This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft File: 5b15I6_brofQeyMI3TidnPCC7W0.mft (raw, json) Hash identifier: 95IaZv9ow9V/FbihuopPj3oToAMQWkZs+xbGT1BqrqQ= Subject key identifier: AC:84:F1:0A:E7:D0:41:D7:4E:4A:6B:A1:03:9B:29:5F:AD:25:15:42 Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D Certificate issuer: /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d Certificate serial: 019AF31D66ED522DD2AB9A17DDF5AA6C53AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft Manifest number: 123C Signing time: Sat 06 Dec 2025 10:03:01 +0000 Manifest this update: Sat 06 Dec 2025 10:03:01 +0000 Manifest next update: Sun 07 Dec 2025 10:03:01 +0000 Files and hashes: 1: 4Ri47V3WHq4tKoDHhOl1rwh2KAA.roa (hash: lLEUdxQQ/ffC7NhoECBTe0Cnix1csYMCuJzl8ssByXo=) 2: 5b15I6_brofQeyMI3TidnPCC7W0.crl (hash: nlpaTzN/dGwktnScWlSe8QB8hGnyxa6JWkN8erCjdrE=) 3: 7Bsb-M9H7d4Hc8VS4AnIjyLsXlE.roa (hash: g+wem5y6cG+2ZtV6aLNz5ga+egeri0j1bBqB9ifdstE=) 4: PhUkNZ598A5ia5-UrJ9vFGUcNjk.roa (hash: KeqPA4mGFwTxFNdg5BKKsJzJk98xcvG22Bir2BXm6sw=) 5: hAUqHHOa5zKCAiaylV12xSKmjRM.roa (hash: 8CceZwUGeB+adYsoYQk00qGlq4ULcVFDHiLxSegah5g=) 6: k6g8GHkytSOVhgkLjUclPzoVHy4.roa (hash: +6vq3uBdq/4E/WX/WUrN8nWRXc0eqZ/mejCwa+UQTvk=) 7: tgxx8eKKt9THon5yuqezJ7Gyv60.roa (hash: uNDSHqnE8JqGtw2yUrw4/9adIpOhVHGi34SjFmkEDYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:66:ed:52:2d:d2:ab:9a:17:dd:f5:aa:6c:53:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d Validity Not Before: Dec 6 10:03:01 2025 GMT Not After : Dec 7 10:03:01 2025 GMT Subject: CN=ac84f10ae7d041d74e4a6ba1039b295fad251542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:de:1f:d3:c3:52:08:7c:98:8a:83:d3:73:36: 9a:69:be:df:f9:d9:27:d0:f3:c8:cc:d9:63:f8:21: e1:aa:db:7d:61:21:74:f3:4b:7c:d4:82:d3:5d:f9: 6d:a2:77:6e:6f:25:35:7f:89:6d:3b:dc:30:39:ae: cf:b8:45:0a:0e:9c:d3:f2:30:ef:e6:c0:e4:e4:69: 5d:b7:89:c0:6c:0a:a1:c4:75:ee:82:58:c6:fa:86: cf:fc:d6:a0:d0:63:2d:49:aa:33:9f:35:7a:17:0d: 39:6d:92:f1:29:c0:ba:54:46:4c:5c:19:b6:d2:0b: 52:8e:0d:18:10:ed:a2:96:d3:6c:16:c4:b6:ec:e1: da:37:ba:65:39:56:45:cd:51:04:ab:3e:42:76:f0: ba:1b:19:05:e1:a7:69:e6:77:01:15:b3:84:71:1a: bd:b8:3d:ff:be:bd:a9:8a:cc:0b:c2:46:20:f6:b2: e9:24:34:03:14:3b:1c:4a:ea:dd:4f:f2:07:2b:2b: ec:58:cf:16:7e:87:4b:b1:7c:07:6c:03:e4:cf:e6: 8b:e8:9e:c6:6a:f4:6c:af:6d:fe:36:c0:5e:67:06: d3:36:9c:97:d9:69:51:1d:a1:ed:7b:5a:06:06:c2: 8c:f7:2c:16:97:15:2e:46:f7:81:71:c6:b9:79:da: 3f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:84:F1:0A:E7:D0:41:D7:4E:4A:6B:A1:03:9B:29:5F:AD:25:15:42 