This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft File: 5YBcX-NFAofc3mreDZyVWLphXjI.mft (raw, json) Hash identifier: hTJrZQHfFEvT4yNQ2h97hYl7WOkt8UHUnJX+2WbkNqQ= Subject key identifier: F7:65:5A:8C:98:82:A4:18:E1:21:EA:54:7C:E0:79:4F:61:4D:D6:60 Authority key identifier: E5:80:5C:5F:E3:45:02:87:DC:DE:6A:DE:0D:9C:95:58:BA:61:5E:32 Certificate issuer: /CN=e5805c5fe3450287dcde6ade0d9c9558ba615e32 Certificate serial: 019B337BA3A868BC439FEE5FC7FE6807A4CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft Manifest number: 12C4 Signing time: Thu 18 Dec 2025 22:01:39 +0000 Manifest this update: Thu 18 Dec 2025 22:01:39 +0000 Manifest next update: Fri 19 Dec 2025 22:01:39 +0000 Files and hashes: 1: 4smvePH69FAYNSdSIOq-IbOCEOY.roa (hash: YP4Y8XIxmd6gqrm+p+MzPpn8EJXfmEHsFE9JRUt3QgM=) 2: 5YBcX-NFAofc3mreDZyVWLphXjI.crl (hash: ijfY1z3dpsVhC/dzxhLjGPIBD1g3mmg73nnDqtzmEcI=) 3: LE09wGjm-4tV478e5hKoYO1ss_4.roa (hash: ZvvOcJV43Cg5jGcdcMkvsbLcwJVugyuR0arAlKHmsbc=) 4: bslnxciGSGjp5x3mv5ejIjp-fOk.roa (hash: aguWPYFuH/8n3kD28WuYVtoo2iM5Q/UCEREfJbZ73y8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:a3:a8:68:bc:43:9f:ee:5f:c7:fe:68:07:a4:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5805c5fe3450287dcde6ade0d9c9558ba615e32 Validity Not Before: Dec 18 22:01:39 2025 GMT Not After : Dec 19 22:01:39 2025 GMT Subject: CN=f7655a8c9882a418e121ea547ce0794f614dd660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:66:7f:78:f4:9e:0c:74:2b:80:a4:44:00:db: 3f:bd:5c:77:b4:9e:ae:59:53:03:19:f2:c3:ca:7b: a7:76:d3:20:8c:04:8f:d6:53:75:6d:b6:91:07:92: 3f:92:dc:b5:6c:70:f5:55:3f:66:74:66:22:2b:9a: cd:5d:cf:5f:a7:67:13:ed:33:89:58:8f:0d:d2:18: 2e:c8:25:95:f6:84:02:ec:b3:88:52:3e:f7:96:34: 81:a6:83:71:5c:a9:c4:61:3c:c5:00:fa:a5:d2:1a: 87:41:bf:82:2e:77:86:d8:cc:b0:3f:a5:49:d4:5c: 3c:e2:98:eb:3b:7c:b1:79:de:49:70:9a:66:4c:b6: 3f:6e:6c:9c:0e:22:b6:5e:7d:8c:17:b5:3f:81:4d: c7:63:bb:41:77:1e:06:c2:d1:19:cd:07:c3:75:2b: 89:46:d9:6a:e0:af:c6:ae:f5:af:b6:d2:1f:aa:5f: 99:33:1d:41:68:7a:15:93:29:d3:cd:dc:85:75:af: fe:e1:31:76:6c:83:08:26:42:d7:c6:e4:b1:e8:0d: 60:89:9c:e0:8a:29:92:6b:5e:73:ba:8b:49:38:2f: 70:bd:df:14:f5:c3:42:cc:b6:05:4f:0e:75:39:6d: 27:e5:15:20:54:f6:0a:05:2c:12:67:28:c8:37:c7: 4a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:65:5A:8C:98:82:A4:18:E1:21:EA:54:7C:E0:79:4F:61:4D:D6:60 X509v3 Authority Key Identifier: keyid:E5:80:5C:5F:E3:45:02:87:DC:DE:6A:DE:0D:9C:95:58:BA:61:5E:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:ca:f3:44:fa:e3:4d:aa:79:ce:17:9b:2b:b6:ca:31:37:83: 