This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft File: t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft (raw, json) Hash identifier: Ma3iIJld/4mIFN7AZbypgIdoMvZ0g1Dt5xTR2j+DavI= Subject key identifier: 82:AD:9C:58:0C:76:05:ED:AC:2E:C6:BC:09:9A:54:D9:A5:FD:4A:2B Authority key identifier: B7:92:D7:EC:F3:B4:5C:49:38:F0:5B:B9:05:1C:5A:89:72:9D:D4:41 Certificate issuer: /CN=b792d7ecf3b45c4938f05bb9051c5a89729dd441 Certificate serial: 019B21E2C098CF006AF99277A639FE7F5613 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5LX7PO0XEk48Fu5BRxaiXKd1EE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft Manifest number: 0E0F Signing time: Mon 15 Dec 2025 12:01:07 +0000 Manifest this update: Mon 15 Dec 2025 12:01:07 +0000 Manifest next update: Tue 16 Dec 2025 12:01:07 +0000 Files and hashes: 1: t5LX7PO0XEk48Fu5BRxaiXKd1EE.crl (hash: 2VlFbzrWj4+27aoWpn8mElEkfr+zm+fy8iwhXArfb80=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft rsync://rpki.ripe.net/repository/DEFAULT/t5LX7PO0XEk48Fu5BRxaiXKd1EE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 12:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:e2:c0:98:cf:00:6a:f9:92:77:a6:39:fe:7f:56:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b792d7ecf3b45c4938f05bb9051c5a89729dd441 Validity Not Before: Dec 15 12:01:07 2025 GMT Not After : Dec 16 12:01:07 2025 GMT Subject: CN=82ad9c580c7605edac2ec6bc099a54d9a5fd4a2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:41:08:c2:a1:61:da:58:dc:54:52:85:bd:44: 69:ce:97:45:39:ab:5b:36:8f:7b:99:55:7e:84:fc: 46:61:20:fb:13:0d:d7:70:70:31:b5:41:2b:e5:b8: 55:5d:25:1a:a8:3f:11:47:57:de:25:af:30:c1:27: fe:36:b6:c4:5b:90:94:08:67:e8:c9:16:69:5b:4b: 94:94:f9:24:4f:6c:16:a5:02:6d:76:ea:6d:4f:59: db:89:39:8c:9f:ee:10:54:a1:f8:cf:91:0a:43:4c: a6:ee:33:cb:cf:71:b3:a4:62:d3:22:c4:a1:a1:76: 56:5f:b7:90:25:de:84:7d:4a:c1:08:30:5c:6c:0f: c4:ff:a9:20:a0:c6:27:b7:ee:f9:7a:a0:d0:16:1b: d0:80:6d:06:0b:44:0c:8f:9a:eb:f2:c5:48:c8:ce: 8a:33:48:61:36:8e:64:c2:bf:38:5c:d1:f2:99:62: 34:12:26:ff:05:d8:8b:18:19:58:68:47:dc:1e:59: a8:2e:97:bc:59:d5:46:15:f3:ad:7f:55:dc:ba:6f: bf:94:5d:10:5e:5f:c2:37:1a:a8:dd:b4:f6:4d:7a: 29:f2:35:7c:f5:a4:f4:9c:9f:63:cd:ff:e5:b4:76: 7d:e2:d0:6a:25:ca:1d:bc:67:34:3d:a2:78:e7:33: 30:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:AD:9C:58:0C:76:05:ED:AC:2E:C6:BC:09:9A:54:D9:A5:FD:4A:2B X509v3 Authority Key Identifier: keyid:B7:92:D7:EC:F3:B4:5C:49:38:F0:5B:B9:05:1C:5A:89:72:9D:D4:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5LX7PO0XEk48Fu5BRxaiXKd1EE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:6d:97:f1:ad:ae:87:c6:27:61:93:48:57:d6:d2:58:1a:8b: