This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft File: 5YBpdIdI6a69e-QFh9gUDv3lW2s.mft (raw, json) Hash identifier: kWL27Wy6a34kxz3Xaqgn0Q48CbsGUNN0CKknOE8S1W0= Subject key identifier: 2B:45:BF:67:B5:AF:E5:C4:16:A9:42:86:C6:5A:79:46:C6:C3:25:71 Authority key identifier: E5:80:69:74:87:48:E9:AE:BD:7B:E4:05:87:D8:14:0E:FD:E5:5B:6B Certificate issuer: /CN=e58069748748e9aebd7be40587d8140efde55b6b Certificate serial: 019AF209328573013802AC76C11D1BBFD68A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft Manifest number: 16F3 Signing time: Sat 06 Dec 2025 05:01:20 +0000 Manifest this update: Sat 06 Dec 2025 05:01:20 +0000 Manifest next update: Sun 07 Dec 2025 05:01:20 +0000 Files and hashes: 1: 5YBpdIdI6a69e-QFh9gUDv3lW2s.crl (hash: d617mthifYsEKkL3ca2lnR7SSKNqrQ9Ndw+eGDqi/xE=) 2: vmkVgb9N_5wAEFtAOAjwuSdx1Xs.roa (hash: To73D5BDmwWuULrYV7q3UmXkLh1DadkYNkNoo+AcLqo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:32:85:73:01:38:02:ac:76:c1:1d:1b:bf:d6:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e58069748748e9aebd7be40587d8140efde55b6b Validity Not Before: Dec 6 05:01:20 2025 GMT Not After : Dec 7 05:01:20 2025 GMT Subject: CN=2b45bf67b5afe5c416a94286c65a7946c6c32571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:22:be:3b:07:80:46:fe:e7:1d:cd:dd:01:38: 42:95:fa:0b:61:3e:24:4a:ce:79:82:a6:a4:f1:01: 0f:40:4d:aa:b0:4a:14:cf:0c:0a:5e:d7:e5:5d:7a: b1:91:51:46:b4:2f:d2:03:64:83:28:dc:c1:32:16: 08:59:d8:90:7a:db:98:c9:cf:f7:c3:8d:2a:13:fd: c6:35:9c:e9:7c:d1:0e:ac:fd:ae:4c:d0:9e:88:c7: 3c:77:c2:70:ad:2a:dc:f8:15:8f:59:4c:a8:af:83: cb:c0:60:3e:a9:d8:d0:aa:35:6c:af:23:44:97:08: 7c:e4:cd:6f:ab:6e:35:7b:47:a3:e0:94:2c:2e:60: c2:96:fe:c5:4e:a2:c2:e9:a2:74:52:09:81:2c:4a: 1f:fc:da:23:65:7c:79:64:56:5c:4f:de:23:6d:df: 91:a0:7f:50:29:27:38:3c:c5:41:3b:aa:b8:d3:dd: 3b:f2:ba:30:e3:d8:71:30:fe:14:db:c8:e0:3a:c3: 76:4d:f7:7e:a5:db:6f:f4:a5:74:5a:c0:d3:43:fb: 8d:10:5e:fe:6c:1a:90:20:6c:87:b5:99:78:df:0c: 65:6d:c4:82:7c:b6:2e:ef:ba:13:e7:ad:e4:ad:34: db:be:e7:ce:fc:70:69:da:49:af:cc:8f:c0:8d:c5: 24:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:45:BF:67:B5:AF:E5:C4:16:A9:42:86:C6:5A:79:46:C6:C3:25:71 X509v3 Authority Key Identifier: keyid:E5:80:69:74:87:48:E9:AE:BD:7B:E4:05:87:D8:14:0E:FD:E5:5B:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:20:82:e5:55:50:69:6c:5e:b6:d0:07:61:3d:3e:de:ba:74: 