40:c9:c2:69:fe:84:c1:de:ac:88:2e:5a:2a:9a:43:41:82:1a: 67:05:96:cb:ff:2f:ad:36:15:29:d0:20:ab:d2:4d:ea:5f:f7: da:21:cc:9e:d2:d1:47:5e:62:b3:ca:57:7f:51:c4:ab:db:5d: 00:92:1d:7c:ad:66:0d:2a:4a:83:f8:4b:b1:3c:87:c9:8d:4b: 09:b3:3c:a1:b0:e4:14:4a:e6:7c:61:c3:b2:e0:a7:4c:71:1e: 0c:61:8d:01:1d:3d:0b:93:a6:67:7e:fc:94:60:a1:67:6c:2b: 1a:00:71:23:d3:19:50:a3:3a:21:55:04:4b:ec:96:bd:15:d8: 80:09:32:48:aa:1d:83:a2:2f:24:05:79:6f:30:26:f0:87:4f: e0:60:cd:17:e0:b5:be:db:ff:bc:a2:1c:05:f1:8a:b9:68:3a: be:4d:b9:c0:cc:df:e4:28:67:52:4c:7d:5d:f2:c0:77:2e:68: f0:10:c5:3a:2d:cf:37:f6:6a:4f:96:4e:68:63:c6:96:a9:da: 05:16:d0:95:44:78:04:c6:94:85:f0:85:97:84:99:11:36:71: 16:ac:9a:c8:56:e5:14:c4:b3:bb:ca:62:22:92:b3:34:e1:20: 02:94:58:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsze6OoaLxDn+5fx/5oB6TPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ODA1YzVmZTM0NTAyODdkY2RlNmFkZTBkOWM5NTU4YmE2 MTVlMzIwHhcNMjUxMjE4MjIwMTM5WhcNMjUxMjE5MjIwMTM5WjAzMTEwLwYDVQQD EyhmNzY1NWE4Yzk4ODJhNDE4ZTEyMWVhNTQ3Y2UwNzk0ZjYxNGRkNjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWZ/ePSeDHQrgKREANs/vVx3tJ6u WVMDGfLDynundtMgjASP1lN1bbaRB5I/kty1bHD1VT9mdGYiK5rNXc9fp2cT7TOJ WI8N0hguyCWV9oQC7LOIUj73ljSBpoNxXKnEYTzFAPql0hqHQb+CLneG2MywP6VJ 1Fw84pjrO3yxed5JcJpmTLY/bmycDiK2Xn2MF7U/gU3HY7tBdx4GwtEZzQfDdSuJ Rtlq4K/GrvWvttIfql+ZMx1BaHoVkynTzdyFda/+4TF2bIMIJkLXxuSx6A1giZzg iimSa15zuotJOC9wvd8U9cNCzLYFTw51OW0n5RUgVPYKBSwSZyjIN8dK0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPdlWoyYgqQY4SHqVHzgeU9hTdZgMB8GA1UdIwQY MBaAFOWAXF/jRQKH3N5q3g2clVi6YV4yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVlCY1gtTkZBb2ZjM21yZURaeVZXTHBoWGpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iNGRjM2MtZWNhYi00MzZkLWFjNTIt NTk1MzA3ZjQ3MTEwLzEvNVlCY1gtTkZBb2ZjM21yZURaeVZXTHBoWGpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9iNGRjM2MtZWNhYi00MzZkLWFjNTItNTk1MzA3ZjQ3MTEw LzEvNVlCY1gtTkZBb2ZjM21yZURaeVZXTHBoWGpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlsrzRPrj Tap5zhebK7bKMTeDQMnCaf6Ewd6siC5aKppDQYIaZwWWy/8vrTYVKdAgq9JN6l/3 2iHMntLRR15is8pXf1HEq9tdAJIdfK1mDSpKg/hLsTyHyY1LCbM8obDkFErmfGHD suCnTHEeDGGNAR09C5OmZ378lGChZ2wrGgBxI9MZUKM6IVUES+yWvRXYgAkySKod g6IvJAV5bzAm8IdP4GDNF+C1vtv/vKIcBfGKuWg6vk25wMzf5ChnUkx9XfLAdy5o 8BDFOi3PN/ZqT5ZOaGPGlqnaBRbQlUR4BMaUhfCFl4SZETZxFqyayFblFMSzu8pi IpKzNOEgApRYvw== -----END CERTIFICATE-----Generated at Fri Dec 19 06:19:42 2025 by rpki-client