This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft File: 5WB28n4T0YAOd9FuS2CyO29YyCA.mft (raw, json) Hash identifier: kP6TNL5TZuDWMsAJyn0f2G9ztuuuikQBiDsUoAc5kcA= Subject key identifier: EF:40:70:76:A0:DB:5B:40:B5:3C:95:38:82:84:16:3D:A0:E7:92:9B Authority key identifier: E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20 Certificate issuer: /CN=e56076f27e13d1800e77d16e4b60b23b6f58c820 Certificate serial: 019AF1644125B6F5E13DE3C5D41949A8864D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft Manifest number: 10B8 Signing time: Sat 06 Dec 2025 02:01:10 +0000 Manifest this update: Sat 06 Dec 2025 02:01:10 +0000 Manifest next update: Sun 07 Dec 2025 02:01:10 +0000 Files and hashes: 1: 1-BGofSFZOno9pVnXMBI7UJeHJBg.roa (hash: LL/uaCHo6NuNRF9xktkjKIvVTGv3e4Z41mGfZiStgPc=) 2: 2ml5oRq-VyEb_mJG0C7Ahdjf8IY.roa (hash: ttehz4UlNMi9cbs/FPfy9Lw9uSsUlhxDo7xqWG0gtFA=) 3: 5WB28n4T0YAOd9FuS2CyO29YyCA.crl (hash: 04shGf2RvxuhlV4wlzJ1k5PayTGQ6AnsaWepG6wArto=) 4: 6SdikSl1jU5cpmKfnZzRmSDOHuU.roa (hash: ppHMqODDNYRhgCo6OadvbiBfTSlanNIKDu29ewQ4fxE=) 5: AgBjgI35YWeABs8oCUWHz3K2zWw.roa (hash: 4E8DBT5sfAcPhRkXfwuGn/b4aAai3g0fbeGZYZUWlss=) 6: DapHF4_ML4zHS1eSSpKXu6earDU.roa (hash: VRZxFZEzLMzQ017sges9Sj2H9YBysCUi/ugt8yTZW+k=) 7: SQWlc0rZJj-IH4BVVpWf4gkYzTE.roa (hash: pKU0nvpLv8g9iORRQCN0Yo6/Mr7aoPJ/lOVaNu8h5Gk=) 8: Y9YksH2bUiHljz8P5EhHyhB5y9g.roa (hash: T5FIsRO2g9NTZMOXMSlY2kZF7GuiHFYTJEt+zSOsPvQ=) 9: fX0xQGF-aX1OUm6loSYzR_yxa3s.roa (hash: WE6TQcdbZv7KpM5MoM+ZhGHXdH152fsJ6v0eYqFpKnw=) 10: yn6_FC3ZDlreYvdUbTREjMhfyxs.roa (hash: LlX6Tl5H1KTqy6O3g5CWu69Bs/CP9zvonCRnk8+j/fs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:41:25:b6:f5:e1:3d:e3:c5:d4:19:49:a8:86:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e56076f27e13d1800e77d16e4b60b23b6f58c820 Validity Not Before: Dec 6 02:01:10 2025 GMT Not After : Dec 7 02:01:10 2025 GMT Subject: CN=ef407076a0db5b40b53c95388284163da0e7929b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e2:8c:68:8a:ae:81:10:6a:50:c5:b4:3d:cd: c2:8c:61:eb:fe:95:2f:a2:ad:bc:56:aa:29:56:d6: 21:8e:42:ab:79:8b:ae:60:2c:58:dd:25:a0:39:82: bc:99:83:48:bc:be:32:87:84:13:e3:89:e9:36:2a: 72:aa:6c:b4:9d:17:5f:75:f3:7f:2b:18:28:17:06: 22:01:80:39:ee:da:b4:b3:2a:1f:4e:54:ed:2f:85: 38:cc:3c:2b:09:80:02:fe:a9:30:cf:3e:d3:ec:54: 13:a3:4c:4c:cd:1a:64:69:0a:33:e4:5a:89:ab:05: 3a:36:58:b5:dc:77:9d:00:97:b4:ef:89:1b:8b:52: 74:40:d3:b0:2e:f3:d4:1a:67:9b:cc:d1:e9:06:0e: 2f:e1:b3:b1:c6:45:74:11:93:b1:5d:44:ac:65:ec: 23:08:8b:a8:e8:6c:a5:5f:1b:f7:13:aa:37:07:05: ef:12:00:64:2b:32:ca:51:f4:95:1d:63:5e:0e:e0: 69:aa:62:1b:df:e2:17:6a:63:8d:88:f9:e6:55:1e: bb:5f:96:e7:7a:b2:df:df:32:fd:a1:1e:44:32:9a: 28:9e:96:a3:70:c1:6e:14:b8:92:0b:c3:9a:0d:ef: ee:5c:ba:6f:f8:00:79:d5:4f:a2:7f:48:be:3b:30: c9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:40:70:76:A0:DB:5B:40:B5:3C:95:38:82:84:16:3D:A0:E7:92:9B X509v3 Authority Key Identifier: keyid:E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:a0:ce:76:e4:38:12:e6:89:83:73:b1:da:8a:e9:77:f9:ec: 9a:78:c3:b7:59:69:89:f9:af:d5:c5:20:18:68:d2:41:fd:ea: b4:f8:d9:79:a1:18:6d:94:fb:74:6b:cd:7a:98:77:38:10:c0: 3f:82:24:01:15:73:9a:eb:ad:c5:83:ab:27:01:34:26:30:b2: 6c:e4:f6:3e:d0:bc:1c:17:f6:af:92:6d:67:31:1b:24:16:a8: d5:73:85:08:d0:59:07:91:fa:7d:67:9a:94:8e:a2:29:42:83: ab:90:8d:6b:5a:18:42:e1:a8:a5:71:ab:10:b9:74:1f:1f:7f: df:39:b6:99:72:bc:06:14:cd:eb:09:2c:0c:1f:28:f8:5e:2f: 46:fd:78:8d:13:6a:5c:52:4c:b3:ac:96:fb:6a:95:2c:9f:ba: f0:e6:50:b1:67:4a:17:6d:48:a4:79:a5:e9:70:67:1d:a7:41: 66:ce:de:6f:a2:7b:a9:cb:50:33:bf:fc:ae:04:70:e0:2a:8a: 85:90:03:54:08:94:26:d2:de:7a:64:6a:6f:46:74:21:da:bd: 57:85:3a:4b:58:42:3c:a6:be:50:3b:9b:d1:8d:75:82:10:85: cd:b2:8a:fb:63:ff:9f:82:9c:68:ef:e4:d7:9c:cd:00:80:3a: f3:4d:ac:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZEEltvXhPePF1BlJqIZNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NjA3NmYyN2UxM2QxODAwZTc3ZDE2ZTRiNjBiMjNiNmY1 OGM4MjAwHhcNMjUxMjA2MDIwMTEwWhcNMjUxMjA3MDIwMTEwWjAzMTEwLwYDVQQD EyhlZjQwNzA3NmEwZGI1YjQwYjUzYzk1Mzg4Mjg0MTYzZGEwZTc5MjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheKMaIqugRBqUMW0Pc3CjGHr/pUv oq28VqopVtYhjkKreYuuYCxY3SWgOYK8mYNIvL4yh4QT44npNipyqmy0nRdfdfN/ KxgoFwYiAYA57tq0syofTlTtL4U4zDwrCYAC/qkwzz7T7FQTo0xMzRpkaQoz5FqJ qwU6Nli13HedAJe074kbi1J0QNOwLvPUGmebzNHpBg4v4bOxxkV0EZOxXUSsZewj CIuo6GylXxv3E6o3BwXvEgBkKzLKUfSVHWNeDuBpqmIb3+IXamONiPnmVR67X5bn erLf3zL9oR5EMpoonpajcMFuFLiSC8OaDe/uXLpv+AB51U+if0i+OzDJAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO9AcHag21tAtTyVOIKEFj2g55KbMB8GA1UdIwQY MBaAFOVgdvJ+E9GADnfRbktgsjtvWMggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVdCMjhuNFQwWUFPZDlGdVMyQ3lPMjlZeUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8wYWM0NGQtYjNiZS00Mjc3LTgwZjgt NThjZjg5ODg4ZTJhLzEvNVdCMjhuNFQwWUFPZDlGdVMyQ3lPMjlZeUNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8wYWM0NGQtYjNiZS00Mjc3LTgwZjgtNThjZjg5ODg4ZTJh LzEvNVdCMjhuNFQwWUFPZDlGdVMyQ3lPMjlZeUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaqDOduQ4 EuaJg3Ox2orpd/nsmnjDt1lpifmv1cUgGGjSQf3qtPjZeaEYbZT7dGvNeph3OBDA P4IkARVzmuutxYOrJwE0JjCybOT2PtC8HBf2r5JtZzEbJBao1XOFCNBZB5H6fWea lI6iKUKDq5CNa1oYQuGopXGrELl0Hx9/3zm2mXK8BhTN6wksDB8o+F4vRv14jRNq XFJMs6yW+2qVLJ+68OZQsWdKF21IpHml6XBnHadBZs7eb6J7qctQM7/8rgRw4CqK hZADVAiUJtLeemRqb0Z0Idq9V4U6S1hCPKa+UDub0Y11ghCFzbKK+2P/n4KcaO/k 15zNAIA6802sHQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:42 2025 by rpki-client