e9:20:3a:f9:95:13:60:8a:cb:01:df:84:22:49:70:ca:2e:35: a7:c8:26:4f:b5:2b:6a:79:e6:74:d0:3c:ed:3b:41:4a:d0:ba: 67:bc:9f:58:2a:ea:76:64:81:47:9e:ce:31:be:9f:8b:33:48: 61:cc:b6:62:c0:41:23:55:b4:3c:d9:be:be:cb:fc:69:53:34: fb:2f:81:7a:af:d6:30:dc:d3:e4:9f:b4:ba:5d:4f:46:f4:7e: 00:2a:ef:47:4b:f4:e3:f0:fc:a6:d5:92:a2:01:c0:7d:5e:c5: 67:eb:b1:57:2d:04:bd:ff:ad:34:6c:43:90:32:4d:f0:9b:a2: c4:6d:cb:02:e8:78:8f:7c:a8:c3:a3:43:36:ba:7e:2a:b1:95: 82:50:68:1d:f3:23:0c:d7:db:5a:e3:e3:87:25:22:b0:32:63: f1:8a:af:d3:03:1f:9e:19:6e:de:75:15:88:20:2a:6b:d1:99: a6:2f:c3:23:61:b5:d1:8d:f0:09:4f:ba:cd:49:89:df:ba:3a: ab:4e:58:97:f4:f6:39:cc:91:4c:7d:5a:b6:18:bd:85:20:ea: c1:a2:16:3e:79:c7:c5:af:13:c2:64:ff:bd:5c:04:c9:21:3a: ed:05:95:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsh4sCYzwBq+ZJ3pjn+f1YTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3OTJkN2VjZjNiNDVjNDkzOGYwNWJiOTA1MWM1YTg5NzI5 ZGQ0NDEwHhcNMjUxMjE1MTIwMTA3WhcNMjUxMjE2MTIwMTA3WjAzMTEwLwYDVQQD Eyg4MmFkOWM1ODBjNzYwNWVkYWMyZWM2YmMwOTlhNTRkOWE1ZmQ0YTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0EIwqFh2ljcVFKFvURpzpdFOatb No97mVV+hPxGYSD7Ew3XcHAxtUEr5bhVXSUaqD8RR1feJa8wwSf+NrbEW5CUCGfo yRZpW0uUlPkkT2wWpQJtduptT1nbiTmMn+4QVKH4z5EKQ0ym7jPLz3GzpGLTIsSh oXZWX7eQJd6EfUrBCDBcbA/E/6kgoMYnt+75eqDQFhvQgG0GC0QMj5rr8sVIyM6K M0hhNo5kwr84XNHymWI0Eib/BdiLGBlYaEfcHlmoLpe8WdVGFfOtf1Xcum+/lF0Q Xl/CNxqo3bT2TXop8jV89aT0nJ9jzf/ltHZ94tBqJcodvGc0PaJ45zMwMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIKtnFgMdgXtrC7GvAmaVNml/UorMB8GA1UdIwQY MBaAFLeS1+zztFxJOPBbuQUcWolyndRBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDVMWDdQTzBYRWs0OEZ1NUJSeGFpWEtkMUVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9iMDVlNjItY2FjMi00MmY5LTllZjYt YTMyNTQ5MjMyNTIwLzEvdDVMWDdQTzBYRWs0OEZ1NUJSeGFpWEtkMUVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9iMDVlNjItY2FjMi00MmY5LTllZjYtYTMyNTQ5MjMyNTIw LzEvdDVMWDdQTzBYRWs0OEZ1NUJSeGFpWEtkMUVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVG2X8a2u h8YnYZNIV9bSWBqL6SA6+ZUTYIrLAd+EIklwyi41p8gmT7UrannmdNA87TtBStC6 Z7yfWCrqdmSBR57OMb6fizNIYcy2YsBBI1W0PNm+vsv8aVM0+y+Beq/WMNzT5J+0 ul1PRvR+ACrvR0v04/D8ptWSogHAfV7FZ+uxVy0Evf+tNGxDkDJN8JuixG3LAuh4 j3yow6NDNrp+KrGVglBoHfMjDNfbWuPjhyUisDJj8Yqv0wMfnhlu3nUViCAqa9GZ pi/DI2G10Y3wCU+6zUmJ37o6q05Yl/T2OcyRTH1athi9hSDqwaIWPnnHxa8TwmT/ vVwEySE67QWVRA== -----END CERTIFICATE-----Generated at Mon Dec 15 20:06:09 2025 by rpki-client