This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.mft File: 5SBEb3n_wtfDqe80DOneJXI6cZo.mft (raw, json) Hash identifier: tnnsPhtc2HrdvCpW7mwh1+tLrUvVzl4rzCZlTOaku5U= Subject key identifier: A5:C3:74:6D:7C:16:B8:CF:5B:47:E5:2B:AB:23:C2:6E:EA:26:A2:55 Authority key identifier: E5:20:44:6F:79:FF:C2:D7:C3:A9:EF:34:0C:E9:DE:25:72:3A:71:9A Certificate issuer: /CN=e520446f79ffc2d7c3a9ef340ce9de25723a719a Certificate serial: 019AF31B5F3A3401388C50E82F5F00D8CAE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.mft Manifest number: 0DDA Signing time: Sat 06 Dec 2025 10:00:48 +0000 Manifest this update: Sat 06 Dec 2025 10:00:48 +0000 Manifest next update: Sun 07 Dec 2025 10:00:48 +0000 Files and hashes: 1: 5SBEb3n_wtfDqe80DOneJXI6cZo.crl (hash: lJzAYhXCEaIuZ19ApvjkCfBvpvZGI1WaT9W1OFJjYoc=) 2: KwGp6Z3v_f_qdKMLeB5RP3eXNRo.roa (hash: A2C/O+Kqn5BMFDMcQh3sDt1p5I358AiHafCSfwd+Wn0=) 3: lX6hj9K_SgWpbjs9Vm4h-iLqKxg.roa (hash: sh68gHRxqa7fIqQfLrHiW3Yb8Ld23ANUs7IVCd+duFY=) 4: r9qf6KgX9IgFo0eq5J1Iki9tbIU.roa (hash: 5vA2NlXN7t+qJxC8MfIinBSgfDV+e3NTP2tOSZC2XEw=) 5: tZVX3qYygm8mhqLKvtgCUl1qics.roa (hash: C3pcGXYwCjQl9eRypOyqTAkBmg+sjPi6ucd+K6cZcQw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.crl rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.mft rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:5f:3a:34:01:38:8c:50:e8:2f:5f:00:d8:ca:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e520446f79ffc2d7c3a9ef340ce9de25723a719a Validity Not Before: Dec 6 10:00:48 2025 GMT Not After : Dec 7 10:00:48 2025 GMT Subject: CN=a5c3746d7c16b8cf5b47e52bab23c26eea26a255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3a:07:e8:2c:12:fe:bf:57:22:b9:09:68:fa: 91:df:cb:46:c0:ee:fd:3b:7c:50:b6:34:04:b5:5c: 28:6a:86:98:20:7f:bf:b8:e0:db:09:06:41:a7:34: 8d:b3:e4:f7:cf:5e:fb:30:72:ee:0b:46:1f:cd:56: 5d:be:98:e9:dc:4c:10:75:d5:cc:cb:88:7a:a7:c4: 3e:7d:5b:c6:c8:f9:1d:91:65:fb:51:7f:9f:f6:11: 24:a4:44:3c:e5:88:b6:67:de:67:46:3c:4b:aa:bf: 31:ce:fa:43:28:48:7d:3d:02:4d:03:f3:54:39:89: 01:29:38:93:c5:71:cd:b3:eb:bf:80:c0:06:e0:0b: ea:5b:9c:ad:18:9f:87:98:ae:11:a9:b9:47:43:22: 6c:d1:68:af:12:d1:f4:41:67:05:62:5e:44:f2:8b: 20:85:20:4f:3c:63:4e:9d:bf:31:16:5c:a5:0d:d4: 64:13:55:70:be:ce:45:31:b5:cd:5f:31:85:e7:f4: a4:a6:a9:51:e2:4a:3e:dc:22:f9:21:48:cb:ac:02: 76:31:e6:1c:49:0f:7b:b2:9e:02:36:d2:5a:ca:43: 2a:00:54:2f:bc:bd:2e:5c:b1:5c:ac:54:ae:d8:4e: b0:9d:e5:b1:b2:3a:da:d9:ef:4b:6b:c4:ab:c2:92: b3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C3:74:6D:7C:16:B8:CF:5B:47:E5:2B:AB:23:C2:6E:EA:26:A2:55 X509v3 Authority Key Identifier: keyid:E5:20:44:6F:79:FF:C2:D7:C3:A9:EF:34:0C:E9:DE:25:72:3A:71:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:b5:5e:c4:af:a6:09:c4:13:da:3d:b9:dc:83:cf:9d:c7:9b: 6c:55:4e:ff:83:2e:a8:01:a0:4e:77:8e:e9:7c:1d:37:b7:d1: a6:cb:d4:27:fa:a7:99:f7:d3:e9:67:69:41:8a:27:9e:33:db: b8:a7:53:0f:0c:20:bb:b7:0f:dd:b4:0f:01:1c:bd:87:89:9c: 8f:f5:d0:1c:dd:11:98:42:8f:0f:47:d3:40:6c:46:ad:2d:a6: 71:ec:0e:61:69:0e:cd:3c:67:8a:d1:92:8b:d2:00:04:8b:f7: bb:17:39:5b:23:21:ad:90:0c:6f:67:a2:c8:1b:ff:f7:7d:51: 4a:1a:e7:33:fb:d1:c9:c0:9e:4c:3a:82:ff:b6:8b:10:73:e5: 04:b3:ec:56:f9:cd:cd:1d:fa:53:f0:64:57:d3:13:63:0e:fd: 21:11:9d:b6:59:a5:8e:23:09:df:bc:48:8e:08:37:23:a1:be: ea:e1:fa:fd:df:1e:83:3e:4e:9e:1c:ae:8e:6e:11:85:aa:92: f9:ef:5f:fb:1c:53:5b:51:95:7d:16:f3:c3:93:51:c6:76:85: ab:7e:6e:e5:21:8f:fb:1c:9f:fa:0d:92:55:d6:6c:16:9e:a6: 46:18:9c:48:11:4e:58:ea:51:74:53:d3:f4:f3:09:77:d6:be: 8a:97:66:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG186NAE4jFDoL18A2MrlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1MjA0NDZmNzlmZmMyZDdjM2E5ZWYzNDBjZTlkZTI1NzIz YTcxOWEwHhcNMjUxMjA2MTAwMDQ4WhcNMjUxMjA3MTAwMDQ4WjAzMTEwLwYDVQQD EyhhNWMzNzQ2ZDdjMTZiOGNmNWI0N2U1MmJhYjIzYzI2ZWVhMjZhMjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnToH6CwS/r9XIrkJaPqR38tGwO79 O3xQtjQEtVwoaoaYIH+/uODbCQZBpzSNs+T3z177MHLuC0YfzVZdvpjp3EwQddXM y4h6p8Q+fVvGyPkdkWX7UX+f9hEkpEQ85Yi2Z95nRjxLqr8xzvpDKEh9PQJNA/NU OYkBKTiTxXHNs+u/gMAG4AvqW5ytGJ+HmK4RqblHQyJs0WivEtH0QWcFYl5E8osg hSBPPGNOnb8xFlylDdRkE1Vwvs5FMbXNXzGF5/SkpqlR4ko+3CL5IUjLrAJ2MeYc SQ97sp4CNtJaykMqAFQvvL0uXLFcrFSu2E6wneWxsjra2e9La8SrwpKzJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKXDdG18FrjPW0flK6sjwm7qJqJVMB8GA1UdIwQY MBaAFOUgRG95/8LXw6nvNAzp3iVyOnGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVNCRWIzbl93dGZEcWU4MERPbmVKWEk2Y1pvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wMTFlZjItNzAxMi00YTZlLThhMWMt MGUwZTEzN2U1NTkxLzEvNVNCRWIzbl93dGZEcWU4MERPbmVKWEk2Y1pvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8wMTFlZjItNzAxMi00YTZlLThhMWMtMGUwZTEzN2U1NTkx LzEvNVNCRWIzbl93dGZEcWU4MERPbmVKWEk2Y1pvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApLVexK+m CcQT2j253IPPncebbFVO/4MuqAGgTneO6XwdN7fRpsvUJ/qnmffT6WdpQYonnjPb uKdTDwwgu7cP3bQPARy9h4mcj/XQHN0RmEKPD0fTQGxGrS2mcewOYWkOzTxnitGS i9IABIv3uxc5WyMhrZAMb2eiyBv/931RShrnM/vRycCeTDqC/7aLEHPlBLPsVvnN zR36U/BkV9MTYw79IRGdtlmljiMJ37xIjgg3I6G+6uH6/d8egz5Onhyujm4RhaqS +e9f+xxTW1GVfRbzw5NRxnaFq35u5SGP+xyf+g2SVdZsFp6mRhicSBFOWOpRdFPT 9PMJd9a+ipdmWQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:53:29 2025 by rpki-client