This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft File: 5UmH5s-8zliuDJbnZmqyGrPi4JA.mft (raw, json) Hash identifier: PE5a/edG1Vm18CMSoYVWGiE+lfPUki4/i/gy8I9GuZY= Subject key identifier: B3:C4:F5:1A:06:4D:BE:14:EB:E4:9D:56:E8:33:A9:F5:29:60:B6:3A Authority key identifier: E5:49:87:E6:CF:BC:CE:58:AE:0C:96:E7:66:6A:B2:1A:B3:E2:E0:90 Certificate issuer: /CN=e54987e6cfbcce58ae0c96e7666ab21ab3e2e090 Certificate serial: 019AF208FF23C0A58F0841678D02D244F1F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft Manifest number: 0405 Signing time: Sat 06 Dec 2025 05:01:07 +0000 Manifest this update: Sat 06 Dec 2025 05:01:07 +0000 Manifest next update: Sun 07 Dec 2025 05:01:07 +0000 Files and hashes: 1: 5UmH5s-8zliuDJbnZmqyGrPi4JA.crl (hash: Ya3TFqfXkvSy3TgN7eUktI5yu80hYlwlBkK/PvQ1JhY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.crl rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:ff:23:c0:a5:8f:08:41:67:8d:02:d2:44:f1:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e54987e6cfbcce58ae0c96e7666ab21ab3e2e090 Validity Not Before: Dec 6 05:01:07 2025 GMT Not After : Dec 7 05:01:07 2025 GMT Subject: CN=b3c4f51a064dbe14ebe49d56e833a9f52960b63a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7c:d6:c0:d1:c2:36:a8:30:c1:0b:e5:82:15: b3:aa:df:30:8d:b1:85:cc:c2:4c:b3:8d:82:7b:26: 9d:dd:02:46:c0:1e:88:13:45:88:66:7a:29:51:ec: d0:da:57:3d:0f:15:e3:fa:1e:62:93:cf:d5:ae:28: a4:92:87:33:89:37:b4:d9:0f:d8:f9:e4:10:5e:ba: e8:f2:4c:13:31:7d:f3:40:e3:b6:8d:39:3f:f5:da: 7a:1e:a2:b0:af:01:26:a6:d2:ea:94:79:0f:95:d6: 22:e6:80:a5:0b:4e:57:f0:94:f8:ad:94:d6:fa:71: af:e3:1d:9c:14:2f:21:fc:87:e5:3c:03:f2:66:a9: 05:60:36:4e:9f:1c:a4:70:76:94:d2:ce:ce:81:e5: 72:cc:08:49:84:36:cb:96:96:50:ae:7c:db:28:9e: 7b:6d:28:f7:24:dd:24:c6:51:b4:f8:3d:fa:a2:fa: ee:e9:c4:4b:81:4e:a6:f0:a1:e9:13:fd:83:bd:84: 35:f4:a7:02:a9:40:b2:98:97:70:1f:68:e7:77:f8: 26:fc:34:32:a8:5e:0e:45:f5:da:bb:79:f3:f4:e6: 0c:38:10:26:78:f4:9b:a5:c6:69:3e:3f:5c:e7:3a: 51:ce:30:ee:7e:8b:10:53:a7:31:99:50:19:de:97: da:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:C4:F5:1A:06:4D:BE:14:EB:E4:9D:56:E8:33:A9:F5:29:60:B6:3A X509v3 Authority Key Identifier: keyid:E5:49:87:E6:CF:BC:CE:58:AE:0C:96:E7:66:6A:B2:1A:B3:E2:E0:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:15:16:80:be:17:63:27:7e:d2:80:eb:a1:de:ab:b4:ea:27: 57:9e:b5:a6:51:41:0d:2f:cc:75:36:05:ba:9c:0d:f9:21:ad: 