This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft File: 5zqbo56LjiuL9OiCUq-_3czN0aE.mft (raw, json) Hash identifier: 7N8+Kd9OHFIRMFxQmQ0mJRUXqtJk49trqWAy+ilrTK0= Subject key identifier: 46:9C:AB:F0:8F:85:D6:66:73:CD:C3:E3:93:29:CD:CB:20:C7:8E:18 Authority key identifier: E7:3A:9B:A3:9E:8B:8E:2B:8B:F4:E8:82:52:AF:BF:DD:CC:CD:D1:A1 Certificate issuer: /CN=e73a9ba39e8b8e2b8bf4e88252afbfddcccdd1a1 Certificate serial: 019AF12E7B37E3A64BBFB1DC0A3B6195A922 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft Manifest number: 1088 Signing time: Sat 06 Dec 2025 01:02:26 +0000 Manifest this update: Sat 06 Dec 2025 01:02:26 +0000 Manifest next update: Sun 07 Dec 2025 01:02:26 +0000 Files and hashes: 1: 5zqbo56LjiuL9OiCUq-_3czN0aE.crl (hash: E4rDAsQc1IfmzdBCCsqrDWmd7qZOFE50zqLSluQ5Az8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.crl rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:7b:37:e3:a6:4b:bf:b1:dc:0a:3b:61:95:a9:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e73a9ba39e8b8e2b8bf4e88252afbfddcccdd1a1 Validity Not Before: Dec 6 01:02:26 2025 GMT Not After : Dec 7 01:02:26 2025 GMT Subject: CN=469cabf08f85d66673cdc3e39329cdcb20c78e18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:88:02:9c:2a:98:d9:83:dd:71:7a:47:6f:62: 8f:2f:cd:92:12:be:23:71:a5:7c:a1:65:7b:d3:10: a8:11:ce:fd:2d:a1:e5:14:7b:59:3e:54:7e:ce:f8: 99:c0:b2:6a:9a:18:4e:3e:85:e9:2c:e5:f6:9a:95: b5:0c:f3:f3:6a:ad:88:1b:77:34:d5:2e:25:47:68: 16:6d:fb:0b:72:1a:07:72:8e:62:81:eb:45:c7:01: 0e:66:32:a0:45:8a:1c:48:9d:3c:1a:7a:0d:fd:d8: 2c:88:6b:07:f1:42:3b:bd:67:01:b2:a7:b1:07:82: e2:5b:de:69:ac:0c:e2:87:1c:b7:12:34:aa:96:7d: ec:21:c5:88:4e:ab:e4:70:75:48:64:81:39:92:bc: 87:d7:3d:bd:64:71:77:30:81:a0:90:5d:2e:8b:88: 4e:05:cf:c3:a6:ee:4a:41:24:a3:45:8a:08:9a:ac: 71:56:15:1b:57:34:b3:1b:d8:fa:8c:8f:ab:f1:30: 71:1e:cd:8a:c8:a1:ca:09:e0:7e:4a:45:32:3c:71: 4d:72:72:e2:bf:b6:1c:0a:5b:42:18:8c:b4:c9:ca: 58:16:68:22:d6:62:4c:0f:3c:da:6b:7d:a7:2e:04: 6a:4d:61:b6:79:eb:a6:8f:d7:51:eb:d2:c5:83:64: 93:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:9C:AB:F0:8F:85:D6:66:73:CD:C3:E3:93:29:CD:CB:20:C7:8E:18 X509v3 Authority Key Identifier: keyid:E7:3A:9B:A3:9E:8B:8E:2B:8B:F4:E8:82:52:AF:BF:DD:CC:CD:D1:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:a8:ae:6f:84:76:a4:24:6a:be:1b:5c:f4:12:fb:25:5f:a6: d8:a9:d8:77:d7:44:20:6d:0d:7e:47:e4:7b:c2:ef:07:2e:a6: 