3c:cf:2e:ee:bd:3a:f5:c5:65:ba:8e:e4:ec:c0:8a:20:53:b3: ca:cd:75:fb:d9:16:81:97:4a:70:15:79:a8:90:fe:49:7c:52: bc:94:18:8b:98:83:94:53:ba:a1:10:94:e5:f8:e4:63:bf:9c: c1:54:68:e3:b4:ce:e9:b2:95:1f:bc:88:28:1d:f8:bb:2f:83: e7:e0:79:28:f9:00:b3:c4:bb:ed:01:3e:d0:b5:94:19:a0:14: ec:b8:2f:87:13:a1:ce:10:8e:b8:76:5f:9a:aa:c6:39:46:ae: b5:b4:c3:31:19:40:6b:a5:8e:d8:48:7f:f5:2f:6b:80:54:53: 48:6b:14:4d:a6:ea:8c:cb:e2:88:01:1a:ef:f5:c2:79:c5:4c: 2c:be:bc:8b:f7:58:5a:84:9f:ab:88:7d:80:2b:1e:07:bc:b9: 30:e9:b8:24:3d:ff:3e:30:62:d5:89:58:48:c4:3a:e1:40:39: 45:33:68:11:ac:13:fb:d4:f0:83:0a:ab:21:77:18:6e:59:59: 6f:f7:61:1a:4c:48:4f:9a:22:ba:7e:cc:ab:72:1d:54:6e:9f: aa:37:74:9a:f0:c7:8a:93:a4:62:eb:00:0c:68:84:7d:00:ec: 57:a7:c3:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCTKFcwE4Aqx2wR0bv9aKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ODA2OTc0ODc0OGU5YWViZDdiZTQwNTg3ZDgxNDBlZmRl NTViNmIwHhcNMjUxMjA2MDUwMTIwWhcNMjUxMjA3MDUwMTIwWjAzMTEwLwYDVQQD EygyYjQ1YmY2N2I1YWZlNWM0MTZhOTQyODZjNjVhNzk0NmM2YzMyNTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSK+OweARv7nHc3dAThClfoLYT4k Ss55gqak8QEPQE2qsEoUzwwKXtflXXqxkVFGtC/SA2SDKNzBMhYIWdiQetuYyc/3 w40qE/3GNZzpfNEOrP2uTNCeiMc8d8JwrSrc+BWPWUyor4PLwGA+qdjQqjVsryNE lwh85M1vq241e0ej4JQsLmDClv7FTqLC6aJ0UgmBLEof/NojZXx5ZFZcT94jbd+R oH9QKSc4PMVBO6q409078row49hxMP4U28jgOsN2Tfd+pdtv9KV0WsDTQ/uNEF7+ bBqQIGyHtZl43wxlbcSCfLYu77oT563krTTbvufO/HBp2kmvzI/AjcUkrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCtFv2e1r+XEFqlChsZaeUbGwyVxMB8GA1UdIwQY MBaAFOWAaXSHSOmuvXvkBYfYFA795VtrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVlCcGRJZEk2YTY5ZS1RRmg5Z1VEdjNsVzJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84ZWZkODAtN2RiMy00ZTUyLWFkNzYt MGY4OTZlYmNhNGY4LzEvNVlCcGRJZEk2YTY5ZS1RRmg5Z1VEdjNsVzJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS84ZWZkODAtN2RiMy00ZTUyLWFkNzYtMGY4OTZlYmNhNGY4 LzEvNVlCcGRJZEk2YTY5ZS1RRmg5Z1VEdjNsVzJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnCCC5VVQ aWxettAHYT0+3rp0PM8u7r069cVluo7k7MCKIFOzys11+9kWgZdKcBV5qJD+SXxS vJQYi5iDlFO6oRCU5fjkY7+cwVRo47TO6bKVH7yIKB34uy+D5+B5KPkAs8S77QE+ 0LWUGaAU7LgvhxOhzhCOuHZfmqrGOUautbTDMRlAa6WO2Eh/9S9rgFRTSGsUTabq jMviiAEa7/XCecVMLL68i/dYWoSfq4h9gCseB7y5MOm4JD3/PjBi1YlYSMQ64UA5 RTNoEawT+9TwgwqrIXcYbllZb/dhGkxIT5oiun7Mq3IdVG6fqjd0mvDHipOkYusA DGiEfQDsV6fDQw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:19:22 2025 by rpki-client