3e:04:60:8a:fa:16:3d:73:84:3f:ff:e8:9c:32:25:79:16:3c: 8e:18:3a:48:7a:f2:6e:c9:3c:5b:0e:61:d4:90:cf:d6:0b:20: 52:00:9c:52:0f:38:09:e1:e6:06:4a:19:2f:f4:d3:f7:c6:83: 17:86:13:65:4a:2c:aa:7f:ec:e8:2a:23:71:ca:2c:42:e9:a2: 59:c8:f2:18:80:42:43:04:df:e9:09:b9:08:c7:d9:7c:46:2a: d7:fd:49:42:10:ff:3a:53:73:67:96:61:63:14:d6:56:69:7c: 1d:da:7f:d0:7d:8e:4c:f6:e8:69:39:7b:3b:2e:31:ba:3f:06: fe:a6:83:54:6e:8f:f0:04:8a:e0:4b:2b:b8:ed:6b:65:81:40: 07:dd:4d:ce:59:4b:01:28:20:0c:08:fb:7b:50:84:84:58:f7: 9e:67:a6:a3:a5:ec:be:d5:58:09:24:68:ae:47:c2:4a:fc:b1: 59:56:e3:99:5e:15:0e:b7:d6:9a:cc:89:e8:c7:a2:1e:10:bf: c4:1d:90:fe:4a:48:e9:ca:6e:00:d8:30:f3:85:de:a5:a9:36: c1:59:e8:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCP8jwKWPCEFnjQLSRPHzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NDk4N2U2Y2ZiY2NlNThhZTBjOTZlNzY2NmFiMjFhYjNl MmUwOTAwHhcNMjUxMjA2MDUwMTA3WhcNMjUxMjA3MDUwMTA3WjAzMTEwLwYDVQQD EyhiM2M0ZjUxYTA2NGRiZTE0ZWJlNDlkNTZlODMzYTlmNTI5NjBiNjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHzWwNHCNqgwwQvlghWzqt8wjbGF zMJMs42Ceyad3QJGwB6IE0WIZnopUezQ2lc9DxXj+h5ik8/VriikkocziTe02Q/Y +eQQXrro8kwTMX3zQOO2jTk/9dp6HqKwrwEmptLqlHkPldYi5oClC05X8JT4rZTW +nGv4x2cFC8h/IflPAPyZqkFYDZOnxykcHaU0s7OgeVyzAhJhDbLlpZQrnzbKJ57 bSj3JN0kxlG0+D36ovru6cRLgU6m8KHpE/2DvYQ19KcCqUCymJdwH2jnd/gm/DQy qF4ORfXau3nz9OYMOBAmePSbpcZpPj9c5zpRzjDufosQU6cxmVAZ3pfahwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLPE9RoGTb4U6+SdVugzqfUpYLY6MB8GA1UdIwQY MBaAFOVJh+bPvM5YrgyW52Zqshqz4uCQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVVtSDVzLTh6bGl1REpiblptcXlHclBpNEpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS84YWU3MzAtYWU1ZS00YmU5LTk3OGIt MDBiNTIwODc1Mzc2LzEvNVVtSDVzLTh6bGl1REpiblptcXlHclBpNEpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS84YWU3MzAtYWU1ZS00YmU5LTk3OGItMDBiNTIwODc1Mzc2 LzEvNVVtSDVzLTh6bGl1REpiblptcXlHclBpNEpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkhUWgL4X Yyd+0oDrod6rtOonV561plFBDS/MdTYFupwN+SGtPgRgivoWPXOEP//onDIleRY8 jhg6SHrybsk8Ww5h1JDP1gsgUgCcUg84CeHmBkoZL/TT98aDF4YTZUosqn/s6Coj ccosQumiWcjyGIBCQwTf6Qm5CMfZfEYq1/1JQhD/OlNzZ5ZhYxTWVml8Hdp/0H2O TPboaTl7Oy4xuj8G/qaDVG6P8ASK4EsruO1rZYFAB91NzllLASggDAj7e1CEhFj3 nmemo6XsvtVYCSRorkfCSvyxWVbjmV4VDrfWmsyJ6MeiHhC/xB2Q/kpI6cpuANgw 84Xepak2wVnoog== -----END CERTIFICATE-----Generated at Sat Dec 6 12:04:49 2025 by rpki-client