This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft File: 5hvX3R-KyLQZK6eKWSNItd0KGmY.mft (raw, json) Hash identifier: yls4RkJavmpMJ5UmAdoDcmq2iHwjwcNr9PLA146Zmrg= Subject key identifier: 49:DE:30:83:C4:9A:62:C9:63:D0:34:FB:B7:28:8B:B0:15:07:F9:BB Authority key identifier: E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66 Certificate issuer: /CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66 Certificate serial: 019B2F30902BE8574F032CC236F4702A5EE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft Manifest number: 142F Signing time: Thu 18 Dec 2025 02:01:10 +0000 Manifest this update: Thu 18 Dec 2025 02:01:10 +0000 Manifest next update: Fri 19 Dec 2025 02:01:10 +0000 Files and hashes: 1: 0ShDfOH1Ac9e6vvkpUZXgh0BNC0.roa (hash: BD8JCJierHp2LDaazEE6kGlqOyEpFiqAEwABUcVamkE=) 2: 1-gxOhCZj8nS37sWsUDKlmcK-Rw8.roa (hash: /+5YDb/LdEiV9iy+qGtaTiI/QdW15m+uapnwWEACL9w=) 3: 4Pfo6dr7-737k8tyVTjGVmWtq04.roa (hash: q2tjhHYa3ywzq75oRuuLup6rX2uYWNVGvc0AQBtWN4U=) 4: 5hvX3R-KyLQZK6eKWSNItd0KGmY.crl (hash: Q65rqDdq0JOJ36/kz0AccU3yU+61RVnY2J89ziH+KIY=) 5: JBj8FsplA-MBUc0zqf4_NLYuJ-Q.roa (hash: ecVjlw+CLQrBEbrHY/WkvclcM5Zgixit06zD/ClEBGI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 02:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:30:90:2b:e8:57:4f:03:2c:c2:36:f4:70:2a:5e:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66 Validity Not Before: Dec 18 02:01:10 2025 GMT Not After : Dec 19 02:01:10 2025 GMT Subject: CN=49de3083c49a62c963d034fbb7288bb01507f9bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:66:34:ce:e5:2a:f6:5d:d3:89:78:ea:e6:05: d1:8e:07:53:d8:f5:d7:62:27:82:9c:4b:6b:6d:9a: f1:d7:b4:fb:e1:68:fa:28:a0:e8:b5:21:97:da:fc: d3:91:18:9d:6c:29:4d:ba:ee:a5:9b:0b:c3:8c:d4: 91:15:f2:53:38:c4:01:83:d9:97:a0:c6:9d:8e:2b: 77:22:34:ed:df:18:55:0b:34:cb:28:fc:e3:75:2d: 62:d2:93:3f:dd:03:a3:8b:c0:c4:3b:aa:92:e4:c7: 0e:90:fc:e4:00:b2:e9:bf:45:7d:f7:a8:79:a8:6d: 14:e0:a8:a6:bc:f8:06:3a:5c:14:3b:5e:f5:e3:e0: 50:2a:0d:f7:c6:db:f1:2c:d5:cf:3e:4b:44:3c:ee: 00:13:36:c3:2e:57:7d:17:ca:90:44:4c:2e:dc:b6: ec:3a:fd:5d:2c:b7:89:f0:94:f1:92:f3:9a:b0:32: 79:4b:a5:56:64:75:90:4c:8e:7f:d2:9e:01:0b:ec: 14:9d:ee:64:59:f8:a0:18:76:a7:14:84:59:04:c2: 6a:58:e7:11:c9:fd:e2:f6:0b:83:80:29:04:47:d4: c4:a3:df:a9:a5:a9:6f:10:e2:c8:60:70:bd:b6:10: 9c:a6:06:27:d0:e0:20:59:e7:71:2b:c6:5f:a5:b4: 87:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:DE:30:83:C4:9A:62:C9:63:D0:34:FB:B7:28:8B:B0:15:07:F9:BB X509v3 Authority Key Identifier: