This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft File: 5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft (raw, json) Hash identifier: 47kL4tG5zopqVN3ML1A1q4FyM3dM7JVqbv4qGcYRKV4= Subject key identifier: 5B:CD:6E:14:DF:2E:2A:64:9D:E7:12:D4:61:0E:C6:46:FE:55:45:EF Authority key identifier: E4:F5:17:41:DF:13:6F:93:89:25:4E:FD:E4:BA:9A:DC:FB:0D:E6:BF Certificate issuer: /CN=e4f51741df136f9389254efde4ba9adcfb0de6bf Certificate serial: 019AF19BB32654C7D35B61E8D7D2BF7C61DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft Manifest number: 07EC Signing time: Sat 06 Dec 2025 03:01:44 +0000 Manifest this update: Sat 06 Dec 2025 03:01:44 +0000 Manifest next update: Sun 07 Dec 2025 03:01:44 +0000 Files and hashes: 1: 00lUHR0HsWF62e0OhdTMmz1D8cI.roa (hash: 7/l5GLFu9biLRhRjYyy3+K05xs5xfnn4gHwWEjQvlNY=) 2: 5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl (hash: 7HTsjNDwFpbhYCOOKatJ8EKL0TCqQJA9S8JAGawdfYA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:b3:26:54:c7:d3:5b:61:e8:d7:d2:bf:7c:61:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4f51741df136f9389254efde4ba9adcfb0de6bf Validity Not Before: Dec 6 03:01:44 2025 GMT Not After : Dec 7 03:01:44 2025 GMT Subject: CN=5bcd6e14df2e2a649de712d4610ec646fe5545ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:14:40:4c:cc:e6:68:d9:2f:a4:2c:79:09:e6: 2a:f3:8a:fa:6a:5a:1a:ef:eb:a8:14:73:00:99:97: a2:89:15:f5:01:12:85:a1:85:33:16:82:cb:13:7f: 5b:6b:55:56:4f:49:09:e3:f3:2e:32:78:83:df:21: de:0e:ec:25:65:2f:21:e5:08:09:55:7b:74:37:c2: 08:f5:79:11:9c:2f:9f:66:57:37:df:b1:6b:4f:63: 82:07:c4:ad:c6:66:82:02:2b:4d:45:5f:1b:c5:16: 8b:cb:7f:36:cb:0f:c4:b5:90:8d:c3:92:ed:23:09: 9a:6f:f3:24:b1:35:32:9a:91:88:a2:63:f8:47:20: 54:74:51:e4:9c:09:29:a8:5c:c2:39:a5:e7:33:84: 2c:7f:b7:7e:63:b1:cd:34:4a:52:be:8f:c8:59:f7: ad:46:3b:9b:ab:a9:9f:d8:65:22:4a:cf:88:d7:da: c3:38:a9:d8:2c:5f:fe:60:a9:36:88:38:73:90:af: f8:3c:eb:86:19:d3:8d:e7:56:28:96:e7:89:2b:c6: 8e:8d:f2:73:82:d0:47:f9:aa:cb:11:be:ef:65:d3: cf:55:26:7f:a2:f2:5c:69:61:91:f2:d6:0e:2a:27: d8:8c:8c:98:60:1a:c9:c7:aa:a3:80:dc:67:c6:5e: 47:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:CD:6E:14:DF:2E:2A:64:9D:E7:12:D4:61:0E:C6:46:FE:55:45:EF X509v3 Authority Key Identifier: keyid:E4:F5:17:41:DF:13:6F:93:89:25:4E:FD:E4:BA:9A:DC:FB:0D:E6:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:90:e0:7d:a9:22:59:db:44:20:c8:d7:fa:5d:ad:30:35:6a: fa:66:39:de:9d:92:47:df:68:4d:ee:7e:0f:a3:54:dd:c7:12: 33:17:6b:ab:7a:84:03:cd:42:ab:46:47:e5:79:28:50:a4:ea: 55:b8:d2:7d:f6:72:a3:ac:40:d8:ea:47:db:dc:ca:a4:96:f1: b0:9a:d9:85:4f:8a:15:58:b5:0d:22:c0:b3:3e:45:e3:b8:ae: 07:8a:48:c2:45:a9:d9:fb:92:0a:00:5f:6a:3f:8d:85:a2:0a: ad:8e:3b:30:8e:bd:93:00:54:ea:ad:2e:e9:a4:3b:20:0e:69: 98:c7:7a:07:a4:aa:e9:c2:5a:46:b0:76:4e:ec:e7:be:44:d7: 51:4b:02:4d:e9:ae:d0:82:6e:0c:23:4d:59:43:75:d4:8b:3e: 55:c1:7c:7e:cf:39:d0:e4:a9:17:a7:dd:c2:2e:d8:8e:ae:49: f5:4e:87:01:fd:3f:3a:a9:a0:d9:9f:24:19:ee:80:23:10:f3: 76:e6:c8:73:89:ff:2d:57:4a:dd:64:4d:29:00:0d:07:40:b0: 31:bc:f8:ab:1b:92:bb:d1:e8:97:bb:74:6b:aa:4b:19:4b:82: 37:4f:b3:09:5d:e4:39:e1:a0:dc:d6:22:9d:48:a8:2d:11:db: 85:70:a6:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm7MmVMfTW2Ho19K/fGHeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ZjUxNzQxZGYxMzZmOTM4OTI1NGVmZGU0YmE5YWRjZmIw ZGU2YmYwHhcNMjUxMjA2MDMwMTQ0WhcNMjUxMjA3MDMwMTQ0WjAzMTEwLwYDVQQD Eyg1YmNkNmUxNGRmMmUyYTY0OWRlNzEyZDQ2MTBlYzY0NmZlNTU0NWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRRATMzmaNkvpCx5CeYq84r6aloa 7+uoFHMAmZeiiRX1ARKFoYUzFoLLE39ba1VWT0kJ4/MuMniD3yHeDuwlZS8h5QgJ VXt0N8II9XkRnC+fZlc337FrT2OCB8StxmaCAitNRV8bxRaLy382yw/EtZCNw5Lt Iwmab/MksTUympGIomP4RyBUdFHknAkpqFzCOaXnM4Qsf7d+Y7HNNEpSvo/IWfet Rjubq6mf2GUiSs+I19rDOKnYLF/+YKk2iDhzkK/4POuGGdON51YolueJK8aOjfJz gtBH+arLEb7vZdPPVSZ/ovJcaWGR8tYOKifYjIyYYBrJx6qjgNxnxl5HoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFvNbhTfLipknecS1GEOxkb+VUXvMB8GA1UdIwQY MBaAFOT1F0HfE2+TiSVO/eS6mtz7Dea/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVBVWFFkOFRiNU9KSlU3OTVMcWEzUHNONXI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hZjFiOTMtZDZlMy00NTNkLTkxY2Mt NDFkNzM1YmQ4YzAzLzEvNVBVWFFkOFRiNU9KSlU3OTVMcWEzUHNONXI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hZjFiOTMtZDZlMy00NTNkLTkxY2MtNDFkNzM1YmQ4YzAz LzEvNVBVWFFkOFRiNU9KSlU3OTVMcWEzUHNONXI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAopDgfaki WdtEIMjX+l2tMDVq+mY53p2SR99oTe5+D6NU3ccSMxdrq3qEA81Cq0ZH5XkoUKTq VbjSffZyo6xA2OpH29zKpJbxsJrZhU+KFVi1DSLAsz5F47iuB4pIwkWp2fuSCgBf aj+NhaIKrY47MI69kwBU6q0u6aQ7IA5pmMd6B6Sq6cJaRrB2TuznvkTXUUsCTemu 0IJuDCNNWUN11Is+VcF8fs850OSpF6fdwi7Yjq5J9U6HAf0/Oqmg2Z8kGe6AIxDz dubIc4n/LVdK3WRNKQANB0CwMbz4qxuSu9Hol7t0a6pLGUuCN0+zCV3kOeGg3NYi nUioLRHbhXCmvg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:20 2025 by rpki-client