This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft File: 1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft (raw, json) Hash identifier: utLm0bTEXukyEz5cMvxEYTJA+U4N7nWd1PWTFPe9IOQ= Subject key identifier: 06:89:19:B7:8D:EA:0B:D0:F1:47:2D:8F:09:6D:D2:C2:E8:A3:67:62 Authority key identifier: FB:95:9F:B9:0A:15:8F:17:DE:5D:82:96:DF:95:44:82:A8:D6:21:1C Certificate issuer: /CN=fb959fb90a158f17de5d8296df954482a8d6211c Certificate serial: 019AF12DBD1090ED7F1A5893BC092C46B181 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft Manifest number: 05BA Signing time: Sat 06 Dec 2025 01:01:37 +0000 Manifest this update: Sat 06 Dec 2025 01:01:37 +0000 Manifest next update: Sun 07 Dec 2025 01:01:37 +0000 Files and hashes: 1: 1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl (hash: xbiG86NhtsiMlmAICzTV4fSN+9EEbXrkbyT0VNM31iw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:bd:10:90:ed:7f:1a:58:93:bc:09:2c:46:b1:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb959fb90a158f17de5d8296df954482a8d6211c Validity Not Before: Dec 6 01:01:37 2025 GMT Not After : Dec 7 01:01:37 2025 GMT Subject: CN=068919b78dea0bd0f1472d8f096dd2c2e8a36762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:47:5e:4c:f4:c0:eb:6b:29:cb:cd:f8:aa:c9: 82:32:b0:a3:e5:94:b5:0f:06:6a:95:df:4e:8f:de: 47:c6:97:55:ea:a5:95:9f:cc:61:05:f6:02:5c:e6: 1e:2e:6f:4b:6f:19:8f:b4:cf:fd:1f:d0:25:da:e8: 74:5f:cc:8c:8f:e7:d8:3e:e7:1d:1c:6e:2c:3d:a7: b5:35:c8:9e:aa:d9:27:5e:88:f9:3e:47:54:91:dc: ae:ed:33:5e:d8:7e:c0:92:20:a4:76:07:ee:07:b4: 22:6a:ff:fc:e6:9f:1c:84:8e:ba:b6:07:dd:cf:e2: e0:5c:08:57:74:95:b0:25:23:e2:56:94:3c:7b:bc: bf:10:a9:eb:af:73:0c:d0:2a:63:d0:16:96:65:32: eb:51:4e:5f:c0:8f:7e:a7:ba:ed:5e:f7:d0:bd:b5: fc:70:b3:0c:8e:5f:34:d4:d7:84:af:72:87:56:ca: 1e:a4:8f:8e:ad:97:10:ae:d9:4f:fd:f0:b8:c2:27: 53:32:e3:0a:2f:2d:1f:7c:04:13:01:c4:0e:ee:54: 3b:5a:fc:ea:d3:05:db:b2:46:bc:26:65:51:2e:d9: aa:ab:0c:38:d3:f6:ff:3e:84:76:ee:8c:a4:57:be: 88:e2:33:ee:55:b4:93:8b:19:9d:ed:69:fe:ea:b8: 57:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:89:19:B7:8D:EA:0B:D0:F1:47:2D:8F:09:6D:D2:C2:E8:A3:67:62 X509v3 Authority Key Identifier: keyid:FB:95:9F:B9:0A:15:8F:17:DE:5D:82:96:DF:95:44:82:A8:D6:21:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:cb:d8:dc:51:6b:70:dc:3c:8d:39:43:f1:76:5e:4f:91:60: 3a:94:7c:b6:35:55:85:91:f7:41:1c:95:24:cb:ae:f0:4e:51: 