This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft File: 5NU8R_Id1mUrZ_70lclP39FSjOs.mft (raw, json) Hash identifier: lsXHHWP2jdp9vfcaxvJc+Jh6l6cR86S5pUH8br9YpF4= Subject key identifier: E6:3B:9A:F6:98:65:97:43:DC:E8:B6:98:2D:DD:ED:0C:96:DB:8E:F0 Authority key identifier: E4:D5:3C:47:F2:1D:D6:65:2B:67:FE:F4:95:C9:4F:DF:D1:52:8C:EB Certificate issuer: /CN=e4d53c47f21dd6652b67fef495c94fdfd1528ceb Certificate serial: 019AF19AE7EB235C0294168AD9C864DC07C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NU8R_Id1mUrZ_70lclP39FSjOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft Manifest number: 010B Signing time: Sat 06 Dec 2025 03:00:52 +0000 Manifest this update: Sat 06 Dec 2025 03:00:52 +0000 Manifest next update: Sun 07 Dec 2025 03:00:52 +0000 Files and hashes: 1: 5NU8R_Id1mUrZ_70lclP39FSjOs.crl (hash: bX7H4E56+9z6moC0q5tVzb1kQaOU1TP5nx4HJOFUVPg=) 2: PrRGaFLPXBxBYOXraz8nx2Zv-Uo.roa (hash: d4brDjq0VND/Iy+6ZmnnMFSJxquKernTk88xGtm16DQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.crl rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft rsync://rpki.ripe.net/repository/DEFAULT/5NU8R_Id1mUrZ_70lclP39FSjOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:e7:eb:23:5c:02:94:16:8a:d9:c8:64:dc:07:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4d53c47f21dd6652b67fef495c94fdfd1528ceb Validity Not Before: Dec 6 03:00:52 2025 GMT Not After : Dec 7 03:00:52 2025 GMT Subject: CN=e63b9af698659743dce8b6982ddded0c96db8ef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:cb:06:2b:1a:05:ff:61:8a:25:ec:bf:a4:21: 75:c2:02:91:a4:f8:e3:1d:1e:75:10:7e:cd:37:4f: f5:be:df:94:95:f6:81:b1:74:09:16:9c:74:5a:f0: 82:61:f0:5c:70:c2:48:90:ab:2d:28:66:2a:9b:5f: d3:8f:ce:39:73:46:3e:ff:e8:1f:b4:e3:f0:53:ec: 80:d7:1b:0f:22:a1:14:d3:f0:50:9b:33:52:c3:28: 80:a3:0c:61:51:c4:80:81:7f:93:e9:4e:79:04:4c: 49:95:9e:bc:46:4a:2f:bc:bb:0d:c9:e3:e5:a9:5d: e6:1d:ef:9e:4e:d5:c0:41:5e:85:3f:72:21:d5:6d: f3:fb:ee:9b:4e:9c:91:97:dc:da:14:9f:66:53:5d: f8:17:18:e1:54:7a:a5:4a:1c:22:b7:db:e6:fb:a3: e2:8f:26:1f:55:fc:7d:b3:57:1f:46:8b:46:9a:06: e6:eb:63:66:70:2f:50:3d:2e:73:73:38:8f:dc:5d: eb:e6:80:27:d5:c8:c9:f2:36:1a:5f:08:79:e6:1d: e0:b6:9d:ed:2a:f3:1b:a4:c6:93:70:bf:8b:be:7a: 30:78:c2:c4:0a:eb:df:9b:72:40:7d:e2:51:8f:82: a2:2d:07:45:e7:b4:22:47:e9:54:01:cb:42:f4:b2: 48:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:3B:9A:F6:98:65:97:43:DC:E8:B6:98:2D:DD:ED:0C:96:DB:8E:F0 X509v3 Authority Key Identifier: