This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft File: 5YBpdIdI6a69e-QFh9gUDv3lW2s.mft (raw, json) Hash identifier: GY6wheB2QW5ONTlVN7Vc8QmOujF/17nr/Da9UFAiuY8= Subject key identifier: C5:E8:C1:09:3D:17:C1:F9:A6:CD:8D:EF:D4:67:FF:15:B1:DA:90:A3 Authority key identifier: E5:80:69:74:87:48:E9:AE:BD:7B:E4:05:87:D8:14:0E:FD:E5:5B:6B Certificate issuer: /CN=e58069748748e9aebd7be40587d8140efde55b6b Certificate serial: 019B33B1C56C2910161F2510CB7975743E96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft Manifest number: 1715 Signing time: Thu 18 Dec 2025 23:00:46 +0000 Manifest this update: Thu 18 Dec 2025 23:00:46 +0000 Manifest next update: Fri 19 Dec 2025 23:00:46 +0000 Files and hashes: 1: 5YBpdIdI6a69e-QFh9gUDv3lW2s.crl (hash: frgA5xiO4ApxSR5c2/TtIWkpN2wEea1HSlgybxq0PIM=) 2: vmkVgb9N_5wAEFtAOAjwuSdx1Xs.roa (hash: To73D5BDmwWuULrYV7q3UmXkLh1DadkYNkNoo+AcLqo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b1:c5:6c:29:10:16:1f:25:10:cb:79:75:74:3e:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e58069748748e9aebd7be40587d8140efde55b6b Validity Not Before: Dec 18 23:00:46 2025 GMT Not After : Dec 19 23:00:46 2025 GMT Subject: CN=c5e8c1093d17c1f9a6cd8defd467ff15b1da90a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6b:97:f5:08:f5:19:55:70:14:01:da:d0:82: 88:df:49:86:7c:14:10:c7:a9:5a:b4:0d:d4:e1:c4: 95:e6:fc:c2:6f:5a:76:74:ff:4b:61:d8:f7:c4:39: 64:8f:70:c6:70:a1:24:35:83:10:6d:5d:18:33:e2: 6d:b0:e3:55:86:86:bc:3f:f9:16:84:52:ee:65:07: 34:e7:fc:48:6e:de:87:66:a0:ef:69:b8:78:d8:f7: 6e:35:63:2c:81:73:88:90:e3:20:44:8c:3c:12:48: 7a:65:1b:60:0a:00:56:3f:e6:25:65:0f:fd:5e:45: 58:e2:28:11:f8:a1:4a:22:28:71:30:80:b1:57:27: 84:76:9d:0d:38:7e:1b:1c:ce:05:67:03:10:9c:a0: 30:7e:09:24:c6:97:25:35:41:3a:16:35:95:4d:99: 2c:78:b4:66:5b:b8:31:74:24:e9:f2:e8:59:2b:99: 98:1a:0f:19:4e:f2:98:cc:53:c0:f7:b5:51:73:7b: e8:56:42:3a:3c:2a:77:6f:e5:dd:7a:5a:b4:14:07: da:30:45:19:51:52:7c:b9:95:5d:e7:4b:62:58:b6: 2e:2e:62:42:d7:6a:27:0a:47:be:7b:c2:d6:5f:7e: 3c:55:47:6e:af:32:23:41:4b:e7:6e:58:03:3c:69: 6a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E8:C1:09:3D:17:C1:F9:A6:CD:8D:EF:D4:67:FF:15:B1:DA:90:A3 X509v3 Authority Key Identifier: keyid:E5:80:69:74:87:48:E9:AE:BD:7B:E4:05:87:D8:14:0E:FD:E5:5B:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:07:16:ed:8c:2e:cd:28:e5:09:3d:d0:02:0e:b9:4c:65:59: 