This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft File: 5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft (raw, json) Hash identifier: LTVyR/rc6W2SJ25jqJoCK2YlGbq/6WuXTPdCQOda3EM= Subject key identifier: 5A:B9:57:FA:96:E1:6B:E8:1A:20:4F:41:D3:9E:C0:EB:BF:AB:60:3A Authority key identifier: E4:D6:08:E0:F7:A1:08:6C:84:51:DE:5D:63:78:47:B5:22:17:AB:B4 Certificate issuer: /CN=e4d608e0f7a1086c8451de5d637847b52217abb4 Certificate serial: 019B31FA63BE7F8172CC3CFF9A08103E31E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NYI4PehCGyEUd5dY3hHtSIXq7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft Manifest number: 0635 Signing time: Thu 18 Dec 2025 15:00:51 +0000 Manifest this update: Thu 18 Dec 2025 15:00:51 +0000 Manifest next update: Fri 19 Dec 2025 15:00:51 +0000 Files and hashes: 1: 5NYI4PehCGyEUd5dY3hHtSIXq7Q.crl (hash: QOo0Z3cdxN/Mrf9IjCM/OLzCwjj5DyRbCO++561ejBw=) 2: GG3QiT3L8y2-6K509vuWf-CfKL0.roa (hash: 0l/LpwFeQpYG65cH+t5aLrBuln2/gPSbbnRKosRRf2s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/5NYI4PehCGyEUd5dY3hHtSIXq7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:63:be:7f:81:72:cc:3c:ff:9a:08:10:3e:31:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4d608e0f7a1086c8451de5d637847b52217abb4 Validity Not Before: Dec 18 15:00:51 2025 GMT Not After : Dec 19 15:00:51 2025 GMT Subject: CN=5ab957fa96e16be81a204f41d39ec0ebbfab603a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d4:f0:58:b8:ea:8d:1d:cb:0a:52:7b:09:1a: 92:e7:04:5a:c6:01:4a:a7:24:e5:10:4f:84:f4:af: a8:a3:a0:f2:66:14:6d:31:dd:84:6e:c9:49:34:29: d3:cf:63:73:69:f6:ae:59:a4:80:1b:ac:af:d0:24: 5f:f6:34:95:18:35:9e:b1:d6:aa:0a:5e:37:d4:a0: a8:31:7c:40:fa:a4:9b:31:30:37:32:01:94:cc:79: 63:88:b1:35:3a:3c:36:fc:07:cc:62:01:58:24:22: 49:e8:c3:13:1e:22:e1:37:89:61:cc:19:bd:75:25: 76:61:77:58:d3:9e:50:71:33:ac:68:5e:5a:11:9d: 82:fa:f7:e6:15:43:e2:dd:22:bc:35:e2:ca:8b:9b: 19:0e:c9:08:8c:f7:fc:56:7b:c6:b2:48:66:93:57: 8b:f6:cf:b7:0e:0b:92:e7:9f:7e:90:15:f6:4f:cf: f7:a9:22:32:6f:a6:bd:25:65:c5:ef:14:e5:f1:3b: d6:a4:be:26:1f:2d:9b:2c:27:c2:12:d3:d4:a5:ab: 14:0f:0c:a7:aa:8a:25:ce:d1:0c:67:5d:96:12:4c: 3f:77:c4:b2:64:51:d3:ce:d8:02:c9:64:9d:0c:1c: b7:e6:e4:0d:26:4b:d0:d4:0d:53:32:0e:e3:43:34: a1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B9:57:FA:96:E1:6B:E8:1A:20:4F:41:D3:9E:C0:EB:BF:AB:60:3A X509v3 Authority Key Identifier: keyid:E4:D6:08:E0:F7:A1:08:6C:84:51:DE:5D:63:78:47:B5:22:17:AB:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NYI4PehCGyEUd5dY3hHtSIXq7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:e9:e9:48:5f:f1:2a:2e:87:f9:d8:34:2a:70:e1:83:9e:6a: 