This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft File: 5yaSa26JcM-E1rR1b6nFYhEgBTc.mft (raw, json) Hash identifier: 0wpt4qIEFsXKK6x/1Jcwgk3SZv5t67JBCZHybuzfUOo= Subject key identifier: FF:E7:02:52:3F:21:C7:B8:56:30:43:72:D7:9F:70:5F:B4:6C:DE:2F Authority key identifier: E7:26:92:6B:6E:89:70:CF:84:D6:B4:75:6F:A9:C5:62:11:20:05:37 Certificate issuer: /CN=e726926b6e8970cf84d6b4756fa9c56211200537 Certificate serial: 019AF509F1EE82F38DF9F3909AA82C857D72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft Manifest number: 1063 Signing time: Sat 06 Dec 2025 19:01:00 +0000 Manifest this update: Sat 06 Dec 2025 19:01:00 +0000 Manifest next update: Sun 07 Dec 2025 19:01:00 +0000 Files and hashes: 1: 5yaSa26JcM-E1rR1b6nFYhEgBTc.crl (hash: ZJwp2CaUcSMZcQJskaN73BgtX4JVG+a8S9uISlU8rNk=) 2: ElUtMbg_2SVD7otrBAd2hF50jDw.roa (hash: gBEbPywjfhmRcZU6nHTXUHZioujDMyqjzGbOG8d2lXc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft rsync://rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:f1:ee:82:f3:8d:f9:f3:90:9a:a8:2c:85:7d:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e726926b6e8970cf84d6b4756fa9c56211200537 Validity Not Before: Dec 6 19:01:00 2025 GMT Not After : Dec 7 19:01:00 2025 GMT Subject: CN=ffe702523f21c7b856304372d79f705fb46cde2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:09:8d:95:f0:c9:e2:38:cd:e9:3b:66:60:07: d6:d1:e4:5e:bb:06:6d:c5:28:c7:40:84:7a:9c:02: fe:7c:da:15:87:32:24:de:3e:f0:ee:5d:a2:83:46: c0:44:46:9e:3c:0a:23:6f:e9:1b:db:2d:25:42:80: f0:eb:1c:8c:d7:86:53:df:07:49:c8:28:51:3c:98: e2:8b:90:1b:ed:44:8f:48:be:c7:af:83:93:1f:65: 2f:42:6d:b7:94:20:2a:d0:f0:6d:8d:f1:4b:6c:1b: 15:6a:b6:45:25:9e:70:45:4a:aa:1e:66:a0:3f:e8: 88:32:a0:a3:9d:b0:58:4c:95:15:aa:a7:a8:26:db: a8:84:83:23:f0:02:32:fb:b1:ac:cd:2b:6c:f8:bb: ad:c3:c8:04:bc:85:a1:76:62:7d:73:63:fd:c2:23: 2f:3b:6d:91:73:04:35:ac:b1:1a:32:15:57:84:25: 6c:18:59:f9:24:65:05:57:13:44:5c:88:a5:52:5b: 85:7a:28:08:42:8b:0b:c1:30:47:cd:88:f4:15:a2: 6e:b8:59:eb:3b:5d:6f:bd:f1:cc:18:c1:3c:25:f8: 55:94:e6:00:04:61:0d:28:ef:fc:95:80:e2:1b:b0: 3b:cf:e3:19:b2:5d:31:cb:9b:8f:7e:cf:fd:5e:a4: cd:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:E7:02:52:3F:21:C7:B8:56:30:43:72:D7:9F:70:5F:B4:6C:DE:2F X509v3 Authority Key Identifier: keyid:E7:26:92:6B:6E:89:70:CF:84:D6:B4:75:6F:A9:C5:62:11:20:05:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:be:0c:2a:c8:ff:a2:a2:df:87:7f:77:98:98:dd:dc:fa:36: 