51:07:51:5f:23:00:d6:94:21:ad:8d:73:bf:f6:98:86:b3:b8: b1:80:61:b7:ef:e4:96:28:38:28:7c:24:bf:ef:53:b8:1d:a6: c7:7c:d6:74:4b:0f:54:f7:23:e0:86:bf:c7:ca:77:19:4d:24: 27:e7:09:50:77:41:bc:a2:6c:7d:41:8e:af:3e:30:e6:a0:f0: af:8f:18:6c:38:13:18:7a:6e:7c:3f:93:a9:c0:8e:a3:07:4d: 40:26:35:1b:69:93:25:14:c6:82:57:6d:cf:85:65:b8:eb:9c: 82:b2:f0:1d:04:6d:fe:a0:56:64:a9:5a:60:a6:00:65:8a:fe: dc:61:30:fb:8a:a8:90:04:1f:fa:3f:3a:d7:b2:b3:82:6d:b5: 4e:46:f8:e4:39:ea:e0:1c:bf:f5:91:ca:ba:b7:53:d1:e0:eb: 7e:72:3e:21:eb:52:87:dc:05:9d:53:88:a9:1d:c3:1f:97:e0: eb:7d:fd:fe:3c:8f:a2:e1:33:72:9a:93:32:a5:a4:34:10:5b: f0:c7:0b:03:77:92:a0:f6:20:b8:e3:e3:75:1e:2f:32:7a:2f: da:c1:d0:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLns346ZLv7HcCjthlakiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3M2E5YmEzOWU4YjhlMmI4YmY0ZTg4MjUyYWZiZmRkY2Nj ZGQxYTEwHhcNMjUxMjA2MDEwMjI2WhcNMjUxMjA3MDEwMjI2WjAzMTEwLwYDVQQD Eyg0NjljYWJmMDhmODVkNjY2NzNjZGMzZTM5MzI5Y2RjYjIwYzc4ZTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIgCnCqY2YPdcXpHb2KPL82SEr4j caV8oWV70xCoEc79LaHlFHtZPlR+zviZwLJqmhhOPoXpLOX2mpW1DPPzaq2IG3c0 1S4lR2gWbfsLchoHco5igetFxwEOZjKgRYocSJ08GnoN/dgsiGsH8UI7vWcBsqex B4LiW95prAzihxy3EjSqln3sIcWITqvkcHVIZIE5kryH1z29ZHF3MIGgkF0ui4hO Bc/Dpu5KQSSjRYoImqxxVhUbVzSzG9j6jI+r8TBxHs2KyKHKCeB+SkUyPHFNcnLi v7YcCltCGIy0ycpYFmgi1mJMDzzaa32nLgRqTWG2eeumj9dR69LFg2STIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEacq/CPhdZmc83D45Mpzcsgx44YMB8GA1UdIwQY MBaAFOc6m6Oei44ri/ToglKvv93MzdGhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXpxYm81NkxqaXVMOU9pQ1VxLV8zY3pOMGFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yZjUwM2QtNmNjMS00MzVlLTg3MWEt N2ZhNGY1OGM0ZmI5LzEvNXpxYm81NkxqaXVMOU9pQ1VxLV8zY3pOMGFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yZjUwM2QtNmNjMS00MzVlLTg3MWEtN2ZhNGY1OGM0ZmI5 LzEvNXpxYm81NkxqaXVMOU9pQ1VxLV8zY3pOMGFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIKiub4R2 pCRqvhtc9BL7JV+m2KnYd9dEIG0Nfkfke8LvBy6mUQdRXyMA1pQhrY1zv/aYhrO4 sYBht+/klig4KHwkv+9TuB2mx3zWdEsPVPcj4Ia/x8p3GU0kJ+cJUHdBvKJsfUGO rz4w5qDwr48YbDgTGHpufD+TqcCOowdNQCY1G2mTJRTGgldtz4VluOucgrLwHQRt /qBWZKlaYKYAZYr+3GEw+4qokAQf+j8617Kzgm21Tkb45Dnq4By/9ZHKurdT0eDr fnI+IetSh9wFnVOIqR3DH5fg6339/jyPouEzcpqTMqWkNBBb8McLA3eSoPYguOPj dR4vMnov2sHQPw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:34:12 2025 by rpki-client