This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft File: 5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft (raw, json) Hash identifier: 0z+/eGbFZBCr3Cq2Nn7ImIA9cw4OITH2AVmw1ShrIYQ= Subject key identifier: 70:95:3E:6D:71:81:61:A9:E4:CC:10:51:2B:10:88:E4:B2:72:B9:F3 Authority key identifier: E7:1D:70:9D:8B:18:4C:5A:50:C9:43:1D:CC:AF:64:9B:C8:68:47:04 Certificate issuer: /CN=e71d709d8b184c5a50c9431dccaf649bc8684704 Certificate serial: 019AF1D236E58F9A36E4B3056A45DA88347B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 04:01:16 +0000 Manifest this update: Sat 06 Dec 2025 04:01:16 +0000 Manifest next update: Sun 07 Dec 2025 04:01:16 +0000 Files and hashes: 1: 5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl (hash: mZHlxg6A51uCx+vHl/89fQv/QlQvipjIunmdV4kO7Ow=) 2: qvfFT1waDERLpkfbuL979IFfQzo.roa (hash: paMjx2cHD10xNMb2RegQEWwQPemRR0QtwqJzV/kovDg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:36:e5:8f:9a:36:e4:b3:05:6a:45:da:88:34:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e71d709d8b184c5a50c9431dccaf649bc8684704 Validity Not Before: Dec 6 04:01:16 2025 GMT Not After : Dec 7 04:01:16 2025 GMT Subject: CN=70953e6d718161a9e4cc10512b1088e4b272b9f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d0:88:38:83:c8:4e:7f:5c:43:8d:4e:b9:9e: 68:36:c4:bb:4d:c2:67:4f:7f:4f:29:d8:0e:05:da: 69:d5:21:6b:fa:76:a6:72:e6:03:80:63:db:cb:2b: a8:bd:3e:25:8d:38:88:3d:46:b8:f4:c6:96:3c:76: e0:32:1d:ef:e6:fc:30:7e:03:1e:a2:ab:de:88:d6: 00:8e:84:e1:4f:8e:4c:9d:b2:44:39:d6:7d:fc:80: 17:27:6d:08:76:80:ea:1e:7e:85:cd:7a:98:b3:30: 4e:c9:0f:ba:5a:03:b5:6d:7f:68:ab:1c:17:bc:29: bb:dd:7a:31:7d:ed:ae:15:f6:63:0c:bf:a6:8a:75: 75:4b:a1:47:3e:e2:96:af:e4:03:79:bc:ac:7c:89: ee:be:bf:ca:e7:12:5c:6c:d1:b5:91:8c:d3:f6:74: 4f:31:2e:29:0a:41:98:46:62:1d:ab:a2:49:83:2b: db:d0:4d:35:79:e0:75:d1:8e:23:bb:02:c0:e0:9f: b7:b0:ed:c0:40:25:a2:e5:94:55:76:13:5a:e8:ab: db:29:e8:d9:b8:d3:d3:c4:c2:b5:6b:48:a0:14:df: 60:e9:e9:67:58:a7:4c:d8:94:76:7c:8f:79:db:9a: a5:52:d6:70:a6:e0:aa:e7:8b:e1:88:d8:f8:ca:7e: 79:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:95:3E:6D:71:81:61:A9:E4:CC:10:51:2B:10:88:E4:B2:72:B9:F3 X509v3 Authority Key Identifier: keyid:E7:1D:70:9D:8B:18:4C:5A:50:C9:43:1D:CC:AF:64:9B:C8:68:47:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:7c:cd:da:ab:93:0e:82:d6:cb:d1:51:3e:6e:91:8d:4b:20: