This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft File: 5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft (raw, json) Hash identifier: 5S3eO9vt/Wtjun8wndSpyptZEhI7cb1dAZVPMMhoKMk= Subject key identifier: DC:3C:AC:93:82:E5:4E:1F:CB:2E:83:14:AF:3F:35:B7:A4:FC:42:94 Authority key identifier: E4:6B:3D:61:FE:43:AB:68:04:B6:F1:E3:29:7A:8C:DC:C2:6B:9D:6C Certificate issuer: /CN=e46b3d61fe43ab6804b6f1e3297a8cdcc26b9d6c Certificate serial: 019AF38921AE5B8A90E290858D33D225F8D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft Manifest number: 03D2 Signing time: Sat 06 Dec 2025 12:00:41 +0000 Manifest this update: Sat 06 Dec 2025 12:00:41 +0000 Manifest next update: Sun 07 Dec 2025 12:00:41 +0000 Files and hashes: 1: 5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl (hash: 5t92BoIllYuZz6rw9nBTyAKfRU5a1V94LkZe6Zdr1O0=) 2: sh2pFLFRXQ_LNHY8Z6kE6uVGJsM.roa (hash: LOYuvxv+r/IWU8gCda5GHcFP5KoGM8hEkOX7ufXWF5A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:21:ae:5b:8a:90:e2:90:85:8d:33:d2:25:f8:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e46b3d61fe43ab6804b6f1e3297a8cdcc26b9d6c Validity Not Before: Dec 6 12:00:41 2025 GMT Not After : Dec 7 12:00:41 2025 GMT Subject: CN=dc3cac9382e54e1fcb2e8314af3f35b7a4fc4294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:17:68:e0:dc:68:58:3c:a0:f8:e4:59:ea:32: f2:83:bf:69:c6:00:e0:f7:fc:25:23:d2:51:98:6c: 49:96:c8:29:04:8f:b0:5f:d1:37:9e:ab:f4:12:10: 31:14:c9:10:9b:f9:7d:4f:6c:73:9d:db:0f:b2:ae: 27:40:b1:9f:43:9e:22:1e:1e:6b:15:25:c6:42:cf: 66:91:d6:ff:e8:c7:25:39:c3:9c:5f:34:bc:60:3a: 8e:08:21:ed:39:4b:f7:d1:f9:7f:12:03:ee:2d:26: 0f:75:65:ad:92:e9:24:0b:0f:d1:71:62:c2:62:42: 0b:0a:c8:04:69:bc:32:86:fa:39:8b:3e:e7:a8:50: 87:2b:f4:a3:f7:1a:58:56:92:b3:9a:4d:3b:37:7b: fd:40:5a:f6:35:c4:d7:98:94:af:8f:d9:4e:f2:14: 2c:8a:67:f8:4b:16:9e:f0:00:7a:e0:bc:d4:ed:48: 0e:8a:37:9f:38:b6:3d:30:ff:87:da:f8:e4:4b:fd: 5a:e6:5b:8b:3c:ed:96:a0:92:86:6e:4b:cf:56:73: 81:6d:8f:37:3a:79:eb:9d:b8:dc:79:07:6d:9f:a0: b9:88:aa:cc:0f:11:58:02:d9:84:a8:cf:2d:d7:5e: 52:69:69:45:4c:3f:c7:97:bb:7d:9b:0c:43:e3:99: 78:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:3C:AC:93:82:E5:4E:1F:CB:2E:83:14:AF:3F:35:B7:A4:FC:42:94 X509v3 Authority Key Identifier: keyid:E4:6B:3D:61:FE:43:AB:68:04:B6:F1:E3:29:7A:8C:DC:C2:6B:9D:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:49:6b:a1:9c:73:1b:52:bc:e1:38:3a:b3:83:2e:b7:67:55: 