:45:ef: 17:94:7e:24:27:ba:1b:2a:fe:ce:62:1d:9f:89:be: 42:e3:5f:a3:63:e3:8a:54:2c:43:fe:7d:c5:5d:99: 57:81:62:c0:f8:00:fa:4e:4b:d1:aa:f5:63:06:ea: ce:8f:8e:25:90:19:d6:54:0e:66:12:d4:5e:98:f8: 3f:9a:b2:06:c5:8e:36:94:66:9a:b4:24:01:5e:b0: 4f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:BC:39:AA:AF:2B:42:32:63:B8:2A:5A:CD:09:D3:FD:E6:30:08:F8 X509v3 Authority Key Identifier: keyid:E4:8D:A3:35:B0:72:53:6D:58:E6:B7:CD:F4:CD:B1:64:45:BC:BC:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:8b:f7:20:dc:f6:04:c5:7c:24:5c:0e:46:ac:02:da:e3:a5: 1c:ea:ef:4a:c3:fc:87:97:d3:b8:b5:3c:fa:e8:ff:24:0c:fd: 3d:39:25:95:dc:fb:18:ab:74:7e:01:af:33:d4:68:67:44:58: 14:af:3f:11:2e:02:c0:7d:f2:76:f1:4b:24:95:5c:d4:e2:d7: 71:75:c7:3e:cc:aa:48:2c:6f:04:04:11:09:f9:32:0c:55:31: 06:06:92:ae:96:c5:a9:d2:a5:7e:07:ca:49:29:c1:7b:ee:6f: c1:07:7e:ee:85:41:d1:2e:2f:c3:06:6d:97:3a:1d:9f:63:a1: a5:9c:7c:bc:95:40:7f:30:b6:3e:81:7a:f4:d6:af:62:09:85: 2b:fc:68:a9:45:19:a7:b5:60:db:fc:5a:96:b9:66:27:df:a2: fe:7a:43:7a:a3:63:38:a5:e0:0e:87:b2:b2:56:59:a7:ef:40: 9e:f8:b3:60:28:07:fa:c8:ad:6f:0b:a1:86:6d:18:9c:65:09: db:04:24:29:65:c4:27:01:c4:f4:34:a8:a4:ae:93:5e:ef:b5: 35:16:d9:5b:34:5d:c2:b6:9d:89:db:d4:8a:4e:f9:f3:88:e4: a2:ae:e7:fc:11:a1:f4:c5:2d:bd:d9:ef:78:9e:a6:d1:71:9b: 5b:4f:21:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydk0N+VMUhtnGjIcvCgCJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0OGRhMzM1YjA3MjUzNmQ1OGU2YjdjZGY0Y2RiMTY0NDVi Y2JjMzMwHhcNMjUxMjA2MDcwMDMwWhcNMjUxMjA3MDcwMDMwWjAzMTEwLwYDVQQD EygyYWJjMzlhYWFmMmI0MjMyNjNiODJhNWFjZDA5ZDNmZGU2MzAwOGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuT6H+VlpGEip57xA2F9/1aMQAQNA THiS6PtzON/qKeWfbWvu1QzcL12kpRuPU4WHzfVMQV7IfpW49qHJnUx/DJ0b/CXC 1zBXhTggXgMlUYzndNWlt5oWNwF90evEmjh0C9tQMBvr0fo2vZH5L48y1MXE0WYz Q+eSQecRyVHXLIGrP1Ul1CeD5fDgWgscxnNIkQ/FsciXhP5ADDsLXxp3NTIYp/Mw O1/O2zXzRf+VF9a8Re8XlH4kJ7obKv7OYh2fib5C41+jY+OKVCxD/n3FXZlXgWLA +AD6TkvRqvVjBurOj44lkBnWVA5mEtRemPg/mrIGxY42lGaatCQBXrBPvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCq8OaqvK0IyY7gqWs0J0/3mMAj4MB8GA1UdIwQY MBaAFOSNozWwclNtWOa3zfTNsWRFvLwzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUkyak5iQnlVMjFZNXJmTjlNMnhaRVc4dkRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC83OTUwOTgtYTJmMC00NzMzLTk3MDkt ZTZlYjkxOWQ3YTAyLzEvNUkyak5iQnlVMjFZNXJmTjlNMnhaRVc4dkRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC83OTUwOTgtYTJmMC00NzMzLTk3MDktZTZlYjkxOWQ3YTAy LzEvNUkyak5iQnlVMjFZNXJmTjlNMnhaRVc4dkRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkIv3INz2 BMV8JFwORqwC2uOlHOrvSsP8h5fTuLU8+uj/JAz9PTklldz7GKt0fgGvM9RoZ0RY FK8/ES4CwH3ydvFLJJVc1OLXcXXHPsyqSCxvBAQRCfkyDFUxBgaSrpbFqdKlfgfK SSnBe+5vwQd+7oVB0S4vwwZtlzodn2OhpZx8vJVAfzC2PoF69NavYgmFK/xoqUUZ p7Vg2/xalrlmJ9+i/npDeqNjOKXgDoeyslZZp+9AnvizYCgH+sitbwuhhm0YnGUJ 2wQkKWXEJwHE9DSopK6TXu+1NRbZWzRdwradidvUik7584jkoq7n/BGh9MUtvdnv eJ6m0XGbW08hJQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:07:32 2025 by rpki-client