d9:23:b7:e5:26:f2:d1:0e:35:bc:b7:c1:c7:5e:4e:1e:ec:ac: 59:e7:1e:54:88:cc:b2:64:ee:32:41:11:5e:7d:67:c7:44:dc: fe:41:75:6a:f0:ac:03:d9:bd:fd:65:17:1a:7a:e7:ef:73:81: 08:4f:31:05:a3:6e:98:c5:e1:25:23:a9:f9:09:d0:54:ab:c4: cf:1a:60:1a:72:fd:b5:26:2a:80:2b:ab:3b:7d:35:c6:d7:f4: 4e:14:cf:11:0f:9d:e6:bc:d5:5e:97:b3:9f:5f:e3:22:8f:ef: 93:a0:a0:99:60:eb:f1:81:8d:ea:40:65:62:88:cf:e6:86:bd: 07:be:82:0a:ed:47:b3:c6:10:58:5c:c6:56:3b:d8:e1:c3:d0: d2:08:90:49:f7:17:d4:de:15:b9:6f:df:ab:75:34:4f:16:93: 44:14:0b:66:65:29:83:20:5c:19:95:cc:da:a9:4f:83:ac:b8: b7:8f:a8:7f:2a:9f:84:e4:c6:57:d3:d6:9d:7d:90:c8:fa:70: 3b:c1:1a:8b:df:a8:33:10:af:c3:b7:8f:c5:79:2a:c6:3e:59: 28:9e:09:ae:62:11:ca:e4:ab:16:07:8c:5d:81:e6:dc:bb:b7: ec:50:6f:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0jblj5o25LMFakXaiDR7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3MWQ3MDlkOGIxODRjNWE1MGM5NDMxZGNjYWY2NDliYzg2 ODQ3MDQwHhcNMjUxMjA2MDQwMTE2WhcNMjUxMjA3MDQwMTE2WjAzMTEwLwYDVQQD Eyg3MDk1M2U2ZDcxODE2MWE5ZTRjYzEwNTEyYjEwODhlNGIyNzJiOWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9CIOIPITn9cQ41OuZ5oNsS7TcJn T39PKdgOBdpp1SFr+namcuYDgGPbyyuovT4ljTiIPUa49MaWPHbgMh3v5vwwfgMe oqveiNYAjoThT45MnbJEOdZ9/IAXJ20IdoDqHn6FzXqYszBOyQ+6WgO1bX9oqxwX vCm73Xoxfe2uFfZjDL+minV1S6FHPuKWr+QDebysfInuvr/K5xJcbNG1kYzT9nRP MS4pCkGYRmIdq6JJgyvb0E01eeB10Y4juwLA4J+3sO3AQCWi5ZRVdhNa6KvbKejZ uNPTxMK1a0igFN9g6elnWKdM2JR2fI9525qlUtZwpuCq54vhiNj4yn557wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHCVPm1xgWGp5MwQUSsQiOSycrnzMB8GA1UdIwQY MBaAFOcdcJ2LGExaUMlDHcyvZJvIaEcEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXgxd25Zc1lURnBReVVNZHpLOWttOGhvUndRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS80Nzk5ZjYtNzY1Zi00YWQyLThjNDMt MWM1YjEwMTJkMmMzLzEvNXgxd25Zc1lURnBReVVNZHpLOWttOGhvUndRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS80Nzk5ZjYtNzY1Zi00YWQyLThjNDMtMWM1YjEwMTJkMmMz LzEvNXgxd25Zc1lURnBReVVNZHpLOWttOGhvUndRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABXzN2quT DoLWy9FRPm6RjUsg2SO35Sby0Q41vLfBx15OHuysWeceVIjMsmTuMkERXn1nx0Tc /kF1avCsA9m9/WUXGnrn73OBCE8xBaNumMXhJSOp+QnQVKvEzxpgGnL9tSYqgCur O301xtf0ThTPEQ+d5rzVXpezn1/jIo/vk6CgmWDr8YGN6kBlYojP5oa9B76CCu1H s8YQWFzGVjvY4cPQ0giQSfcX1N4VuW/fq3U0TxaTRBQLZmUpgyBcGZXM2qlPg6y4 t4+ofyqfhOTGV9PWnX2QyPpwO8Eai9+oMxCvw7ePxXkqxj5ZKJ4JrmIRyuSrFgeM XYHm3Lu37FBv/A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:23:12 2025 by rpki-client