99:f3:2b:e9:33:35:5e:cd:c4:f0:f4:27:bd:74:04:5c:c5:a1: fb:7c:02:04:05:32:aa:9e:e1:98:6c:00:2e:f0:28:de:f7:0d: 69:ed:f2:9c:1e:eb:39:c1:66:87:43:c4:d6:70:94:0a:1c:4b: 4d:1a:4a:1f:2d:26:c9:72:81:07:07:ea:66:39:e3:12:9c:c9: 1f:e6:bc:67:f9:21:69:f3:1f:20:7f:15:7b:ea:77:35:5a:2a: 37:df:99:db:35:6c:cb:a5:ef:76:c8:00:bd:e1:aa:76:b8:f1: 9b:03:ca:c1:cb:de:82:b9:e9:84:79:62:6b:1f:03:5c:c2:28: b1:d5:41:4e:06:36:6b:28:93:29:76:ea:a3:c9:ed:46:e3:be: a2:22:f2:b7:81:eb:6b:0f:1f:6a:fb:c3:6d:57:4e:f3:e7:02: 45:6d:b1:d0:c2:14:90:08:5c:d3:57:b1:62:fd:07:32:a4:94: fa:e4:93:a7:3c:e2:42:80:ea:d2:e2:0f:f4:9d:5e:ef:a5:b0: 01:8a:0a:18:05:c8:1f:8f:0b:a6:1f:31:02:18:00:1e:6e:27: 3a:6e:a3:43:d9:0a:21:83:c3:ba:d4:96:7f:b2:68:f5:a5:26: 01:95:f3:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziSGuW4qQ4pCFjTPSJfjXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0NmIzZDYxZmU0M2FiNjgwNGI2ZjFlMzI5N2E4Y2RjYzI2 YjlkNmMwHhcNMjUxMjA2MTIwMDQxWhcNMjUxMjA3MTIwMDQxWjAzMTEwLwYDVQQD EyhkYzNjYWM5MzgyZTU0ZTFmY2IyZTgzMTRhZjNmMzViN2E0ZmM0Mjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRdo4NxoWDyg+ORZ6jLyg79pxgDg 9/wlI9JRmGxJlsgpBI+wX9E3nqv0EhAxFMkQm/l9T2xzndsPsq4nQLGfQ54iHh5r FSXGQs9mkdb/6MclOcOcXzS8YDqOCCHtOUv30fl/EgPuLSYPdWWtkukkCw/RcWLC YkILCsgEabwyhvo5iz7nqFCHK/Sj9xpYVpKzmk07N3v9QFr2NcTXmJSvj9lO8hQs imf4Sxae8AB64LzU7UgOijefOLY9MP+H2vjkS/1a5luLPO2WoJKGbkvPVnOBbY83 OnnrnbjceQdtn6C5iKrMDxFYAtmEqM8t115SaWlFTD/Hl7t9mwxD45l4cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNw8rJOC5U4fyy6DFK8/Nbek/EKUMB8GA1UdIwQY MBaAFORrPWH+Q6toBLbx4yl6jNzCa51sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUdzOVlmNURxMmdFdHZIaktYcU0zTUpybld3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8xYTAyNGMtNmI3NS00YWQ4LWI1OWQt YWY5YmIzZDEyNWQ4LzEvNUdzOVlmNURxMmdFdHZIaktYcU0zTUpybld3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8xYTAyNGMtNmI3NS00YWQ4LWI1OWQtYWY5YmIzZDEyNWQ4 LzEvNUdzOVlmNURxMmdFdHZIaktYcU0zTUpybld3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfklroZxz G1K84Tg6s4Mut2dVmfMr6TM1Xs3E8PQnvXQEXMWh+3wCBAUyqp7hmGwALvAo3vcN ae3ynB7rOcFmh0PE1nCUChxLTRpKHy0myXKBBwfqZjnjEpzJH+a8Z/khafMfIH8V e+p3NVoqN9+Z2zVsy6XvdsgAveGqdrjxmwPKwcvegrnphHliax8DXMIosdVBTgY2 ayiTKXbqo8ntRuO+oiLyt4Hraw8favvDbVdO8+cCRW2x0MIUkAhc01exYv0HMqSU +uSTpzziQoDq0uIP9J1e76WwAYoKGAXIH48Lph8xAhgAHm4nOm6jQ9kKIYPDutSW f7Jo9aUmAZXzXA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:41:54 2025 by rpki-client