X509v3 Authority Key Identifier: keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:0a:bd:fa:ce:a0:53:5a:da:94:ec:79:72:48:ba:ef:fc:be: d2:d0:03:3f:52:22:2d:e8:ef:5a:7f:41:70:30:4b:f8:fc:6d: 1e:db:ac:45:2b:75:6c:10:41:9b:d9:07:ae:2e:34:43:b6:73: 59:f2:f6:d4:23:f3:9f:e5:57:9a:81:a2:e6:11:c6:38:73:8a: 5c:53:d4:f8:86:54:24:e9:73:9d:16:bf:d2:35:b0:0f:9c:94: ff:9c:13:e2:fb:f6:16:f2:07:5d:b3:f7:14:8e:e6:2f:1c:ea: 6a:15:5d:0f:e6:76:ad:32:6d:68:ea:40:6b:d4:28:02:3a:11: d5:d3:41:80:df:76:30:b0:b7:79:d8:a7:b4:db:83:03:3f:01: 0a:59:07:a7:be:69:23:1c:ec:37:1d:65:c0:8c:5e:fc:d9:b6: 13:cb:16:dd:1c:d2:b8:b6:ad:6a:86:e8:12:b0:62:77:74:83: 10:cc:d6:7e:8a:50:8f:d7:c8:38:c2:d9:6a:7c:46:44:7f:1c: fd:16:52:0e:36:0a:00:f3:5d:c1:e9:a9:9f:18:0b:c9:72:a3: c0:39:98:12:ea:08:2e:d0:bf:cf:e1:a5:22:4f:a6:d6:2d:0d: 9b:0e:b3:de:1d:e6:9d:fd:bd:17:07:99:db:fb:07:01:e3:3d: 44:f4:d1:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHWbtUi3Sq5oX3fWqbFOvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YmQ3OTIzYWZkYmFlODdkMDdiMjMwOGRkMzg5ZDljZjA4 MmVkNmQwHhcNMjUxMjA2MTAwMzAxWhcNMjUxMjA3MTAwMzAxWjAzMTEwLwYDVQQD EyhhYzg0ZjEwYWU3ZDA0MWQ3NGU0YTZiYTEwMzliMjk1ZmFkMjUxNTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAut4f08NSCHyYioPTczaaab7f+dkn 0PPIzNlj+CHhqtt9YSF080t81ILTXfltondubyU1f4ltO9wwOa7PuEUKDpzT8jDv 5sDk5Gldt4nAbAqhxHXugljG+obP/Nag0GMtSaoznzV6Fw05bZLxKcC6VEZMXBm2 0gtSjg0YEO2iltNsFsS27OHaN7plOVZFzVEEqz5CdvC6GxkF4adp5ncBFbOEcRq9 uD3/vr2piswLwkYg9rLpJDQDFDscSurdT/IHKyvsWM8WfodLsXwHbAPkz+aL6J7G avRsr23+NsBeZwbTNpyX2WlRHaHte1oGBsKM9ywWlxUuRveBcca5edo//wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKyE8Qrn0EHXTkproQObKV+tJRVCMB8GA1UdIwQY MBaAFOW9eSOv266H0HsjCN04nZzwgu1tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWIxNUk2X2Jyb2ZRZXlNSTNUaWRuUENDN1cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8yNjkyMjktMjBlYi00ZjFjLWExM2Ut MjZkMWU1NDU3OGYxLzEvNWIxNUk2X2Jyb2ZRZXlNSTNUaWRuUENDN1cwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS8yNjkyMjktMjBlYi00ZjFjLWExM2UtMjZkMWU1NDU3OGYx LzEvNWIxNUk2X2Jyb2ZRZXlNSTNUaWRuUENDN1cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnwq9+s6g U1ralOx5cki67/y+0tADP1IiLejvWn9BcDBL+PxtHtusRSt1bBBBm9kHri40Q7Zz WfL21CPzn+VXmoGi5hHGOHOKXFPU+IZUJOlznRa/0jWwD5yU/5wT4vv2FvIHXbP3 FI7mLxzqahVdD+Z2rTJtaOpAa9QoAjoR1dNBgN92MLC3edintNuDAz8BClkHp75p IxzsNx1lwIxe/Nm2E8sW3RzSuLataoboErBid3SDEMzWfopQj9fIOMLZanxGRH8c /RZSDjYKAPNdwempnxgLyXKjwDmYEuoILtC/z+GlIk+m1i0Nmw6z3h3mnf29FweZ 2/sHAeM9RPTRpA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:55:29 2025 by rpki-client