10:69:6b:b1:a3:60:97:04:d9:b9:24:be:81:58:52:ea:69:79: 54:9f:5e:49:92:2d:76:c9:e1:b5:4c:e1:29:25:14:d3:42:6a: 15:36:cf:0e:fd:ba:c9:1c:e3:a5:28:7c:66:ac:2a:4d:f1:2f: 0c:63:e9:03:09:bc:b7:70:b6:6f:90:34:74:03:ca:4a:39:03: ea:a7:0f:47:c6:4f:6d:60:ba:da:9e:3e:cc:42:7b:c9:4a:e0: 6c:1d:b3:a5:16:3a:82:97:15:8b:a1:96:19:17:ff:53:51:e0: d9:40:bf:9f:5f:47:79:cf:67:df:5d:71:21:96:f0:b8:37:da: 8a:5f:03:28:26:7b:3e:c5:16:7a:02:84:90:c7:5a:81:66:05: 6e:7d:69:c0:29:b1:f8:6d:eb:ed:cf:a6:a1:7a:f3:d3:34:26: 3f:58:d0:91:ff:93:f5:34:ca:9f:f4:a8:7d:e0:4c:61:97:cc: 13:c6:cf:98:b8:f3:01:81:ce:22:b7:0a:9a:21:c9:f2:28:77: 3d:1a:16:a5:46:fe:0f:e8:2c:9f:ae:f9:57:76:3a:b2:ec:2f: 0f:48:78:17:ad:b1:77:f0:07:c2:1c:9a:de:cc:39:fb:4e:c6: f6:20:f5:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszscVsKRAWHyUQy3l1dD6WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ODA2OTc0ODc0OGU5YWViZDdiZTQwNTg3ZDgxNDBlZmRl NTViNmIwHhcNMjUxMjE4MjMwMDQ2WhcNMjUxMjE5MjMwMDQ2WjAzMTEwLwYDVQQD EyhjNWU4YzEwOTNkMTdjMWY5YTZjZDhkZWZkNDY3ZmYxNWIxZGE5MGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0muX9Qj1GVVwFAHa0IKI30mGfBQQ x6latA3U4cSV5vzCb1p2dP9LYdj3xDlkj3DGcKEkNYMQbV0YM+JtsONVhoa8P/kW hFLuZQc05/xIbt6HZqDvabh42PduNWMsgXOIkOMgRIw8Ekh6ZRtgCgBWP+YlZQ/9 XkVY4igR+KFKIihxMICxVyeEdp0NOH4bHM4FZwMQnKAwfgkkxpclNUE6FjWVTZks eLRmW7gxdCTp8uhZK5mYGg8ZTvKYzFPA97VRc3voVkI6PCp3b+Xdelq0FAfaMEUZ UVJ8uZVd50tiWLYuLmJC12onCke+e8LWX348VUdurzIjQUvnblgDPGlqZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMXowQk9F8H5ps2N79Rn/xWx2pCjMB8GA1UdIwQY MBaAFOWAaXSHSOmuvXvkBYfYFA795VtrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVlCcGRJZEk2YTY5ZS1RRmg5Z1VEdjNsVzJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84ZWZkODAtN2RiMy00ZTUyLWFkNzYt MGY4OTZlYmNhNGY4LzEvNVlCcGRJZEk2YTY5ZS1RRmg5Z1VEdjNsVzJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS84ZWZkODAtN2RiMy00ZTUyLWFkNzYtMGY4OTZlYmNhNGY4 LzEvNVlCcGRJZEk2YTY5ZS1RRmg5Z1VEdjNsVzJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAngcW7Ywu zSjlCT3QAg65TGVZEGlrsaNglwTZuSS+gVhS6ml5VJ9eSZItdsnhtUzhKSUU00Jq FTbPDv26yRzjpSh8ZqwqTfEvDGPpAwm8t3C2b5A0dAPKSjkD6qcPR8ZPbWC62p4+ zEJ7yUrgbB2zpRY6gpcVi6GWGRf/U1Hg2UC/n19Hec9n311xIZbwuDfail8DKCZ7 PsUWegKEkMdagWYFbn1pwCmx+G3r7c+moXrz0zQmP1jQkf+T9TTKn/SofeBMYZfM E8bPmLjzAYHOIrcKmiHJ8ih3PRoWpUb+D+gsn675V3Y6suwvD0h4F62xd/AHwhya 3sw5+07G9iD1YA== -----END CERTIFICATE-----Generated at Fri Dec 19 05:42:59 2025 by rpki-client