This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft File: 5YBcX-NFAofc3mreDZyVWLphXjI.mft (raw, json) Hash identifier: uFtlD6nbMzYD0oxHyvn2aGyoSHC3vfAZFMPetaxzTag= Subject key identifier: 7D:0D:7F:58:53:63:FD:68:5B:24:99:F6:9E:79:E6:55:74:7F:77:B3 Authority key identifier: E5:80:5C:5F:E3:45:02:87:DC:DE:6A:DE:0D:9C:95:58:BA:61:5E:32 Certificate issuer: /CN=e5805c5fe3450287dcde6ade0d9c9558ba615e32 Certificate serial: 019AF1D213053571A02546F10E4EE0DDC8EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft Manifest number: 12A2 Signing time: Sat 06 Dec 2025 04:01:07 +0000 Manifest this update: Sat 06 Dec 2025 04:01:07 +0000 Manifest next update: Sun 07 Dec 2025 04:01:07 +0000 Files and hashes: 1: 4smvePH69FAYNSdSIOq-IbOCEOY.roa (hash: YP4Y8XIxmd6gqrm+p+MzPpn8EJXfmEHsFE9JRUt3QgM=) 2: 5YBcX-NFAofc3mreDZyVWLphXjI.crl (hash: fVVwMsPHl9EBDInwkC7mGlHckwhrOFW1t/vbQObgeLs=) 3: LE09wGjm-4tV478e5hKoYO1ss_4.roa (hash: ZvvOcJV43Cg5jGcdcMkvsbLcwJVugyuR0arAlKHmsbc=) 4: bslnxciGSGjp5x3mv5ejIjp-fOk.roa (hash: aguWPYFuH/8n3kD28WuYVtoo2iM5Q/UCEREfJbZ73y8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:13:05:35:71:a0:25:46:f1:0e:4e:e0:dd:c8:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5805c5fe3450287dcde6ade0d9c9558ba615e32 Validity Not Before: Dec 6 04:01:07 2025 GMT Not After : Dec 7 04:01:07 2025 GMT Subject: CN=7d0d7f585363fd685b2499f69e79e655747f77b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9a:0c:7e:d9:c9:c2:03:ca:2f:df:a8:dc:06: 3a:d0:27:41:ce:43:7e:df:ea:32:fb:26:be:58:11: da:16:35:2d:c9:44:b0:09:7a:bd:23:ce:06:e5:14: 23:ed:34:8e:3e:ab:b8:b2:6a:ae:db:31:c8:c6:50: aa:f8:f6:2c:f1:fd:77:45:34:6f:84:e0:11:db:9f: d8:6a:47:7d:56:3d:40:dd:b4:c0:22:86:da:69:00: 97:3b:ef:ac:8c:92:80:6e:94:08:fa:59:a1:41:66: c3:51:bd:5a:f6:68:40:8c:f1:fb:7d:2a:0f:c7:dc: 87:1e:18:30:1e:95:ff:b4:42:70:64:42:fc:76:09: d5:63:d5:30:09:18:d9:fe:92:de:36:4a:0a:1d:0e: cf:d7:82:5a:5e:d6:80:91:73:e2:78:18:75:62:a5: cd:87:c6:4f:b2:e1:44:f4:e1:7c:3d:5f:19:a1:39: a9:d8:b7:99:49:55:d7:75:94:b6:86:4c:29:8c:bb: 1a:62:35:f4:2c:66:06:60:e6:ef:c7:9c:ad:bd:df: 3a:9d:6c:d8:0c:32:1f:87:b3:33:f6:06:67:48:c8: 77:33:38:78:40:91:1b:dc:cb:0e:c8:e7:df:67:20: ee:33:e0:d8:d5:a8:b4:40:c4:dc:f6:98:e5:22:c5: 3d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:0D:7F:58:53:63:FD:68:5B:24:99:F6:9E:79:E6:55:74:7F:77:B3 X509v3 Authority Key Identifier: keyid:E5:80:5C:5F:E3:45:02:87:DC:DE:6A:DE:0D:9C:95:58:BA:61:5E:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:d2:4d:c7:5d:5f:67:45:d3:51:bd:45:da:f2:ed:21:3f:a9: 