55:97:34:4e:1d:dd:cc:ab:89:9c:af:ea:93:e5:09:1d:fc:16: d5:0c:ad:f7:e7:03:6c:0e:7d:d6:2a:3e:7e:9b:3b:36:22:c1: 1e:68:8b:be:95:ab:d2:74:2f:08:10:a7:ef:96:f9:33:53:05: 38:1b:27:ba:a1:17:70:58:d3:13:b0:1f:83:82:22:74:07:74: 4e:c3:33:27:fa:62:5b:31:be:b6:cf:41:c4:f0:65:31:90:7a: 9c:f1:23:18:ed:99:8a:bd:2a:ed:38:2a:6f:16:a8:5c:a1:54: c5:3e:f8:ff:83:0b:fa:02:ba:bb:e9:44:64:07:87:62:e5:9a: 55:af:42:a3:3b:06:e2:cd:f8:ca:3d:ac:f0:ef:1e:73:47:c3: 16:9b:7c:d0:e9:83:33:a8:b3:67:4b:93:43:01:da:fa:2a:d4: 17:58:d6:f5:0b:c0:ff:35:62:24:83:9a:bb:ef:17:f3:06:03: 90:37:f8:e1:10:d2:8b:10:d3:31:ba:7e:10:90:1e:33:3b:ff: a6:d5:04:5c:4d:e7:2c:00:2b:2b:5d:8e:d3:d7:89:45:ab:dc: f4:40:18:7e -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrxLb0QkO1/GliTvAksRrGBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiOTU5ZmI5MGExNThmMTdkZTVkODI5NmRmOTU0NDgyYThk NjIxMWMwHhcNMjUxMjA2MDEwMTM3WhcNMjUxMjA3MDEwMTM3WjAzMTEwLwYDVQQD EygwNjg5MTliNzhkZWEwYmQwZjE0NzJkOGYwOTZkZDJjMmU4YTM2NzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UdeTPTA62spy834qsmCMrCj5ZS1 DwZqld9Oj95HxpdV6qWVn8xhBfYCXOYeLm9LbxmPtM/9H9Al2uh0X8yMj+fYPucd HG4sPae1NcieqtknXoj5PkdUkdyu7TNe2H7AkiCkdgfuB7Qiav/85p8chI66tgfd z+LgXAhXdJWwJSPiVpQ8e7y/EKnrr3MM0Cpj0BaWZTLrUU5fwI9+p7rtXvfQvbX8 cLMMjl801NeEr3KHVsoepI+OrZcQrtlP/fC4widTMuMKLy0ffAQTAcQO7lQ7Wvzq 0wXbska8JmVRLtmqqww40/b/PoR27oykV76I4jPuVbSTixmd7Wn+6rhXlQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFAaJGbeN6gvQ8Uctjwlt0sLoo2diMB8GA1UdIwQY MBaAFPuVn7kKFY8X3l2Clt+VRIKo1iEcMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS01V2Z1UW9WanhmZVhZS1czNVZFZ3FqV0lSdy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkvZTMzNmFmLTQ1OTEtNGQzNS05NTM2 LTVhYmY5YTA0MjkzZS8xLzEtNVdmdVFvVmp4ZmVYWUtXMzVWRWdxaldJUncubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzA5L2UzMzZhZi00NTkxLTRkMzUtOTUzNi01YWJmOWEwNDI5 M2UvMS8xLTVXZnVRb1ZqeGZlWFlLVzM1VkVncWpXSVJ3LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgcvY 3FFrcNw8jTlD8XZeT5FgOpR8tjVVhZH3QRyVJMuu8E5RVZc0Th3dzKuJnK/qk+UJ HfwW1Qyt9+cDbA591io+fps7NiLBHmiLvpWr0nQvCBCn75b5M1MFOBsnuqEXcFjT E7Afg4IidAd0TsMzJ/piWzG+ts9BxPBlMZB6nPEjGO2Zir0q7TgqbxaoXKFUxT74 /4ML+gK6u+lEZAeHYuWaVa9CozsG4s34yj2s8O8ec0fDFpt80OmDM6izZ0uTQwHa +irUF1jW9QvA/zViJIOau+8X8wYDkDf44RDSixDTMbp+EJAeMzv/ptUEXE3nLAAr K12O09eJRavc9EAYfg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:16:17 2025 by rpki-client