keyid:E4:D5:3C:47:F2:1D:D6:65:2B:67:FE:F4:95:C9:4F:DF:D1:52:8C:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NU8R_Id1mUrZ_70lclP39FSjOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:c8:03:dc:35:ba:0f:03:33:c5:4f:5a:2a:f5:56:1d:51:93: 32:9c:ec:6b:77:65:64:a3:ea:46:1f:f4:a3:8b:b9:92:2a:bd: 60:3d:15:f3:e7:16:4e:fa:46:9b:01:92:49:31:8c:71:ce:59: 3f:4f:19:45:26:b5:c2:a1:eb:db:e1:9d:e1:f5:85:38:8f:ba: 69:56:19:0c:44:cd:ee:7b:10:18:40:2d:ed:95:c2:40:05:ae: 8b:49:85:e9:13:7b:4b:17:22:f5:95:a3:ef:f0:27:fd:84:a2: 1b:da:7e:bd:c9:44:80:7e:cf:b1:ca:1f:13:de:8d:1d:8f:8b: ae:74:df:1d:b0:a9:cc:49:5b:df:c2:ec:07:57:4a:be:12:1d: 79:93:20:16:49:08:0a:0f:5f:fd:ca:a0:d1:d9:c0:f0:5f:10: de:25:d8:32:9c:14:32:d1:dc:51:03:1c:23:39:d2:19:ac:52: b2:76:52:ff:c6:22:4c:02:d5:27:21:30:49:82:7e:de:27:e5: 83:06:08:4f:b2:af:08:2a:16:a9:07:bf:ec:63:da:de:98:8f: 48:e6:24:ee:3a:c6:5c:17:1d:cb:e2:8a:82:b0:08:f9:a3:77: 07:d5:08:7d:a7:ca:52:b0:3e:29:dd:8b:32:43:42:30:83:7d: b0:b6:16:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmufrI1wClBaK2chk3AfCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ZDUzYzQ3ZjIxZGQ2NjUyYjY3ZmVmNDk1Yzk0ZmRmZDE1 MjhjZWIwHhcNMjUxMjA2MDMwMDUyWhcNMjUxMjA3MDMwMDUyWjAzMTEwLwYDVQQD EyhlNjNiOWFmNjk4NjU5NzQzZGNlOGI2OTgyZGRkZWQwYzk2ZGI4ZWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38sGKxoF/2GKJey/pCF1wgKRpPjj HR51EH7NN0/1vt+UlfaBsXQJFpx0WvCCYfBccMJIkKstKGYqm1/Tj845c0Y+/+gf tOPwU+yA1xsPIqEU0/BQmzNSwyiAowxhUcSAgX+T6U55BExJlZ68RkovvLsNyePl qV3mHe+eTtXAQV6FP3Ih1W3z++6bTpyRl9zaFJ9mU134FxjhVHqlShwit9vm+6Pi jyYfVfx9s1cfRotGmgbm62NmcC9QPS5zcziP3F3r5oAn1cjJ8jYaXwh55h3gtp3t KvMbpMaTcL+LvnoweMLECuvfm3JAfeJRj4KiLQdF57QiR+lUActC9LJI1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOY7mvaYZZdD3Oi2mC3d7QyW247wMB8GA1UdIwQY MBaAFOTVPEfyHdZlK2f+9JXJT9/RUozrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU5VOFJfSWQxbVVyWl83MGxjbFAzOUZTak9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9kNjZhZjMtMjhiNS00MmViLWFkMDEt OTVkNTNiNTMxNTQ1LzEvNU5VOFJfSWQxbVVyWl83MGxjbFAzOUZTak9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9kNjZhZjMtMjhiNS00MmViLWFkMDEtOTVkNTNiNTMxNTQ1 LzEvNU5VOFJfSWQxbVVyWl83MGxjbFAzOUZTak9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz8gD3DW6 DwMzxU9aKvVWHVGTMpzsa3dlZKPqRh/0o4u5kiq9YD0V8+cWTvpGmwGSSTGMcc5Z P08ZRSa1wqHr2+Gd4fWFOI+6aVYZDETN7nsQGEAt7ZXCQAWui0mF6RN7Sxci9ZWj 7/An/YSiG9p+vclEgH7PscofE96NHY+LrnTfHbCpzElb38LsB1dKvhIdeZMgFkkI Cg9f/cqg0dnA8F8Q3iXYMpwUMtHcUQMcIznSGaxSsnZS/8YiTALVJyEwSYJ+3ifl gwYIT7KvCCoWqQe/7GPa3piPSOYk7jrGXBcdy+KKgrAI+aN3B9UIfafKUrA+Kd2L MkNCMIN9sLYWEg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:19:54 2025 by rpki-client