40:45:b8:6d:2e:52:e8:55:79:77:7f:48:28:73:59:b2:a4:a2: 9e:ff:5c:3d:dc:94:fa:91:49:02:8e:6a:c8:de:a2:36:32:f4: 40:02:b8:2d:fb:f5:4c:14:e0:06:6d:40:b5:24:5e:74:14:66: 4a:94:f4:89:47:06:ff:69:b5:9d:7c:52:d8:40:cf:42:87:fe: ec:8b:e6:d4:ad:72:30:3f:84:44:60:5f:85:db:6a:60:c1:1d: 63:af:fb:de:e4:e0:91:98:7d:24:8d:5d:70:3b:bd:d7:f7:c3: 05:ed:bc:f0:ad:86:a3:6c:5f:f1:ee:c8:2a:bc:ad:e7:fe:3b: 3b:25:db:8c:e1:61:b0:09:ec:5f:a1:c1:f0:b9:21:61:27:d3: d2:9c:18:42:34:04:ad:43:84:67:37:43:ed:c0:7f:bc:0b:9f: 81:14:30:1b:8c:69:41:f9:cc:4a:28:f5:dc:b2:66:af:ec:03: f4:e3:53:78:7a:3d:4e:07:ee:d5:ef:3a:47:c7:1b:19:f8:02: e3:a6:48:e1:47:ce:7f:07:74:7d:f0:01:06:13:6d:c8:08:c1: 24:49:a2:70:c4:53:56:89:b6:53:bd:7a:89:ec:f9:74:13:32: cd:1e:74:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0hMFNXGgJUbxDk7g3cjuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ODA1YzVmZTM0NTAyODdkY2RlNmFkZTBkOWM5NTU4YmE2 MTVlMzIwHhcNMjUxMjA2MDQwMTA3WhcNMjUxMjA3MDQwMTA3WjAzMTEwLwYDVQQD Eyg3ZDBkN2Y1ODUzNjNmZDY4NWIyNDk5ZjY5ZTc5ZTY1NTc0N2Y3N2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZoMftnJwgPKL9+o3AY60CdBzkN+ 3+oy+ya+WBHaFjUtyUSwCXq9I84G5RQj7TSOPqu4smqu2zHIxlCq+PYs8f13RTRv hOAR25/Yakd9Vj1A3bTAIobaaQCXO++sjJKAbpQI+lmhQWbDUb1a9mhAjPH7fSoP x9yHHhgwHpX/tEJwZEL8dgnVY9UwCRjZ/pLeNkoKHQ7P14JaXtaAkXPieBh1YqXN h8ZPsuFE9OF8PV8ZoTmp2LeZSVXXdZS2hkwpjLsaYjX0LGYGYObvx5ytvd86nWzY DDIfh7Mz9gZnSMh3Mzh4QJEb3MsOyOffZyDuM+DY1ai0QMTc9pjlIsU9SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH0Nf1hTY/1oWySZ9p555lV0f3ezMB8GA1UdIwQY MBaAFOWAXF/jRQKH3N5q3g2clVi6YV4yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVlCY1gtTkZBb2ZjM21yZURaeVZXTHBoWGpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iNGRjM2MtZWNhYi00MzZkLWFjNTIt NTk1MzA3ZjQ3MTEwLzEvNVlCY1gtTkZBb2ZjM21yZURaeVZXTHBoWGpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9iNGRjM2MtZWNhYi00MzZkLWFjNTItNTk1MzA3ZjQ3MTEw LzEvNVlCY1gtTkZBb2ZjM21yZURaeVZXTHBoWGpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApdJNx11f Z0XTUb1F2vLtIT+pQEW4bS5S6FV5d39IKHNZsqSinv9cPdyU+pFJAo5qyN6iNjL0 QAK4Lfv1TBTgBm1AtSRedBRmSpT0iUcG/2m1nXxS2EDPQof+7Ivm1K1yMD+ERGBf hdtqYMEdY6/73uTgkZh9JI1dcDu91/fDBe288K2Go2xf8e7IKryt5/47OyXbjOFh sAnsX6HB8LkhYSfT0pwYQjQErUOEZzdD7cB/vAufgRQwG4xpQfnMSij13LJmr+wD 9ONTeHo9Tgfu1e86R8cbGfgC46ZI4UfOfwd0ffABBhNtyAjBJEmicMRTVom2U716 iez5dBMyzR50Iw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:07:07 2025 by rpki-client