7e:95:fc:77:10:97:ac:25:f7:15:ff:7a:d3:a1:24:4c:ee:72: 69:3e:a6:8b:ff:bc:01:65:ed:52:65:0f:d5:c7:0a:bc:eb:2c: 88:a7:e4:d0:82:74:7d:7e:30:d9:6d:c6:60:b1:19:66:41:7f: 56:b3:62:53:ec:9e:37:c9:28:b1:d0:1d:29:14:41:de:34:63: 6b:f1:04:5c:68:63:3a:14:50:0f:ad:a0:ac:f0:fd:f3:cc:92: c7:19:a8:9b:7d:ad:9d:52:3e:97:8b:0b:6e:74:2b:63:41:66: 0f:86:94:fc:02:86:2b:67:8a:29:6b:ca:1f:b2:32:9d:44:a5: 14:03:12:f3:52:18:4b:ae:aa:7f:1c:1b:ea:2e:f9:49:77:68: 54:07:af:3a:62:07:d1:97:69:da:a2:68:56:80:2c:e3:07:a6: a5:c4:91:6d:91:d8:9f:ab:d5:06:d5:84:ee:49:7a:34:f8:82: e4:15:e1:56:95:3c:e3:40:8e:1e:17:24:ba:99:e9:37:f2:d6: b1:a8:97:d4:13:f9:af:4d:74:22:c3:e8:b9:e6:b1:34:ba:99: 44:a3:20:de:a2:73:3e:2a:60:78:c5:23:a9:b9:d1:71:93:8f: c3:1d:a8:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsx+mO+f4FyzDz/mggQPjHnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ZDYwOGUwZjdhMTA4NmM4NDUxZGU1ZDYzNzg0N2I1MjIx N2FiYjQwHhcNMjUxMjE4MTUwMDUxWhcNMjUxMjE5MTUwMDUxWjAzMTEwLwYDVQQD Eyg1YWI5NTdmYTk2ZTE2YmU4MWEyMDRmNDFkMzllYzBlYmJmYWI2MDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNTwWLjqjR3LClJ7CRqS5wRaxgFK pyTlEE+E9K+oo6DyZhRtMd2EbslJNCnTz2NzafauWaSAG6yv0CRf9jSVGDWesdaq Cl431KCoMXxA+qSbMTA3MgGUzHljiLE1Ojw2/AfMYgFYJCJJ6MMTHiLhN4lhzBm9 dSV2YXdY055QcTOsaF5aEZ2C+vfmFUPi3SK8NeLKi5sZDskIjPf8VnvGskhmk1eL 9s+3DguS559+kBX2T8/3qSIyb6a9JWXF7xTl8TvWpL4mHy2bLCfCEtPUpasUDwyn qoolztEMZ12WEkw/d8SyZFHTztgCyWSdDBy35uQNJkvQ1A1TMg7jQzShxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFq5V/qW4WvoGiBPQdOewOu/q2A6MB8GA1UdIwQY MBaAFOTWCOD3oQhshFHeXWN4R7UiF6u0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU5ZSTRQZWhDR3lFVWQ1ZFkzaEh0U0lYcTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lZWM3MGEtYWE5Zi00MmFlLThhZDYt YjdiYmY1YTFhYzczLzEvNU5ZSTRQZWhDR3lFVWQ1ZFkzaEh0U0lYcTdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lZWM3MGEtYWE5Zi00MmFlLThhZDYtYjdiYmY1YTFhYzcz LzEvNU5ZSTRQZWhDR3lFVWQ1ZFkzaEh0U0lYcTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADOnpSF/x Ki6H+dg0KnDhg55qfpX8dxCXrCX3Ff9606EkTO5yaT6mi/+8AWXtUmUP1ccKvOss iKfk0IJ0fX4w2W3GYLEZZkF/VrNiU+yeN8kosdAdKRRB3jRja/EEXGhjOhRQD62g rPD988ySxxmom32tnVI+l4sLbnQrY0FmD4aU/AKGK2eKKWvKH7IynUSlFAMS81IY S66qfxwb6i75SXdoVAevOmIH0Zdp2qJoVoAs4wempcSRbZHYn6vVBtWE7kl6NPiC 5BXhVpU840COHhckupnpN/LWsaiX1BP5r010IsPoueaxNLqZRKMg3qJzPipgeMUj qbnRcZOPwx2o0A== -----END CERTIFICATE-----Generated at Thu Dec 18 21:47:09 2025 by rpki-client