This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.mft File: x5CPU-RRfc5MdMouMJgniJEMQDM.mft (raw, json) Hash identifier: ynb9wwFSeSco+Ogzr27dugFfCiXUtSkN7nT2bs68SPQ= Subject key identifier: 35:D5:1D:59:07:B7:AB:FC:00:91:2E:B1:69:46:7A:40:C5:CA:7C:E1 Authority key identifier: C7:90:8F:53:E4:51:7D:CE:4C:74:CA:2E:30:98:27:88:91:0C:40:33 Certificate issuer: /CN=c7908f53e4517dce4c74ca2e30982788910c4033 Certificate serial: 019B0DB712835332D27E57D3BF6F82B32D72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5CPU-RRfc5MdMouMJgniJEMQDM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.mft Manifest number: 1254 Signing time: Thu 11 Dec 2025 14:01:00 +0000 Manifest this update: Thu 11 Dec 2025 14:01:00 +0000 Manifest next update: Fri 12 Dec 2025 14:01:00 +0000 Files and hashes: 1: 1-oMFTx8B3lukMNBvWfS47n97CmA.roa (hash: m9rVIDnRYZoBIXBcOLquTYp9zMM2moDhJAmWdarMX5o=) 2: x5CPU-RRfc5MdMouMJgniJEMQDM.crl (hash: AuZ2oTeyLoGbl0IgNi3/yYt5I9vWG1aHPFFRhkBFbRY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.crl rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.mft rsync://rpki.ripe.net/repository/DEFAULT/x5CPU-RRfc5MdMouMJgniJEMQDM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b7:12:83:53:32:d2:7e:57:d3:bf:6f:82:b3:2d:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7908f53e4517dce4c74ca2e30982788910c4033 Validity Not Before: Dec 11 14:01:00 2025 GMT Not After : Dec 12 14:01:00 2025 GMT Subject: CN=35d51d5907b7abfc00912eb169467a40c5ca7ce1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8c:1e:10:f6:f5:2a:58:87:7c:c1:26:e0:86: ba:de:00:a1:cf:f7:67:75:58:75:19:f9:c7:db:0c: a1:d5:50:ea:25:6f:b2:72:2d:8d:a1:d8:e2:8b:a7: cd:00:06:e2:de:9f:05:04:db:5a:86:45:d3:23:32: 16:9e:60:aa:2d:a1:14:89:2c:a3:e9:b4:49:66:73: 37:d2:e4:e4:56:95:96:e9:29:81:e8:f8:aa:af:28: a6:a5:1a:c6:96:d4:25:1c:2b:9a:27:ed:de:7d:30: 4f:b9:b9:ba:1f:99:9a:ee:31:c7:af:e7:7b:de:f6: 2f:59:8c:94:4d:bf:9b:fb:c2:d3:2f:60:44:95:cc: fe:d1:9f:23:6e:c1:60:3f:b8:fc:f1:d1:80:c6:1a: b8:ed:aa:76:97:83:e3:84:ba:ca:c3:2a:72:ad:bb: f8:96:90:c8:82:68:8d:46:18:93:2d:7f:49:e6:64: e2:48:f3:67:4b:77:82:e5:be:17:02:46:af:a3:17: cc:30:b3:0c:b4:d1:7c:c8:a0:a5:0b:08:a9:db:60: c6:a3:97:f7:11:db:fa:62:54:a1:70:55:ce:b8:4b: 40:e4:a8:db:5c:64:74:76:ba:47:65:91:d5:67:b9: 55:68:7b:ba:27:63:ff:f7:61:5f:5e:45:36:fc:dd: 80:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D5:1D:59:07:B7:AB:FC:00:91:2E:B1:69:46:7A:40:C5:CA:7C:E1 X509v3 Authority Key Identifier: keyid:C7:90:8F:53:E4:51:7D:CE:4C:74:CA:2E:30:98:27:88:91:0C:40:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5CPU-RRfc5MdMouMJgniJEMQDM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:e5:5d:10:15:9e:4a:53:7c:56:c1:6d:5b:2e:92:d4:ec:03: b5:31:c4:50:9b:4e:c7:3c:d3:50:36:20:1d:86:8c:65:82:80: 3c:43:44:9a:d5:bb:4f:24:03:cd:e1:ce:96:25:83:45:e6:c9: 90:d0:41:16:fd:6b:5b:07:66:75:d9:b3:1c:ec:73:03:ee:4a: e9:bc:00:ba:34:2b:dc:57:2a:0c:e6:ea:eb:32:69:63:25:0f: 0a:d8:81:ff:fd:43:c1:37:9f:dd:2c:9c:e0:21:e3:e0:60:dc: 28:0c:33:16:85:0b:84:b4:fb:59:28:0b:46:c3:41:9f:1b:85: 2f:b5:76:b7:54:3c:3f:74:b6:c1:8c:64:61:9e:74:cf:ec:de: 59:be:02:66:4a:01:0d:72:20:b5:67:c7:89:80:3c:0a:2e:4f: 33:e8:47:2f:17:e8:7c:cb:f8:a2:1b:0c:b4:d4:1e:d6:e9:ae: a1:f5:0b:4b:3e:84:b6:10:26:f1:e3:5b:1b:06:00:6a:1b:e7: 6b:ee:63:ab:8e:e1:99:a4:c9:7b:d1:c8:94:94:bb:4a:b8:b1: d6:e9:a0:d9:97:4d:dd:58:33:e2:6f:87:9a:da:c4:aa:43:0b: 8a:d6:eb:9e:49:aa:75:a0:48:f2:ec:72:5e:d5:a5:b0:5a:a1: 0c:53:32:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNtxKDUzLSflfTv2+Csy1yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3OTA4ZjUzZTQ1MTdkY2U0Yzc0Y2EyZTMwOTgyNzg4OTEw YzQwMzMwHhcNMjUxMjExMTQwMTAwWhcNMjUxMjEyMTQwMTAwWjAzMTEwLwYDVQQD EygzNWQ1MWQ1OTA3YjdhYmZjMDA5MTJlYjE2OTQ2N2E0MGM1Y2E3Y2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoweEPb1KliHfMEm4Ia63gChz/dn dVh1GfnH2wyh1VDqJW+yci2Nodjii6fNAAbi3p8FBNtahkXTIzIWnmCqLaEUiSyj 6bRJZnM30uTkVpWW6SmB6PiqryimpRrGltQlHCuaJ+3efTBPubm6H5ma7jHHr+d7 3vYvWYyUTb+b+8LTL2BElcz+0Z8jbsFgP7j88dGAxhq47ap2l4PjhLrKwypyrbv4 lpDIgmiNRhiTLX9J5mTiSPNnS3eC5b4XAkavoxfMMLMMtNF8yKClCwip22DGo5f3 Edv6YlShcFXOuEtA5KjbXGR0drpHZZHVZ7lVaHu6J2P/92FfXkU2/N2A2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDXVHVkHt6v8AJEusWlGekDFynzhMB8GA1UdIwQY MBaAFMeQj1PkUX3OTHTKLjCYJ4iRDEAzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDVDUFUtUlJmYzVNZE1vdU1KZ25pSkVNUURNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9lNDI1ZDgtZjc4Ny00ZjI0LWJhMmIt MjhmZTY2MTQ0OTgxLzEveDVDUFUtUlJmYzVNZE1vdU1KZ25pSkVNUURNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9lNDI1ZDgtZjc4Ny00ZjI0LWJhMmItMjhmZTY2MTQ0OTgx LzEveDVDUFUtUlJmYzVNZE1vdU1KZ25pSkVNUURNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUOVdEBWe SlN8VsFtWy6S1OwDtTHEUJtOxzzTUDYgHYaMZYKAPENEmtW7TyQDzeHOliWDRebJ kNBBFv1rWwdmddmzHOxzA+5K6bwAujQr3FcqDObq6zJpYyUPCtiB//1DwTef3Syc 4CHj4GDcKAwzFoULhLT7WSgLRsNBnxuFL7V2t1Q8P3S2wYxkYZ50z+zeWb4CZkoB DXIgtWfHiYA8Ci5PM+hHLxfofMv4ohsMtNQe1umuofULSz6EthAm8eNbGwYAahvn a+5jq47hmaTJe9HIlJS7Srix1umg2ZdN3Vgz4m+HmtrEqkMLitbrnkmqdaBI8uxy XtWlsFqhDFMyQA== -----END CERTIFICATE-----Generated at Thu Dec 11 16:37:21 2025 by rpki-client