keyid:E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:f9:d2:65:63:dd:f4:35:fc:28:69:a4:22:2e:30:0d:46:bf: 08:a2:57:3c:e3:c7:3e:f5:f2:c6:d9:09:0d:48:e3:a3:30:7a: 94:c4:98:04:09:7e:33:c1:87:e9:80:43:56:09:61:b1:5b:5f: b5:0f:69:b5:91:e6:69:6d:70:81:37:04:c9:9b:14:5e:b1:dc: d4:3b:bf:36:ff:8d:30:12:6e:e1:4d:61:15:77:63:98:df:ab: 79:d0:18:6a:97:33:59:d6:a0:b2:06:21:ab:06:03:2f:46:b7: 40:8e:b8:59:14:63:5d:45:5a:ad:96:0f:97:ff:6e:30:25:7b: 35:99:5e:b5:44:ec:95:72:e0:3e:03:7c:5d:c0:61:c1:e6:92: ed:f5:b9:1e:e7:3e:ef:ee:fb:07:0b:8d:72:ca:58:43:93:1c: bd:6d:04:b6:de:76:12:f6:40:50:19:dc:15:1a:95:73:3a:51: e5:a5:68:bd:69:ea:89:ec:ad:36:a6:34:d9:24:8a:8f:93:1f: 50:b5:45:67:93:ab:bc:ab:d1:fb:3f:66:36:64:79:38:56:4d: db:b0:75:b6:2d:8a:44:99:14:42:44:6a:2d:63:98:50:64:e7: 34:97:8c:cb:ae:33:de:08:47:50:fe:6b:80:34:7e:5e:af:4d: e7:69:aa:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvMJAr6FdPAyzCNvRwKl7iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MWJkN2RkMWY4YWM4YjQxOTJiYTc4YTU5MjM0OGI1ZGQw YTFhNjYwHhcNMjUxMjE4MDIwMTEwWhcNMjUxMjE5MDIwMTEwWjAzMTEwLwYDVQQD Eyg0OWRlMzA4M2M0OWE2MmM5NjNkMDM0ZmJiNzI4OGJiMDE1MDdmOWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWY0zuUq9l3TiXjq5gXRjgdT2PXX YieCnEtrbZrx17T74Wj6KKDotSGX2vzTkRidbClNuu6lmwvDjNSRFfJTOMQBg9mX oMadjit3IjTt3xhVCzTLKPzjdS1i0pM/3QOji8DEO6qS5McOkPzkALLpv0V996h5 qG0U4KimvPgGOlwUO1714+BQKg33xtvxLNXPPktEPO4AEzbDLld9F8qQREwu3Lbs Ov1dLLeJ8JTxkvOasDJ5S6VWZHWQTI5/0p4BC+wUne5kWfigGHanFIRZBMJqWOcR yf3i9guDgCkER9TEo9+ppalvEOLIYHC9thCcpgYn0OAgWedxK8ZfpbSHaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEneMIPEmmLJY9A0+7coi7AVB/m7MB8GA1UdIwQY MBaAFOYb190fisi0GSunilkjSLXdChpmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWh2WDNSLUt5TFFaSzZlS1dTTkl0ZDBLR21ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80YWNjMTUtYmJhMC00NDU5LTk2Njct ZGU5YjJmOGY3ZTI5LzEvNWh2WDNSLUt5TFFaSzZlS1dTTkl0ZDBLR21ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80YWNjMTUtYmJhMC00NDU5LTk2NjctZGU5YjJmOGY3ZTI5 LzEvNWh2WDNSLUt5TFFaSzZlS1dTTkl0ZDBLR21ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqfnSZWPd 9DX8KGmkIi4wDUa/CKJXPOPHPvXyxtkJDUjjozB6lMSYBAl+M8GH6YBDVglhsVtf tQ9ptZHmaW1wgTcEyZsUXrHc1Du/Nv+NMBJu4U1hFXdjmN+redAYapczWdagsgYh qwYDL0a3QI64WRRjXUVarZYPl/9uMCV7NZletUTslXLgPgN8XcBhweaS7fW5Huc+ 7+77BwuNcspYQ5McvW0Ett52EvZAUBncFRqVczpR5aVovWnqieytNqY02SSKj5Mf ULVFZ5OrvKvR+z9mNmR5OFZN27B1ti2KRJkUQkRqLWOYUGTnNJeMy64z3ghHUP5r gDR+Xq9N52mqJA== -----END CERTIFICATE-----Generated at Thu Dec 18 09:55:32 2025 by rpki-client