63:73:ea:9c:da:59:7a:0c:91:a6:81:37:b0:cb:da:b2:b0:89: aa:e0:20:72:51:e1:41:af:ad:58:d9:3f:8f:f5:c6:60:2d:ae: a2:92:1d:74:88:c7:4c:90:1d:d3:19:9d:dd:64:11:b5:c2:e8: 54:e2:b0:3f:b8:67:e5:bd:f6:43:cf:79:7f:77:8f:24:08:64: 11:dd:ff:fc:09:e1:00:92:ac:b3:87:d7:d2:94:17:3e:99:a6: 1b:7c:f4:dd:ec:c0:41:7c:2a:3b:17:b5:9b:ec:9c:ca:82:c1: 27:9a:20:44:2c:16:d1:a7:73:30:b1:6d:86:9f:b5:6c:ed:52: 92:b2:68:5e:42:e1:d2:6b:ec:e7:72:5e:12:e9:e1:ba:f1:69: fb:07:1d:ec:63:85:db:db:6a:15:46:69:00:ac:e7:c2:42:11: c2:cc:83:60:af:1d:f8:4c:12:9b:68:6e:d3:80:23:2f:31:e9: 3f:14:58:f1:34:c1:54:81:3d:42:c8:eb:5d:6c:41:c7:d6:0e: 3c:b9:c8:1f:41:71:4e:96:e2:68:8c:19:98:dd:c4:79:e8:72: 9c:c5:94:3a:5a:3d:20:36:9f:d1:c8:11:c6:f1:59:53:63:fc: cc:d4:39:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CfHugvON+fOQmqgshX1yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3MjY5MjZiNmU4OTcwY2Y4NGQ2YjQ3NTZmYTljNTYyMTEy MDA1MzcwHhcNMjUxMjA2MTkwMTAwWhcNMjUxMjA3MTkwMTAwWjAzMTEwLwYDVQQD EyhmZmU3MDI1MjNmMjFjN2I4NTYzMDQzNzJkNzlmNzA1ZmI0NmNkZTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQmNlfDJ4jjN6TtmYAfW0eReuwZt xSjHQIR6nAL+fNoVhzIk3j7w7l2ig0bAREaePAojb+kb2y0lQoDw6xyM14ZT3wdJ yChRPJjii5Ab7USPSL7Hr4OTH2UvQm23lCAq0PBtjfFLbBsVarZFJZ5wRUqqHmag P+iIMqCjnbBYTJUVqqeoJtuohIMj8AIy+7GszSts+Lutw8gEvIWhdmJ9c2P9wiMv O22RcwQ1rLEaMhVXhCVsGFn5JGUFVxNEXIilUluFeigIQosLwTBHzYj0FaJuuFnr O11vvfHMGME8JfhVlOYABGENKO/8lYDiG7A7z+MZsl0xy5uPfs/9XqTNtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/nAlI/Ice4VjBDctefcF+0bN4vMB8GA1UdIwQY MBaAFOcmkmtuiXDPhNa0dW+pxWIRIAU3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXlhU2EyNkpjTS1FMXJSMWI2bkZZaEVnQlRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9kNzE4ZTQtOGFiYy00YjIzLWFjMTAt YzEwMmVlOTY4NThlLzEvNXlhU2EyNkpjTS1FMXJSMWI2bkZZaEVnQlRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9kNzE4ZTQtOGFiYy00YjIzLWFjMTAtYzEwMmVlOTY4NThl LzEvNXlhU2EyNkpjTS1FMXJSMWI2bkZZaEVnQlRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAob4MKsj/ oqLfh393mJjd3Po2Y3PqnNpZegyRpoE3sMvasrCJquAgclHhQa+tWNk/j/XGYC2u opIddIjHTJAd0xmd3WQRtcLoVOKwP7hn5b32Q895f3ePJAhkEd3//AnhAJKss4fX 0pQXPpmmG3z03ezAQXwqOxe1m+ycyoLBJ5ogRCwW0adzMLFthp+1bO1SkrJoXkLh 0mvs53JeEunhuvFp+wcd7GOF29tqFUZpAKznwkIRwsyDYK8d+EwSm2hu04AjLzHp PxRY8TTBVIE9QsjrXWxBx9YOPLnIH0FxTpbiaIwZmN3EeehynMWUOlo9IDaf0cgR xvFZU2P8zNQ5qw== -----END CERTIFICATE-----Generated at Sun Dec 7 03:42:40 2025 by rpki-client